7 comments

[ 3.7 ms ] story [ 31.0 ms ] thread
That headline is as clickbaity as it gets.
So annoying. Click baits are literally ruining the browsing experience.
First paragraph: "Ok, ok. I didn't quite 'hack Facebook'. What I did was execute OS level commands on one of Facebook's acquisition's servers."

Seriously?!

Suddenly, Facebook gets nmapped 5k times/second from all around the world...
As if that is not already happening constantly...
Not exactly the world's most exciting or difficult hack. But that makes it kind of interesting in a way - how many companies out there are still pretty lousy at the basics, like not having externally-accessible services with no authentication?

Maybe it would be a good idea to set up automated periodic external scans of your network to check for any unexpected accessible services. Don't know if anybody's doing that already, though.