Facebook Privacy Vulnerability
Today I found a Facebook privacy vulnerability affecting dates of birth. The scenario:
- The Facebook user hides their date of birth from view
- When today’s birthdays are viewed, those who choose to publish their year of birth have their age displayed. Those who have opted to hide their year of birth in their privacy settings do not have their age published. ( http://www.facebook.com/?sk=bd )
However…
- When viewed via the Facebook mobile site, their age is published ( http://m.facebook.com/birthdays.php )
Obviously from this, the individual’s date of birth can be easily calculated.
UPDATE: I have of course notified Facebook of this privacy flaw.
0 TrackBacks
Listed below are links to blogs that reference this entry: Facebook Privacy Vulnerability.
TrackBack URL for this entry: http://cyberissues.eu/cgi-bin/mt-tb.cgi/13
I can confirm that as of yet, this has not been resolved. Of my four Facebook friends who have Birthdays today, one has opted to hide their year of birth but I can still see their details.