Facebook for iOS Gaining Support for iPhone 6s Live Photos Starting Today
Starting today, some Facebook users will be able to view Live Photos in their Facebook feeds using the Facebook for iOS app, reports TechCrunch. Introduced with the iPhone 6s and the iPhone 6s Plus, Live Photos are motion-enabled images that capture the moments just before and after a photo is taken.
Facebook plans to gradually roll out support for Live Photos, so while some Facebook app users will be able to post and view Live Photos as of this morning, others will not have access to Live Photos support until the beginning of 2016.
According to TechCrunch, uploading a Live Photo is done in the same way as uploading a regular photo, but there will be an option to choose whether to upload an image as a Live Photo or a regular photo during the uploading process. In a Facebook feed, Live Photos are denoted by a set of concentric circles and can be pressed to play.

You’ll have to tap that box manually with each Live Photo, and with good reason: once enabled on your iPhone, Live Photos are created with little to no thought on your part. It’s easy to forget the feature is even on. Add in the fact that Live Photos include 1.5 seconds of video and audio from before/after the instant you hit that shutter button, and it’s easy to imagine a scenario where you unwittingly capture something you… maybe don’t want to make public. By making it opt-in with each photo, there’s less of a chance you’ll accidentally upload stuff you forgot was even there.
While only the iPhone 6s and 6s Plus can take live photos, all iOS devices running iOS 9 can view them in the Facebook app. All iPhones from the iPhone 4s on are capable of supporting iOS 9.
Facebook is the second major social network to implement support for Live Photos. Tumblr added support two weeks ago.
Discuss this article in our forums
ICYMI: Helmet with OnStar, NASA’s 3D-printed engine and more
![]()
![]()
Today on In Case You Missed It: A helmet cam for motorcyclists has an emergency alert system that kicks in when a crash is detected. NASA 3D-printed parts for an engine that has withstand 6,000 degrees Fahrenheit. And the White House wants people to share in the spirit with a new virtual reality tour of the annual Christmas display.
If you can only read one story, catch up on the AirBnB bust of a host using hidden cameras.
Please share any interesting science or tech videos with us! Just tweet us with the #ICYMI hashtag to @mskerryd. And we know we spent way too much effort making this holiday special; please enjoy the specials for robots, health and transportation, coming at you all next week.
Facebook accuses bug hunter of unethical behavior

A security researcher who uncovered a major Instagram hole has gotten into a tiff with Facebook and opened up a can of worms about the boundaries of “bug bounty” programs. Wesley Wineberg is a well-known bug hunter, having received $24,000 from Microsoft for stopping a nasty Outlook worm. He then turned to Instagram (via Facebook’s bug bounty program), after receiving a tip about a potential vulnerability on an exposed Amazon server. After confirming the bug, he decided to dig a bit deeper, and that’s where things went wrong.
Wineberg eventually struck gold via a hole that could allow hackers to run code remotely, and submitted a ticket to the bug bounty team. Probing further, he managed to crack some weak employee passwords, including “changeme” and “instagram,” and submitted another report. Using that info, he obtained a key that allowed him to access server files.
To demonstrate the extent of the vulnerability, he downloaded several “buckets” of non-user data from Instagram’s Amazon servers. The data, he discovered, gave him access to source code and secret authentication codes — the so-called keys to the kingdom. “To say that I had gained access to basically all of Instagram’s secret key material would probably be a fair statement,” he said in a blog post. Furthermore, he told Forbes he had access to the servers for over a month before the bug was patched. “My concern is that someone else has gained access to [the data]. What are the chances someone else has found this?”
To say that I had gained access to basically all of Instagram’s secret key material would probably be a fair statement
Having paid Wineberg $2,500 for discovering the earlier bug, Facebook was far from grateful for the escalation, however. It declined to pay him for the later bug submissions, saying he had violated the terms of its bug bounty program. In a Facebook post, CSO Alex Stamos wrote that, “intentional exfiltration of data is not authorized by our bug bounty program, is not useful in understanding and addressing the core issue, and was not ethical behavior by Wes.” (Facebook added that “this bug has been fixed, the affected keys have been rotated, and we have no evidence that Wes or anybody else accessed any user data.”)
Stamos went on to accuse Wineberg of being ungrateful for the initial reward, expressed surprise that he planned to write about it, and most severely, contacted his employer, Synack. “It was reasonable to believe that Wes was operating on behalf Synack … [because] he has interacted with us using a synack.com email address and he has written blog posts that are used by Synack for marketing purposes,” Stamos said. (Wineberg says all his correspondence with Facebook was via his personal email until after Facebook contacted Synack.)
We couldn’t allow Wes to set a precedent that anybody can exfiltrate unnecessary amounts of data and call it a part of legitimate bug research.
According to Stamos’ article, he told Synack’s CEO that “we couldn’t allow Wes to set a precedent that anybody can exfiltrate unnecessary amounts of data and call it a part of legitimate bug research, and that I wanted to keep this out of the hands of the lawyers on both sides.” He added that he didn’t threaten legal action or ask for Wineberg to be fired, but “I did say that Wes’s behavior reflected poorly on him and Synack.”
For his part, Wineberg said that he was acting on his own behalf and that Synack, which employs him on a contract-only basis, had approved his private bug bounty work. He believed that Facebook’s terms-of-service for its white hat bounty program didn’t specifically exclude his actions, and that some companies, like Tumblr, are more likely to pay for bugs if researchers dig deeper to show “impact.” On the other hand, Microsoft, for one, doesn’t want companies to move beyond the basic proof-of-concept, but spells that out clearly in its rules.
In his blog, Wineberg provided a transcript of his email conversations with Facebook, which differ from Facebook’s account — he asked for permission to write about the bugs and didn’t complain about the payout, for instance. He added that “without contacting me at all, Facebook had gone directly for my employer … if the company was not as understanding of security research, I could have easily lost my job over this.” While he agreed that Facebook didn’t threaten legal action directly, he called Facebook’s mention of lawyers “intimidation.”
Facebook CSO Alex Stamos at Web Summit
Facebook’s Stamos — who has a sterling reputation as a pioneer in the security community — says he’s “proud that we run one of the most successful bug bounty programs” and that Facebook has paid out over $4.3 million so far. According to Forbes, he previously tweeted that “I will never spend budget on a security vendor who threatens researchers.” He admitted that “I don’t think we triaged the reports on this issue quickly enough,” and said “we will also look at making our policies more explicit and will be working to make sure we are clearer about what we consider ethical behavior.”
Many Reddit commenters said that Wineberg overstepped his bounds, since weak employee passwords are not code bugs and a lack of clear rules doesn’t give researchers carte blanche to hack sites. Furthermore, many security researchers believe that actually dumping data, even if it’s not sensitive user data, is a huge no-no.
However, others think that Wineberg was right to highlight the potential severity of the hole and that Stamos’ response was overly harsh. AVG security specialist Tony Anscombe told Engadget that his company also runs a bug bounty program with similar rules to Facebook. “If somebody came to us and said, ‘I found something outside the scope of [your rules],’ would we get upset? As long as they’ve done it in a responsible fashion, by disclosing it to us and not publishing the vulnerability, then of course we would talk to them. And I’d like to think we’d be friendly with them.” He added that the bounty programs are there for a reason. “They’re there to protect end-users.”
Via: Forbes
Source: Wesley Wineberg, Alex Stamos (Facebook)
Facebook introduces Live for verified pages
Verified Facebook pages are now able to share live video on Facebook for iOS, meaning sports teams, brands and media companies can offer more to followers.
These recent changes to Facebook’s mobile app mean verified pages can make the most of breaking news, behind-the-scenes video, Q&A sessions and announcements.
Speaking via a Facebook blog post, Vadim Lavrusik, Product Manager and Dave Capra, Engineering Manager, said:
“Over the past few months, we’ve been testing Live with a handful of verified Pages. We’ve been excited to see all the ways Live has been used so far, and can’t wait to see what’s to come.”
Stream hosts will see information on the names and number of viewers tuning in to their broadcasts. On top of that, comments will be displayed as they come in, and recordings will be automatically posted to a verified page when the show’s over. Of course, Facebook looks to be playing catch-up with Periscope and Meerkat when it comes to live-streaming tech, but what we’ve seen looks promising.
Facebook’s blog post on Live adds: “People who like your Page can discover your live videos in News Feed and through notifications on Facebook. While watching a live video, people can tap the Subscribe button to get notified the next time your Page goes live.”
Recent examples of Facebook Live in action saw AJ+ stream protests at the recent Paris Climate Talks. Elsewhere, Spanish footballing giants Real Madrid recorded their pre-match training before a game against Barcelona.
The team over at Facebook will be hoping the growth of verified pages helps in the battle against Twitter when it comes to covering rolling news.
In light of these changes, you can expect to see plenty of live video from big-name brands hitting your news feed.
Source: Facebook
Come comment on this article: Facebook introduces Live for verified pages
Listen to NPR clips right in your Facebook news feed

NPR will offer bits of its audio stories directly in your Facebook news feed throughout December and January, NPR Tech Reporter Aarti Shahani announced via Twitter today. (If that lede doesn’t encapsulate the idea of “old” media meeting new, we’re not sure what does.) The social-media experiment offers clips of audio and a link to “Listen on NPR,” which takes users to the full story, outside of Facebook. The experiment will be available via the Facebook iOS app and the site’s desktop version.
The embedded-audio feature doesn’t apply to every NPR story on Facebook, but you can see it in action on this post about Star Wars‘ legislative structure. This is all in preview mode throughout December, but beginning in January, NPR will post “several” audio clips to Facebook every day for 30 days. After that, the outlet will analyze data from these posts and advise its member stations on how to use strategies like it.
“Audio journalism is at the heart of what NPR is,” NPR Senior Director of Digital Products Joel Sucherman tells Engadget. “And Facebook plays an important part in our outreach to audiences. So it really was a great opportunity to experiment with the notion that audio can actually be a viral medium, while ensuring we continue to connect listeners back to NPR and NPR member stations.”
NPR posts all about its forays into the wild world of online networking on its Social Media Desk Tumblr. This move is tied to the latest expansion of Facebook Music Stories.
Source: NPR
Facebook’s live streaming is available to all verified pages

Facebook Live, the social network’s version of Periscope, was already available for “public figures.” Now, the folks in Menlo Park are giving all verified pages the chance to employ the tool. This means that you can expect more brands, sports teams and web personalities to begin live streaming with the help of the Facebook iOS app. Live videos allow Mark Zuckerberg & Co. to take on the likes of Twitter when it comes to breaking news and live event coverage.
If you’ll recall, Facebook lets you subscribe to a Page so you’ll be notified when that account is broadcasting. When it comes to good old fashioned news coverage, this is the latest expansion of Facebook’s efforts. This year, the company debuted Instant Articles and a Notify app to keep you up to date on the latest headlines. If celebs, journalists and others can make their announcements and cover events as they happen, there’s no doubt the social network is hoping you’ll spend more time browsing that News Feed. For a brief look at Live, check out the red carpet coverage from last month’s Hunger Games premiere.
Source: Facebook


















