Salucci Simone Tesi

7/25/2019 Salucci Simone Tesi

1/58

ALMA MATER STUDIORUM - UNIVERSIT DI BOLOGNA

SCUOLA DI SCIENZE

CORSO DI LAUREA IN INFORMATICA

PRIVACY SU FACEBOOK

TESI DI LAUREA INARCHITETTURA DEGLI ELABORATORI

Relatore: presetata !a:"ro#$ V%ttor%o G&%% S%'oe Sal())%

Sess%oe IIIAnno Accademico 2011/2012

*


2/58

+


3/58

Indice

* Itro!(,%oe

+ S)ear%o .

+$* Iteret al /%oro !0o//% $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .

+$+ I so)%al et1or2 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 3

+$4 I r%s)&% !e% so)%al et1or2 $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ *5

4 L0atta))o *6

4$* L0al/or%t'o e le #as% !ell0atta))o $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ *6

O7%ett%8% 4*

9 Val(ta,%o% 44

9$* La )o'pless%t !elle pass1or! $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 44

9$+ Le (o8e A"I e %l pro7le'a !ell0e'a%l $ $ $ $ $ $ $ $ $ $ $ $ 4.

9$4 Il ;so)%al p&%s&%/< $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .

9$4$* ;"&%s&%/< e ;spear p&%s&%/< $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ .

9$4$+ Il so)%al p&%s&%/ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 95

9$4$4 Il (o8o al/or%t'o !% atta))o $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 9*

= Co)l(s%o% 99

=$* S8%l(pp% #(t(r% $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ $ 9=

B%7l%o/ra#%a 9.

4


4/58

Capitolo 1

Introd!ione

Da >(al)&e ao? or'a%? % so)%al et1or2 &ao #atto %rr(,%oe s( %teret

!%8eta!o )ol te'po se'pre p%@ (t%l%,,at% e solle8a!o !% )ose/(e,a !(77%

se'pre 'a//%or% s(lla s%)(re,,a !ella pr%8a)$

T(tt% % so)%al et1or2 s% presetao )o'e p%atta#or'e % )(% /l% (tet% possoo

%tera/%re )o a'%)%? paret% o s)oos)%(t% )o )(% s% )o!%8%!oo /l% stess%

%teress%? s8%l(ppa!o )os rela,%o% persoal% e? % al)(% )as%? pro#ess%oal%$

(esto rap%!o e! espoe,%ale s8%l(ppo &a att%rato l0atte,%oe? o solo !e/l%

(tet%? 'a a)&e !% 'al%te,%oat%$

Or'a% la 'a//%or parte !e/l% (tet% !ella rete rep(ta % so)%al et1or2 (o

str('eto (t%le e %!%spesa7%le per str%/ere e 'ateere le/a'% ella 8%ta !%

t(tt% % /%or%? 'a %l pre,,o !a pa/are potre77e r%8elars% p%(ttosto )aro$

Nel +5*5 A!rea V%tal%? ella s(a tes% !al t%tolo ;L0** sette'7re tele'at%)o


5/58

s)ear%o !% parte,a per po% !etta/l%are? el )ap%tolo s())ess%8o? %l

#(,%oa'eto !ell0al/or%t'o !% atta))o !a espl%)%tare? el )ap%tolo >(arto? /l%o7%ett%8% !% >(esto ela7orato$

Nel >(%to )ap%tolo parte!o !a (0aal%s% s(lla s%)(re,,a !elle pass1or!

relat%8a'ete alle a7%t(!%% !e/l% (tet% stess%? s% passer po% a (a 8al(ta,%oe

!e% pro7le'% )&e le (o8e pol%t%)&e !% pr%8a) e s%)(re,,a !% Fa)e7oo2

potre77ero )reare all0(t%l%,,o !ell0al/or%t'o !% atta))o per po% tro8are !e%

'eto!% per att(al%,,arlo e! (a te)%)a per '%/l%orare le presta,%o%$

9


6/58

=


7/58

Capitolo 2

Scenario

2"1 Internet al #iorno d$o##i

L0(t%l%,,o !% %teret e la s(a peetra,%oe all0%tero !ella popola,%oe )res)e

!% ao % ao: +3?6 s( =9+?* '%l%o% !% persoe % E(ropa soo ol%e$

Se)o!o % !at% !% (a r%)er)a !el +5*+? ese/(%ta !a Me!%as)ope E(rope=? la

'e!%a e(ropea !% te'po tras)orso ol%e !% *?3 ore la sett%'aa? te!e,a

)&e &a re/%strato (a )res)%ta !el *5 r%spetto al +5*5 e >(esto !ato

!est%ato a )res)ere$

O//% /ra,%e alla !%##(s%oe se'pre 'a//%ore !% ta7let e! % part%)olare !e/l%

s'artp&oe? %teret se'pre p%@ a portata !% 'ao tato )&e s% )ota )&e %l

('ero !% !%spos%t%8% )oess% a! %teret a77%a s(perato %l ('ero !elle

persoe$

La peetra,%oe !% %teret all0%tero !ella popola,%oe e(ropea &a ra//%(to

%l =9? *6 % p%@ r%spetto al +5*5$

Att%8%t )o'e /(ar!are la tele8%s%oe? as)oltare la ra!%o? le//ere le ot%,%e o %

/%oral% 8e/oo s8olte se'pre p%@ ol%e: %l .4 !e/l% (tet% !% %teret/(ar!a la t8 ol%e? %l =. as)olta la ra!%o ol%e? %l 6* le//e le ot%,%e s(l

1e7$

Solo % E(ropa %l 4. !e/l% (tet% a))e!oo a! %teret (t%l%,,a!o p%@ !% (

!e8%)eJ ella 'a//%or parte !e% )as% s% tratta !% p) e s'artp&oe? 'a !a >(al)&e

ao a)&e le )osole !% %tratte%'eto )o'e "lastat%o e K7o &ao

.


8/58

a))esso a! %teret )os )o'e % tele8%sor% !% (lt%'a /eera,%oe$

Appare >(%!% e8%!ete )&e )o %l passare !el te'po %l ('ero !% !%spos%t%8%)olle/at% !est%ato a )res)ereJ se !a ( lato >(esta se'pre 'a//%ore

)oett%8%t porta 8ata//% e )o'o!%t? !all0altro 8% ( a('eto !e% per%)ol%

per la s%)(re,,a !% >(est% !%spos%t%8% e per la r%ser8ate,,a !e% !at% ses%7%l%$

2"2 I %ocial net&or'

Da >(al)&e ao % so)%al et1or2 soo se'pre p%@ popolar%? se e parla

o8(>(e? !alle tele8%s%o% a% /%oral%? %#l(e,a!o se'pre !% p%@ la 8%ta !%

t(tt%J Fa)e7oo2? %l p%@ (t%l%,,ato tra % so)%al et1or2? !a solo &a s(perato %l

'%l%ar!o !% (tet%? tato )&e se #osse (a a,%oe sare77e la ter,a p%@ /ra!e

!el 'o!o? par% a !(e 8olte la popola,%oe !e/l% Stat% U%t%$

3

Figura 2.2.1: Grafico traffico Facebook vs Google


9/58

Nel 'ar,o !el +5*5? )o'e 'ette % e8%!e,a %l /ra#%)o? Fa)e7oo2 &a s(perato

Goo/le a l%8ello !% tra##%)o !%8eta!o )os %l s%to p%@ 8%s%tato !e/l% Stat% U%t%J%oltre %l te'po tras)orso % 'e!%a s(% so)%al et1or2? % part%)olare s(

Fa)e7oo2? &a s(perato %l te'po tras)orso s( >(als%as% altro s%to? Goo/le

)o'preso$

Gl% a'er%)a% passao % 'e!%a .?9 ore al 'ese s(% so)%al et1or2? >(est%

or'a% %#l(e,ao se'pre p%@ le att%8%t !% t(tt% % /%or%? %#att% 'etre

/(ar!%a'o (a ser%e tele8%s%8a 8e%a'o %8%tat% a )o''etarla s(% so)%al

et1or2? % part%)olare s( t1%tter )o ( &as&ta/ spe)%#%)o$

Nell0(lt%'o ao a)&e %l "apa &a att%8ato ( a))o(t s( T1%tter e elle (lt%'e

ele,%o% pol%t%)&e % Ital%a? 7(oa parte !ella )a'pa/a elettorale stata

portata a8at% s(% so)%al et1or2 tato )&e a)&e e% 'a%#est% elettoral% a##%ss%

per le stra!e era poss%7%le 8e!ere % s%'7ol% !% Fa)e7oo2 e T1%tter$

Ne% 8%!eo/%o)&% s% &a la poss%7%l%t !% )o!%8%!ere % propr% p(te//% s(% so)%al:

a!!%r%tt(ra el )otroller !ella (o8a plastat%o sar presete %l tasto ;s&are(als%as% s)opo$

6

Figura 2.2.2: Statistiche utenti Facebook per continenti


10/58

I /ra#%)% r%portao al)(% !at% r%/(ar!o al ('ero !% (tet% !% Fa)e7oo2 pres%

!al s%to 111$so)%al7a2ers$)o'.$

2"( I ri%c)i dei %ocial net&or'

All0%tero !e% so)%al et1or2 soo 'e'or%,,ate 'olt%ss%'e %#or'a,%o%

persoal% )&e r%s)&%ao !% !%8etare a))ess%7%l% a s)oos)%(t% e a pote,%al%

'al%te,%oat%$

*5

Figura 2.2.3: Statistiche utenti Facebook per nazioni


11/58

(esta pro7le'at%)a stata a##rotata % (a R%sol(,%oe !e% .3 /arat%

'o!%al% per la pr%8a) el +553? ella >(ale s% le//e :

;I !at% persoal% !%8e/oo %#att% !%spo%7%l% p(77l%)a'ete e % 'o!o

/lo7ale? se)o!o s)&e'% >(al%tat%8% e >(at%tat%8% )&e o &ao pre)e!et%?

a)&e attra8erso eor'% >(at%t !% #oto e 8%!eo !%/%tal%


12/58

ar)&%8%st%)a e la #(,%oe !% Q)a)&eQ !%spo%7%le presso ( ot%ss%'o 'otore

!% r%)er)a$ Ioltre? al)(% #or%tor% !% ser8%,% r%#%(tao !% otte'perare o ootte'perao a##atto alle r%)&%este !e/l% (tet% !% otteere la )a)ella,%oe !%

!at% e? sopratt(tto? !% %ter% pro#%l%$

+$ L%!ea %/ae8ole !% Q)o'(%tQ$ Molt% #or%tor% !% ser8%,% a##er'ao !%

tras#er%re le str(tt(re )o'(%)at%8e !al 'o!o QrealeQ al )7erspa,%o$

Ua##er'a,%oe #re>(ete )&e o )% sare77ero pro7le'%? per ese'p%o? a

p(77l%)are !at% persoal%s( >(este p%atta#or'e? per)& )o'e se s%

)o!%8%!essero %#or'a,%o% )o ( /r(ppo !% a'%)% el 'o!o reale$

Se per s% 8ao a! esa'%are )o p%@ atte,%oe al)(e )aratter%st%)&e !% )ert%

ser8%,%? s% 8e!r )&e %l parallelo o re//e a)&e per)& %l )o)etto !% Qa'%)%Q

el )7erspa,%o p( r%s(ltare assa% !%8erso !all%!ea p%@ tra!%,%oale !%

a'%)%,%a? e la )o'(%t p( essere assa% estesa$ Se o s% %#or'ao /l% (tet%

% 'o!o trasparete s(lle 'o!al%t !% )o!%8%s%oe !elle %#or'a,%o%

)ote(te e% loro pro#%l%? e s(/l% str('et% )o % >(al% ess% possoo !e)%!ere

tal% 'o!al%t? p( a88e%re )&e l%!ea !% (a Q)o'(%tQ !es)r%tta e% ter'%%

sopra r%)&%a'at% #%%s)a per %!(rl% a r%8elare % 'o!o s)os%!erato

%#or'a,%o% persoal% )&e altr%'et% o s% las)ere77ero s#(//%re$ A)&e %

o'% !at% a tal(e !% >(este p%atta#or'e )o'e QMSpa)eQ? %l '%o spa,%o?

)reao (%!ea %ll(sor%a !% pr%8a) e r%ser8ate,,a s(l 1e7$

4$ QGrat%sQ o se'pre s%/%#%)a Qa )osto ,eroQ$ I realt? 'olt% !e% ser8%,% !%

so)%al et1or2 #ao Qpa/areQ /l% (tet% attra8erso %l r%(t%l%,,o !e% !at%)ote(t% e% pro#%l% persoal% !a parte !e% #or%tor% !% ser8%,%o? a! ese'p%o per

att%8%t '%rate !% 'ar2et%/$

$ La ra))olta !% !at% !% tra##%)o !a parte !e% #or%tor% !% ser8%,% !% so)%al

et1or2? % >(al% &ao /l% str('et% te)%)% per re/%strare o/% s%/olo passo

!ell(tete s(l loro s%to e? % (lt%'a aal%s%? )o'(%)are a ter,% !at% persoal% !%

*+


13/58

tra##%)o )o'pres% /l% %!%r%,,% I"? )&e % tal(% )as% possoo r%)or!are % !at%

relat%8% all(7%)a,%oe$ C% p( a88e%re? a! ese'p%o? per #%al%t p(77l%)%tar%e?a)&e !% t%po '%rato$ S% osser8% )&e % 'olt% "aes% % !at% % o//etto !e8oo

essere )o'(%)at%? a r%)&%esta? a)&e alle a(tor%t /%(!%,%ar%e o !% pol%,%a eo a%

ser8%,% !% %tell%/e)e? o)& )o o/% pro7a7%l%t? % 7ase alle or'e es%stet%

% 'ater%a !% )oopera,%oe %tera,%oale? a so//ett% stra%er%$

9$ Il 7%so/o )res)ete !% #%a,%are % ser8%,% e r%)a8are pro#%tt% p( #(/ere !a

st%'olo (lter%ore per la ra))olta? %l tratta'eto e l(t%l%,,a,%oe !% !at% relat%8%

a/l% (tet%? tratta!os% !ell(%)o )esp%te patr%'o%ale !e% #or%tor% !% ser8%,%

!% so)%al et1or2$ I s%t% !% so)%al et1or2 o soo? )otrar%a'ete a >(ato

s(//er%to !al ter'%e Qso)%alQ? ( ser8%,%o p(77l%)o$ Daltra parte? %l 1e7 +$5

sta Q!%8eta!o a!(ltoQ e le p%))ole a,%e!e %#or'at%)&e /est%te? % )ert% )as%?

!a /r(pp% !% st(!et% 'eo %teressat% allaspetto #%a,%ar%o soo sost%t(%te

se'pre p%@ spesso !a /ra!% so//ett% !% resp%ro %tera,%oale$ T(tto >(esto

&a )a'7%ato % >(al)&e '%s(ra le re/ole !el /%o)o? 8%sto )&e 'olte !elle

%'prese !% )(% sopra soo >(otate % 7orsa e s(7%s)oo (a press%oe

#ort%ss%'a !a parte !e% r%spett%8% %8est%tor% ellott%)a !% real%,,are e

'ass%'%,,are pro#%tt%$

"o%)& per 'olt% #or%tor% !% >(est% ser8%,% % !at% )ote(t% e% pro#%l% !e/l%

(tet% e! %l ('ero !% (tet% es)l(s%8% )ost%t(%s)oo /l% (%)% 8er% 7e%

patr%'o%al% !% )(% !%spo/oo? possoo sor/ere r%s)&% (lter%or% per >(ato

r%/(ar!a la ra))olta? %l tratta'eto e l(t%l%,,o o propor,%oat% !e% !at%persoal% relat%8% a/l% (tet%$

=$ R%8elare p%@ %#or'a,%o% persoal% !% >(ato s% )re!a$ A! ese'p%o? le #oto

possoo tras#or'ars% % %!et%#%)ator% 7%o'etr%)% (%8ersal% all%tero !% (a

rete e! a)&e attra8erso p%@ ret%$ Ne/l% (lt%'% a% soo '%/l%orate % '%s(ra

ote8ole le presta,%o% !e% so#t1are !% r%)oos)%'eto !el 8olto? e r%s(ltat%

*4


14/58

a)ora Q'%/l%or%Q arr%8erao % #(t(ro$ S% osser8% )&e? (a 8olta asso)%ato (

o'e a! (a #oto? possoo essere 'esse a r%s)&%o a)&e la pr%8a) e las%)(re,,a !% altr% pro#%l%-(tete? 'a/ar% 7asat% s(ll(so !% pse(!o%'% o

a!!%r%tt(ra !% !at% ao%'%$ Ioltre? lENISA? la/e,%a e(ropea per la

s%)(re,,a !elle ret% e !elle %#or'a,%o%? &a r%)&%a'ato latte,%oe s( (a

te)olo/%a e'er/ete CBIR? )otet-7ase! %'a/e retr%e8al )&e o##re (lter%or%

opport(%t !% lo)al%,,are /l% (tet% asso)%a!o /l% ele'et% %!et%#%)at%8% !%

!eter'%at% a'7%et% o l(o/&%? a! ese'p%o? ( !%p%to appeso % (a sta,a? o

( e!%#%)%o 8%s%7%le ell%''a/%e? a% !at% relat%8% all(7%)a,%oe$

I#%e? le #(,%o% !ette !% Q/ra#o so)%aleQ? 'olto !%##(se presso 8ar% ser8%,% !%

so)%al et1or2? !% #atto r%8elao %#or'a,%o% s(% rapport% %ter)orret% #ra %

s%/ol% (tet%$

.$ Ut%l%,,o %'propr%o !e% pro#%l% (tete !a parte !% so//ett% ter,%$ S% tratta

pro7a7%l'ete !el r%s)&%o pote,%ale p%@ /ra8e per >(ato r%/(ar!a % !at%

persoal% )ote(t% e% pro#%l% (tete !e% ser8%,% !% so)%al et1or2$ A se)o!a

!ella )o#%/(ra,%oe !%spo%7%le r%spetto alla pr%8a) e !ell(t%l%,,o o 'eo !%

tale )o#%/(ra,%oe !a parte !e/l% (tet%? o)& !el l%8ello !% s%)(re,,a o##erto

!al ser8%,%o? le %#or'a,%o% )ote(te el pro#%lo? )o'prese %''a/%%? )&e

possoo r%trarre s%a %l s%/olo %teressato? s%a altr% so//ett%? !%8etao

a))ess%7%l%? el pe//%ore !e% )as%? all%tera )o'(%t !e/l% (tet%$ Allo stesso

te'po? soo assa% s)arse le sal8a/(ar!%e o//% !%spo%7%l% r%spetto alla )op%a !e%

!at% )ote(t% e% pro#%l%-(tete e! al loro (t%l%,,o per )ostr(%re pro#%l%persoal% eo r%p(77l%)are tal% !at% al !% #(or% !ello spe)%#%)o ser8%,%o !% so)%al

et1or2$ T(tta8%a? a)&e l(t%l%,,o Qor'aleQ !e% !at% )ote(t% e% pro#%l%-

(tete p( %'pattare s(lla(to!eter'%a,%oe %#or'at%8a !e/l% (tet% e? a!

ese'p%o? %)%!ere /ra8e'ete s(lle loro poss%7%l%t !% )arr%era$ U ese'p%o )&e

&a s(s)%tato %teresse !%##(so r%/(ar!a la7%t(!%e !a parte !e% !%r%/et% !el

*


15/58

persoale !% s%/ole so)%et !% )os(ltare % pro#%l%-(tete !e% )a!%!at%

allass(,%oe eo !e% !%pe!et%$Se)o!o >(ato r%#er%to !a art%)ol% !% sta'pa? /% o//% % !(e ter,% !e% !%r%/et%

a''ettoo !% (t%l%,,are % !at% r%)a8at% !a ser8%,% !% so)%al et1or2? a! ese'p%o

per 8er%#%)are eo )o'pletare % )(rr%)(la !e% )a!%!at%$ Altr% so//ett% )&e

possoo trarre pro#%tto !a >(este #ot% !% %#or'a,%oe soo le #or,e

!ellor!%e e % ser8%,% se/ret%$ Ioltre? al)(% #or%tor% !% ser8%,% !% so)%al

et1or2 #or%s)oo a ter,% !at% relat%8% a/l% (tet% tra'%te %ter#a))e !%

pro/ra''a,%oe !% appl%)at%8%? e % !at% #%%s)oo >(%!% per essere /est%t% !a%

so//ett% ter,% % >(est%oe$

3$ Il Gr(ppo !% la8oro (tre part%)olar% preo))(pa,%o% r%spetto al r%s)&%o

(lter%ore !% #(rt% !%!et%t )a(sat% !alla !%spo%7%l%t !%##(sa !% !at% persoal%

)ote(t% e% pro#%l%-(tete e !alla7(so !% tal% pro#%l% !a parte !% so//ett% ter,%

o a(tor%,,at%$

6$ Ut%l%,,o !% (%#rastr(tt(ra la )(% s%)(re,,a las)%a p(rtroppo 'olto a

!es%!erare$

S% 'olto parlato !ella o s%)(re,,a !% ret% e s%ste'% %#or'at%)%?

)o'pres% % ser8%,% 1e7$ Cas% re)et% % 'er%to r%/(ar!ao #or%tor% !% ser8%,%

'olto )oos)%(t% >(al% Fa)e7oo2? Fl%)2r? MSpa)e? Or2(t? e St(!%VZ$ E 8ero

)&e % #or%tor% !% ser8%,% &ao preso '%s(re atte a pote,%are la s%)(re,,a !e%

loro s%ste'%? 'a 'olto resta a)ora !a #are$ Allo stesso te'po? pro7a7%le

)&e % #(t(ro e'er/ao (o8e #alle ella s%)(re,,a !% >(est% s%ste'%? 'etre assa% %'pro7a7%le )&e s% possa 'a% )ose/(%re lo7%ett%8o !% (a s%)(re,,a

totale 8%sta la )o'pless%t !elle appl%)a,%o% so#t1are a >(al(>(e l%8ello !e%

ser8%,% Iteret$

*5$ I pro7le'% t(ttora %rr%solt% per >(ato )o)ere la s%)(re,,a !e% ser8%,%

Iteret )ost%t(%s)oo ( r%s)&%o (lter%ore )oesso all(t%l%,,o !e% ser8%,% !%

*9


16/58

so)%al et1or2 e? % )ert% )as%? a('etao %l l%8ello )o'pless%8o !% r%s)&%o?

o88ero )o'portao Qs#('at(reQ !% r%s)&%o spe)%#%)&e !% >(esto t%po !% ser8%,%$I ( !o)('eto re)ete re!atto !alla ENISA E(ropea Net1or2 a!

I#or'at%o Se)(r%t A/e) 8e/oo )%tat%? #ra laltro? lo spa'? lo s)r%pt%/

#ra s%t% !%8ers%? 8%r(s e Q8er'%Q? %l p&%s&%/ '%rato spear-p&%s&%/ e #or'e !%

p&%s&%/ spe)%#%)&e !e% ser8%,% !% so)%al et1or2? l%#%ltra,%oe !ella rete?

l(t%l%,,o a7(s%8o !% pro#%l%-(tete pro#%le-s>(att%/ e atta))&% rep(ta,%oal%

7asat% s(l #(rto !% %!et%t? #or'e !% perse)(,%oe persoale stal2%/? %l

7(ll%s'o % rete? e lo sp%oa//%o %!(str%ale oss%a? % )os%!!ett% Qso)%al

e/%eer%/ atta)2sQ strate/%e 7asate s( %tera,%o% %terpersoal% #%al%,,ate a

)arp%re %#or'a,%o% r%ser8ate )o'p%(t% attra8erso % ser8%,% !% so)%al et1or2$

Se)o!o lENISA? ( r%s)&%o (lter%ore per la s%)(re,,a rappresetato Q!a%

#attor% !% a//re/a,%oe le/at% alle so)%al et1or2Q$

**$ L%tro!(,%oe !% sta!ar! !% %teropera7%l%t e %ter#a))e !%

pro/ra''a,%oe appl%)a,%o% A"I: a! ese'p%o? lo sta!ar! Qope so)%alQ

%tro!otto !a Goo/le el 'ese !% o8e'7re +55.? allo s)opo !% )oset%re

l%teropera7%l%t te)%)a !% ser8%,% !% so)%al et1or2 t%polo/%)a'ete !%8ers%?

)o'porta t(tta (a ser%e !% r%s)&% (lter%or%$

S% re!e %#att% poss%7%le (a 8al(ta,%oe a(to'at%)a !% t(tt% % s%t% !% so)%al

et1or2 )&e (t%l%,,%o lo sta!ar! pres)elto$ Attra8erso le A"I % prat%)a

l%tera /a''a !% #(,%oal%t !el s%ste'a a! essere pass%7%le !% 8al(ta,%oe

a(to'at%)a attra8erso l%ter#a))%a 1e7$ Le appl%)a,%o% pote,%al'ete %/ra!o !% %ter#er%re )o la pr%8a) !e/l% (tet% e #orse a)&e )o la pr%8a) !%

so//ett% )&e o soo (tet%? 'a % )(% !at% #a))%ao parte !% ( pro#%lo-(tete

)o'pre!oo? a! ese'p%o? laal%s% )o'pless%8a !e% rapport% pro#ess%oal% e

pr%8at% %tratte(t% !al s%/olo (tete? )&e p( se,altro tra8al%)are % Q)o#%%Q

!elle s%/ole so)%al et1or2 s(lle >(al% l(tete %tera/%s)e 8olta per 8olta %

*=


17/58

r(ol% !%8ers%J %oltre? l%teropera7%l%t p( #a8or%re % '%s(ra (lter%ore %l

r%(t%l%,,o !a parte !% so//ett% ter,% !elle %#or'a,%o% e !elle %''a/%%)ote(te e% pro#%l%-(tete$

*.


18/58

*3


19/58

Capitolo (

*$attacco

U pa%o !% a% #a stato pro/ettato !a A!rea V%tal% * ( (o8o t%po !%

atta))o )&e '%ra a s#r(ttare % so)%al et1or2? % part%)olare le %#or'a,%o%

)ote(te !etro !% >(est%? per atta))are a)&e altr% s%ste'%$

I >(est% )ap%tolo 8%ee !es)r%tto >(esto t%po !% atta))o % t(tte le s(e #as%$

("1 *$al#oritmo e le +a%i dell$attacco

(attro soo le #as% !a att(are al #%e !% )o'pro'ettere l%tero s%ste'a

tele'at%)o:

*$ VIOLAZIONE SOCIAL et1or2: % >(esta #ase a!re'o a! otteere

%#or'a,%o% persoal% !e/l% (tet% !a (t%l%,,are )o'e ;/r%'al!ello< per

#or,are la))o(t !ella ;8%tt%'a(ell% !% pa/a'eto ol%e o e-)o''er)eJ

$ VIOLAZIONE ATTRAVERSO IL RINVIO DELLE CREDENZIALI: %

>(est(lt%'a #ase tetere'o !% 8%olare le '%s(re !% s%)(re,,a !% altr% s%t%

attra8erso %l r%8%o !elle )re!e,%al% !% a))esso per 'a%l$ (est(lt%'a #ase

o88%a'ete le/ata al s())esso !ella se)o!a$

*6


20/58

La pr%'a #ase pre8e!e la )rea,%oe !% ( pro#%lo !al >(ale %%,%are a s#errarel0atta))oJ el /%ro !% )%>(ata /%or%? tale pro#%lo &a ra//%(to le 9$555

a'%)%,%e? %l l%'%te 'ass%'o %'posto !a Fa)e7oo2? a >(esto p(to stato

poss%7%le !are %%,%o all0atta))o 8ero e propr%o$

I >(esta #ase /ra,%e alle A"I !% Fa)e7oo2 stato poss%7%le reper%re e

'e'or%,,are % ( !ata7ase la l%sta !e/l% a'%)% )o t(tte le %#or'a,%o%

asso)%ate a! ess%$

D% se/(%to r%port%a'o al)(e !elle %#or'a,%o% )&e Fa)e7oo2 'ette a

!%spos%,%oe:

(%! - T&e (ser ID )orrespo!%/ to t&e (ser %#o ret(re!$ T&%s %s al1as

ret(re!? 1&et&er %)l(!e! % #%el!s or ot? a! al1as as t&e #%rst

s(7ele'et$

a7o(t'e - tet ele'et )orrespo!%/ to Fa)e7oo2 A7o(t M pro#%le

se)t%o$ Ma 7e 7la2$

a)t%8%t%es - User-etere! QA)t%8%t%esQ pro#%le #%el!$ No /(aratee! #or'att%/$

a##%l%at%os - l%st o# et1or2 a##%l%at%os? as a##%l%at%o ele'ets? ea)& o# 1&%)&

)ota% ear? tpe? stat(s? a'e? a! %! )&%l! ele'ets$ I# o a##%l%at%os

are ret(re!? t&%s ele'et 1%ll 7e 7la2$ T&e (sers pr%'ar et1or2 2e:

%! 1%ll 7e l%ste! #%rst$

P tpe ta2es t&e #ollo1%/ 8al(es: )olle/e: )olle/e et1or2 &%/&s)&ool: &%/& s)&ool et1or2 1or2: 1or2 et1or2 re/%o:

/eo/rap&%)al et1or2

P ear 'a 7e 7la2? !epe!%/ o t&e et1or2 tpe$

P a'e %s t&e a'e o# t&e et1or2$

P %! %s a (%>(e %!et%#%er #or t&e et1or2$ T&e (ser-to-et1or2 relat%o

+5


21/58

'a 7e store!$

P stat(s !es)r%7es t&e (sers /ra!(ate stat(s %# t&e et1or2 %s a )olle/eet1or2$ Ot&er1%se? %t %s 7la2$

7%rt&!a - User-etere! QB%rt&!aQ pro#%le #%el!$ No /(aratee! #or'att%/

as %ts 7ase! o t&e (sers lo)ale$ Use 7%rt&!a!ate %stea! o# o( ee!

to 7e s(re o# t&e #or'at$

7%rt&!a!ate - T&e (sers 7%rt&!a? re!ere! as a 'a)&%e-rea!a7le

str%/$ T&e #or'at o# t&%s !ate e8er )&a/es$

7oo2s - User-etere! QFa8or%te Boo2sQ pro#%le #%el!$ No /(aratee!

#or'att%/$

)ota)te'a%l - %s a str%/ )ota%%/ t&e (sers pr%'ar Fa)e7oo2 e'a%l

a!!ress$ I# t&e (ser s&are! &%s or &er pr%'ar e'a%l a!!ress 1%t& o(? t&%s

a!!ress also appears % t&e e'a%l #%el! see 7elo1$

)(rretlo)at%o - User-etere! QC(rret Lo)at%oQ pro#%le #%el!s$ Cota%s

#o(r )&%l!re: )%t? state? )o(tr? a! ,%p$

P )%t %s (ser-etere!? a! 'a 7e 7la2$

P state %s a 1ell-!e#%e! a'e o# t&e state? a! 'a 7e 7la2$

P )o(tr %s 1ell-!e#%e!? a! 'a 7e 7la2$

P ,%p %s a %te/er? a! %s 5 %# (spe)%#%e! 7 t&e (ser$

e!()at%o&%stor - l%st o# s)&ool %#or'at%o? as e!()at%o%#o ele'ets?

ea)& o# 1&%)& )ota% a'e? ear? a! )o)etrat%o )&%l! ele'ets$ I# o

s)&ool %#or'at%o %s ret(re!? t&%s ele'et 1%ll 7e 7la2$P ear %s a #o(r-!%/%t ear? a! 'a 7e 7la2$

P a'e %s t&e a'e o# t&e s)&ool? a! %s (ser-spe)%#%e!$

P )o)etrat%os %s a l%st o# )o)etrat%o ele'ets? a! 'a 7e a

e'pt l%st$

P !e/ree %s t&e a'e o# t&e !e/ree? a! 'a 7e 7la2$

+*


22/58

e'a%l %s a str%/ )ota%%/ t&e (sers pr%'ar Fa)e7oo2 e'a%l a!!ress or

t&e (sers pro%e! e'a%l a!!ress? 1&%)&e8er a!!ress t&e (ser /rate! o(rappl%)at%o$

#a'%l %s a arra )ota%%/ t&e (sers #a'%l 'e'7ers? l%st%/ t&e (ser

ID a! relat%os&%p #or ea)& 'e'7er$

&asa!!e!app - Depre)ate! Bool 5 or * %!%)at%/ 1&et&er t&e

(ser &as a(t&or%,e! t&e appl%)at%o$ T&%s 8al(e %s o1 e>(%8alet to

%sapp(ser$

&o'eto1lo)at%o - User-etere! QHo'eto1Q pro#%le #%el!s$ Cota%s

t&ree )&%l!re: )%t? state? a! )o(tr$

P )%t %s (ser-etere!? a! 'a 7e 7la2

P state %s a 1ell-!e#%e! a'e o# t&e state? a! 'a 7e 7la2$

P )o(tr %s 1ell-!e#%e!? a! 'a 7e 7la2$

&s%#o - User-etere! &%/& s)&ool %#or'at%o$ Cota%s #%8e )&%l!re:

&s*a'e? &s+a'e? /ra!ear? &s*2e? a! &s+2e$

P &s*a'e %s 1ell-!e#%e!? a! 'a 7e le#t 7la2

P &s+a'e %s 1ell-!e#%e!? a! 'a 7e le#t 7la2? t&o(/& 'a ot

&a8e %#or'at%o %# &s*a'e %s 7la2$

P /ra!ear %s a #o(r-!%/%t ear? or 'a 7e 7la2

P &s*%! %s a (%>(e ID represet%/ t&at s)&ool? a! %s ot ,ero %# a!

ol %# &s*a'e %s ot 7la2$

P &s+%! %s a (%>(e ID represet%/ t&at s)&ool? a! %s ot ,ero %# a!ol %# &s+a'e %s ot 7la2$

%terests - User-etere! QIterestsQ pro#%le #%el!$ No /(aratee! #or'att%/$

%sapp(ser - Bool 5 or * %!%)at%/ 1&et&er t&e (ser &as (se! t&e

)all%/ appl%)at%o$

%s7lo)2e! - Bool t&at ret(rs tr(e %# t&e (ser %s 7lo)2e! to t&e 8%e1er

++


23/58

lo//e! % (ser$ T&e (ser '(st 7e lo//e! % or o( '(st &a8e a 8al%!

sess%o 2e to /et t&%s 8al(e$ lo)ale - T&e )(rret lo)ale % 1&%)& t&e (ser &as )&ose to 7ro1se Fa)e7oo2$

T&e 7as%) #or'at %s LLCC? 1&ere LL %s a t1o-letter la/(a/e )o!e? a!

CC %s a t1o-letter )o(tr )o!e$ Co(tr )o!es are ta2e #ro' t&e ISO

4*== alp&a + )o!e l%st$ For %sta)e? eUS represets US E/l%s&$

'eet%/#or - l%st o# !es%re! relat%os&%p tpes )orrespo!%/ to t&e QLoo2%/

ForQ pro#%le ele'et$ I# o relat%os&%p tpes are spe)%#%e!? t&e 'eet%/

#or ele'et %s e'pt$ Ot&er1%se represete! as a l%st o# see2%/ )&%l!

tet ele'ets? 1&%)& 'a ea)& )ota% oe o# t&e #ollo1%/ str%/s:

Fr%e!s&%p?

A Relat%os&%p? Dat%/? Ra!o' "la? &ate8er I )a /et$

'eet%/se - l%st o# !es%re! relat%os&%p /e!ers )orrespo!%/ to t&e

QItereste! IQ pro#%le ele'et$ I# o relat%os&%p /e!ers are spe)%#%e!?

t&e 'eet%/se ele'et %s e'pt$ Ot&er1%se represete! as a l%st o# se

)&%l! tet ele'ets? 1&%)& 'a ea)& )ota% oe o# t&e #ollo1%/ str%/s:

'ale? #e'ale $

'o8%es - User-etere! QFa8or%te Mo8%esQ pro#%le #%el!$ No /(aratee!

#or'att%/$

'(s%) - User-etere! QFa8or%te M(s%)Q pro#%le #%el!$ No /(aratee!

#or'att%/$

Wa'e - User-etere! QNa'eQ pro#%le #%el!$ Ma ot 7e 7la2$P #%rsta'e %s /eerate! #ro' t&e (ser-etere! QNa'eQ pro#%le #%el!$

P '%!!lea'e %s /eerate! #ro' t&e (ser-etere! QNa'eQ pro#%le #%el!$

P lasta'e - T&e (sers last a'e? 1&%)& %s /eerate! #ro' t&e (seretere!

QNa'eQ pro#%le #%el!$

otes)o(t - Total ('7er o# otes 1r%tte 7 t&e (ser$

+4


24/58

p%) - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& *55p a! 'a &e%/&t

455p$ Ma 7e 7la2$ p%)1%t&lo/o - URL o# (ser pro#%le p%)t(re 1%t& a Fa)e7oo2 lo/o o8erla%!?

1%t& 'a 1%!t& *55p a! 'a &e%/&t 455p$ Ma 7e 7la2$

p%)7%/ - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& +55p a! 'a

&e%/&t =55p$ Ma 7e 7la2$

p%)s'all - URL o# (ser pro#%le p%)t(re? 1%t& 'a 1%!t& 95p a! 'a

&e%/&t *95p$ Ma 7e 7la2$

p%)s'all1%t&lo/o - URL o# (ser pro#%le p%)t(re 1%t& a Fa)e7oo2 lo/o

o8erla%!? 1%t& 'a 1%!t& 95p a! 'a &e%/&t *95p$ Ma 7e 7la2$

p%)s>(are - URL o# a s>(are se)t%o o# t&e (ser pro#%le p%)t(re? 1%t& 1%!t&

95p a! &e%/&t 95p$ Ma 7e 7la2$

p%)s>(are1%t&lo/o - URL o# a s>(are se)t%o o# t&e (ser pro#%le p%)t(re

1%t& a Fa)e7oo2 lo/o o8erla%!? 1%t& 1%!t& 95p a! &e%/&t 95p$ Ma 7e

7la2$

pol%t%)al - User-etere! Q"ol%t%)al V%e1Q pro#%le #%el!$ Its a #ree-#or' tet

#%el!$

pro#%le7l(r7 - A #ree-#or' tet #%el! (!er a (sers pro#%le p%)t(re$

pro#%le(p!atet%'e - T%'e % se)o!s s%)e epo)& t&at t&e (sers pro#%le

1as last (p!ate!$ I# t&e (sers pro#%le 1as ot (p!ate! 1%t&% t&e past 4

!as? 5 %s ret(re!$

pro#%le(rl - URL o# t&e Fa)e7oo2 pro#%le o# t&e (ser$ I# t&e (ser &asspe)%#%e! a (sera'e? t&e (sera'e %s %)l(!e! % t&e URL? ot pro#%le$

p&pX%!YUID$

pro%e!e'a%l - A pro%e! 1rapper alterat%8e #or )ota)t%/ t&e (ser

t&ro(/& e'a%l? %stea! o# !%re)tl )all%/ ot%#%)at%os$se!E'a%l$ I# t&e

(ser s&are! &%s or &er pro%e! e'a%l a!!ress 1%t& o(? t&%s a!!ress also

+


25/58

appears % t&e e'a%l #%el! see 7elo1$

>(otes - User-etere! QFa8or%te (otesQ pro#%le #%el!$ No /(aratee!#or'att%/$

relat%os&%pstat(s - User-etere! QRelat%os&%p Stat(sQ pro#%le #%el!$ Is

e%t&er 7la2 or oe o# t&e #ollo1%/ str%/s: S%/le? I a Relat%os&%p? I

a Ope Relat%os&%p? E/a/e!? Marr%e!? Its Co'pl%)ate!? %!o1e!$

rel%/%o - User-etere! QRel%/%o(s V%e1sQ pro#%le #%el!$ No /(aratee!

#or'att%/$

se - User-etere! QSeQ pro#%le #%le$ T&%s %s a traslate! str%/? so t&e

/e!er ret(re! !epe!s o t&e (sers lo)ale$ T&%s #%el! 'a 7e 7la2$

s%/%#%)atot&er%! - t&e %! o# t&e perso t&e (ser %s % a relat%os&%p 1%t&$

Ol s&o1 %# 7ot& people % t&e relat%os&%p are (sers o# t&e appl%)at%o

'a2%/ t&e re>(est$

stat(s - Cota%s a Q'essa/eQ )&%l! 1%t& (ser-etere! stat(s %#or'at%o?

as 1ell as a Qt%'eQ )&%l! 1%t& t&e t%'e % se)o!s s%)e epo)& at 1&%)&

t&e stat(s 'essa/e 1as set$

t%'e,oe - o##set #ro' GMT e$/$ Cal%#or%a %s -3$

t8 - User-etere! QFa8or%te TV S&o1sQ pro#%le #%el!$ No /(aratee!

#or'att%/$

(sera'e - T&e (sers Fa)e7oo2 (sera'e? %# oe 1as spe)%#%e!$ Ot&er1%se?

t&%s #%el! %s 7la2$

1all)o(t - Total ('7er o# posts to t&e (sers 1all$ Notet&at t&%s !oes ot %)l(!e %te's 1%t& atta)&'ets? %$e$ 1all p&otos?

1all 8%!eos? poste! l%2s? et)$ Ol %te's t&at s&o1 (p o

&ttp:111$Fa)e7oo2$)o'1all$p&p are %)l(!e! % t&%s )o(t$

1e7s%te - User-etere! persoal 1e7s%te pro#%le #%el!$ No /(aratee!

#or'att%/$

+9


26/58

1or2&%stor - l%st o# 1or2 &%stor %#or'at%o? as 1or2%#o ele'ets?

ea)& o# 1&%)& )ota% lo)at%o? )o'paa'e? pos%t%o? !es)r%pt%o?start!ate a! e!!ate )&%l! ele'ets$ I# o 1or2 &%stor %#or'at%o

%s ret(re!? t&%s ele'et %s 7la2$

P lo)at%o %s (ser-etere!? a! &as a s%'%lar #or'at to )(rretlo)at%o

a! &o'eto1lo)at%o a7o8e$

P )o'paa'e %s (ser-etere!? a! !oes ot e)essar%l )orrespo!

to a Fa)e7oo2 1or2 et1or2$

P !es)r%pt%o %s (ser-etere!? a! 'a 7e 7la2$

P pos%t%o %s (ser-etere!? a! 'a 7e 7la2$

P start!ate %s o# t&e #or' -MM? ? or MM$ It 'a 7e

7la2$

P e!!ate %s o# t&e #or' -MM? ? or MM$ It 'a 7e 7la2$

Ua 8olta ra))olte t(tte le %#or'a,%o% s(/l% (tet% s% passa all0%!%8%!(a,%oe

!elle )re!e,%al% !% a))esso? 8errao %#att% e##ett(at% #%o a! otto tetat%8% per

o/% ;a'%)o


27/58

)%r)a l03 !elle pass1or!? al ter'%e !ella pro8a ese/(%ta s( ( )a'p%oe !%

*55 %!%8%!(%? >(esta te)%)a &a portato alla s)operta !el * !elle pass1or!$"er o/% a))o(t 8%olato >(esta opera,%oe 8%ee r%pet(ta r%)ors%8a'ete$

Nello s)&e'a se/(ete 8%ee 'ostrata (0aal%s% !ella poss%7%le espas%oe

!ell0al/or%t'o$

"arte!o !a ( (tete )o *555 a'%)%? )os%!era!o la per)et(ale !%

pass1or! tro8ate !el = e %pot%,,a!o )&e o/% (tete )olp%to a77%a a s(a

8olta (a 'e!%a !% *45 a'%)%? lo s)&e'a se/(ete aal%,,a la poss%7%le

espas%oe !ell0atta))o$

L0%''a/%e sottostate 'ostra /ra#%)a'ete l0espas%oe !% >(esto atta))o$

+.

Tabella 3.1.2: #nalisi statistica espansione


28/58

Ter'%ata >(esta #ase s% passa alla 8%ola,%oe !ell0a))o(t !% posta )o'e%ll(strato !a A!rea V%tal%*:

U 'eto!o 'olto !%##(so? 'a a)&e 'olto r%s)&%oso? >(ello !% (t%l%,,are la

stessa pass1or! per ser8%,% ol%e !%##eret%$

*$ "er o/% a))o(t 8%olato: pro8are la stessa pass1or! per /l% a))o(t 'a%l

oltre %l =* !% s())esso

+$ Ua 8olta a8(to la))esso e##ett(are opera,%o% !% r%)er)a all%tero !ella

)asella 'a%l post r%)e8(ta %8%ata )est%ata alla r%)er)a !% )re!e,%al% !%

a))esso? ('er% !% )arte? 7a2 a))o(t? 'a%l )o'pro'ettet%? et)

Ua !%##(sa )att%8a a7%t(!%e !e/l% %tal%a% >(ella !% ar)&%8%are elle propr%e

'a%l pass1or! !% altr% s%ste'%$

Nella ter,a #ase s% passer alla 8%ola,%oe !% altr% s%ste'%:

+3

Figura 3.1.3: Grafico i espansione


29/58

"er o/% a))o(t 8%olato: pro8are la stessa p1! per a))o(t papal? e7a? altr%

s%t%$ Se)o!o (o st(!%o !ella S'ate)? la 'a//%or parte !e% )l%et% 7a)ar%ol%e r%(t%l%,,a le propr%e )re!e,%al% per a))e!ere a s%t% 1e7 'olto 'eo

s%)(r%$ U (o8o report !% Tr(steer r%8ela )&e soo 'olte le persoe a

r%(t%l%,,are le stesse pass1or! e (sera'e$ Il report r%8ela !at% a !%r po)o

%>(%etat%:

"ass1or! S&ar%/: %l .4 !e/l% (tet% r%(t%l%,,ao la pass1or! !% a))esso al

propr%o ser8%,%o !% 7a2%/ ol%e % s%t% o #%a,%ar%$

User ID S&ar%/: (a!o (a 7a)a )osete la s)elta !el propr%o (ser %!? %l

=9 !e/l% (tet% r%(t%l%,,a lo stesso (sera'e % s%t% o #%a,%ar%J el )aso

% )(% la 7a)a asse/% a(to'at%)a'ete ( o'e (tete? 8err r%(t%l%,,ato

!all(tete %l + !e/l% (tet% al'eo % ( s%to o #%a,%ar%o$

User ID a! "ass1or! S&ar%/: . !e/l% (tet% r%(t%l%,,a % propr% (sera'e

e pass1or! !% a))esso alla 7a)a s( s%t% o #%a,%ar%

Ua 8olta a)>(%s%to lo/% e pass1or! 8e/oo testat% s( s%t% !% ser8%,%

#%a,%ar% per )o''ettere #ro!%$ Ut%l%,,are le )re!e,%al% r(7ate resta %l 'o!o

p%@ se'pl%)e per a//%rare le '%s(re !% s%)(re,,a att(ate !alle 7a)&e per

prote//ere le loro appl%)a,%o%$

Nella >(arta e! (lt%'a #ase s% pro88e!er al r%8%o !elle pass1or!: r%)&%e!ere

l%8%o !% pass1or! per e'a%l attra8erso la #(,%oal%t !% ;"ass1or! #or/et


30/58

45


31/58

Capitolo ,

O-ietti.i

Lo s)opo !% >(esta tes% 8al(tare se l0al/or%t'o presetato el +5*5 !a A!rea

V%tal% ella tes% ;L0** sette'7re tele'at%)o< s%a 8al%!o a)ora o//% o se !opo

!(e a% le a7%t(!%% !e/l% (tet% % a'7%to !% s%)(re,,a !elle pass1or!? le

(o8e te)olo/%e e le (o8e pol%t%)&e % a'7%to !% s%)(re,,a e pr%8a) !%

Fa)e7oo2 o per'ettao p%@ !% (t%l%,,are >(esto al/or%t'o$

I part%)olare 8err aal%,,ata la pr%'a #ase !ell0atta))o? oss%a la #ase % )(%

8e/oo ra))olte le %#or'a,%o% !e/l% ;a'%)%< s( Fa)e7oo2 e s% teta !%

%'possessars% !e% loro a))o(t$

(esta la #ase p%@ %'portate !al 'o'eto )&e le tre soo s(7or!%e al

s())esso !ella pr%'a$

Dopo a8ere 8al(tato la 8al%!%t !% >(esto t%po !% atta))o s% 8al(ter a)&e (

e8et(ale 'eto!o per '%/l%orare le presta,%o% !ell0al/or%t'o aal%,,ato$

4*


32/58

4+


33/58

Capitolo

Valta!ioni

"1 *a comple%%it delle pa%%&ord

Se)o!o /l% st(!% ese/(%t% pr%'a !% testare l0al/or%t'o % esa'e? r%s(lta8a )&el03 !elle pass1or! era #a)%l'ete %!%8%!(a7%le pro8a!o pr%'a se'pl%)%

pass1or! 7aal% po% (t%l%,,a!o pass1or! '%rate % 7ase a% !at% ra))olt% s(%

so)%al et1or2J % part%)olare %l !ato (t%l%,,ato % >(esta #ase era la !ata !%

as)%ta )&e? )o)ateata % !%8ers% 'o!% )o l0(sera'e? !a8a or%/%e alle

pass1or! !a testare$

Dopo la pro8a s( ( )a'p%oe !% *55 (tet% real%? la per)et(ale r%s(lta8a

pess%'%st%)a % >(ato l0al/or%t'o a8e8a portato alla s)operta !el * !elle

pass1or!$

Aal%,,a!o art%)ol% s(lla s%)(re,,a p(77l%)at% e/l% (lt%'% a% r%s(lta )&e la

per)et(ale !% pass1or! 7aal% #a)%l'ete r%tra))%a7%l% )o l0al/or%t'o

!es)r%tto se'pre !ell03 )%r)a$

Nel +5*+ al)(% &a)2er &ao reso p(77l%)&e le pass1or! !% 'olt% (tet%

%s)r%tt% a 8ar% s%t% tra )(% a&oo 8o%)e? L%2e!%? eHar'o e Last$#'J /ra,%e a

>(est% !at% ;Splas&Data


34/58

"rose/(e!o % >(esta aal%s%? ell0art%)olo4 ;T&e ps)&olo/ o# Se)(r%t #or

t&e Ho'e Co'p(ter User


35/58

Mart% De8%llers? % )(% 8e/oo st(!%ate le pass1or! !% 4+ '%l%o% !% (tet%

r(7ate !a ( &a)2er el +556 !al !ata7ase !% Ro)2o(? 8e!%a'o (o8a'ete)o'e /l% (tet% (t%l%,,%o pass1or! po)o s%)(re$

Le pass1or! !% >(esto s%to erao state sal8ate % )&%aro el !ata7ase? se,a

al)(a #(,%oe !% &as& e /ra,%e a >(esto stato poss%7%le ese/(%re

(0a))(rata aal%s%$

G(ar!a!o %l /ra#%)o sottostate poss%7%le otare )&e la 'a//%or parte !elle

pass1or! soo )ost%t(%te !a )aratter% '%(s)ol%? ('er% o se'pl%)%

)o)atea,%o% !% >(est% !(e? 'etre le pass1or! )os%!erate p%@ ;ro7(ste(este pass1or! )o le l%ste !elle pass1or! p%@ )o'(% s%

otte/oo r%s(ltat% %teressat%: % 'e!%a o/% *55 pass1or! (a )ost%t(%ta

!alla pass1or! ;*+49=


37/58

>(ale st%a'o )er)a!o la pass1or! e % tal )aso %ser%re ella l%sta !elle

pass1or! !a testare le pass1or! )&e &a /% (t%l%,,ato s( altr% s%t% 1e7$I r%s(ltat% otte(t% potre77ero essere )os%!erat% 7(o%$

Le pol%t%)&e !% s)elta !ella pass1or! !% Fa)e7oo2 o soo !% a%(to alla

s%)(re,,a? %#att% /l% (%)% l%'%t% )&e 8e/oo !at% a% (o8% %s)r%tt% soo )&e la

pass1or! s)elta s%a !% al'eo = )aratter% e )&e >(est% o s%ao t(tt% (/(al%J

o77l%/a!o %8e)e l0(tete? al 'o'eto !ell0%s)r%,%oe? a! %ser%re (a

pass1or! )o )aratter% al#a('er%)% s%a 'a%(s)ol% )&e '%(s)ol%? ('er% e

)aratter% spe)%al%? ( atta))o )o'e >(ello aal%,,ato sare77e )o'pleta'ete

%e##%)a)e$

"2 *e no.e API e il pro-lema dell$email

Le (o8e %'posta,%oe !% Fa)e7oo2 &ao reso l0e'a%l !e/l% ;a'%)%< ( !ato

as)osto a 'eo )&e l0(tete o spe)%#%)&% )&e 8(ole re!erlo p(77l%)o$

(esta (o8a pol%t%)a )rea !e% ser% pro7le'% all0al/or%t'o per)& le A"I o

per'ettoo p%@ !% otteere l0%!%r%,,o e-'a%l !e/l% ;a'%)%


38/58

name T&e (ser0s #(ll a'eNo access_tokenre>(%re!

first_name T&e (ser0s #%rst a'eNo access_tokenre>(%re!

middle_name T&e (ser0s '%!!le a'eNo access_tokenre>(%re!

last_name T&e (ser0s last a'eNo access_tokenre>(%re!

gender T&e (ser0s /e!er: femaleor maleNo access_token

re>(%re!

locale T&e (ser0s lo)aleNo access_tokenre>(%re!

languages T&e (ser0s la/(a/es user_likes

linkT&e URL o# t&e pro#%le #or t&e (sero Fa)e7oo2

No access_tokenre>(%re!

username T&e (ser0s Fa)e7oo2 (sera'eNo access_tokenre>(%re!

age_range

T&e (ser0s a/e ra/eJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter

Re>(%resaccess_token

third_party_id

A ao'o(s? 7(t (%>(e %!et%#%er#or t&e (serJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter


installed

Spe)%#%es 1&et&er t&e (ser &as%stalle! t&e appl%)at%o asso)%ate!1%t& t&e app a))ess to2e t&at %s (se!to 'a2e t&e re>(estJ ol ret(re! %#spe)%#%)all re>(este! 8%a t&e fieldsURL para'eter

Re>(%res appaccess_token

timezone T&e (ser0s t%'e,oe o##set #ro' UTCA8a%la7le ol #or t&e)(rret (ser

updated_timeT&e last t%'e t&e (ser0s pro#%le 1as(p!ate!J )&a/es to t&e languages?


43


39/58

link? timezone? verified?interested_in?favorite_athletes?favorite_teams? a!video_upload_limits are ot otre#le)te! % t&%s 8al(e

verifiedT&e (ser0s a))o(t 8er%#%)at%o stat(s?e%t&er trueor falsesee 7elo1


bio T&e (ser0s 7%o/rap& user_about_me orfriends_about_me

birthday T&e (ser0s 7%rt&!a user_birthday orfriends_birthday

cover

T&e (ser0s )o8er p&oto '(st 7eepl%)%tl re>(este! (s%/fields=coverpara'eter


currency

T&e (ser0s )(rre) sett%/s '(st 7eepl%)%tl re>(este! (s%/ afields=currencyURL para'eter


devices A l%st o# t&e (ser0s !e8%)es 7eo!!es2top

User access_token

re>(%re!J ola8a%la7le #or #r%e!so# t&e )(rret (ser

education A l%st o# t&e (ser0s e!()at%o &%stor

user_education_his

tory orfriends_education_history

emailT&e pro%e! or )ota)t e'a%l a!!ress/rate! 7 t&e (ser

email

hometown T&e (ser0s &o'eto1 user_hometown orfriends_hometown

interested_in T&e /e!ers t&e (ser %s %tereste! %

user_relationship_

details orfriends_relationship_details

location T&e (ser0s )(rret )%t user_location orfriends_location

46


40/58

political

T&e (ser0s pol%t%)al 8%e1

user_religion_poli

tics orfriends_religion_politics

payment_pricepointsT&e pa'et pr%)e-po%ts a8a%la7le#or t&at (ser

User access_token

favorite_athletes

T&e (ser0s #a8or%te at&letesJ t&%s #%el!%s !epre)ate! a! 1%ll 7e re'o8e! %t&e ear #(t(re

user_likes orfriends_likes

favorite_teams

T&e (ser0s #a8or%te tea'sJ t&%s #%el! %s!epre)ate! a! 1%ll 7e re'o8e! %

t&e ear #(t(re

user_likes or

friends_likes

picture

T&e URL o# t&e (ser0s pro#%le p%)ol ret(re! %# o( epl%)%tlspe)%# a 0#%el!sYp%)t(re0 para'

access_token

re>(%re! #or pa/es1%t&1&%tel%st%/tar/et%/restr%)t%os? ot&er1%seo access_tokenre>(%re!

quotes T&e (ser0s #a8or%te >(otes user_about_me orfriends_about_me

relationship_status

T&e (ser0s relat%os&%p stat(s:Single? In a relationship?Engaged? Married? Itscomplicated? In an openrelationship? !idowed?Separated? "ivorced? In a civilunion? In a domesticpartnership

user_relationships

orfriends_relationships

religion T&e (ser0s rel%/%o

user_religion_poli

tics orfriends_religion_p

olitics

security_settings

I#or'at%o a7o(t se)(r%t sett%/sea7le! o t&e (ser0s a))o(t '(st

7e epl%)%tl re>(este! (s%/ afields=security_settings URL

para'eter

A8a%la7le ol #or t&e)(rret (ser

5


41/58

significant_other T&e (ser0s s%/%#%)at ot&er

user_relationships

orfriends_relationships

video_upload_limits

T&e s%,e o# t&e 8%!eo #%le a! t&ele/t& o# t&e 8%!eo t&at a (ser )a(ploa!J ol ret(re! %# spe)%#%)allre>(este! 8%a t&e fields URL

para'eter


websiteT&e URL o# t&e (ser0s persoal1e7s%te

user_website orfriends_website

work A l%st o# t&e (ser0s 1or2 &%stor

user_work_history

orfriends_work_history

E le se/(et% )oess%o%:

ame e%cription Permi%%ion%

a))o(tsT&e Fa)e7oo2 apps a! pa/es o1e! 7 t&e)(rret (ser$

manage_pages %el!saccess_tokens t&at)a 7e (se! to >(ert&e Grap& A"I o

7e&al# o# t&e apppa/e

a)&%e8e'ets T&e a)&%e8e'ets #or t&e (ser$

user_games_activi

ty orfriends_games_act

ivity$

a)t%8%t%es T&e a)t%8%t%es l%ste! o t&e (ser0s pro#%le$user_activities orfriends_activities$

al7('s T&e p&oto al7('s t&%s (ser &as )reate!$ user_photos or

friends_photos$

appre>(ests T&e (ser0s o(tsta!%/ re>(ests #ro' a app$Re>(%res appaccess_token$

7oo2s T&e 7oo2s l%ste! o t&e (ser0s pro#%le$ user_likes or

*
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Faccountshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Factivitieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Falbumshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fbookshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Factivitieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Falbumshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fbookshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Faccounts


42/58

friends_likes$

)&e)2%s T&e pla)es t&at t&e (ser &as )&e)2e!-%to$ user_checkins orfriends_checkins $

e8ets T&e e8ets t&%s (ser %s atte!%/$ user_events or

friends_events$

#a'%l T&e (ser0s #a'%l relat%os&%ps user_relationships

$

#ee! T&e (ser0s 1all$ read_stream

#r%e!l%sts T&e (ser0s #r%e! l%sts$ read_friendlists$

#r%e!re>(ests T&e (ser0s %)o'%/ #r%e! re>(ests$ user_requests$

#r%e!s T&e (ser0s #r%e!s$A 8al%!access_token o# t&e)(rret sess%o (ser$

/a'esGa'es t&e (ser &as a!!e! to t&e Arts a!Eterta%'et se)t%o o# t&e%r pro#%le$

user_likes

/ro(ps T&e Gro(ps t&at t&e (ser 7elo/s to$ user_groups or

friends_groups$

&o'e T&e (ser0s e1s #ee!$ read_stream$

%7o T&e T&rea!s % t&%s (ser0s %7o$ read_mailbo#$

%terests T&e %terests l%ste! o t&e (ser0s pro#%le$ user_interests or

friends_interests$

l%2es All t&e pa/es t&%s (ser &as l%2e!$ user_likes or

friends_likes$

l%2s T&e (ser0s poste! l%2s$ read_stream$

lo)at%os

"osts? stat(ses? a! p&otos % 1&%)& t&e (ser&as 7ee ta//e! at a lo)at%o? or 1&ere t&e(ser &as a(t&ore! )otet %$e$ t&%s e)l(!eso7[e)ts 1%t& o lo)at%o %#or'at%o? a!o7[e)ts % 1&%)& t&e (ser %s ot ta//e!$ See!o)('etat%o o# t&e location_post ta7le#or 'ore !eta%le! %#or'at%o o

per'%ss%os$

user_photos?friend_photos?user_status?friends_status?user_checkins? orfriends_checkins $

+
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fcheckinshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Feventshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffamilyhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffeedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffriendlistshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgameshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgroupshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finterestshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flinkshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flocationshttps://developers.facebook.com/docs/reference/fql/location_post/https://developers.facebook.com/docs/reference/fql/location_post/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fcheckinshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Feventshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffamilyhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffeedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ffriendlistshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgameshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fgroupshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Finterestshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flinkshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Flocationshttps://developers.facebook.com/docs/reference/fql/location_post/


43/58

'o8%es T&e 'o8%es l%ste! o t&e (ser0s pro#%le$ user_likes or

friends_likes$

'(s%) T&e '(s%) l%ste! o t&e (ser0s pro#%le$ user_likes or

friends_likes$

'(t(al#r%e!s T&e '(t(al #r%e!s 7et1ee t1o (sers$A 8al%!access_token o# t&e)(rret sess%o (ser$

otes T&e (ser0s otes$ user_notes$

ot%#%)at%os App ot%#%)at%os #or t&e (ser$

A 8al%!

access_token o# t&e)(rret sess%o (ser$

o(t7o T&e 'essa/es % t&%s (ser0s o(t7o$ read_mailbo#$

pa'etsT&e Fa)e7oo2 Cre!%ts or!ers t&e (ser pla)e!1%t& a appl%)at%o$ See t&e Cre!%ts Ap% #or'ore %#or'at%o$

app access_token

per'%ss%osT&e per'%ss%os t&at (ser &as /rate! t&eappl%)at%o$

Noe$

p&otos "&otos t&e (ser or #r%e! %s ta//e! %$user_photo_video_tags orfriends_photo_vid

eo_tags$

"&otos(ploa!e!All o# t&e (p!ates p&otos o# a (ser$ C(rsor

7ase! pa/%at%o$ user_photos

p%)t(re T&e (ser0s pro#%le p%)t(re$No access_tokenre>(%re!$

po2es T&e (ser0s po2es$ read_mailbo#$

posts T&e (ser0s o1 posts$

A 8al%!access_token orread_stream to seeo-p(7l%) posts$

>(est%os T&e (ser0s >(est%os$ user_questions

s)ores T&e )(rret s)ores #or t&e (ser % /a'es$ user_games_activity orfriends_games_act

4
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmovieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmusichttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmutualfriends%2F1207059https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fnoteshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Foutboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpermissionshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fphotoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpokeshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpostshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmovieshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmusichttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fmutualfriends%2F1207059https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fnoteshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Foutboxhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpermissionshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fphotoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpokeshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fpostshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/


44/58

ivity$

s&are!posts Ret(rs s&ares o# t&e o7[e)t$ C(rsor 7ase!pa/%at%o$

read_stream

stat(ses T&e (ser0s stat(s (p!ates$ read_stream$

s(7s)r%7e!to "eople o(0re s(7s)r%7e! to$ A 8al%!access_token

s(7s)r%7ers T&e (ser0s s(7s)r%7ers$ A 8al%!access_token

ta//e! "osts t&e (ser %s ta//e! %$ read_stream

tele8%s%o T&e tele8%s%o l%ste! o t&e (ser0s pro#%le$ user_likes or

friends_likes$

(p!ates T&e (p!ates % t&%s (ser0s %7o$ read_mailbo#$

8%!eos T&e 8%!eos t&%s (ser &as 7ee ta//e! %$ user_videos or

friends_videos$

Noostate >(este (o8e l%'%ta,%o% la 'a//%or parte !elle %#or'a,%o% sooa)ora reper%7%l% se,a al)( pro7le'a: s(##%)%ete %#att% r%)&%e!ere /l%

appost% to2e !e% !at% )&e %teressao a! ese'p%o per otteere le !ate !%

as)%ta !e/l% a'%)% 7aster r%)&%e!ere %l to2e ;#r%e!s7%rt&!a< e otterre'o

>(est% !at% se,a al)( pro7le'a$

Co po)&e r%/&e !% )o!%)e (t%l%,,a!o le (o8e ;Grap& A"I< poss%7%le

otteere le se/(et% %#or'a,%o% s(/l% a'%)%:

\Q%!Q: Q*5555334694496Q?Qa'eQ: QTo Ma,,%%Q?Q#%rsta'eQ: QToQ?Qlasta'eQ: QMa,,%%Q?Ql%2Q: Q&ttp:111$#a)e7oo2$)o'to$'a,,%%$9+Q?Q(sera'eQ: Qto$'a,,%%$9+Q?Q7%rt&!aQ: Q*+*3*634Q?
https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fsharedpostshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fstatuseshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftaggedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftelevisionhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fupdateshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fvideoshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fsharedpostshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fstatuseshttps://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/docs/reference/api/user/https://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftaggedhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Ftelevisionhttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fupdateshttps://developers.facebook.com/tools/explorer/?method=GET&path=me%2Fvideos


45/58

Q&o'eto1Q: \Q%!Q: Q**545+9=9=54Q?

Qa'eQ: QBolo/a? ItalQ]?Qlo)at%oQ: \Q%!Q: Q**545+9=9=54Q?Qa'eQ: QBolo/a? ItalQ

]?Q7%oQ: QUtete !% pro8aQ?Q>(otesQ: QC%ta,%oe !% pro8aQ?Q1or2Q: \

Qe'ploerQ: \

Q%!Q: Q*+539*6.*4+=5+Q?Qa'eQ: Qp%,,er%a ^Q!a '%''o^QQ

]?Qstart!ateQ: Q5555-55Q?Qe!!ateQ: Q5555-55Q

]?Qe!()at%oQ: \

Qs)&oolQ: \Q%!Q: Q*6=*3=.+*49+9Q?Qa'eQ: QL%)eo s)%et%#%)o ^QEr%)o Fer'%^Q Bolo/aQ

]?QearQ: \Q%!Q: Q4+9.==++**35Q?Qa'eQ: Q+555Q

]?QtpeQ: QH%/& S)&oolQ

]?\

Qs)&oolQ: \

Q%!Q: Q*5+*34+.4*9=695Q?Qa'eQ: QU%8ers%t o# Bolo/aQ]?QearQ: \Q%!Q: Q*+56=59=*4.94*+Q?Qa'eQ: Q+5*4Q

]?QtpeQ: QColle/eQ

]?

9


46/58

Q/e!erQ: Q'aleQ?Qrelat%os&%pstat(sQ: QS%/leQ?

Qrel%/%oQ: QB(!!%staQ?Qpol%t%)alQ: QAar)&Q?Qlo)aleQ: Q%tITQ?Qla/(a/esQ: \

Q%!Q: Q*=+6456+.56=+**Q?Qa'eQ: QOl! Spa%s&Q

]?]

L0(%)o 8ero pro7le'a !ato !al )a'po ;e'a%l(este (o8e

A"I 8e!%a'o %#att% )&e s)r%tto espl%)%ta'ete ;A (ser0s e'a%l %s a prote)te!

propert a! a))ess to t&at %#or'at%o '(st 7e spe)%#%)all re>(este! 7 t&e

app a! /rate! 7 t&e (ser


47/58

Sele,%oa!o l0%)oa !% Fa)e7oo2 )% 8err )&%esto !% lo//ar)% )o le ostre)re!e,%al% e? (a 8olta !ato %l per'esso a a&oo !% a))e!ere alle %#or'a,%o%

!e% ostr% )otatt%? a8re'o !%spo%7%le la l%sta !% t(tt% % ostr% ;a'%)%< )o le

r%spett%8e e-'a%l$

"( Il 3%ocial p)i%)in#4

"("1 3P)i%)in#4 e 3%pear p)i%)in#4

Il ;"&%s&%/< ( tetat%8o !% a)>(%s%re %#or'a,%o% r%ser8ate )o'e

(sera'e? pass1or! e ('er% !% )arta !% )re!%to? #%/e!os% (0et%t #%!ata %

(a )o'(%)a,%oe elettro%)a$Il pro)esso sta!ar! !elle 'eto!olo/%e !% atta))o !% p&%s&%/ p( r%ass('ers%

elle se/(et% #as%**:

*$ L0(tete 'al%te,%oato phisher spe!%s)e al 'al)ap%tato e %/aro (tete

( 'essa//%o e'a%l )&e s%'(la? ella /ra#%)a e el )ote(to? >(ello !% (a

%st%t(,%oe ota al !est%atar%o per ese'p%o la s(a 7a)a? %l s(o pro8%!er 1e7?

.

Figura $.2.2: Scher(ata contatti i(portati con rispettivi inirizzi e,(ail


48/58

( s%to !% aste ol%e a )(% %s)r%tto$

+$ L0e-'a%l )ot%ee >(as% se'pre a88%s% !%particolari situazioni o proble(i8er%#%)ates% )o %l propr%o )oto )orretea))o(t a! ese'p%o ( a!!e7%to

eor'e? la s)a!e,a !ell0a))o(t? e))$ opp(re (0o##erta !% !earo$

4$ L0e-'a%l %8%ta %l !est%atar%o a se/(%re ( l%2? presete el 'essa//%o? per

e8%tare l0a!!e7%to eo per re/olar%,,are la s(a pos%,%oe )o l0ete o la so)%et

!% )(% %l 'essa//%o s%'(la la /ra#%)a e l0%'posta,%oe Fa2e lo/%$

$Il l%2 #or%to? t(tta8%a? nonporta % realt al s%to 1e7 (##%)%ale? 'a a (a

copia fittizia apparete'ete s%'%le al s%to (##%)%ale? s%t(ata s( ( ser8er

)otrollato !al p&%s&er? allo s)opo !% r%)&%e!ere e otteere !al !est%atar%o !at%

persoal% part%)olar%? or'al'ete )o la s)(sa !% (a )o#er'a o la e)ess%t

!% e##ett(are (a a(tet%)a,%oe al s%ste'aJ >(este %#or'a,%o% 8e/oo

'e'or%,,ate !al ser8er /est%to !al p&%s&er e >(%!% #%%s)oo elle 'a% !el

'al%te,%oato$

9$ Il p&%s&er (t%l%,,a >(est% !at% per a)>(%stare 7e%? tras#er%re so''e !% !earo

o a)&e solo )o'e QpoteQ per (lter%or% atta))&%$

3

Figura $.3.1.1: -se(pio i e(ail phishing


49/58

Gl% atta))&% !% >(esto t%po o &ao % /eere alte pro7a7%l%t !% s())esso

!all0* al 4 a )a(sa !el #atto )&e spesso >(este e'a%l !% p&%s&%/ soo s)r%tte

)o tra!(ttor% a(to'at%)%? per )(% soo preset% error% 'a sopratt(tto per)& /l%

(tet% a% >(al% 8e/oo o##erte so''e !% !earo s(l )oto )orrete o o##erte

troppo 8ata//%ose te!oo a o #%!ars%J % 7ro1ser? %oltre? &ao !e% s%ste'%

!% s%)(re,,a )&e soo % /ra!o !% r%)oos)ere e 7lo))are 'olte pa/%e !%

p&%s&%/ e )otr%7(%s)oo )os a teere 7assa >(esta per)et(ale$

Es%ste a)&e (a te)%)a part%)olare !% p&%s&%/? )&%a'ata ;spear p&%s&%/


50/58

e )o l0a88eto !e% so)%al et1or2? reper%re >(este %#or'a,%o% !%8etato

a)ora p%@ #a)%le$

"("2 Social p)i%)in#

;So)%al "&%s&%/(esta r%)er)a )ap%re >(ato #a)%l'ete p( ( p&%s&er ser8%rs% !e%

!at% !e% so)%al et1or2 per %)re'etare %l re!%'eto !el propr%o atta))o$

I >(esto st(!%o soo stat% se'pl%)e'ete a)>(%s%t% !at% !a 8ar% so)%al et1or2

e! stato #a)%l'ete e 8elo)e'ete )reato ( !ata7ase )o !e)%e !% '%/l%a%a

!% rela,%o% (sa!o )ra1l%/ e pars%/ tools )o'e le ;"erl L" l%7rar


51/58

"("( Il no.o al#oritmo di attacco

Data la per)et(ale !% s())esso !el t%po !% atta))o appea !es)r%tto s% potre77e

pesare !% ott%'%,,are l0al/or%t'o s#r(tta!o >(esta te)%)a$

Ua 8olta ter'%ata la pr%'a #ase !ell0atta))o? % )(% 8e/oo testate le 3

pass1or!? s% pro)e!e )o l0al/or%t'o or'ale )o /l% (tet% !% )(% s% soo

s)operte le pass1or!? 'etre per %l resto !e/l% (tet%? s% potre77ero (t%l%,,are %

!at% ra))olt% % pre)e!e,a el !ata7ase per )reare 'essa//% persoal%,,at% %

)(% /l% (tet% 8e/oo %8%tat% a )l%))are s( ( !eter'%ato l%2 )&e )oette

l0(tete %/aro a (a #%ta pa/%a !% lo/% !% Fa)e7oo2 ella >(ale se la 8%tt%'a

%ser%s)e % propr% !at% >(est% 8e/oo %8%at% all0atta))ate e alla 8%tt%'a

)o'pare ( 'essa//%o % )(% s% )o'(%)a )&e le )re!e,%al% %ser%te soo

errate 8ee!o po% re%!%r%,,ato alla 8era pa/%a !% Fa)e7oo2 per )er)are !%

9*

Figura $.3.2.1: Sche(a attacco )Social Phishing)


52/58

o )reare sospett%$

Se)o!o % !at% !ella r%)er)a s% potre77e atta))are )o s())esso (a per)et(ale'olto ele8ata !% (tet%? ella ta7ella poss%7%le osser8are )o'e el /%ro !%

po)&e %tera,%o% !ell0al/or%t'o %l ('ero !% (tet% )olp%t% r%s(ltere77e 'olto

alto$

Utenti 5 Pa%%&ord tro.ate Amici 6otale per%one

65 .+ =.= *45 3.355

.495 .+ 9+6+ *45 =3.6=5

9=55 .+ 5=53 *45 9+.655.5555 .+ 44355 *45 466+555

4.95555 .+ +.55555 *45 49*555555

45555555 .+ +*=55555 *45 +353555555

A >(este ;(o8e< 8%tt%'e s% potre77e po% s#errare !% (o8o ( atta))o !el

9+

Figura $.3.3.1: ese(pio sito phishing i Facebook


53/58

pr%'o t%po e a% ;s(perst%t%< r%pro8are )o la te)%)a !% ;so)%al p&%s&%/(est%oe$ Se % !at% %pot%,,at% tro8assero r%s)otro a)&e % ( test reale s%

arr%8ere77e a! atta))are ( ('ero alt%ss%'o !% (tet% el /%ro !% po)&e

%tera,%o% !ell0al/or%t'o$

Figura $.3.3.2: sche(a nuovo algorit(o i attacco

94

Sal8are t(tte le %#or'a,%o% !e/l% a'%)%

I!%8%!(are le pass1or! (t%l%,,a!o le %#or'a,%oera))olte

"er o/% pass1or! %!%8%!(ata )oetters%all0a))o(t

"er /l% (tet% !% )(% o s% %!%8%!(ata la pass1or!tetare )o %l so)%al p&%s&%/

"er o/% pass1or! 8%olata )oetters%all0a))o(t


54/58

9


55/58

Capitolo 7

Concl%ioni

Lo s)opo !% >(esta tes% 8al(tare l0e##%)%e,a !el t%po !% atta))o presetato

ella tes% ;L0** sette'7re tele'at%)o< !% A!rea V%tal%$

Nel +5*5 era stata pro8ata (a 8%ola,%oe totale !el * !e/l% (tet% atta))at%J

alla l()e !e% (o8% !at% s(lla s%)(re,,a !elle pass1or! (t%l%,,ate !a/l% (tet%?

>(esto !ato r%s(lta )o#er'ato a)&e a! %%,%o +5*4$

E0 stato r%s)otrato ( pro7le'a )&e potre77e re!ere %(t%l%,,a7%le >(esta

te)%)a !% atta))o % >(ato !al +5*5 a! o//% le pol%t%)&e s(lla pr%8a) !%

Fa)e7oo2 soo state )a'7%ate e l0e'a%l !e/l% a'%)% o p%@ ( !ato

a))ess%7%le? t(tta8%a /ra,%e a ( ser8%,%o !% a&oo a)ora poss%7%le r%sal%re

a/l% %!%r%,,% !% posta elettro%)a !e% )otatt%$

Co'e (lt%'o p(to stata presetata (a te)%)a )&e potre77e portare a

'%/l%orare ote8ol'ete la per)et(ale !% s())esso !ell0al/or%t'o: (t%l%,,a!o

(a te)%)a part%)olare !% p&%s&%/? )&e s% a88ale !elle %#or'a,%o% ra))olte %

%teret e s(% so)%al et1or2 r%/(ar!o a/l% (tet% e le loro rela,%o%? s% potre77e

)os arr%8are a! otteere le )re!e,%al% !% a))esso !el .+ !e/l% (tet%$

(esto !ato part%)olar'ete %teressate per)& tale per)et(ale !% s())essos%/%#%)&ere77e poter a8ere %l )otrollo totale !% >(as% 4 (tet% s( >(attro? (a

per)et(ale alt%ss%'a$

S% tratta >(%!% !% poter ese/(%re trasa,%o% o-l%e? 8%s(al%,,are % )ot%

7a)ar% e % loro 'o8%'et%? % !etta/l% !elle )&%a'ate? % ('er% !% )arte !%

)re!%to e (0%#%%t !% !at% persoal%$

99


56/58

S% p( >(%!% )o)l(!ere )&e a)ora o//% s%a poss%7%le s#errare ( atta))o

s#r(tta!o la te)%)a aal%,,ata e )&e tale te)%)a potre77e essere '%/l%orata ee resa p%@ e##%)a)e arr%8a!o a per)et(al% !% s())esso a)ora p%@ ele8ate?

'ette!o % ser%o per%)olo ( ('ero alt%ss%'o !% (tet%$

7"1 S.ilppi +tri

I >(esto la8oro o stato poss%7%le tro8are ( 'o!o 8al%!o !% %'ple'etare

s)r%pt per 7passare %l pro7le'a !e/l% %!%r%,,% e'a%l o p%@ 8%s(al%,,a7%l% )o

le A"I !% Fa)e7oo2? 7%so/ere77e testare se e##ett%8a'ete s%a poss%7%le

)rearlo per poter s#errare )os >(esto t%po !% atta))o$

Sare77e %oltre %teressate pro8are a! ese/(%re test s( ( )a'p%oe reale e

a77asta,a s%/%#%)at%8o !% persoe per 8er%#%)are se? attra8erso la te)%)a !el

;So)%al p&%s&%/


57/58

Bi-lio#ra+ia

* A!rea V%tal%$ L0** sette'7re tele'at%)o$ R%s)&% !% s%)(re,,a )a(sat% !a%

so)%al et1or2$ Master0s t&es%s? Al'a Mater St(!%or('- U%8ers%t !%

Bolo/a? +556+5*5$

+ A!rea V%tal%? V%ttor%o G&%%? Fa7%o "a,%er%$ E-apo)alpse o1: t&e

Mass%8e M(lt%-a Atta)2$

4 A!ele E$Ho8e? I!ra[%t Ra? Mar2 Ro7erts? Mal/or,ata Ur7as2a? Z%ta

Bre$ T&e "s)&olo/ o# Se)(r%t #or t&e Ho'e Co'p(ter User$ +5*+ IEEE

S'pos%(' o Se)(r%t a! "r%8a)$

To' N$ _a/at%)? Nat&a%el A$ [o&so? Mar2(s _a2o7sso? F%l%ppo

Me),er$ SOCIAL "HISHING$ Co'(%)at%o o# t&e A)'? O)to7er +55.? 8ol$95? o$ *5$

9 _osep& Boea(? Co'p(ter La7orator? U%8ers%t o# Ca'7r%!/e$ T&e

s)%e)e o# /(ess%/: aal,%/ a ao'%,e! )orp(s o# .5 '%ll%o pass1or!$

= Me!%as)ope E(rope$ "a-E(ropea La()& "resetat%o S(''ar$ Ma

+5*+

.So)%alBa2ers$ URL:&ttp:111$so)%al7a2ers$)o'#a)e7oo2-stat%st%)s

3Splas&!ata$ orst "ass1or! o# +5*+ P a! Ho1 to F% T&e'$

URL:&ttp:splas&!ata$)o'press"R*+*5+4$&t'

9.
http://www.socialbakers.com/facebook-statistics/http://splashdata.com/press/PR121023.htmhttp://www.socialbakers.com/facebook-statistics/http://splashdata.com/press/PR121023.htm


58/58

6 Mart% M$A$ De8%llers$ Aal,%/ "ass1or! Stre/t&$ _(l +5*5$

*5Fa)e7oo2De8elopers

URL:&ttps:!e8elopers$#a)e7oo2$)o'!o)sre#ere)eap%

URL:&ttps:!e8elopers$#a)e7oo2$)o'!o)sre#ere)eap%(ser

**"&%s&%/$ %2%pe!%a$ URL:&ttp:%t$1%2%pe!%a$or/1%2%"&%s&%/
https://developers.facebook.com/docs/reference/api/https://developers.facebook.com/docs/reference/api/user/http://it.wikipedia.org/wiki/Phishinghttps://developers.facebook.com/docs/reference/api/https://developers.facebook.com/docs/reference/api/user/http://it.wikipedia.org/wiki/Phishing

Documents

Salucci Simone Tesi