Shulou(Shulou.com)05/31 Report--

Facebook's Mark Zuckerberg recently said he wants to better protect the social media platform. Even if the company's plans materialize, we'd like to see a more secure Facebook, but it's not entirely immune to vulnerabilities and vulnerabilities. Cybersecurity firm Imperva recently reported a vulnerability in the web version of Facebook Messenger that allows any website to see who you're chatting with. Although the vulnerability does not reveal a user's chat content, it allows a potential attacker to know who is chatting with a contact. Facebook said it fixed the bug in December.

A Facebook spokesperson told CNET:"The problems in his report stem from the way web browsers handle embedded web content, not Facebook specific. "We have advised browser manufacturers and relevant web standards organizations to take steps to prevent this type of issue from occurring in other web applications, and we have updated the web version of Messenger to ensure that this browser behaves correctly." "It triggers our service. Ron Masas, a security researcher at Masas, discovered the vulnerability. He said the vulnerability was exploited through browser-based side-channel attacks. "It's still a neglected topic, and big companies like Facebook and Google are catching up, and most industries are still unaware. "

Masas detailed this bug in his blog post, which apparently stems from the use of iFrames, an embedded framework code that embeds content on pages like YouTube. By analyzing the number of iFrames being loaded, researchers can discover who users are talking to. This is done through the tools he developed, but in order for it to work properly, you need to guide the user. The tool will look for a drop in the number of iFrames in case you've never talked to someone on Facebook.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.