{"id":151494,"date":"2018-06-04T12:40:43","date_gmt":"2018-06-04T12:40:43","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/es\/?p=151494"},"modified":"2025-06-13T00:41:08","modified_gmt":"2025-06-12T22:41:08","slug":"chrome-firefox-error-facebook-destapar-soc","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/es\/chrome-firefox-error-facebook-destapar-soc\/","title":{"rendered":"Se descubre un error de Chrome y Firefox que permit\u00eda a un atacante robar datos privados de tu Facebook"},"content":{"rendered":"<p>Hasta hace poco, Chrome y Firefox ten\u00edan un bug que permit\u00eda a malhechores descubrir tu nombre de Facebook, <strong>tu foto de perfil<\/strong> y tus Me Gusta. En otras palabras: pod\u00edan espiarte.<\/p>\n<p>El bug en cuesti\u00f3n fue descubierto por u<strong>n investigador de seguridad de Google<\/strong>, Ruslan Habalov, junto con su compa\u00f1ero Dario Wei\u00dfer.<\/p>\n<p>A grandes rasgos, un atacante pod\u00eda crear una web que<strong> explotara este error.<\/strong> Si un usuario de Facebook entraba a esa p\u00e1gina entrada loggueado a la red social, se revelar\u00edan sus datos mencionados.<\/p>\n<p>He aqu\u00ed un ejemplo de lo que ver\u00eda el atacante:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-151495\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/2\/2018\/06\/ruslanhabalovcssbug.jpg\" alt=\"\" width=\"770\" height=\"415\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/06\/ruslanhabalovcssbug.jpg 770w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/06\/ruslanhabalovcssbug-300x162.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/2\/2018\/06\/ruslanhabalovcssbug-768x415.jpg 768w\" sizes=\"auto, (max-width: 770px) 100vw, 770px\" \/><\/p>\n<p>Nos encontramos en un caso excepcional en el que ni la culpa ni la responsabilidad son de Facebook. Aunque los investigadores ya avisaron a la red social, esta no puede hacer nada al respecto pues <strong>todo depend\u00eda de los navegadores.<\/strong><\/p>\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" src=\"https:\/\/images.sftcdn.net\/images\/t_optimized,f_auto\/p\/3238ea9c-96d0-11e6-8b5c-00163ed833e7\/3854688973\/windows-10-logo.png\" alt=\"Windows 10\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Windows 10<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/windows-10.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Descarga<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--80\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"80\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"8\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\">8<\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\">La \u00faltima versi\u00f3n del sistema operativo de Microsoft.<\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/windows-10.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>La buena noticia es que este bug ya no existe en ninguno de los dos navegadores. En el caso de Chrome,<strong> el error desapareci\u00f3 con la versi\u00f3n 63<\/strong> y en el caso de Firefox con la versi\u00f3n 60.<\/p>\n<p><strong>La vulnerabilidad llevaba activa desde 2016<\/strong> y se desconoce si alg\u00fan malhechor la puso en pr\u00e1ctica. Adem\u00e1s, y ya poni\u00e9ndome en plan agorero, a saber la cantidad de bugs de este estilo que existen sin que sospechemos de ellos.<\/p>\n<p>Fuentes: <a href=\"https:\/\/omicrono.elespanol.com\/2018\/06\/exploit-chrome-firefox-facebook-nombre\/\" target=\"_blank\" rel=\"noopener noreferrer\">Omicrono<\/a>, <a href=\"https:\/\/www.zdnet.com\/article\/chrome-firefox-css3-flaw-may-have-let-attackers-grab-facebook-user-data\/\" target=\"_blank\" rel=\"noopener noreferrer\">ZDnet<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hasta hace poco, Chrome y Firefox ten\u00edan un bug que permit\u00eda a malhechores descubrir tu nombre de Facebook, tu foto de perfil y tus Me Gusta. En otras palabras: pod\u00edan espiarte. El bug en cuesti\u00f3n fue descubierto por un investigador de seguridad de Google, Ruslan Habalov, junto con su compa\u00f1ero Dario Wei\u00dfer. A grandes rasgos, &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/es\/chrome-firefox-error-facebook-destapar-soc\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Se descubre un error de Chrome y Firefox que permit\u00eda a un atacante robar datos privados de tu Facebook&#8221;<\/span><\/a><\/p>\n","protected":false},"author":2057,"featured_media":149648,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[9317],"tags":[9686,9366,9360,9352,9328],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-151494","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectionfacebook","tag-facebook","tag-firefox","tag-google-chrome","tag-redes-sociales"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/151494","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/users\/2057"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/comments?post=151494"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/151494\/revisions"}],"predecessor-version":[{"id":371875,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/posts\/151494\/revisions\/371875"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media\/149648"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/media?parent=151494"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/categories?post=151494"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/tags?post=151494"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/usertag?post=151494"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/vertical?post=151494"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/es\/wp-json\/wp\/v2\/content-category?post=151494"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}