Top all-time · #7351
Joey Tyson
Personal blog · theharmonyguy.comsecurityweb
Joey Tyson writes patterns, privacy, & pumpkin pie, a personal blog at theharmonyguy.com about security and web. Since 2007, 11 different Hacker News readers have linked it 13 times, most often “Don’t Simply Build a More Open Facebook: Build a Better One”. No feed was found, so read it on the site itself.
Too few sampled comments (5) to say how often HN recommends it.?
Why HN links it
HN readers link Joey Tyson's 2007-2010 posts on social networks, privacy and data exposure, including Google Buzz and Picasa profile leaks, OpenSocial security, and the 'social flatland' problem.
Summarised by Claude from a sample of 5 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Joey Tyson's personal website
Most-linked posts?
- Don’t Simply Build a More Open Facebook: Build a Better One2 people · 2 mentions · first linked 2010-05-10
What Hacker News says?
Standard operating procedure for Facebook. Let violations go on unless and until seriously threatened by PR damage or legal action. Deny knowledge, claim "mistakes were made", claim "We're so sorry. We will make sure it can't happen again", repeat. Data exfiltrations of roughly this kind has been going on at least since 2009. Handled according to the formula above. I just posted links to two writeups from back then:…
Comment linking /oldsite/2009/05/28/about-that-verification/
on “Zuckerberg on Cambridge Analytica situation”Submitted Recent Facebook XSS Attacks Show Increasing Sophistication as a story · 42 points
HN discussionI agree wholeheartedly. If they can build a solid platform, though, that can set the stage for a genuine breakthrough. I'd say the most important thing is to deal with the social flatland problem (which I explain here: http://interuserface.net/2010/02/buzz-facebook-and-social-fl... ), and then pretty much follow every suggestion Joey Tyson makes in this post: http://theharmonyguy.com/2010/05/10/dont-simply-build-a-m…
Comment linking /2010/05/10/dont-simply-build-a-more-open-facebook-build-a-better-one/
on “Distributed Facebook replacement Diaspora pledged 2x the funding it requested”Submitted How to Export Your Facebook Friends’ E-mail Addresses as a story · 9 points
HN discussionThis is Matt Jones, an engineer on the site integrity team at Facebook. We're the ones who address issues like this one on Facebook. Ultimately clickjacking / UI redress is a browser vulnerability - it shouldn't be possible to display one thing and have another receive user interactions. As some people have pointed out, Firefox's NoScript plugin does a pretty good job of preventing it. But that isn't to say victim w…
Comment linking /2010/03/13/facebook-adds-code-for-clickjacking-prevention/
on “Facebook Vulnerability: Like Clickjacking”Submitted Google Wave as a Tool for Malware Delivery as a story · 5 points
HN discussionLinked in the RWW article http://theharmonyguy.com/2010/02/12/using-google-buzz-can-ex... In my testing thus far, it matters little whether you’ve Picasa before – if you have a Gmail account, Picasa is also enabled on your account. And while individual Picasa albums have privacy controls, I have not found a way to block simply loading your Picasa home page.
Comment linking /2010/02/12/using-google-buzz-can-expose-your-gmail-address/
on “How a Simple Hack Can Turn Numeric Google Profile URL Back to a Gmail Address”Submitted Don’t Simply Build a More Open Facebook: Build a Better One as a story · 3 points
HN discussionMight not be a big deal. http://theharmonyguy.com/2007/11/06/ning-opensocial-implemen...
Comment linking /2007/11/06/ning-opensocial-implementation/
on “OpenSocial Hacked Again”Submitted Hacking OpenSocial - one app at a time as a story · 2 points
HN discussionSubmitted About That Verification… (2009) as a story · 1 points
HN discussionSubmitted Looking at Facebook’s Strategy and Possible New Directions as a story · 1 points
HN discussionSubmitted Facebook is Not Secretly Installing Apps from Other Websites as a story · 1 points
HN discussion
