Feeds

New Facebook developer regs not rogue-proof

Verify this

Internet Security Threat Report 2014

Facebook app developers will need to verify their account with the social network before they are allowed to create applications under a new scheme, but experts are nonplussed by the proposals.

The scheme relies on authentication via either confirming ownership of a particular mobile phone number or submitting credit card details, which will only be used for verification purposes and not charged.

"We're taking this step to preserve the integrity of Facebook Platform, ensuring that every application is associated with a valid and real Facebook account," a member of the Facebook Platform team explained in a blog entry introducing the changes on Wednesday.

Rogue applications on Facebook are a commonplace problem that has grown more prevalent over recent months. Rik Ferguson, a senior security consultant at Trend Micro, said Facebook's attempts to clamp down on the problem are welcome, but unlikely to be effective.

"The measures are not good enough," Ferguson explained. "If you are trying to stop criminals creating rogue applications them you have to assume they have access to counterfeit credit card details. They're also likely to have access to disposable mobile phone numbers."

"Facebook need to inspect code uploaded onto its site rather than trying to verify developer accounts." ®

Security for virtualized datacentres

More from The Register

next story
Microsoft WINDOWS 10: Seven ATE Nine. Or Eight did really
Windows NEIN skipped, tech preview due out on Wednesday
Business is back, baby! Hasta la VISTA, Win 8... Oh, yeah, Windows 9
Forget touchscreen millennials, Microsoft goes for mouse crowd
Apple: SO sorry for the iOS 8.0.1 UPDATE BUNGLE HORROR
Apple kills 'upgrade'. Hey, Microsoft. You sure you want to be like these guys?
ARM gives Internet of Things a piece of its mind – the Cortex-M7
32-bit core packs some DSP for VIP IoT CPU LOL
Microsoft on the Threshold of a new name for Windows next week
Rebranded OS reportedly set to be flung open by Redmond
Lotus Notes inventor Ozzie invents app to talk to people on your phone
Imagine that. Startup floats with voice collab app for Win iPhone
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.