<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Darwin Mach &#187; Online Privacy</title>
	<atom:link href="http://darwin-mach.net/blog/category/online-privacy/feed/" rel="self" type="application/rss+xml" />
	<link>http://darwin-mach.net/blog</link>
	<description>Technology and other random musings</description>
	<lastBuildDate>Sun, 22 Aug 2010 06:04:50 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Stolen Facebook Accounts</title>
		<link>http://darwin-mach.net/blog/2010/04/26/stolen-facebook-accounts/</link>
		<comments>http://darwin-mach.net/blog/2010/04/26/stolen-facebook-accounts/#comments</comments>
		<pubDate>Mon, 26 Apr 2010 15:40:38 +0000</pubDate>
		<dc:creator>Darwin Mach</dc:creator>
				<category><![CDATA[IT Security]]></category>
		<category><![CDATA[News]]></category>
		<category><![CDATA[Online Privacy]]></category>
		<category><![CDATA[account]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[hacked]]></category>
		<category><![CDATA[scam]]></category>
		<category><![CDATA[stolen]]></category>

		<guid isPermaLink="false">http://darwin-mach.net/blog/?p=61</guid>
		<description><![CDATA[You remember about all those scams I was posting about? (Then stopped posting about since I got lazy). Now there&#8217;s a new discovery: A Russian hacker who says he&#8217;s in New Zealand is selling the username &#038; passwords of Facebook accounts ranging from $35 to $65, depending on how many friends each account has. He [...]]]></description>
			<content:encoded><![CDATA[<p>You remember about all those scams I was posting about? (Then stopped posting about since I got lazy).</p>
<p>Now there&#8217;s a new discovery: A Russian hacker who says he&#8217;s in New Zealand is selling the username &#038; passwords of Facebook accounts ranging from $35 to $65, depending on how many friends each account has. He claims he has 1.5 million account credentials, 700,000 of which has already been sold.</p>
<p>Here&#8217;s the link to the article&#8217;s source: <a href="http://www.nzherald.co.nz/connect/news/article.cfm?c_id=1501833&#038;objectid=10640757">http://www.nzherald.co.nz/connect/news/article.cfm?c_id=1501833&#038;objectid=10640757</a>.</p>
<p>Again, please be very careful when you are using Facebook!</p>
<p class="facebook"><a href="http://www.facebook.com/share.php?u=http://darwin-mach.net/blog/2010/04/26/stolen-facebook-accounts/" target="_blank" title="Share on Facebook">Share on Facebook</a></p>]]></content:encoded>
			<wfw:commentRss>http://darwin-mach.net/blog/2010/04/26/stolen-facebook-accounts/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Another Facebook Scam</title>
		<link>http://darwin-mach.net/blog/2010/01/02/another-facebook-scam/</link>
		<comments>http://darwin-mach.net/blog/2010/01/02/another-facebook-scam/#comments</comments>
		<pubDate>Sat, 02 Jan 2010 17:53:12 +0000</pubDate>
		<dc:creator>Darwin Mach</dc:creator>
				<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Online Privacy]]></category>
		<category><![CDATA[javascript]]></category>
		<category><![CDATA[privacy]]></category>
		<category><![CDATA[scam]]></category>

		<guid isPermaLink="false">http://darwin-mach.net/blog/?p=27</guid>
		<description><![CDATA[Well you know about the previous Dell Facebook scam? (http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/) This one&#8217;s worse, but uses the exact same code, which does the exact same thing. The theme now is that it claims to install &#8220;Profile Spy&#8221;, to help you see who&#8217;s looking at your profile, etc, but THERE IS NO SUCH THING. There&#8217;s only a [...]]]></description>
			<content:encoded><![CDATA[<p>Well you know about the previous Dell Facebook scam? (<a href="http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/">http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/</a>) This one&#8217;s worse, but uses the exact same code, which does the exact same thing.</p>
<p>The theme now is that it claims to install &#8220;Profile Spy&#8221;, to help you see who&#8217;s looking at your profile, etc, but THERE IS NO SUCH THING. There&#8217;s only a few apps that really do this, but it requires your visitors also install the app, for the sake of their own privacy.</p>
<p>So&#8230; about 900,000 people have joined the Facebook group as of writing, and I reported it to Facebook again. We&#8217;ll see how long it takes them.</p>
<p>Here&#8217;s the link to the most recent scam &#8211; http://www.facebook.com/group.php?gid=209645259791 (you have to click on the &#8220;read more&#8221; link).</p>
<p>There was also another previous one before this one, but after the Dell one, involving &#8220;Crimson Labs&#8221; and a giveaway of iMacs.</p>
<p>Please! READ EVERYTHING CAREFULLY BEFORE YOU SAY YES. If anything looks suspicious or doesn&#8217;t make sense, well&#8230; <img src='http://darwin-mach.net/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p class="facebook"><a href="http://www.facebook.com/share.php?u=http://darwin-mach.net/blog/2010/01/02/another-facebook-scam/" target="_blank" title="Share on Facebook">Share on Facebook</a></p>]]></content:encoded>
			<wfw:commentRss>http://darwin-mach.net/blog/2010/01/02/another-facebook-scam/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Dell &#8220;Promotion&#8221; Facebook Scam</title>
		<link>http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/</link>
		<comments>http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/#comments</comments>
		<pubDate>Thu, 10 Dec 2009 16:25:30 +0000</pubDate>
		<dc:creator>Darwin Mach</dc:creator>
				<category><![CDATA[IT Security]]></category>
		<category><![CDATA[Online Privacy]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[scams]]></category>
		<category><![CDATA[social-networking]]></category>

		<guid isPermaLink="false">http://darwin-mach.net/blog/?p=6</guid>
		<description><![CDATA[Hi all, I just wanted to alert you on a new scam that is going around on Facebook. It comes in the form of an invite to a group called &#8220;Dell Laptop Giveaway (1 in 2 people win one Laptop)&#8221; at http://www.facebook.com/group.php?gid=355563360211 BEWARE! The instructions stated actually collects your entire friends list and spams them [...]]]></description>
			<content:encoded><![CDATA[<p>Hi all,</p>
<p>I just wanted to alert you on a new scam that is going around on Facebook. It comes in the form of an invite to a group called &#8220;Dell Laptop Giveaway (1 in 2 people win one Laptop)&#8221; at http://www.facebook.com/group.php?gid=355563360211</p>
<p>BEWARE! The instructions stated actually collects your entire friends list and spams them with this invite and in no way enters you into any sweepstakes. This is another classic example of a deal too good to be true. As of writing this post, about 47000 people have joined the group and likely fell for this trick.</p>
<p>Resolution: IGNORE the invite and help spread the word about it. Do NOT do what the instructions tell you to do.</p>
<p>EDIT (11:53 EST): Looks like Facebook took down that rather quickly after I reported it. But still a lesson to be learned about carefully reading what you see.</p>
<p><span id="more-6"></span>&#8212;</p>
<p>In depth explanation&#8230;</p>
<p>The stated instructions are as follows:</p>
<blockquote><p>Hello! This is a promotional offer from Dell (www.dell.com). In order to promote our activity on Facebook we have decided to give away 1 free Laptop (value of 450 dollars). For every one person (out of two people) who promotes this group will win 1 of 3 Dell Inspiron models. In order to be eligible you will have to complete the following:</p>
<p>1. Click &#8216;Invite People to Join&#8217;<br />
2. Paste<br />
javascript:elms=document.getElementById(&#8216;friends&#8217;).getElementsByTagName(&#8216;li&#8217;);for(var fid in elms){if(typeof elms[fid] === &#8216;object&#8217;){fs.click(elms[fid]);}}</p>
<p>Into your URL bar and press enter!<br />
3. Send invites!</p>
<p>Your insertion into the competition is automatic as you complete the steps above. Both winners and losers are contacted via private message if they win a free laptop.</p></blockquote>
<p>Let&#8217;s take a look step by step.</p>
<p>1.) Opens the invite window with a full list of all your Facebook friends.</p>
<p>2.) Runs a JavaScript code to obtain a list of all your friends</p>
<p>3.) Tells you to send this scam out.</p>
<p>I have not determined which browsers &amp; versions are affected by this exploit &#8211; just don&#8217;t do it, use your common sense.</p>
<p>If you have the urge to take an extra step to help silence this scam, please report it to Facebook <img src='http://darwin-mach.net/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
<p class="facebook"><a href="http://www.facebook.com/share.php?u=http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/" target="_blank" title="Share on Facebook">Share on Facebook</a></p>]]></content:encoded>
			<wfw:commentRss>http://darwin-mach.net/blog/2009/12/10/dell-promotion-facebook-scam/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>
