nsane.forums Posted February 15, 2013 Share Posted February 15, 2013 Facebook has admitted today that a number of its employees had their laptops infected with malware due to a "zero day" Java exploit. Facebook says the company's user data was not affected.Facebook has now stated it is the latest company to fall victim to a cyber attack, but added that there's no evidence that the attack affected any of the company's user data; Facebook revealed the details in a post on its security blog.The blog post stated that the problems were caused due to a number of its employees checking out an unnamed mobile developer website on their laptops that had become infected with malware. The laptops themselves had malware installed on their PCs after they visited said website. Facebook added:In this particular instance, we flagged a suspicious domain in our corporate DNS logs and tracked it back to an employee laptop. Upon conducting a forensic examination of that laptop, we identified a malicious file, and then searched company-wide and flagged several other compromised employee laptops.The infected website used Java to transmit the malware. Facebook said they alerted Java creator Oracle and they have since issued a patch to Java that closes the exploit. This would seem to be just the latest in a string of Java-related security issues that have cropped up in the past several months. Facebook said that it has since "remediated all infected machines, informed law enforcement, and began a significant investigation that continues to this day."View: Original Article Link to comment Share on other sites More sharing options...
SPECTRUM Posted February 16, 2013 Share Posted February 16, 2013 that happens when people don't upgrade their softwares. Link to comment Share on other sites More sharing options...
xpmule Posted February 16, 2013 Share Posted February 16, 2013 it had nothing to do with updating their software.it was a 0day (unknown publicly) exploit..and once AGAIN it was targeted at people who have teh Java browser plugin installed and enabled.it happens because it happens.. hackers gonna hack loli decided long ago i don't need it anymore and don't have any Java installed on my machine. Link to comment Share on other sites More sharing options...
Gabben Posted February 16, 2013 Share Posted February 16, 2013 They should use a good antivirus like Norton, Kaspersky or BitDefender. Link to comment Share on other sites More sharing options...
dcs18 Posted February 16, 2013 Share Posted February 16, 2013 I don't see how this makes for a breaking news - every time somebody on Planet Earth decides to take a leak, lo behold FaceBook is hacked!!!BTW, it's a pity - they didn't bust it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . permanently. Link to comment Share on other sites More sharing options...
ASIO Posted February 16, 2013 Share Posted February 16, 2013 I don't see how this makes for a breaking news - every time somebody on Planet Earth decides to take a leak, lo behold FaceBook is hacked!!!BTW, it's a pity - they didn't bust it . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . permanently.lol Link to comment Share on other sites More sharing options...
babelpatcher Posted February 16, 2013 Share Posted February 16, 2013 that happens when people don't upgrade their softwares.it had nothing to do with updating their software.it was a 0day (unknown publicly) exploit..and once AGAIN it was targeted at people who have teh Java browser plugin installed and enabled.it happens because it happens.. hackers gonna hack loli decided long ago i don't need it anymore and don't have any Java installed on my machine.i can do all my pc work without using java :Di never need java :D Link to comment Share on other sites More sharing options...
xpmule Posted February 16, 2013 Share Posted February 16, 2013 yeah they should take Facebook outr forever.. no one really needs that dumb crap !i go ocasionaly to check in with family but i hate going there and avoid it as much as i can.and in case people don;t know you can get an alterantive version of Java to use..its portable or something like that. that way it avoids your browser for security reasons.. Link to comment Share on other sites More sharing options...
chlorophyll Posted February 16, 2013 Share Posted February 16, 2013 i want FB totally FKCD UP..i dont lik IT Link to comment Share on other sites More sharing options...
Dodel Posted February 17, 2013 Share Posted February 17, 2013 What do you think the developers of these exploits will do, just shrivel up and die ?..Removing Java isn't the solution and never will be. I agree Java does have too many exploitable holes, but so does the majority of other software & hardware in day to day use.If you wish to stay totally secure, stay offline OR educate yourself on, how to be secure online, even the basics.People need to stop bashing Java, see that it's still in active development and has regular updates. It wouldn't surprise me if half the actual exploits used, stem from the "toolbar addon" which is deployed with every Java update, naughty Oracle.I'm not shouting from my ivory tower saying that I'm right, but it's naive to think that if everyone stopped using Java and the apps associated with it (Minecraft for one example), that the developers of these exploits will just stop, no they would simply move onto the next bit of software used daily, so do we then stop using that too ?.RegardsDodel. Link to comment Share on other sites More sharing options...
SPECTRUM Posted February 17, 2013 Share Posted February 17, 2013 Oracle will release an update for Java this 19 that will solve recent exploits ;) Link to comment Share on other sites More sharing options...
Administrator DKT27 Posted February 17, 2013 Administrator Share Posted February 17, 2013 What do you think the developers of these exploits will do, just shrivel up and die ?..Removing Java isn't the solution and never will be. I agree Java does have too many exploitable holes, but so does the majority of other software & hardware in day to day use.If you wish to stay totally secure, stay offline OR educate yourself on, how to be secure online, even the basics.People need to stop bashing Java, see that it's still in active development and has regular updates. It wouldn't surprise me if half the actual exploits used, stem from the "toolbar addon" which is deployed with every Java update, naughty Oracle.I'm not shouting from my ivory tower saying that I'm right, but it's naive to think that if everyone stopped using Java and the apps associated with it (Minecraft for one example), that the developers of these exploits will just stop, no they would simply move onto the next bit of software used daily, so do we then stop using that too ?.RegardsDodel.It's true that hackers just need softwares to target, however, everything, just everything under Oracle is getting sh*ttier day by day. In the Sun days, things were quite good, more security in mind, more seriousness for the products and services.One, Oracle should go through and re-check all the Java code. May it take months or year, just do it. And two, devs should switch away from Java. Years ago I had tried Java, and it was bad. Fundamentally, in my opinion, Java coding isn't the best, and it's softwares are generally slower than others. Link to comment Share on other sites More sharing options...
davhag Posted February 18, 2013 Share Posted February 18, 2013 I liked Gabben Post because was they not hacked because of a java exploit. just saying, I hope he was being sarcastic. Link to comment Share on other sites More sharing options...
keyman Posted February 20, 2013 Share Posted February 20, 2013 What do you think the developers of these exploits will do, just shrivel up and die ?..Removing Java isn't the solution and never will be. I agree Java does have too many exploitable holes, but so does the majority of other software & hardware in day to day use.If you wish to stay totally secure, stay offline OR educate yourself on, how to be secure online, even the basics.People need to stop bashing Java, see that it's still in active development and has regular updates. It wouldn't surprise me if half the actual exploits used, stem from the "toolbar addon" which is deployed with every Java update, naughty Oracle.I'm not shouting from my ivory tower saying that I'm right, but it's naive to think that if everyone stopped using Java and the apps associated with it (Minecraft for one example), that the developers of these exploits will just stop, no they would simply move onto the next bit of software used daily, so do we then stop using that too ?.RegardsDodel.+ 1 Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.