<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Facebook Homepage Source Code Probably Leaked</title>
	<atom:link href="http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/</link>
	<description>Information Security Think Tank</description>
	<pubDate>Fri, 21 Nov 2008 22:07:11 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.3</generator>
		<item>
		<title>By: Facebook Hack News: Homepage Source Code Publicly Revealed &#187; Tools For Facebook</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-123279</link>
		<dc:creator>Facebook Hack News: Homepage Source Code Publicly Revealed &#187; Tools For Facebook</dc:creator>
		<pubDate>Tue, 19 Aug 2008 12:56:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-123279</guid>
		<description>[...] facebooksecretsagain sla.chers.org web application security forum GNUCITIZEN Wired.com techncrunch.com chillingeffects.org Google search for facebooksecrets.blogspot.com [...]</description>
		<content:encoded><![CDATA[<p>[...] facebooksecretsagain sla.chers.org web application security forum GNUCITIZEN Wired.com techncrunch.com chillingeffects.org Google search for facebooksecrets.blogspot.com [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: MustLive</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-45865</link>
		<dc:creator>MustLive</dc:creator>
		<pubDate>Tue, 04 Sep 2007 17:44:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-45865</guid>
		<description>Site facebooksecrets.blogspot.com was shut down by Google. But there are places in the Web, where you can find this source code :-) (like here: www.mediafire.com/?ddjj9bntdzz).

Yes, there are many web sites (and web applications) in the Internet which suffer from an insecure failure. And security researchers and visitors can find such holes during visiting of the sites or via Google hacking.

pdp and guys, you can look at my article "Warning" Google hacking http://websecurity.com.ua/1278/ (about dorks developed by me). Where I describe a lot of "warning" search queries (dorks) which let you find Full path disclosure and Information disclosure vulnerabilities at a lot of sites.</description>
		<content:encoded><![CDATA[<p>Site facebooksecrets.blogspot.com was shut down by Google. But there are places in the Web, where you can find this source code :-) (like here: <a href="http://www.mediafire.com/?ddjj9bntdzz" rel="nofollow">http://www.mediafire.com/?ddjj9bntdzz</a>).</p>
<p>Yes, there are many web sites (and web applications) in the Internet which suffer from an insecure failure. And security researchers and visitors can find such holes during visiting of the sites or via Google hacking.</p>
<p>pdp and guys, you can look at my article &#8220;Warning&#8221; Google hacking <a href="http://websecurity.com.ua/1278/" rel="nofollow">http://websecurity.com.ua/1278/</a> (about dorks developed by me). Where I describe a lot of &#8220;warning&#8221; search queries (dorks) which let you find Full path disclosure and Information disclosure vulnerabilities at a lot of sites.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Liquidmatrix Security Digest &#187; Facebook Source Code Takedown</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40988</link>
		<dc:creator>Liquidmatrix Security Digest &#187; Facebook Source Code Takedown</dc:creator>
		<pubDate>Thu, 16 Aug 2007 11:53:06 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40988</guid>
		<description>[...] days ago the source code for Facebook&#8217;s homepage was published on to an anonymous blog. This story spread around the internet fairly quickly. The source code has come down now thanks to Google as [...]</description>
		<content:encoded><![CDATA[<p>[...] days ago the source code for Facebook&#8217;s homepage was published on to an anonymous blog. This story spread around the internet fairly quickly. The source code has come down now thanks to Google as [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: seajay</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40544</link>
		<dc:creator>seajay</dc:creator>
		<pubDate>Tue, 14 Aug 2007 08:36:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40544</guid>
		<description>Hope hackers play it nice too :)</description>
		<content:encoded><![CDATA[<p>Hope hackers play it nice too :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40486</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Mon, 13 Aug 2007 20:28:00 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40486</guid>
		<description>seajay, I know, however it is always good to play nice, after all the source code is Facebook's property and therefore should not be redistributed.</description>
		<content:encoded><![CDATA[<p>seajay, I know, however it is always good to play nice, after all the source code is Facebook&#8217;s property and therefore should not be redistributed.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: seajay</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40484</link>
		<dc:creator>seajay</dc:creator>
		<pubDate>Mon, 13 Aug 2007 20:24:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40484</guid>
		<description>Well actually, the source code is still posted http://facebooksecrets.blogspot.com/</description>
		<content:encoded><![CDATA[<p>Well actually, the source code is still posted <a href="http://facebooksecrets.blogspot.com/" rel="nofollow">http://facebooksecrets.blogspot.com/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Liquidmatrix Security Digest &#187; Security Briefing: August 13th</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40452</link>
		<dc:creator>Liquidmatrix Security Digest &#187; Security Briefing: August 13th</dc:creator>
		<pubDate>Mon, 13 Aug 2007 12:44:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40452</guid>
		<description>[...] Facebook Homepage Source Code Probably Leaked [...]</description>
		<content:encoded><![CDATA[<p>[...] Facebook Homepage Source Code Probably Leaked [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40336</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Sun, 12 Aug 2007 21:38:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40336</guid>
		<description>&lt;div class="message"&gt;&lt;strong&gt;update:&lt;/strong&gt; seams to be real. the source code was taken down.&lt;/div&gt;</description>
		<content:encoded><![CDATA[<div class="message"><strong>update:</strong> seams to be real. the source code was taken down.</div>
]]></content:encoded>
	</item>
	<item>
		<title>By: pdp</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40334</link>
		<dc:creator>pdp</dc:creator>
		<pubDate>Sun, 12 Aug 2007 21:35:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40334</guid>
		<description>bpzp, actually I don't know. If this is the case I will be happy to take it down. However, it could as well be a joke which is interesting to be noted. This is why the title of this post is &lt;q&gt;Facebook Homepage Source Code &lt;strong&gt;Probably&lt;/strong&gt; Leaked&lt;/q&gt;.</description>
		<content:encoded><![CDATA[<p>bpzp, actually I don&#8217;t know. If this is the case I will be happy to take it down. However, it could as well be a joke which is interesting to be noted. This is why the title of this post is <q>Facebook Homepage Source Code <strong>Probably</strong> Leaked</q>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: bpzp</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40332</link>
		<dc:creator>bpzp</dc:creator>
		<pubDate>Sun, 12 Aug 2007 21:30:50 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40332</guid>
		<description>you dont think this could be considered proprietary source code you're posting?</description>
		<content:encoded><![CDATA[<p>you dont think this could be considered proprietary source code you&#8217;re posting?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: chris</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40309</link>
		<dc:creator>chris</dc:creator>
		<pubDate>Sun, 12 Aug 2007 20:11:04 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40309</guid>
		<description>Prepare for  cease and desist...</description>
		<content:encoded><![CDATA[<p>Prepare for  cease and desist&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: seajay</title>
		<link>http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked/#comment-40305</link>
		<dc:creator>seajay</dc:creator>
		<pubDate>Sun, 12 Aug 2007 20:08:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.gnucitizen.org/blog/facebook-homepage-source-code-probably-leaked#comment-40305</guid>
		<description>Hello,

Today, I read about the alleged source code leak at Facebook Secrets http://facebooksecrets.blogspot.com/ where the actual code was posted...

The code is composed of numerous API calls, I don't know if the actual code of the various PHP include files was also leaked. Couple of days ago while browsing facebook I got an error that revealed where the actual code is stored /home/... I believe this violates an important security rule "Secure failure". Unfortunately many web applications on the web still suffer from an insecure failure.

Just a thought:)</description>
		<content:encoded><![CDATA[<p>Hello,</p>
<p>Today, I read about the alleged source code leak at Facebook Secrets <a href="http://facebooksecrets.blogspot.com/" rel="nofollow">http://facebooksecrets.blogspot.com/</a> where the actual code was posted&#8230;</p>
<p>The code is composed of numerous API calls, I don&#8217;t know if the actual code of the various PHP include files was also leaked. Couple of days ago while browsing facebook I got an error that revealed where the actual code is stored /home/&#8230; I believe this violates an important security rule &#8220;Secure failure&#8221;. Unfortunately many web applications on the web still suffer from an insecure failure.</p>
<p>Just a thought:)</p>
]]></content:encoded>
	</item>
</channel>
</rss>
