Blatant interference
March 21, 2011 11:36 PM   Subscribe

Internet provider in tunisia stealing Facebook identities Translation from the description: when connecting to Facebook, an unnamed internet provider in Tunisia introduces a JavaScript snipped on the login form that copies the username and password introduced by the user in the form through a HTTP request to a non-existing account. Since requests to non-existing URLs are refused by Facebook, this identifies the culprit as the internet provider who can search their HTTP proxy log files for the special URL.
posted by knz (6 comments total)

This post was deleted for the following reason: This appears to be a couple months out of date info -- mathowie



 
Yeah, we talked about this two months ago when it was actually happening.
posted by teraflop at 12:16 AM on March 22, 2011


Mods - this is stale information. The Tunisians stopped doing this.
posted by w0mbat at 1:04 AM on March 22, 2011


Damn, and I was hoping somebody could translate that translation for me.
posted by UbuRoivas at 2:34 AM on March 22, 2011


Ubu: The ISP is injecting HTML into facebook pages that has javascript in it. Javascript is a language that's used to make pages interactive (for example, the live preview at the bottom of the page).

Since the javascript looks like it's comming from facebook, the browsers of people using it will run it as if it came directly from facebook, meaning it has access to your credentials. It can pass those credentials on to 3rd parties.
posted by delmoi at 3:16 AM on March 22, 2011


But surely this would only affect people logging onto their facebook through that ISP, or if the facebook pages were somehow routed via that ISP, right?
posted by UbuRoivas at 3:52 AM on March 22, 2011


But surely this would only affect people logging onto their facebook through that ISP, or if the facebook pages were somehow routed via that ISP, right?

Yeah. But when you have a monopoly, or oligopoly it's not hard to accomplish.
posted by delmoi at 4:21 AM on March 22, 2011


« Older RIP Mr. Boogie Woogie Piano Man   |   Liberty Dollars in Jail Newer »


This thread has been archived and is closed to new comments