【Sister in law Who Let Me Use Her Hole】

Ever suspected your friends may be Sister in law Who Let Me Use Her Holesnooping on your Facebook profile behind your back? It turns out they are, a new study shows.

New research from the University of British Columbia in Canada says 24 percent -- or more than one in five subjects -- had accessed someone else’s Facebook account without permission, and 21 percent have been victims (that knew about the unauthorized access).

The security community calls this kind of profile snooping a "social insider attack." This means the attacker knows the victim and gains access to the account by physically accessing the victim’s device, whether it's a phone, tablet, laptop or something else.

SEE ALSO: Facebook just replaced your desktop inbox with Messenger

The study surveyed 1,308 adult Facebook users in the United States. It looked at a less-talked-about phenomenon -- unauthorized access of accounts by people you know. The study explored five potential motivators: fun, curiosity, jealousy, animosity and utility.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

'Social insider attacks' may be motivated by curiosity or even jealousy.

"We initially wanted to build technical solutions to mitigate these attacks, but we soon discovered that we really did not understand them well," Ivan Beschastnikh, one of the paper's author's told Mashable. "So we decided that instead we should carry out an empirical study to understand the attacks better before attempting to prevent them."

While not much work has been done studying these kinds of attacks, they are certainly not new. You may have seen outrageous posts on your newsfeed only to have the poster later clarify that their account was “facejacked,” “fraped” or “hacked” by a friend. While such unauthorized access is often harmless, there can be much darker motives behind social insider attacks.

One common scenario is that of romantic partners, where the attack may be motivated by curiosity or even jealousy. The perpetrator usually targets private messages of the victim, and the intrusions often go undiscovered.

"One recommendation that we make is that Facebook could provide better support for monitoring passive account activity." Beschastnikh said. "A log that cannot be altered and that records passive actions [such as viewing already-read messages] as well as active actions in the account would (1) allow victims to identify these attacks, and (2) deter potential perpetrators."

Original image has been replaced. Credit: Mashable

Another possible solution, used by several apps that store sensitive information, is for the app to have its own passcode, which the user must input every time they open the app. This ensures that even if the device is left unlocked where third parties could access it, the app's data remains locked. Notably, Facebook, which recently updated its privacy tools, doesn't offer this tool.

Similarly, with fingerprint detection becoming ubiquitous on smartphones, users can set up a fingerprint-based barrier to entry on some apps. Such precautions generally don't translate to laptops, however, so there isn't a universal method to mitigate risks. Getting in the habit of locking your phone and laptop when you're not using them is still the best precaution.

The findings of the study can extend to other apps like Twitter, messaging apps and email. For those services, current security mechanisms aren't very effective against social insider attacks. While this study is relatively small in scale, anyone who has let someone borrow their smartphone or left their laptop unattended at work is aware that social insider attacks are a real risk, and app makers will need to come up with new ways of dealing with them.

---

Featured Video For You

---

Facebook stalkers confess their dark secrets

---

Topics Cybersecurity Facebook Instagram Privacy Snapchat X/Twitter

• Shopping
• Games
• Social Good
• Tech
• Entertainment
• Deals
• Life
• Digital Culture

• Best JBL deal: Save $80 on JBL Xtreme 4 portable speaker
• NYC's 'Subway Therapy' wall is transformed into a brilliant interactive holiday card
• Humanitarian travel: Photo workshops that give back
• Hackers steal $4.2 million from cryptocurrency exchange Bitrue
• NYT Connections hints and answers for April 25: Tips to solve 'Connections' #684.
• Less than 1 percent of Huawei P30 Pro parts come from the U.S.
• Humanitarian travel: Photo workshops that give back
• Koala kontent: The shining beacon of hope that kept us smiling in 2016
• Best Apple deal: Save $60 on the Apple Watch SE
• Scorching France just broke its temperature record

• Denzel Washington surprised his childhood librarian on her 99th birthday
• Polar vortex about to blast U.S. with coldest air of the season
• Paris makes public transport free for third day to tackle air pollution
• See all of New York's extravagantly designed holiday windows using Google VR
• Starbucks, late to the game, releases Pokémon Go Frappuccino
• The Wikipedia gap is the gender gap you haven't heard of
• Facebook is really, seriously working on its fake news problem, Sheryl Sandberg says
• Trump's just
• Thousands of snow geese were killed after landing in a toxic lake
• Droning teacher from 'Ferris Bueller's Day Off' will read you to sleep

• This fat bear's before and after photos are stunning
• Cheeky sunbathing seal is a literal traffic stopper and locals kind of love it
• Woman smuggles cat in her carry
• New Orleans Santa Claus inspires the best Twitter thread of the holiday season
• I'm a college professor. My advice to young people who feel hooked on tech
• Humanitarian travel: Photo workshops that give back
• Man discovers disturbing mystery object in potato chip packet
• Adam Scott roasts Mitch McConnell for using a 'Parks & Rec' GIF
• Best headphone deal: Take 22% off the Sonos Ace at Amazon
• 8 Jony Ive parodies to help you process his Apple exit

• The internet is talking like Kevin from 'The Office' now
• How to block spam calls for good in iOS 13
• FedEx sues U.S. Commerce Department over Huawei phone
• Samsung reportedly plans a second foldable phone despite Fold delay
• U.N. confirms the ocean is screwed
• Instagram head says the app does not eavesdrop to show you better ads
• Aubrey Plaza on her unexpected casting as the mom in 'Child's Play'
• Bryan Cranston and Aaron Paul tweet same photo, send 'Breaking Bad' fans into meltdown
• Dell S3422DWG Gaming Monitor deal: save $100 at Amazon
• Woman smuggles cat in her carry