The latest Facebook bug: a programming error on the Facebook website accidentally gave 1.500 third-party apps access to Facebook photos of up to 6.8 million users.
Facebook quietly announced that it discovered a new API bug in its photo-sharing system that allowed 876 developers to access users' private photos that they never shared, including images uploaded to Marketplace or Facebook Stories.
“When someone grants an app permission to access their photos on Facebook, they usually only grant access to the photos that people share. In this case, the bug possibly gave developers access to other photos, such as those shared on Marketplace or Facebook Stories”, said Facebook.
The bug even exposed photos that people uploaded to Facebook, but chose not to post or didn’t finish posting for some reason.
The social media giant has begun notifying affected users of the flaw through an alert indicating that their photos may have been exposed, which will direct them to their Help Center page for more information.
Facebook also says that the social media network will soon launch “tools for app developers that will allow them to determine which people using their app could be affected by this error”.
The 2018 it has been a terrible year for Facebook, as the social media giant has had to deal with a large number of security incidents this year, the most important being the Cambridge Analytica scandal that exposed personal data of 87 millions of Facebook users.
La red social también sufrió su peor brecha de seguridad en septiembre de este año que expuso datos altamente confidenciales de 14 million users.
En el mismo mes, Facebook también abordó un error grave de API similar que estaba siendo explotado activamente por hackers desconocidos para robar tokens de acceso secreto y recopilar información personal de 30 millions of Facebook users .