Millions of Facebook users Personal Info Posted became public on Amazon servers

Facebook user data indicate still places up to when it should not. The researchers UpGuard, user information troves IT company found hiding in plain sight, accidentally released publicly on the Amazon cloud computing server. The discovery shows that, a year after the outstanding Cambridge Analytica scandal as uncertain and widely disseminated to users Facebook information online, companies that control that the information is not yet done with each step sufficient to seal the private data. In one case, a media company based in Mexico City Colectiva Culture are open saved 540 million discs in Facebook users, including identification numbers, comments, reactions and account name. This database was closed on Wednesday after Bloomberg Facebook aware of the problem and has contacted Facebook Amazon. Facebook share its profits ratio after Bloomberg News. Another database for a long-defunct app to pool names called lists, passwords and email addresses for 22,000 people. UpGuard I not know how long they were exposed because the database was accessed, while the company was looking into it. Facebook shared this type of information freely with third-party developers for years before the recent round of lives. The problem of accidental public storage may be greater than these two instances. Amazon UpGuard found 100,000 open hosted databases for different types of data, some of which was expected that are not public. “We still do not recognize the public that these administrators and developers of high-level systems, the people, the guardians have this data, or are at risk or lazy or cutting corners,” said Chris Vickery, head of the Cyber-Risk UpGuard search . Facebook “Not enough care of big data is set on the security page.” For many years, it allows anyone to make an app on its website information about the people to get with the app, and users friends. Once the hands of Facebook’s data, the developer can do whatever they want with it. About a year ago, Facebook CEO Mark Zuckerberg preparation for the congress one was particularly egregious testify example, a developer, the data delivered to tens of millions of people in Cambridge Analytica, a political consulting company that Donald Trump on his campaign helped presidential. That instance has about the world outside government probes and threats of further regulations for the company. Last year, Facebook launched an examination of thousands of applications and hundreds suspended until they were sure of a misuse of user data they could not do. Facebook is now offering rewards to researchers who find problems with their third-party applications. A Facebook spokesman said the company store prohibits Facebook information into a database of public policy. As soon as it was alerted to the problem by working with Facebook to defeat the Amazon database, the spokesman said, adding that Facebook is committed with developers on its platform for people of Protect Data for the job. In the Culture Colectiva record that was 146 gigabytes, it has been difficult for researchers, as many unique users of Facebook have been affected to know. UpGuard had the database also get the difficulty of closed work. The company sent e-mails to alert them to the problem in Colectiva Culture and Amazon for many months. E ‘was only brought into contact Facebook Amazon that the loss has been addressed. Colectiva Culture has applied Bloomberg does not respond for comment. This last example shows how data security issues another trend can be improved: the transition, many companies have operations primarily in their data centers, cloud computing service run by Amazon, Microsoft Corp., Google Inc. Alphabet execution, and more. These technology giants have developed multi-billion dollars business from easier for companies running applications and troves of storing data from business documents to employees information on remote servers. Programs such as Amazon Simple Storage Services Web Service, essentially an internet access to the hard drive, customers have the opportunity to choose whether to make the data visible only to the person who uploaded it, the other members of their company or all online. Sometimes this information is designed to be accessible to the public, as in the case of a cache of images or stored images for use on a company website. Other times, it’s not. stored in recent years, the information on the various cloud services – the US military data, the data of newspaper subscribers and mobile phone users – public online and was discovered accidentally shared by security experts. Amazon in the past two years has reinforced to keep customer records to expose sensitive material, adding prominent warning, production of tools for administrators to easily opt out of all public articles, and the offer for free what was an add-on controls the ‘the customer paid account for the data presented. “At first I was asked a lot of it on AWS,” said Corey Quinn, the Company informs that Amazon cloud group duckbill use a consulting firm. But Amazon has taken steps to address the problem, companies such as Culture should be aware, he said. “With all of this in the news, and keep coming all this, if you still open AWS bucket [the public], you are not careful.” Amazon is not the only one private company periodically in case of captured records in a non-published corrected. But he has set a great leadership in the business of data storage location and sales of computing power, a spotlight on business practices based in Seattle. A spokesman for Amazon Web Services declined to comment.
Picture copyright by Artur Widak-NurPhoto / Getty Images