Archive for the ‘Social Networking’ Category

Security flaw could've deleted every photo on Facebook

Summary:A security researcher said the social networking giant responded and fixed the problem within two hours, signaling how important the vulnerability was.

(Image: Facebook via CNET)

Facebook has patched a security vulnerability that could've allowed a hacker to delete every single photo on the social networking site.

The social network said in 2013 that more than 350 million photos are uploaded to the site every day. That figure must have risen, along with its entire user base, which is now 1.3 billion people strong. The number of photos stored by Facebook is an almost unfathomable figure -- and the storage space needed for it is indescribably large.

But according to one security researcher, a relatively simple bug may have had the capacity to delete that entire data bank.

"Any photo album owned by an user or a page or a group could be deleted," researcher Laxman Muthiyah wrote on his blog.

Muthiyah found the bug after poking around in Facebook's Graph API, a developer platform that allows websites and applications to tap into Facebook's data.

The Graph API does not allow one user to delete another person's photos or albums. But by manipulating an access token from his mobile device, he was able to convince Facebook that the album belonged to him -- effectively allowing him access to read, write, and delete the album.

The bug was so severe that after he reported the bug to the social networking giant, it was fixed within two hours.

For his efforts, he was awarded $12,500, one of the highest rewards available.

The rest is here:
Security flaw could've deleted every photo on Facebook

Facebook super-sizes its open networking switch

Facebook is taking its crusade for open networking to a broader battlefield, using its 16-port Wedge switch design as the basis of a new modular platform that can link together racks of servers across a data center.

The social networking juggernaut doesnt intend to become a data networking vendor. It designs switches for its own needs and then open-sources its hardware designs so others can use them. In time, other companies could turn Facebook switch designs into products for sale, but Facebook wont be directly involved, said Matt Corddry, director of hardware engineering at Facebook.

Yet what the company is doing could eventually have a big impact on IT. Corddry compared the open hardware designs to Linux, the free, open-source operating system that started out being used by big scaled computing companies similar to Facebook and in time became the standard OS for enterprise servers. Facebook hopes the work its putting into open networking hardware will help to create a broad ecosystem of suppliers and developers.

The application for this type of technology, over time, will broaden considerably, Corddry said. Were doing a lot of the heavy lifting. As with open-source computing, open networking should give users more visibility and control, he said.

Facebook plans to offer the hardware designs through the Open Compute Project (OCP), an organization it founded in 2011. The company uses its own software for the switches it makes for itself, but the expectation is for others to develop their own software.

Facebooks first switch, code-named Wedge, was announced last June. Its a 1U design with 16 ports of 40-Gigabit ethernet and is designed to sit at the top of a rack of servers, networking those systems to each other. The new design, code-named 6-pack, is 6U deep and contains eight interchangeable interface cards. It can be configured with as many as 128 40-Gigabit ports.

The 6-pack is designed to connect racks of switches together as the core of a modular data-center design that debuted in the companys new Altoona, Iowa, data center in November and will be deployed at its other facilities over time. But the 6-pack is not limited to the current role or configurations Facebook is using. Its an architecture that will let Facebook assemble any size switch using common building blocks, and others will be able to extend the design into different configurations to suit their needs.

A key feature of the 6-pack is its backplane, the element that links the interface modules to each other so traffic can flow from one port to another inside the switch. Instead of a proprietary interface, the backplane uses standard ethernet, though it carries packets across a printed circuit board instead of on cables or fibers. Using ethernet will make it easier for third parties to design their own port modules, Corddry said. The backplane is ready for 100-Gigabit ethernet to meet higher throughput demands in the future, he said.

Both the Wedge and the 6-pack are being tested with production traffic in Facebook data centers. The company had hoped to release the Wedge through OCP by the end of last year. Its still verifying the technology and plans to release it in the near future, Corddry said. The 6-pack is expected to be released within a matter of months.

Stephen Lawson covers mobile, storage, and networking technologies for the IDG News Service, and is based in San Francisco. More by Stephen Lawson

See the original post here:
Facebook super-sizes its open networking switch

LinkedIn restricts API usage

LinkedIn is restricting access to most of its application programming interfaces (APIs) to companies that have struck up partnerships with the social networking company.

Over the past several years, weve seen some exciting applications from our developer community. While many delivered value back to our members and LinkedIn, not all have, wrote Adam Trachtenberg, director of the LinkedIn developer network, explaining in a blog post the change in the companys API policy.

Starting May 12, LinkedIn will only offer a handful of its APIs for general use, namely those that allow users and companies to post information about themselves on the service. After then, only companies that have enrolled in LinkedIns partner program will have API access. Samsung, WeChat, and Evernote have already struck such partnerships.

Currently, the social networking service offers a wide range of APIs, which allow third-party programs to draw content from, and place content into, LinkedIn.

APIs have been seen as an additional channel for businesses to interact with their users and partners. A few companies, however, have recently scaled back access to APIs, which provide the programmatic ability to access a companys services and data.

Netflix shut its public API channel in November, preferring to channel its user information through a small number of partners. ESPN also disabled public access to its APIs in December.

LinkedIns move is evidence of how the business use of APIs are evolving, said John Musser, founder and CEO at API Science, which offers an API performance testing service.

Companies are finding what works best for them over time, Musser said. Some companies, such as Twitter, find greater benefit in offering a wide range of their APIs, whereas other companies, such as Netflix, see little advantage in maintaining the open APIs.

LinkedIns change in policy is effectively a pricing and monetization play, wrote IDC software analyst Al Hilwa in an email. It is typical for players in the new age tech economy to start with permissive and free access to gain share and users and then progressively curtail it to monetize the audience they have gained.

LinkedIn provides professional social networking services to over 300 million users worldwide.

See original here:
LinkedIn restricts API usage

GetGuide: Info about the cloud or self hosted eXo versions | enterprise social networking – Video


GetGuide: Info about the cloud or self hosted eXo versions | enterprise social networking
Visit eXo on GetApp - http://www.getapp.com/collaboration-software/a/exo-platform/ eXo is great for enterprise level IT businesses that need... Enterprise so...

By: GetApp

Read more here:
GetGuide: Info about the cloud or self hosted eXo versions | enterprise social networking - Video

Facebook Ad Guidelines | Best Facebook Ads – Video


Facebook Ad Guidelines | Best Facebook Ads
Claim your FREE report here: http://fbaffiliatecommissions.com/enormous-money-making-potential-of-facebooks-ad-system/ This guide is a treasure map to recognize the hidden secrets of Facebook....

By: Craig Armstrong

Read more:
Facebook Ad Guidelines | Best Facebook Ads - Video