우크라이나의 한 보안 연구자가 페이스북 사용자들의 보안되지 않은 정보 발견 | 영자 신문 읽기(2019.12.29)

Researcher Finds Unsecured Information on Millions of Facebook Users

​

​

기사를 천천히 읽어보세요.

​

A Ukrainian security researcher has reported finding a database with the information of more than 267 million Facebook users on the open internet, the Associated Press reports.

 

The data includes names, phone numbers and other identifying information. Nearly all of the users were based in the United States.

 

Bob Diachenko is an independent security researcher in Kyiv. He told the Associated Press, or AP, that criminals likely collected this data.

 

Diachenko said he discovered the database using a search engine. The database was freely accessible on the internet for at least 10 days beginning on December 4. He informed the internet provider which hosted the database on December 14 when he found it. Five days later it was no longer available.

 

Diachenko said someone downloaded the database to a special group website two days before he discovered it. Hackers, or people who secretly get access to computer systems in order to get information or cause damage, use that website. So the database may have been shared among criminals.

 

Paul Bischoff runs the British technology news website Comparitech. It partnered with Diachenko to report his findings earlier this month. Bischoff has been writing about Diachenko’s discoveries of unsecured databases for about a year.

 

The researcher provided the AP with 10 examples from the database. This included unique user identifications, or IDs, and two phone numbers that were answered, all of which were linked to real Facebook users.

 

The evidence suggests it was most likely criminals in Vietnam who illegally collected the data. They may have “scraped” it from public Facebook pages or by somehow getting special, high-level access to the service. Scraping is automated data-gathering done by computer programs. A small part of the database includes details on Vietnam-based users.

 

Diachenko said he did not share the database with Facebook, which did not directly confirm the finding. In a statement, representatives for the social media company said it was investigating the issue. They wrote that the finding “likely” involved information gathered before Facebook took some data-protection measures in recent years. The company did not say what those measures were.

 

In 2018, the company stopped permitting users to search for one another using their phone numbers. It did so after news spread that the political agency Cambridge Analytica had accessed information on up to 87 million Facebook users without their knowledge or permission.

 

Diachenko said he had not confirmed when the data was collected. He said all the records appeared to be from January to June of 2019. He added that it was unclear who created them.

 

Security experts say the affected Facebook users are at higher risk of facing password-stealing attacks and identity stealing attempts. The information can be matched with physical and email addresses and other data collected illegally. Facebook user IDs are unique numbers linked with individual accounts.

 

In September, the news site TechCrunch reported that a researcher found Facebook IDs and phone numbers for more than 400 million users online.

 

In March, Facebook admitted that it had left hundreds of millions of user passwords readable by its employees for years after a security researcher reported on it.

 

Researcher Finds Unsecured Information on Millions of Facebook Users

"페이스북 2억 6000만명 이용자 전화번호 등 개인정보 유출"

기사에 나오는 단어들입니다.

​

scraped 긁어모으다

accessible – adj. able to be used or obtained (장소 등이) 접근 가능한, 이용 가능한 (정보 등이) 손에 넣을[입수할] 수 있는, 얻기 쉬운

host(ed) – v. store a website or other data on a server or other computer so that it can be accessed over the Internet (웹사이트를) 관리하다[운영하다].

download(ed) – v. to move or copy a file or program from a usually larger computer system to another computer or device (데이터를) 다운로드하다[내려받다]

unique – adj. used to say that something or someone is unlike anything or anyone else

유일한, 하나밖에 없는, 또 없는, 둘도 없는, 독특한, 독자적, 진기한

automated – adj. made to run or operate by using machines and computers instead of people to do the work 자동화된, 자동의

password – n. a secret series of numbers or letters that allows you to use a computer system 암호, 비밀번호

address(es) – n. the words and numbers that are used to describe the location of a building, or the letters, numbers, and symbols that are used to direct an e-mail message or to show the location of a site on the Internet 수신인의 주소(본문에서는 이메일 주소를 말함)

account(s) – n. an arrangement in which a person uses the Internet or e-mail services of a particular company (정보 서비스) 이용 계정

​

기사 내용을 다시 한번 들어보세요.

 

 

관련 기사 영상