Mega Facebook notes leak!

[Smith6612]

Came across this today on a security forum I visit. Turns out, 16,000 user notes from Facebook were leaked onto the Internet and cached by Google as well. See for yourself what I mean.

http://www.google.com/search?q=site:http://69.63.186.30/notes.php

This is a pretty big leak. Webmasters, secure your stuff!

 

[galaxyAbstractor]

Is this notes users made, or notes about the user facebook made?

 

[Blazer9131]

That's freaking crazy. o.o'

How'd that happen?

~Blaze

 

[xav0989]

this is crazy... however I am a bit skeptical...

 

[Smith6612]

I'm pretty sure that these are user profile notes that they've written.

 

[John Klyne]

seems the notes come from a refined group of people who don't write in english...aren't those notes public anyways?

 

[DefecTalisman]

Uhm, this seems like a stupid question ? Why when I go to 69.63.186.30, am I signed out of facecrook ? Is this a phishing site ? All the links are funny.

If you replace the IP(69.63.186.30) with "facebook", you get pretty much the same result, but I am signed in and its in a language I understand. Different social networks maybe, but again why do the links look so spoofed ?

 

[Smith6612]

seems the notes come from a refined group of people who don't write in english...aren't those notes public anyways?

They could be, and could not be. I didn't hear anything on Facebook about this directly, but someone I believe did state that these notes were set public by the user which they have heard from Facebook. The security forum is a well trusted resource by many Internet users so the source of info is reliable.

Uhm, this seems like a stupid question ? Why when I go to 69.63.186.30, am I signed out of facecrook ? Is this a phishing site ? All the links are funny.

If you replace the IP(69.63.186.30) with "facebook", you get pretty much the same result, but I am signed in and its in a language I understand. Different social networks maybe, but again why do the links look so spoofed ?

That's because the cookie is tied to Facebook's main domain, not the server IP. That's why you're logged off. Otherwise the server is on Facebook's own network sitting in Washington DC, so it is not a phishing instance. Facebook also has a CDN based network so you could be connecting to another server for your Facebook info.

 

[adamparkzer]

Came across this today on a security forum I visit. Turns out, 16,000 user notes from Facebook were leaked onto the Internet and cached by Google as well. See for yourself what I mean.

http://www.google.com/search?q=site:http://69.63.186.30/notes.php

This is a pretty big leak. Webmasters, secure your stuff!

lol I find this pretty funny. People are worried about stalkers and make all their profile information private, then stuff like this happens and they freak out. I don't get why they would post something publicly or semi-publicly at all if they don't want random people reading it.

The chances of one of my 660ish Facebook friends getting hacked is pretty high, so chances are that some random old guy from a different country could be reading my profile info right now.

 

[DefecTalisman]

Well this should tell you all http://www.facecrook.com.

I still find that one funny as hell. htpp://www.facevook.com and every other surrounding letter(except "x") leads to other pages, what developer redirects a domain like that to thier site ?

 

[delomos]

That's pretty interesting

 

[CoolFinalFan]

awesome article, better watch what u post on Facebook!!