Facebook’s Answer to Security Defects: Encryption
Facebook has proposed a solution to the recent security flaw that was raised some weeks ago. Today, Facebook is facing a tough battle to strengthen security of members’ confidential information. In response to the recent events, Facebook will tap more encryption to improve security. The encryption will cover relevant string of numbers. These things information was gathered from a Develop Blog post last Thursday, October 21.
This move will set new parameters that would allow program developers to apply encryption within a few weeks. This process will hopefully protect the applications user’s personal data leaking to places it should not be.
Curious on how weak Facebook security is? For frequent users, you would notice tons of user applications that would ask for authorization to access the profile, URL and iFrame that bears UID. UID will be responsible for webpage customization. Say, for example, a box that will inform you the quantity of people who “liked” your post containing page links outside of Facebook.
In order for one to make iFrame-based programs that will handle UIDs more correctly, Facebook’s Mike Vernal has proposed that developers commence encrypting the parameters passed to these applications. Facebook has posted the technical details of the proposal, followed by a comment thread for developers to give feedback.
According to an issue of Information week, the above-mentioned procedure is bound to prevent accidental UID sharing. However, this is not a guarantee that HTTP referrer leaders will be immune to this process. They would carry less information for other people’s use in other websites.
While security is a major issue for Facebook, the massive social network has been pushing through a few other updates as well, the most recent being drag-n-drop features to its Photos tool.
Since you’re here …
… We’d like to tell you about our mission and how you can help us fulfill it. SiliconANGLE Media Inc.’s business model is based on the intrinsic value of the content, not advertising. Unlike many online publications, we don’t have a paywall or run banner advertising, because we want to keep our journalism open, without influence or the need to chase traffic.The journalism, reporting and commentary on SiliconANGLE — along with live, unscripted video from our Silicon Valley studio and globe-trotting video teams at theCUBE — take a lot of hard work, time and money. Keeping the quality high requires the support of sponsors who are aligned with our vision of ad-free journalism content.
If you like the reporting, video interviews and other ad-free content here, please take a moment to check out a sample of the video content supported by our sponsors, tweet your support, and keep coming back to SiliconANGLE.