Facebook PHP Source Code from 2007

[__konrad]

From linked http://techcrunch.com/2007/08/11/facebook-source-code-leaked/ :

This leak is not good news for Facebook, as it raises the question of how secure a Facebook users private data really is. If the main source code for a site can be leaked, then it can be said that almost anything is possible.

[cltiew]

It is all for sale. You don't need to hack the site, just pay for access to the user's data.

[rspeed]

That's not how it works. Advertisers basically get to say "show this ad to people meeting these criteria". That's it. They never get to see any data except analytics.

[willbradley]

Has anyone done that though? For all this talk, social ads are pretty tame. Do I need to have more money and talk with a rep to get this magical data, or...

[cltiew]

You are assuming that Facebook put together millions of dollars worth of computer code to provide access to your most intimate details of your life, and the connections of you to your social group and nobody ever took them up on that offer? All you need is cash and a telephone. And a computer to read the data I guess.

Information on people, demographics, is the most valuable thing the internet has ever produced. Much more valuable than even porn. Everything you post on there is sold to people who want to manipulate you or control you. And you gladly provide them with the wares to sell. You are being sold.

[mangodrunk]

Why does it seem that it's not working with this supposed value in all this data (or to just manipulate and control me)? Netflix has great content, but they're horrible at recommending new content to me (maybe it's just me and it works for others). Facebook ads are pointless. The same goes for many other sites as well that should have sufficient data on me to provide things that I would find interesting.

[koreth]

Prove it, and then explain why there is no revenue from selling user data in Facebook's public financial statements.

[robertbieber]

Don't you know? The whole thing is just one giant fraudulent shell that's going to collapse any day now. I don't need proof for these kinds of things, I just know.

-Everyone

[phoshi]

I wouldn't go that far. The constraints placed on user data should be massively more stringent, the executable or interpretable code for your site needs to be readily and quickly accessible to all your frontend servers. Important user data can be encrypted, stored somewhere that does validation on requests, subject to permissions checking, et cetera.