Facebook Launches ThreatExchange To Let Companies Share Threat Info

An anonymous reader writes Facebook today launched ThreatExchange, described as "an API-based clearinghouse for security threat information." It's really a social platform, which Facebook naturally excels at building, which allows companies to share with each other details about malware and phishing attacks. Pinterest, Tumblr, Twitter, and Yahoo participated in ThreatExchange and gave feedback as Facebook was developing it. New contributors Bitly and Dropbox have also recently joined, bringing the initial participant list to seven major tech companies.

Re:

[grcumb]

Try to get the dicks out of your mouth before you post.

It's the fact that you used the plural that makes this true comedy.

Nice

[Anonymous Coward]

great place to find some cool exploits... :)

Does it allow

[invictusvoyd]

selfies ? ( :grin: )

Screw the commoners. Share amongst ourselves.

[trippin_efnet]

I find this path troubling. I could see this becoming a thing where only mega corporations benefit from this sharing, while leaving small companies, small projects, and the lowly common folk. These kinds of things should be discussed in the open. If someone knows of an exploit, it is irresponsible to not share this info so we can all band together and fix our fucking systems. It shouldn't only be the elite few in the circles of trust who get to fix their systems first.

Re:

[Richard_at_work]

Then make your own project and include everyone. This is Facebook using Facebooks money to do something that benefits Facebook. You aren't entitled to benefit from that.

Re:

[trippin_efnet]

As I'm sure you're well aware, we have/had many open lists where vulnerabilities are/were shared openly, so I don't really need to personally create one. This is not about anyone feeling entitled. This is about the fact that these systems are more important than just their servers. A lot of the software and hardware used to power their systems are also powering banks, many governmental systems, hospital networks, and on and on and on. To take the approach that we'll patch a few and leave the rest open is te

Re:

[circletimessquare]

when a corporation or group of corporations inhabits a large enough of a market, society and government does in fact have a right to intervene and alter or reduce their power and make demands on them

many people have this mental block where government demands or social demands on private corporations and individuals is the root of all evil

when simple economic and historical fact shows that when private entities dominate public spaces, they abuse the privilege

Re:

[Richard_at_work]

And what does any of that have to do with this? Nothing.

Re:

[circletimessquare]

because facebook doesn't dominate the market where this topic is important, of course /s

Re:

[quantaman]

I think this is less the case of "we found a bug in package X" and more like "we've been getting a lot of attacks from phishing group Y, we've been doing Z to stop them".

That's not the kind of info you can disclose publicly since it tells attackers where you're vulnerable, if you're going to do this kind of thing you're going to have to make it a small circle.

Threat identified

[Blaskowicz]

I'm adding fb.com to my list of blocked hosts. Thanks, f***book.

Site for disclosing threats...

[Anonymous Coward]

...and it's made using WordPress.

Awesome site!

[l0n3s0m3phr34k]

So, you can go sign up, but there's nothing in my inbox from them. I even used my @hp.com email, nada.

Re:

[tepples]

The alphabet agencies are now busy reading your mail right now.

As opposed to what, the Kanji agencies?

Re:

[l0n3s0m3phr34k]

Dear God I feel sorry for them. It's my work email, so it's just full of incident reports, Inspiration Emails from Meg Whitman and fellow execs, all the CRAP the former employee who had my email eddy signed up for (some HR drone, a dozen HR stuff about new government regs and crap per week), and...that's it. I'd love for my email to be added into the "haystack" they sift through - maybe it would help obfuscate some other data haha

Yeah...

[thephydes]

and I'd trust Facebook? well no ....

Re:

[Anonymous Coward]

Was going to say... this seems like a ploy. Wow, the people who forcibly link your personal life to sell to marketers are going to start a privacy, confidentiality, and integrity focused website? Fat chance.