Search⌘ K
AI Features
Home
Courses
Grokking the Product Architecture Interview

Facebook and Uber APIs Failure

Learn about the security vulnerabilities that led to major API failures at Facebook and Uber in 2018, including excessive data exposure and weak authentication. Understand how these issues were exploited by hackers, and explore effective mitigation strategies like endpoint security, data filtration, and collaboration with cybersecurity researchers to prevent future breaches.

We'll cover the following...

APIs can become vulnerable, allowing hackers to take over the control of the system. This can be a root cause of API failure. The big tech companies have always been the target of hackers trying to access the data of millions of users. This lesson discusses events that occurred in recent years with Facebook and Uber because both companies had similar security vulnerabilities.

Facebook API failure

In 2018, Facebook discovered a massive data breach of 50 millionSee: https://about.fb.com/news/2018/09/security-update/ (the claim was later modified to about 87 million) accounts. The hackers used the video upload functionality created in 2017 by Facebook for the data breach. A feature called "View as" in users' profiles lets users see how their profile looks to other users. It also lets users customize it to see their profile through a specific user’s perspective through "View as."

How did it happen?

A vulnerability in Facebook's code impacted the "View as" feature by generating access ...