full-disclosure - Re: [FD] Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction

Open Source and information security mailing list archives

Message-ID: <CAH72vihx797jfdNKr+i_mn8nYpHB+=2Q=pSh95Tv4ASaqkZAtA@mail.gmail.com>
Date: Wed, 2 Apr 2014 09:21:55 +0200
From: Źmicier Januszkiewicz <gauri@....by>
To: fulldisclosure <fulldisclosure@...lists.org>
Subject: Re: [FD] Access anyone's Facebook "profile picture" in full
 resolution regardless of the ACL restriction

> the facebook user should not have unrealistic expectation to privacy.

I think this part says it all. I'd even drop the "unrealistic" out of
it. Keeping someone "private" on FB is like spraying it over a wall
and hoping nobody will notice, while a certain person is already
running an exhibition business out of it.

The whole concept of "online privacy" is a delusion IMO. How can
something be private if it leaves traces and records all over the
place? Traffic, logs, DB records... So please, please let's stop
thinking that something can be "private" when we share it with a
multibillion company and its partners, advertisers, developers, and
whoever makes a legal claim.

If you want something to be private -- don't share it. Period.

Cheers,
Z.

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives