Facebook Security Bug Affects 90M Users

From KREBSONSECURITY – Sep 28th

Another reason to turn on two-factor security that will send you a txt or alternative communication to confirm it is you!   Craig


Facebook said today some 90 million of its users may get forcibly logged out of their accounts after the company fixed a rather glaring security vulnerability in its Web site that may have let attackers hijack user profiles.

In short blog post published this afternoon, Facebook said hackers have been exploiting a vulnerability in Facebook’s site code that impacted a feature called “View As,” which lets users see how their profile appears to other people.

“This allowed them to steal Facebook access tokens which they could then use to take over people’s accounts,” Facebook wrote. “Access tokens are the equivalent of digital keys that keep people logged in to Facebook so they don’t need to re-enter their password every time they use the app.”

Facebook said it was removing the insecure View As feature, and resetting the access tokens of 50 million accounts that the company said it knows were affected, as well as the tokens for another 40 million users that may have been impacted over the past year.

The company said it was just beginning its investigation, and that it doesn’t yet know some basic facts about the incident, such as whether these accounts were misused, if any private information was accessed, or who might be responsible for these attacks.

Although Facebook didn’t mention this in their post, one other major unanswered question about this incident is whether the access tokens could have let attackers interactively log in to third-party sites as the user. Tens of thousands of Web sites let users log in using nothing more than their Facebook profile credentials.

I have asked for clarification from Facebook on this point and will update this post when and if I receive a response. I would have expected Facebook to mention this as a mitigating factor if authorized logins at third-party sites were not impacted.

Facebook says there is no need for users to reset their passwords as a result of this breach, although that is certainly an option.

More importantly, it’s a good idea for all Facebook users to review their login activity. This page should let you view which devices are logged in to your account and approximately where in the world those devices are at the moment. That page also has an option to force a simultaneous logout of all devices connected to your account.

Check back for updates as more information becomes available. 

100 comments on “Facebook Security Bug Affects 90M Users”

  1. adidas stan smith

    A lot of thanks for your own labor on this site. My mother takes pleasure in doing investigation and it’s really easy to see why. Most people learn all relating to the compelling medium you convey precious ideas via your website and in addition strongly encourage contribution from some others about this matter so my simple princess is discovering a lot of things. Take advantage of the rest of the year. You are conducting a splendid job.

  2. balenciaga sneakers

    I really wanted to develop a simple message to thank you for those wonderful points you are showing here. My extended internet research has now been honored with sensible insight to write about with my great friends. I would mention that many of us visitors actually are undoubtedly endowed to be in a wonderful place with so many wonderful people with insightful advice. I feel very blessed to have discovered the webpages and look forward to so many more entertaining times reading here. Thanks a lot once again for all the details.

  3. yeezy shoes

    I wish to convey my appreciation for your kindness for men and women who really need help on this one concern. Your real commitment to getting the solution across came to be astonishingly practical and have regularly made individuals like me to realize their endeavors. Your amazing insightful guide can mean a lot to me and further more to my office colleagues. Best wishes; from each one of us.

  4. off white

    I want to express my appreciation to you for bailing me out of this particular difficulty. Just after researching through the world wide web and seeing concepts that were not helpful, I thought my entire life was gone. Existing devoid of the solutions to the problems you’ve solved all through your entire blog post is a serious case, and the ones which could have negatively affected my career if I hadn’t noticed your web site. Your main ability and kindness in dealing with everything was priceless. I don’t know what I would’ve done if I hadn’t come upon such a stuff like this. I can at this time look forward to my future. Thanks so much for your skilled and sensible guide. I won’t be reluctant to suggest your web blog to any person who desires assistance on this area.

  5. nike roshe

    My wife and i have been really joyous Albert could deal with his analysis from the ideas he came across through the site. It’s not at all simplistic to simply continually be releasing secrets that many some others have been making money from. We really see we’ve got the website owner to thank for that. Those illustrations you have made, the simple blog menu, the friendships you will help promote – it’s many spectacular, and it’s really leading our son and us understand that issue is fun, which is certainly extraordinarily essential. Thank you for everything!

  6. adidas ultra boost

    I needed to write you one little bit of remark just to thank you so much once again for these extraordinary thoughts you’ve provided above. It is remarkably generous with people like you to give openly precisely what a number of people could possibly have advertised as an e-book in making some profit on their own, particularly considering that you could possibly have tried it in the event you wanted. The creative ideas in addition worked as the good way to recognize that some people have the same desire just like my personal own to know the truth a great deal more with regards to this problem. I believe there are lots of more pleasant situations in the future for individuals that looked at your blog post.

  7. gucci belts

    Thank you for your own hard work on this site. Debby takes pleasure in participating in research and it’s really simple to grasp why. Almost all hear all of the compelling means you render informative guidance via your blog and as well increase participation from some others on this content while our favorite simple princess has been becoming educated a great deal. Have fun with the remaining portion of the new year. You are doing a really great job.

  8. moncler sale

    I precisely wished to thank you so much once again. I do not know the things I could possibly have used without the type of tactics documented by you on my situation. It became a very frustrating concern in my view, nevertheless coming across a new specialized style you dealt with that made me to cry with happiness. Now i am happier for this service and even believe you comprehend what an amazing job that you are putting in instructing the rest thru your site. I am certain you’ve never encountered any of us.

  9. calvin klein outlet

    I would like to express my love for your kind-heartedness supporting all those that really need assistance with that concept. Your real dedication to getting the message up and down had been exceptionally informative and has continually helped regular people just like me to achieve their dreams. This interesting guide implies a whole lot a person like me and further more to my office workers. Thanks a lot; from each one of us.

  10. goyard handbags

    I wish to show some appreciation to this writer for rescuing me from this circumstance. Because of looking out throughout the world-wide-web and meeting proposals which are not helpful, I assumed my entire life was done. Existing devoid of the approaches to the problems you’ve resolved as a result of your site is a crucial case, as well as ones that could have adversely affected my entire career if I hadn’t come across your site. That skills and kindness in touching all the stuff was valuable. I’m not sure what I would have done if I had not come across such a thing like this. It’s possible to at this point look forward to my future. Thanks so much for your high quality and results-oriented help. I won’t hesitate to recommend your site to any individual who will need tips about this subject.

  11. huarache shoes

    Needed to write you the very little observation to help say thanks a lot the moment again on your incredible secrets you’ve documented here. This is quite extremely generous of you to grant unhampered what exactly a few individuals would have advertised as an ebook to generate some bucks for their own end, and in particular considering the fact that you might have done it if you ever wanted. Those smart ideas in addition served to be a fantastic way to be sure that many people have the same zeal just as my personal own to understand a little more on the topic of this condition. I’m certain there are a lot more pleasant periods in the future for individuals who look over your blog post.

  12. yeezy boost

    I and my friends appeared to be digesting the great tips and hints located on the blog and immediately developed an awful suspicion I never expressed respect to the blog owner for those strategies. The women became for that reason joyful to read through them and now have seriously been making the most of these things. I appreciate you for actually being very considerate and for figuring out variety of wonderful information millions of individuals are really wanting to be aware of. My very own honest regret for not expressing appreciation to you sooner.

  13. off white x jordan 1

    I really wanted to type a simple message to be able to thank you for all the wonderful techniques you are posting on this website. My extensive internet research has now been compensated with brilliant points to exchange with my company. I ‘d state that that we site visitors actually are unquestionably blessed to dwell in a useful network with very many wonderful individuals with very helpful tactics. I feel extremely lucky to have encountered your entire webpages and look forward to some more pleasurable moments reading here. Thanks once more for a lot of things.

  14. yeezy boost 350

    I want to show my thanks to you just for rescuing me from this challenge. Just after browsing through the internet and getting proposals that were not powerful, I figured my entire life was over. Existing without the approaches to the issues you’ve solved all through your main write-up is a critical case, as well as the kind that would have in a wrong way affected my entire career if I hadn’t noticed your blog. Your own mastery and kindness in controlling a lot of things was precious. I don’t know what I would have done if I hadn’t come upon such a point like this. I can now look ahead to my future. Thanks a lot so much for the reliable and sensible help. I will not think twice to suggest the website to any person who should receive support on this topic.

  15. yeezy boost 350 v2

    I intended to put you this bit of remark to thank you very much again relating to the precious techniques you have contributed at this time. This is certainly particularly generous of you to grant unhampered precisely what a number of us would have made available for an electronic book to get some money on their own, most notably now that you might have tried it in the event you desired. These solutions as well acted to become a easy way to be certain that most people have a similar dreams just as my own to understand way more related to this problem. I’m sure there are many more pleasant instances in the future for many who examine your blog.

  16. adidas yeezy

    Thank you for your whole work on this blog. My daughter take interest in setting aside time for internet research and it’s simple to grasp why. Almost all know all regarding the lively method you present reliable guidelines on this web blog and welcome participation from other individuals about this concern plus our daughter is becoming educated a lot. Take advantage of the rest of the new year. You’re carrying out a wonderful job.

  17. michael kors handbags

    I together with my buddies were looking at the excellent procedures on your website then then I had a horrible suspicion I never expressed respect to the site owner for those tips. My young boys happened to be absolutely happy to study all of them and now have truly been having fun with those things. Many thanks for turning out to be well considerate and also for getting this kind of superior guides millions of individuals are really eager to be aware of. My personal honest regret for not expressing appreciation to you earlier.

  18. nike max

    I must express appreciation to the writer for rescuing me from such a situation. Because of surfing around through the search engines and obtaining ways that were not pleasant, I thought my entire life was gone. Being alive minus the solutions to the problems you’ve fixed all through the guideline is a crucial case, as well as the kind which could have in a negative way affected my entire career if I had not noticed your blog post. The capability and kindness in playing with a lot of things was tremendous. I am not sure what I would’ve done if I hadn’t come upon such a solution like this. I can at this point look ahead to my future. Thank you very much for the reliable and result oriented guide. I won’t hesitate to propose the blog to any person who should have guidance on this subject.

  19. off white

    I wish to voice my respect for your kindness in support of persons who have the need for assistance with the study. Your real commitment to getting the solution all around ended up being remarkably invaluable and has surely made men and women just like me to attain their pursuits. Your entire interesting useful information implies a whole lot to me and much more to my peers. With thanks; from everyone of us.

  20. golden goose shoes

    I just wanted to write down a brief comment in order to appreciate you for some of the lovely tips and hints you are showing at this site. My considerable internet lookup has at the end of the day been compensated with beneficial tips to share with my companions. I ‘d admit that most of us visitors actually are undeniably endowed to be in a superb network with very many perfect people with useful hints. I feel truly happy to have encountered the web pages and look forward to plenty of more cool minutes reading here. Thanks a lot again for a lot of things.

  21. adidas yeezy boost

    I want to show some thanks to the writer for bailing me out of this circumstance. Right after surfing throughout the online world and getting advice which are not beneficial, I assumed my life was gone. Existing devoid of the answers to the issues you have fixed all through your good article content is a critical case, as well as those which might have in a wrong way affected my entire career if I had not noticed your website. Your actual knowledge and kindness in playing with the whole thing was valuable. I’m not sure what I would’ve done if I had not come across such a subject like this. It’s possible to at this point look forward to my future. Thanks a lot very much for the specialized and amazing guide. I will not be reluctant to refer the blog to any person who needs to have guide about this topic.

  22. air max 90

    I precisely wanted to thank you very much once again. I’m not certain the things that I could possibly have gone through without those tactics contributed by you about such a concern. It was a very alarming difficulty in my circumstances, but discovering a new well-written technique you handled the issue forced me to cry for contentment. I’m just thankful for your assistance and even sincerely hope you know what an amazing job that you’re accomplishing teaching the rest through the use of your webpage. Probably you’ve never met all of us.

  23. birkin bag

    Thanks a lot for providing individuals with an extraordinarily wonderful opportunity to discover important secrets from this website. It is always so pleasant plus jam-packed with a lot of fun for me and my office acquaintances to search your site particularly 3 times in 7 days to read the newest things you have. And lastly, I’m just at all times happy concerning the powerful strategies you give. Some 3 ideas on this page are really the very best I have had.

  24. ferragamo belt

    I wish to express my thanks to this writer just for rescuing me from such a predicament. Because of checking throughout the online world and coming across suggestions that were not powerful, I figured my life was over. Living devoid of the answers to the issues you’ve resolved by means of this blog post is a serious case, and the kind which might have badly damaged my career if I had not encountered your web site. Your main skills and kindness in controlling the whole lot was valuable. I’m not sure what I would have done if I had not come across such a stuff like this. It’s possible to at this moment relish my future. Thanks for your time so much for the impressive and sensible help. I won’t be reluctant to endorse your web site to any individual who should have assistance on this situation.

  25. yeezy

    Thanks for all your valuable effort on this web site. Gloria loves going through research and it is simple to grasp why. We hear all regarding the dynamic ways you provide useful tips and hints on your web blog and in addition improve participation from other people on the concept and my child is always discovering a great deal. Take advantage of the rest of the year. You are conducting a first class job.

  26. yeezy boost 350 v2

    I am only writing to let you be aware of of the nice discovery my cousin’s child experienced reading through the blog. She discovered so many things, not to mention how it is like to have an amazing coaching mood to make many more very easily master some complicated topics. You actually did more than people’s desires. Thanks for producing such essential, dependable, edifying and also fun thoughts on that topic to Mary.

  27. vans outlet

    Thanks so much for giving everyone an extremely superb opportunity to read from this web site. It’s usually so ideal and jam-packed with a good time for me personally and my office colleagues to visit your website at the least thrice a week to read through the fresh issues you have. Not to mention, I’m actually amazed considering the stunning opinions you serve. Selected 2 points in this posting are certainly the very best we have ever had.

  28. adidas nmd

    I wanted to post you that little bit of word just to say thank you the moment again regarding the nice basics you have discussed on this site. It’s seriously generous with people like you to present unhampered exactly what many people would have marketed as an electronic book to earn some money for their own end, particularly considering the fact that you could possibly have tried it if you ever desired. These basics likewise acted like a fantastic way to be aware that other people have similar passion just as my personal own to see more and more with regard to this matter. I know there are numerous more fun moments in the future for individuals who examine your site.

  29. kd 10

    I want to convey my appreciation for your generosity supporting individuals who actually need help with in this area. Your very own dedication to getting the message all around had been extremely important and has in most cases allowed others much like me to arrive at their dreams. Your personal interesting help and advice implies a great deal to me and somewhat more to my fellow workers. With thanks; from all of us.

  30. golden goose sneakers

    I just wanted to send a simple message so as to appreciate you for these nice facts you are giving at this website. My particularly long internet look up has at the end been recognized with beneficial concept to exchange with my classmates and friends. I would declare that we site visitors are unquestionably blessed to dwell in a useful website with many awesome people with insightful concepts. I feel rather privileged to have discovered your web pages and look forward to tons of more thrilling minutes reading here. Thank you again for a lot of things.

  31. timberland outlet

    I needed to post you a little remark to thank you very much once again for the exceptional advice you’ve discussed at this time. It has been certainly strangely generous of people like you giving unreservedly exactly what most of us would have sold as an ebook to generate some profit for their own end, specifically since you might well have done it in case you decided. These points as well worked as the good way to fully grasp that someone else have similar desire like my very own to see more regarding this issue. Certainly there are thousands of more enjoyable occasions ahead for individuals that looked at your blog post.

  32. pandora charms

    My husband and i ended up being quite fulfilled when Edward could finish up his investigations while using the ideas he gained in your web pages. It is now and again perplexing to simply always be giving out key points which often other folks have been selling. And we consider we now have the website owner to thank because of that. The main explanations you have made, the easy web site navigation, the relationships your site give support to foster – it’s got most wonderful, and it’s facilitating our son and the family feel that that topic is entertaining, which is incredibly serious. Many thanks for the whole thing!

  33. adidas ultra boost 3.0

    I needed to put you this very small note to be able to give thanks as before for those awesome concepts you have contributed on this website. This has been so unbelievably generous of people like you to allow unhampered exactly what most of us would have marketed for an ebook to get some profit on their own, chiefly given that you might have done it if you ever wanted. The tips also acted as a fantastic way to recognize that many people have the same dreams similar to my very own to understand great deal more on the subject of this issue. I am certain there are a lot more enjoyable times up front for individuals that see your website.

  34. nike sneakers

    I as well as my guys were actually examining the nice points from the website then at once I got a terrible suspicion I had not expressed respect to the website owner for them. The women had been for this reason very interested to see them and already have really been tapping into them. Many thanks for actually being indeed kind and for pick out this kind of beneficial issues millions of individuals are really desperate to know about. Our honest apologies for not saying thanks to sooner.

  35. nike polo shirts

    My wife and i got really delighted when Ervin managed to conclude his investigations via the precious recommendations he acquired while using the web pages. It’s not at all simplistic to simply find yourself giving freely points that some other people could have been trying to sell. And we also fully understand we now have the blog owner to be grateful to for this. The most important explanations you’ve made, the straightforward site navigation, the friendships your site help to engender – it’s got everything fantastic, and it’s leading our son and us recognize that that matter is awesome, and that’s exceedingly pressing. Thanks for everything!

  36. yeezy boost 350 v2

    I happen to be writing to make you be aware of of the brilliant discovery my princess experienced studying your site. She even learned lots of details, which included what it’s like to have an ideal giving mood to get certain people smoothly fully grasp specific extremely tough issues. You truly did more than my expected results. Thanks for coming up with these warm and friendly, trustworthy, edifying and as well as unique thoughts on the topic to Gloria.

  37. balenciaga triple s

    I am just commenting to make you know what a cool experience my friend’s girl enjoyed browsing your webblog. She learned numerous issues, not to mention how it is like to possess an awesome coaching nature to make the rest with ease fully understand some hard to do things. You truly surpassed our own expectations. Many thanks for rendering those important, trustworthy, revealing and cool tips about this topic to Mary.

  38. huaraches

    I really wanted to make a small note in order to express gratitude to you for the lovely secrets you are posting here. My rather long internet look up has now been paid with reputable know-how to share with my family. I ‘d point out that most of us visitors are truly endowed to dwell in a great website with so many brilliant individuals with useful tactics. I feel truly privileged to have come across your entire website page and look forward to tons of more brilliant minutes reading here. Thanks a lot once again for all the details.

  39. chrome hearts

    I intended to create you this very little remark to finally thank you very much as before for your marvelous solutions you have featured here. It’s certainly strangely generous with you to provide easily what a few individuals could possibly have supplied as an e book to end up making some cash on their own, and in particular considering the fact that you could have done it in the event you desired. The good tips as well worked as a great way to be aware that other people online have a similar dreams just as my personal own to know significantly more pertaining to this problem. I’m certain there are a lot more pleasurable situations in the future for individuals that examine your site.

Comments are closed.