【Sisters Slave (2019)】

It's a Friday,Sisters Slave (2019) people, which means there's more bad news from Facebook.

Facebook disclosed a data breach on Friday that affected 6.8 million users. The trouble once again came from the connectivity of third party apps. Facebook says it is "sorry this happened."

SEE ALSO: Facebook fined £500K for 'serious breaches' of data protection law

From September 13-25 of this year, developers had access to Facebook users' photos that they never had permission to see. Typically, apps should only be able to access photos in users' timelines. But while the bug was active, apps had access to photos in people's stories and photos they'd uploaded to Marketplace.

Perhaps most troubling, apps could also access photos that users may have uploaded to Facebook, but chose to never post. This means that Facebook actually stores photos that you uploaded and then thought, "hmm, better not," for an unspecified amount of time. Here's how Facebook explains it:

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

The bug also impacted photos that people uploaded to Facebook but chose not to post. For example, if someone uploads a photo to Facebook but doesn't finish posting it - maybe because they've lost reception or walked into a meeting - we store a copy of that photo so the person has it when they come back to the app to complete their post.

This photo breach may seem like small potatoes in comparison to the 50 million person attack in September in which hackers exploited a vulnerability to steal the personal information of 29 million people. Giving access to photos you never meant to share is troubling, but perhaps not as damning as getting your contact information and a host of other information pinched by potential identity thieves.

The timing is what's tricky here. Facebook disclosed the 50-million user data breach on September 25 — the same day it became aware of the photo bug. Under the GDPR, Facebook has 72 hours to notify users of data compromises. So why did Facebook wait nearly three months to tell us about this joyous invasion of our privacy?

Facebook plans to notify affected users with an "alert." That will send them to the Help Center where they can see which apps may have had access to their "other photos." There is no information about revoking access — once the unshared photo cat is out of the bag, it's apparently out.

Here's a mock up of the alert:

Original image has been replaced. Credit: Mashable

Mashable has reached out to Facebook to learn more about the timing of the incident, and whether there is any connection between the photo bug and the personal information breach. We're also asking about how long Facebook stores the photos you've chosen not to share, and whether there's a way to access and delete them. We'll update this story when and if we hear more.

---

Featured Video For You

---

Facebook's data breach and what it means for you — Technically Speaking

---

Topics Cybersecurity Facebook Social Media

• Tech
• Life
• Social Good
• Shopping
• Science
• Deals
• Games
• Digital Culture

• Best robot vacuum deal: Save $200 on Eufy X10 Pro Omni robot vacuum
• The Charming, Ridiculous Romance Comics of Ogden Whitney by Liana Finck
• The Brief Idyll of Late
• The Interior Decorators of Bloomsbury by Emma Garman
• Google Pixel Buds Pro 2: $40 off at Amazon
• The American Rodeo by Barrett Swanson
• Free Sony 4K TVs at Best Buy: how to claim yours
• John Ashbery’s Reading Voice by Marit MacArthur
• Best portable power station deal: Save $179.01 on the EcoFlow River 2 Max
• The Interior Decorators of Bloomsbury by Emma Garman

• Ken Price’s Candy
• Small Talk Is America’s Greatest, Strangest Art Form
• Nathaniel Mackey & Cathy Park Hong with NYC High
• Is This the Ugliest Color in the World?
• Staff Picks: Eliot Weinberger, Max Porter, Andrzej Zulawski
• George Plimpton Plays Ball
• Daniel Spoerri’s Flea
• An Interview with Jana Prikryl
• We’re Both Dippy Over Him, and Other News by Dan Piepenbring
• Luc Sante on the Appeal of Junk Shops

• Dyson V8 Plus cordless vacuum: $120 off at Amazon
• Eye of the Beholder by Alice  Mattison
• Does Poetry Have Street Cred? by Major Jackson
• A Polyphonic Novel of Midcentury San Francisco by Jessica Hagedorn
• The Sound and the “Furious”
• On Line: The Pulse of Agnes Martin by John Vincler
• The Opera Backstage by Cody Delistraty
• In Russia, the Ultimate Scary Story is about Losing Your Coat by Jennifer Wilson
• Put Me In, Coach!
• The Enigma of Prince: An Interview with Dan Piepenbring by Cornelia Channing

• 'The Last of Us' Season 2, episode 5: The spores are here!
• Nick Tosches in a Trench Coat by Brian Cullman
• The Radical Portraits of Amy Sherald by The Paris Review
• The Jets, the Bills, and the Art of Losing by Rowan Ricardo Phillips
• The best day to book your flight, according to Google
• Eye of the Beholder by Alice  Mattison
• Staff Picks: Metaphors, Messengers, and Melancholy by The Paris Review
• The Perseverance of Eve Babitz’s Vision by Molly Lambert
• Your 'wrong person' texts may be linked to Myanmar warlord
• Voyage around My Cell by Ahmet Altan