Comments on: A break-in of the Facebook Walled Garden http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/ aka Steve Hodson - a cranky old fart wandering the internet causing mayhem as he goes Fri, 08 Aug 2008 21:32:49 +0000 http://wordpress.org/?v=2.5.1 By: Facebook source leaked - get it all here - alex.moskalyuk http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17019 Facebook source leaked - get it all here - alex.moskalyuk Sun, 12 Aug 2007 07:34:58 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17019 [...] TechCrunch posted an item regarding Facebook servers exposing raw PHP code, with blogosphere echo chamber making its rounds, telling a more negative story each time [...] [...] TechCrunch posted an item regarding Facebook servers exposing raw PHP code, with blogosphere echo chamber making its rounds, telling a more negative story each time [...]

]]> By: Steven Hodson http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17009 Steven Hodson Sun, 12 Aug 2007 06:11:02 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17009 Aaron I realize you were the original commenter that Tony was replying to but thanks for clarifiing. However I wasn't trying to suggest anything against your posts either on DJI or here .. I just thought that Tony's follow-up comment was a good one - that is all .. nothing more nothing less Aaron

I realize you were the original commenter that Tony was replying to but thanks for clarifiing.

However I wasn’t trying to suggest anything against your posts either on DJI or here .. I just thought that Tony’s follow-up comment was a good one - that is all .. nothing more nothing less

]]> By: Aaron http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17006 Aaron Sun, 12 Aug 2007 06:04:35 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-17006 I'm the one who commented on DJI and I don't understand the scrutiny. Is the implication that a mere misconfiguration couldn't cause multiple page sources to be released? If so, a misconfiguration could cause the source for the *requested* page to be released, and if a user somehow hit the same server for multiple pages, he could gather the source for those pages. I haven't seen any claim that the "entire Facebook source" was released. For one thing, the bug could only display the highest (presentational) tier of the codebase, which is the least important. For another, I've only heard reports of 3-4 source files being made public. I’m the one who commented on DJI and I don’t understand the scrutiny. Is the implication that a mere misconfiguration couldn’t cause multiple page sources to be released? If so, a misconfiguration could cause the source for the *requested* page to be released, and if a user somehow hit the same server for multiple pages, he could gather the source for those pages.

I haven’t seen any claim that the “entire Facebook source” was released. For one thing, the bug could only display the highest (presentational) tier of the codebase, which is the least important. For another, I’ve only heard reports of 3-4 source files being made public.

]]> By: Tony Hung http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16993 Tony Hung Sun, 12 Aug 2007 05:02:13 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16993 Please do! I'll start hunting ... ;) Please do! I’ll start hunting … ;)

]]> By: Steven Hodson http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16991 Steven Hodson Sun, 12 Aug 2007 04:58:29 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16991 Tony: the actual post was about a week ago IIRC but being an old cranky fart I could be off by a day or two :) I can always let you know if it happens again and when. Tony:

the actual post was about a week ago IIRC but being an old cranky fart I could be off by a day or two :) I can always let you know if it happens again and when.

]]> By: Steven Hodson http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16990 Steven Hodson Sun, 12 Aug 2007 04:56:28 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16990 Bill: don't think it's a hoax ... there will probably be a lot of FUD coming out of Facebook tomorrow and the following week but there are some interesting times for it ahead ... read Tony's piece over at DJI to give you an idea - http://www.deepjiveinterests.com/2007/08/12/facebook-hacked-by-an-inside-job/ Bill:

don’t think it’s a hoax … there will probably be a lot of FUD coming out of Facebook tomorrow and the following week but there are some interesting times for it ahead … read Tony’s piece over at DJI to give you an idea - http://www.deepjiveinterests.com/2007/08/12/facebook-hacked-by-an-inside-job/

]]> By: Tony Hung http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16988 Tony Hung Sun, 12 Aug 2007 04:51:56 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16988 Really? How odd -- its neither in the moderation or the SK2 spam queue. Really? How odd — its neither in the moderation or the SK2 spam queue.

]]> By: bill http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16987 bill Sun, 12 Aug 2007 04:49:13 +0000 http://www.winextra.com/2007/08/11/a-break-in-of-the-facebook-walled-garden/#comment-16987 Looking like a hoax maybe...lots of comments around the net about how shoddy the coding is....would you think FB would run their index.php that way? Looking like a hoax maybe…lots of comments around the net about how shoddy the coding is….would you think FB would run their index.php that way?

]]>