Facebook admits harvesting contacts of the 1.5m email passwords it asked for

I think what a lot of non-programmers don’t understand is how easy it is to inadvertently write a script that will fetch username and password combos from a database, connect to a webmail host, submit the credentials, access the user’s contact list, and upload the data it contains to another database, and then to inadvertently deploy and run that script. I mean, the keys are, like, right next to each other. It happens literally all the time.

30 Likes