Skip to main content

Another Facebook fail: Bug caused it to publicly share 14M private messages

top tech stories facebook
Image used with permission by copyright holder

Facebook finds itself in hot waters again. With the now infamous Cambridge Analytica breach still fresh in people’s minds, Facebook has now inadvertently made the private posts of some 14 million users on its network publicly visible.

So rather than being shared with a small group of family and friends, these posts — including photos and videos — were made available for everyone to see. Facebook said the issue has been corrected, and posts that were intended to be shared privately have been recategorized. However, Facebook’s latest misstep comes at a time when the company’s privacy practices have been called into question.

This latest glitch was blamed on a bug that appeared during Facebook’s testing of a new feature. Facebook was trying out a new option for people to share featured items on their feeds. Instead of relying on previous privacy settings established by the users, the glitch made postings public as a default. This bug affected posts between May 18-22, but Facebook didn’t correct the issue and recategorize these posts as private until May 22, CNET reported.

“We recently found a bug that automatically suggested posting publicly when some people were creating their Facebook posts,” Facebook Chief Privacy Officer Erin Egan said in a statement. “We have fixed this issue and starting today, we are letting everyone affected know and asking them to review any posts they made during that time. To be clear, this bug did not impact anything people had posted before – and they could still choose their audience just as they always have. We’d like to apologize for this mistake.”

If you’re affected by this error, Facebook will notify you by Thursday, June 7, with an alert in your notifications.

This latest incident could result in a deception investigation by the U.S. Federal Trade Commission, said Jonathan Mayer, a Princeton University assistant professor of computer science and public affairs.  “That’s because the company had promised that the setting users set in their most recent privacy preferences would be maintained for future posts,” ABC News explained. “In this case, this did not happen for several days.”

In addition to the Cambridge Analytica scandal that exposed the personal data of as many as 87 million users of the social network, Facebook was most recently in hot water when it was reported that the company may have shared the data of its users with device manufacturers, including Chinese companies ZTE, Huawei, and Lenovo.

Chuong Nguyen
Silicon Valley-based technology reporter and Giants baseball fan who splits his time between Northern California and Southern…
A dangerous new jailbreak for AI chatbots was just discovered
the side of a Microsoft building

Microsoft has released more details about a troubling new generative AI jailbreak technique it has discovered, called "Skeleton Key." Using this prompt injection method, malicious users can effectively bypass a chatbot's safety guardrails, the security features that keeps ChatGPT from going full Taye.

Skeleton Key is an example of a prompt injection or prompt engineering attack. It's a multi-turn strategy designed to essentially convince an AI model to ignore its ingrained safety guardrails, "[causing] the system to violate its operators’ policies, make decisions unduly influenced by a user, or execute malicious instructions," Mark Russinovich, CTO of Microsoft Azure, wrote in the announcement.

Read more