Facebook can track you even after logout -hacker

Facebook users, be warned: the social network giant may still be able to track you even after you log out of your session. This was the finding of an Australian hacker who said Facebook's "cookies" —bits of information saved on a user's computer— still lets Facebook keep tabs.

"(L)ogging out of Facebook only de-authorizes your browser from the web application, a number of cookies (including your account number) are still sent along to all requests to facebook.com. Even if you are logged out, Facebook still knows and can track every page you visit. The only solution is to delete every Facebook cookie in your browser, or to use a separate browser for Facebook interactions," hacker Nik Cubrilovic said in a blog post.

He also noted Facebook's new application programming interface (API) allows applications to post status items to one's Facebook timeline without user intervention.

This may raise a privacy concern that "because you no longer have to explicitly opt-in to share an item, you may accidentally share a page or an event that you did not intend others to see."

Cubrilovic said that during logout, a number of Facebook cookies are not being deleted.

He noted two cookies (locale and lu) are given new expiry dates, and three new cookies (W, fl, L) are set.

When he made a subsequent request to www.facebook.com as a "logged out" user, he said the primary cookies that identify him as a user are still there.

"This is not what 'logout' is supposed to mean - Facebook (is) only altering the state of the cookies instead of removing all of them when a user logs out," he said.

Such a setup allows a supposedly logged-out user to still send his or her account ID to Facebook when he or she visits any page with a Facebook "Like" button, or share button, or any other widget.

"The only solution to Facebook not knowing who you are is to delete all Facebook cookies," he said.

Log-out experiments

Cubrilovic recalled an experiement where he created a number of fake Facebook accounts after logging out of his browser.

After using the fake accounts for some time, he found that they were suggesting his real account to him as a friend.

"Somehow Facebook knew that we were all coming from the same browser, even though I had logged out," he said.

He said these are serious implications if one uses Facebook from a public terminal.

"If you login on a public terminal and then hit 'logout,' you are still leaving behind fingerprints of having been logged in. As far as I can tell, these fingerprints remain (in the form of cookies) until somebody explicitly deletes all the Facebook cookies for that browser," he said.

He pointed out Facebook knows every account that has accessed Facebook from every browser and is using that information to suggest friends to a user.

"The strength of the 'same machine' value in the algorithm that works out friends to suggest may be low, but it still happens. This is also easy to test and verify," he said.

Reported to Facebook

Cubrilovic said he reported this issue to Facebook in a detailed email but got the "bounce-around."

He said the entire process was so flaky and frustrating that he did not bother sending them two XSS holes that he have also found in the past year.

"The question is what it will take for Facebook to address privacy issues and to give their users the tools required to manage their privacy and to implement clear policies - not pages and pages of confusing legal documentation, and 'logout' not really meaning 'logout,'" he said. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Philippine, Vietnamese troops play soccer and sing on disputed island

    By Manuel Mogato MANILA (Reuters) - Vietnamese and Philippine troops played soccer and sang karaoke on a South China Sea island on Wednesday in a sign of the growing security ties between the two Southeast Asian nations most at odds with Beijing over the contested waterway. Cooperation has blossomed between Hanoi and Manila since they shelved decades of enmity over their competing claims in the Spratly archipelago to try to counter China, whose creation of artificial islands in the region …

  • SE Asia Stocks - Fall on renewed U.S. rate hike concerns

    BANGKOK, May 27 (Reuters) - Southeast Asian stock markets tumbled on Wednesday as investors resumed selling on expectations of an interest rate hike in the U.S. sooner rather than later, derailing Philippine ... …

  • Phl, US defense chiefs to meet on sea dispute
    Phl, US defense chiefs to meet on sea dispute

    As US aircraft carrier USS Ronald Regan began its journey to Asian waters amid China’s power flexing in the region, Defense Secretary Voltaire Gazmin would try to hear directly from his US counterpart how far America is willing to go to aid its long-time ally against China’s threatening moves in disputed waters. Gazmin flew to Hawaii last Monday to attend ceremonies for the turnover of leadership of the United States Pacific Command (USPACOM) from Admiral Samuel Locklear to Admiral Harry …

  • Water in Angat Dam falls below critical level
    Water in Angat Dam falls below critical level

    The water level of Angat Dam in Bulacan yesterday fell below the 180-meter critical level for irrigation, the Philippine Atmospheric, Geophysical and Astronomical Services Administration (PAGASA) said. PAGASA said the dam’s water level further dropped to 179.98 meters as of 6 a.m. yesterday from 180.2 meters on Monday. The priority is the domestic consumption in Metro Manila, according to PAGASA. …

  • PCSO gets P3-B fund for medical aid
    PCSO gets P3-B fund for medical aid

    The Philippine Charity Sweepstakes Office (PCSO) reported yesterday that an estimated P3-billion charity fund has been allocated by Congress to the agency to provide medical assistance to indigent patients and also give funds to other government offices including the Philippine Drug Enforcement Agency (PDEA) and the Crop Insurance Program. …

  • Image of Asia: Tearing down squatters' homes near Manila
    Image of Asia: Tearing down squatters' homes near Manila

    In this photo by Bullit Marquez, a demolition crew begins to tear down a squatters' community at suburban Caloocan city, north of Manila, Philippines. Population growth and the lack of economic opportunities in rural areas have driven millions of Filipinos into the squatters' colonies that dot the sprawling metropolitan area in and around Manila. Most of the land they occupy is privately owned, and clearing the dwellings often results in violence. The landowner had offered about $1,344 in …

  • SE Asia Stocks - Mostly down; Thai shares near 2-week low

    BANGKOK, May 26 (Reuters) - Most sharemarkets in Southeast Asia fell on Tuesday with the Thai index ending at a near two-week low and the Philippines touching a near four-week low after trade data while ... …

  • China breaks ground on lighthouse project in South China Sea

    China hosted a groundbreaking ceremony for the building of two lighthouses in the disputed South China Sea, state media said on Tuesday, a move that is likely to escalate tensions in a region already jittery about Beijing's maritime ambitions. China's Ministry of Transport hosted the ceremony for the construction of two multi-functional lighthouses on Huayang Reef and Chigua Reef on the disputed Spratly islands, state news agency Xinhua said, defying calls from the United States and the …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options