Cryptographic key used to sign one of Facebook's Android apps compromised

The security of Android app updates hinges on the secrecy of a given app's signing key. It's how app updates are verified as secure, and if it falls into the wrong hands, false updates could be distributed containing nefarious changes. As a result, developers usually guard signing keys quite closely, but someone at Facebook seriously messed up. A key used by the company to digitally sign its Free Basics by Facebook app has been compromised, and third-party apps reusing the key have been spotted online.
https://www.androidpolice.com/2019/08/29/cryptographic-key-used-to-sign-one-of-facebooks-android-apps-compromised/

Read Via Telegram

#deletefacebook #FacebookDigitalGangsters #deleteinstagram #deletewhatsapp
📡@cRyPtHoN_INFOSEC_ES
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN

Time to check Face Recognition settings on Facebook

Facebook announced the global roll out of the Face Recognition setting for new users and existing users who had access to the tag suggestions feature today.

The company launched a feature called tag suggestions years ago that was enabled for a subset of Facebook users only. The feature determined whether face recognition technology was used by Facebook to identify users on uploaded photos. The feature limited suggestions to friends of the user who uploaded the feature. In other words: it only provided identification on the photo if it identified a contact of the user; strangers were not suggested by the tool.
https://www.ghacks.net/2019/09/04/time-to-check-face-recognition-settings-on-facebook/

Read Via Telegram

#deletefacebook #FacebookDigitalGangsters #deleteinstagram #deletewhatsapp
📡@cRyPtHoN_INFOSEC_ES
📡@cRyPtHoN_INFOSEC_DE
📡@cRyPtHoN_INFOSEC_EN