/ 25 March 2008

Security lapse exposes pictures on Facebook

A security lapse made it possible for unwelcome strangers to peruse personal photos posted on Facebook’s popular online hangout, circumventing a recent upgrade to the website’s privacy controls.

The Associated Press verified the loophole on Monday after receiving a tip from Byron Ng, a Vancouver, Canada, computer technician. Ng began looking for security weaknesses last week after Facebook unveiled more ways for 67-million members to restrict access to their personal profiles.

But the added protections were not enough to prevent Ng from pulling up the most recent pictures posted by Facebook members and their friends, even if the privacy settings were set to restrict the audience to a select few.

After being alerted on Monday afternoon, Facebook spokesperson Brandee Barker said the Palo Alto-based company fixed the bug within an hour. ”We take privacy very seriously and continue to make enhancements to the site,” she said.

The latest lapse serves as another reminder of the perils of sharing sensitive photos and personal information online, even when websites pledge to shield the information from prying eyes.

Before the fix, Ng’s computer-coding trick enabled him to find private pictures of Paris Hilton at the Emmy Awards and of her brother Barron Nicholas Hilton drinking a beer with friends, as well as photos of many other people who had not granted access to Ng.

Using Ng’s template, an Associated Press reporter was able to look up random people on Facebook and see the most recent pictures posted on their personal profiles even if the photos were supposed to be invisible to strangers.

The revealed snapshots showed Italian vacations, office gatherings, holiday parties and college students on spring break. The reporter also was able to click through a personal photo album that Facebook co-founder Mark Zuckerberg posted in November 2005.

Some members of social networks like Facebook post photos of themselves or others in potentially embarrassing or compromising situations that include illegal drug use or underage drinking, which can cause trouble at school or work. None of the photos reviewed by the Associated Press appeared to fall into this category.

Despite the risks, more people than ever — especially teenagers and young adults — are publishing personal photos and other intimate details about their lives on the internet.

News Corporation’s MySpace, the only online social network larger than Facebook, suffered a security breach that exposed its members’ private photos earlier this year. — Sapa-AP