You should stop sending links on Facebook Messenger now!

Hi-Tech Adina Camarasu
https://stocknewsusa.com/wp-content/uploads/2017/02/messenger-1170x644.jpg

Links sent on Facebook Messenger are not as safe as you would think.


This is due to a vulnerability which, unfortunately, is still active.


To understand how the vulnerability works, we must first know how the links sent on Facebook are working.


When a link is sent for the first time via the website, it extracts the title, description and associated image, then it appends a unique identifier and retains the information.


The next time the same link is sent, Facebook only draws the information from the database.


All items on Facebook, either pictures, statuses or links, receive an identification number that is not chronologically.


Mark Zuckerberg, for example, is number 4. Through a Facebook interface created for developers, it can be requested an object using his number, but the site will provide the required information only if you have permission to access it.


Thus, you could not access someone else’s private content.


Using the interface, you can make a request so the site displays you the links someone else is sending with the help of identification numbers.


Thus, you can easily access the link that someone sends in a private conversation, as shown in this article.


Using a debugging tool of Facebook, you can get the identification number associated with a link.


Then all you have to do is to make a request to the interface to get the respective link.


Once you make this request, the link becomes available and you can access it. In the experiment that discovered this problem, the link was one of a Google Doc, that should have been private.


The discoverer also wanted to know if other links sent by messenger can be discovered using this method.


So, he created a script that takes ID and adjusts them gradually, until it finds links


The author of the study also found out other sensitive information such as usernames, locations, attachments, secret links secret and beyond.

No comments

Powered by Blogger.