<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Facebook Security Flaws &#124; Facebook Security Settings &#124; Facebook Security Problems - FacebookWall.com &#187; Facebook application</title>
	<atom:link href="http://www.facebookwall.com/category/facebook-application/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.facebookwall.com</link>
	<description></description>
	<lastBuildDate>Thu, 29 Jul 2010 04:23:57 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Application Developers are Required to Verify Accounts</title>
		<link>http://www.facebookwall.com/application-developers-required-verify-accounts/</link>
		<comments>http://www.facebookwall.com/application-developers-required-verify-accounts/#comments</comments>
		<pubDate>Sat, 05 Jun 2010 14:27:53 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Facebook application]]></category>
		<category><![CDATA[account verification]]></category>
		<category><![CDATA[Facebook Security]]></category>

		<guid isPermaLink="false">http://www.facebookwall.com/?p=322</guid>
		<description><![CDATA[There has been a great deal of discussion across the Web pertaining to the Facebook security issues. Yet, this week Facebook has taken another measurement whereby app developers are required to verify their accounts before they can create new app. According to the developer&#8217;s forum thread, the account verification is done either through mobile phone [...]]]></description>
			<content:encoded><![CDATA[<div style="float:right;margin:0px 0px 0px 0px;"></div><div class="tweetmeme_button" style="float: right; margin-left: 10px;">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.facebookwall.com%2Fapplication-developers-required-verify-accounts%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.facebookwall.com%2Fapplication-developers-required-verify-accounts%2F&amp;source=kernielee&amp;style=normal&amp;hashtags=account+verification,Facebook+application,Facebook+Security" height="61" width="50" /><br />
			</a>
		</div>
<p><a href="http://www.facebookwall.com/wp-content/uploads/2010/06/account_verification.jpg"><img class="alignright size-full wp-image-323" title="account_verification" src="http://www.facebookwall.com/wp-content/uploads/2010/06/account_verification.jpg" alt="" hspace="10" vspace="10" width="350" height="137" /></a></p>
<p>There has been a great deal of discussion across the Web pertaining to the Facebook security issues. Yet, this week Facebook has taken another measurement whereby app developers are required to verify their accounts before they can create new app.</p>
<p>According to the <a href="http://forum.developers.facebook.com/viewtopic.php?id=60622/">developer&#8217;s forum thread</a>, the account verification is done either through mobile phone confirmation or adding a credit card to the developer account. Also, the reason behind this security step is to preserve the &#8220;integrity of the Facebook platform.&#8221;</p>
<p>Now, a question is being asked, &#8220;Do you think that the cyber criminals are likely to be deterred simply by having to provide a valid cell phone number or credit card?&#8221;</p>
<p>Well. This reminds me a lot of the <a href="http://blog.facebook.com/blog.php?post=107720572130">security solution</a> launched in July 2009 whereby Facebook asked the victims of compromised accounts to regaining access to the accounts simply by walking through a 5-step quick verification process. Furthermore, this verification process also applied to the Facebook new users if they want to obtain their <a href="http://blog.facebook.com/blog.php?post=90316352130">personal usernames</a>.</p>
<p>In fact, there is still an issue for some users whose country is not U.S. and they are having problems in receiving the sms confirmation code. On a side note, typing &#8220;facebook mobile confirmation code&#8221; on Google search engine, its search assistant will help you to complete the following sentence, i.e. <strong>not receiving facebook mobile confirmation code</strong>.</p>
<p>Ironically, a genuine Facebook user is afraid to verify his / her own account whereas cyber criminals are not since they are the one who send out the fake account verification emails. Perhaps it&#8217;s more accurate to say that as the genuine group of users, we hate waiting for the confirmation code or being hooked by &#8220;phishing&#8221; scam. We came across the following messages before:</p>
<p><em>&#8220;We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below and confirm your identity.&#8221;</em></p>
<p><em>&#8220;During our regular verification of accounts, we couldn&#8217;t verify your information. Please click here to update and verify your information.&#8221;</em></p>
<p>And thus, we shouldn&#8217;t be asked to <strong>&#8220;update,&#8221; &#8220;validate,&#8221; &#8220;verify,&#8221; or &#8220;confirm&#8221;</strong> account information anymore.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.facebookwall.com/application-developers-required-verify-accounts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The App Notification Changes on Facebook</title>
		<link>http://www.facebookwall.com/app-notification-changes/</link>
		<comments>http://www.facebookwall.com/app-notification-changes/#comments</comments>
		<pubDate>Mon, 08 Mar 2010 09:31:40 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Facebook application]]></category>
		<category><![CDATA[Application Notifications]]></category>

		<guid isPermaLink="false">http://www.facebookwall.com/?p=249</guid>
		<description><![CDATA[Starting from March 1st this year, Facebook will no longer deliver application notifications and will discontinue support for notifications.send, according to its official Facebook developers blog. In other words, Facebook is set to become a much quiet place, despite the fact that they have more than 400 million users up to-date. Clearly, the loss of [...]]]></description>
			<content:encoded><![CDATA[<div style="float:right;margin:0px 0px 0px 0px;"></div><div class="tweetmeme_button" style="float: right; margin-left: 10px;">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.facebookwall.com%2Fapp-notification-changes%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.facebookwall.com%2Fapp-notification-changes%2F&amp;source=kernielee&amp;style=normal&amp;hashtags=Application+Notifications,Facebook+application" height="61" width="50" /><br />
			</a>
		</div>
<p>Starting from March 1st this year, Facebook will no longer deliver application notifications and will discontinue support for notifications.send, according to its official <a href="http://developers.facebook.com/news.php?blog=1&#038;story=365">Facebook developers blog</a>.</p>
<p>In other words, Facebook is set to become a much quiet place, despite the fact that they have more than 400 million users up to-date. Clearly, the loss of this communication channel mean that now the app developers must find new way such as to ask users for their email addresses, or rely more on Counters or News (in the dashboards) in order to drive up the apps&#8217; traffic as well as getting new users for their apps.</p>
<p>In fact, discontinue support for notifications.send is not the first change that Facebook made on its communication channels, we&#8217;ve gathered up a list of app notification changes over the years as below.</p>
<p>December 2007 &#8211; Facebook has increased its <a href="http://forum.developers.facebook.com/viewtopic.php?pid=65081">mechanism of notification email feature</a> from (1) email to a user per day to (5) emails to a user per day.</p>
<p>February 2008 &#8211; Facebook launched <a href="http://developers.facebook.com/news.php?blog=1&#038;story=77">feedback-based allocations for notifications</a>. Also, applications will no longer have a static upper limit of 40 notifications per user per day.</p>
<p>May 2009 &#8211; Facebook launched <a href="http://forum.developers.facebook.com/viewtopic.php?pid=147819">immediate notifications pop-up alerts</a>.</p>
<p>August 2009 &#8211; Facebook released <a href="http://developers.facebook.com/news.php?blog=1&#038;story=291">new Notifications API</a> that allows developers to retrieve users&#8217; notifications within their applications.</p>
<p>Early 2010 &#8211; Facebook removed Requests (with invite parameter set as &#8220;false&#8221;) in its communication channels.</p>
<p>January 2010 &#8211; Facebook is allowing developers to <a href="http://developers.facebook.com/news.php?blog=1&#038;story=355">directly communicate with their users via emails</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.facebookwall.com/app-notification-changes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Facebook Fixed Unnamed App Bug</title>
		<link>http://www.facebookwall.com/facebook-fixed-unnamed-app-bug/</link>
		<comments>http://www.facebookwall.com/facebook-fixed-unnamed-app-bug/#comments</comments>
		<pubDate>Sat, 30 Jan 2010 11:26:14 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Facebook application]]></category>
		<category><![CDATA[application spam]]></category>
		<category><![CDATA[Facebook Security]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[Unnamed App]]></category>

		<guid isPermaLink="false">http://www.facebookwall.com/?p=230</guid>
		<description><![CDATA[Some said this year 2010 is the year of spam, as the networking gurus at Cisco predicted that worldwide spam volumes will increase by 30 or 40 percent over 2009 levels; see the PDF report here. Apart from simply reading the report or get ready to the spamming challenges, Facebook has announced that they have [...]]]></description>
			<content:encoded><![CDATA[<div style="float:right;margin:0px 0px 0px 0px;"></div><div class="tweetmeme_button" style="float: right; margin-left: 10px;">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.facebookwall.com%2Ffacebook-fixed-unnamed-app-bug%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.facebookwall.com%2Ffacebook-fixed-unnamed-app-bug%2F&amp;source=kernielee&amp;style=normal&amp;hashtags=application+spam,Facebook+application,Facebook+Security,malware,Unnamed+App" height="61" width="50" /><br />
			</a>
		</div>
<p>Some said this year 2010 is the year of spam, as the networking gurus at Cisco predicted that worldwide spam volumes will increase by 30 or 40 percent over 2009 levels; see the <a href="http://www.cisco.com/en/US/prod/collateral/vpndevc/cisco_2009_asr.pdf">PDF report</a> here.</p>
<p>Apart from simply reading the report or get ready to the spamming challenges, Facebook has <a href="http://www.facebook.com/security/posts/277199568535">announced that</a> they have fixed one of the bugs spotted, although it was not the most notorious spam attacks like Koobface. This bug namely as &#8220;Unnamed App&#8221; and the past days many Facebook users have even posted their status updates to make other users aware about it.</p>
<p>A latest update, Facebook officials told <a href="http://edition.cnn.com/2010/TECH/01/27/facebook.bug/">CNN</a> that the bug wasn&#8217;t harmful and is fixed. Facebook spokesperson Malorie Lucich said that the bug was fixed by January 27 afternoon.</p>
<p>&#8220;Due to a small bug, an application listed as &#8220;Unnamed App&#8221; appeared in some users&#8217; Applications Settings. No user accounts or data were lost or damaged,&#8221; according to Lucich.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.facebookwall.com/facebook-fixed-unnamed-app-bug/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Is Facebook Knows Too Much About You?</title>
		<link>http://www.facebookwall.com/facebook-knows-too-much-about-you/</link>
		<comments>http://www.facebookwall.com/facebook-knows-too-much-about-you/#comments</comments>
		<pubDate>Mon, 31 Aug 2009 07:28:31 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Facebook application]]></category>
		<category><![CDATA[Facebook quiz]]></category>
		<category><![CDATA[What Do Facebook Quizzes Know About You?]]></category>

		<guid isPermaLink="false">http://facebookwatcher.com/?p=142</guid>
		<description><![CDATA[Most Facebook users don&#8217;t really care about the potential risks of Facebook quizzes that can collect and store the answers they give when they&#8217;re taking the quizzes; they also cannot stop these kinds of quizzes from collecting the information in their profiles &#8211; and even information from their friends’ profiles. In order to prove the [...]]]></description>
			<content:encoded><![CDATA[<div style="float:right;margin:0px 0px 0px 0px;"></div><div class="tweetmeme_button" style="float: right; margin-left: 10px;">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.facebookwall.com%2Ffacebook-knows-too-much-about-you%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.facebookwall.com%2Ffacebook-knows-too-much-about-you%2F&amp;source=kernielee&amp;style=normal&amp;hashtags=Facebook+quiz,What+Do+Facebook+Quizzes+Know+About+You%3F" height="61" width="50" /><br />
			</a>
		</div>
<p><img src="http://www.facebookwall.com/wp-content/uploads/2009/08/what_do_quizzes_really_know_about_you.jpg" alt="" title="" width="450" height="243" class="alignnone size-full wp-image-143" /></p>
<p>Most Facebook users don&#8217;t really care about the potential risks of Facebook quizzes that can collect and store the answers they give when they&#8217;re taking the quizzes; they also cannot stop these kinds of quizzes from collecting the information in their profiles &#8211; and even information from their friends’ profiles.</p>
<p>In order to prove the above risks come not as a total surprise, the ACLU of Northern California has developed a Facebook quiz of its own to illustrate how quizzes that may seem &#8220;perfectly harmless&#8221; can access to a wide array of your personal information, though in the first place, you&#8217;re wondering the Facebook policies has always in place to reassure the protection of user data.</p>
<p>The Facebook app, i.e. a quiz entitled, &#8220;<a href="http://www.facebook.com/apps/application.php?id=114232425072">What Do Facebook Quizzes Know About You?</a>&#8221; delivers its answer by showing you how much do the quizzes you take really learn about you on Facebook.</p>
<p>According to ACLU, more than 8,000 participants have taken this quiz since it was quietly released a few days ago. In addition, the group hopes to prompt Facebook to upgrade its privacy default settings for its users, now amounting more than 250 million.</p>
<p>Chris Conley, a technology fellow with the ACLU, finds a probable reason for developing this Facebook quiz, said &#8220;We wanted to use Facebook itself to show how all these quiz creators have access to personal information. It is difficult to know how third-party app developers use the data, which can be collected and sold for marketing and advertising campaigns. Private investigators and political entities are known to create dossiers using technologies that automatically scour the Web. An individual bombarded by spam, for example, may have been targeted because of an affiliation posted on Facebook. There is no way to know.&#8221;</p>
<p>However, ACLU acknowledged the irony of its approach: &#8220;We know it&#8217;s a little weird to warn you about Facebook quizzes by asking you to take a Facebook quiz &#8211; but at least you know who we are and that we have a real privacy policy that we&#8217;re committed to upholding. Can you say the same for every unknown author of every quiz you or your friends take?&#8221;</p>
<p>To know more about the generic quiz results and what are the comments of ACLU toward it, there is <a href="http://www.aclunc.org/issues/technology/blog/quiz_what_do_facebook_quizzes_know_about_you.shtml">an explanation page</a> posted by ACLU.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.facebookwall.com/facebook-knows-too-much-about-you/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Pizza Hut Interface Spamming Users?</title>
		<link>http://www.facebookwall.com/pizza-hut-interface-spamming-users/</link>
		<comments>http://www.facebookwall.com/pizza-hut-interface-spamming-users/#comments</comments>
		<pubDate>Tue, 28 Oct 2008 15:17:57 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Facebook application]]></category>
		<category><![CDATA[application spam]]></category>
		<category><![CDATA[Facebook]]></category>

		<guid isPermaLink="false">http://facebookwatcher.com/?p=76</guid>
		<description><![CDATA[I just came across an article that entitled, &#8220;Pizza Hut To Spam Facebook Users.&#8221; To me, this article is quite interesting, especially it talked about when a user installs the Pizza Hut Facebook application called Pizza Hut Interface, whenever she ordered a pizza from Pizza Hut through this application in Facebook, her friends would get [...]]]></description>
			<content:encoded><![CDATA[<div style="float:right;margin:0px 0px 0px 0px;"></div><div class="tweetmeme_button" style="float: right; margin-left: 10px;">
			<a href="http://api.tweetmeme.com/share?url=http%3A%2F%2Fwww.facebookwall.com%2Fpizza-hut-interface-spamming-users%2F"><br />
				<img src="http://api.tweetmeme.com/imagebutton.gif?url=http%3A%2F%2Fwww.facebookwall.com%2Fpizza-hut-interface-spamming-users%2F&amp;source=kernielee&amp;style=normal&amp;hashtags=application+spam,Facebook,Facebook+application" height="61" width="50" /><br />
			</a>
		</div>
<p><img src="http://www.facebookwall.com/wp-content/uploads/2008/10/pizzahutinterface.jpg" alt="pizzahutinterface_image" title="" width="414" height="214" class="alignnone size-full wp-image-77" /></p>
<p>I just came across an article that entitled, &#8220;<a href="http://industry.bnet.com/food/1000255/pizza-hut-to-spam-facebook-users/">Pizza Hut To Spam Facebook Users</a>.&#8221; To me, this article is quite interesting, especially it talked about when a user installs the Pizza Hut Facebook application called <a href="http://www.facebook.com/apps/application.php?id=24772936155">Pizza Hut Interface</a>, whenever she ordered a pizza from Pizza Hut through this application in Facebook, her friends would get to know which pizza she ordered through a tiny notification appeared on their Facebook profiles.</p>
<p>Is this an act of Facebook application spam? How about the notification itself offers nothing about your own interest, for example, XXX accepted your friend request, or XXX wrote on your Wall, but something that do with Pizza Hut products, a food that it might not suit your taste in the first place.</p>
<p>At the time of my writing, there are over 600 monthly active users for this application. If you do not want your Facebook friends to know which type of pizza you&#8217;ve ordered, you simply can order it over the phone, don&#8217;t install this application.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.facebookwall.com/pizza-hut-interface-spamming-users/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
