Feeds

Facebook system messages subverted by French pranksters

Schoolboy schooled me in schoolboy French...

New hybrid storage solutions

Facebook's attempts to crowd-source translations of system messages have been abused by French pranksters.

The French language equivalent of Report/Block this person (Signaler/bloquer cette personne) offers a strange option for reasons why a surfer might want to have nothing to do with another Facebook member.

alt text

Zéroosiix The Younger already has a fan page (click to enlarge).

Instead of choices such as Fake profile or Inappropriate wall post the French site offers the option (in ungrammatical French) "En discution instantané, Le petit frère de Dylan Zéroosiix m’a insulter" (which translates as "the little brother of Dylan Zéroosiix insulted me in instant messenger").

Facebook sources translation of non-English pages from surfers, allowing a facility for these to be changed as grammar and spelling mistakes are detected. Users vote on these changes. Normally the process works smoothly but in this case pranksters have subverted the process for their own amusement, with regular surfers supporting the wheeze by voting in bogus changes.

No hack took places and the odd option (screenshots and additional commentary in a blog post by Sophos here) is thought to be harmless.

It's not the first time that crowd-sourced translations on Facebook have returned odd results. Much the same thing happened last year with Spanish and Turkish language versions of the social networking website.

Sophos security consultant Chet Wisniewski said that openness is all well and good but that changes to Facebook's site should involve some form of moderation. "It is scary that Facebook believes in openness so much that they will let the users control their website without any human oversight from Facebook," Wisnieski writes. "Hopefully this isn't a real vulnerability in their site that could allow someone to enter in arbitrary JavaScript or HTML code that could be malicious." ®

Secure remote control for conventional and virtual desktops

More from The Register

next story
Leak of '5 MEELLLION Gmail passwords' creates security flap
You should be OK if you're not using ANCIENT password
Google recommends pronounceable passwords
Super Chrome goes into battle with Mr Mxyzptlk
Reddit wipes clean leaked celeb nudie pics, tells users to zip it
Now we've had all THAT TRAFFIC, we 'deplore' this theft
Enigmail PGP plugin forgets to encrypt mail sent as blind copies
User now 'waiting for the bad guys come and get me with their water-boards'
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
prev story

Whitepapers

Secure remote control for conventional and virtual desktops
Balancing user privacy and privileged access, in accordance with compliance frameworks and legislation. Evaluating any potential remote control choice.
Intelligent flash storage arrays
Tegile Intelligent Storage Arrays with IntelliFlash helps IT boost storage utilization and effciency while delivering unmatched storage savings and performance.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.