search
Carter Cole LinkedInCarters Twitter PageCarter Cole on Facebook Carter Coles RSS
Showing posts with label facebook. Show all posts
Showing posts with label facebook. Show all posts

Tuesday, August 3, 2010

Get Facebook Insights about your domain! now not just fan page stats...

I was dinking around with Facebook graph API and Facebook connect and saw there is updated insights pages now... Ive seen my weekly stats for my fan page but then I saw little button to add a domain.

Heres the tag i threw in my <head> tag...


And thats all it took... i added both my root and subdomains because it lists as "all pages under www.cartercole.com and i didnt add the www so heres a peek at stats about likes and shares as well as demographics if you get enough clout...

I never knew this had been rolled out so if your trying to monitor your social reach on your sight you definably need to create your fanpage and verify ownership of your domain on insights

Facebook Insights add your domain today!

Tuesday, June 22, 2010

Social Engineering + Encoded Javascript = Facebook XSS The Attack Explained

Update

Ok good news guys... they have removed the page finally! but i reported them like 3 times and there was no "this page is hacking" button... i think its stupid this grew to over a few hundred thousand duped before Facebook found and removed it... i even tweeted to them about this article after i made some javascript to pull the pages likes and update the count dynamically

@facebook http://j.mp/95PvuT theres a page serving #XSS! read my analysis of #exploit code here #facebook #socialengineeringless than a minute ago via bitly



Facebook needs to have a better way to deal with these kinds of attacks... or at least a way to report them more easily...

Original Post

A friend who i never talk to just sent me to this page on facebook... its the "The Most CRAZIEST & EPIC Facebook Break Up Ever! Absolute MUST SEE!" i usally never trust these things but they had some custom FBML so i wanted to see what was up... after you like the page you get access to the exploit code ive copied below... It gives instructions to paste the code below into address bar. Now i totally thought it was suspect but ive seen things like this do cool easter eggs before so i tried it... then i get a notification "Your invitations have been sent." doh! ive been duped... but i dont feel so bad because they have

150,490 likes

 so im just one of many. now lets see whats going on...

You must view original post to see code...


Now let me just run some carter magic on this and lets see what its doing... first it creates a link on the page, then simulates a mouse event to that link... there are then 3 function set on timers to hide the dialog, select all contacts, submit the form and then replace the container with a iframe serving spam...

i gotta admit pretty well done... get the users to run the exploit for you and because facebook makes it so hard to report hackers i bet i have infected many of my friends and have no way of stopping or recovering the notifications. I looked everywhere and i cant find any way to see a log of what ive sent and how i can recover those messages

Lame Facebook Lame!

Thursday, April 1, 2010

My Status Update Optimizer - Better SEO from Facebook...

 hello all, i was reading SeoMoz today and they released their Facebook Status Optimizer... so a little work later im excited to announce that we have our own!

Start Using Carter's Facebook Status Optimizer

fully funtional it can create the most click worth updates that users have no choice but to see it... get ready to see a big jump in your CTR!

Monday, December 21, 2009

Optimizing for Facebook Share with Cloaking (but its good cloaking)

Social media sites have made it easy for the everyday user to share content and going viral is now the name of the game... as a SEO guy i was wanting to optimize my CTR for my Facebook links the same way I engineer the text in tweets to increase the likelihood a user will interact... I quickly found Facebook's useful article about what tags they use to generate the links users share and quickly whip something up and give it a test...


heres the code:
<head>
<title>Carter Tomorrow Fund Donations</title>
<meta name="title" content="Help Give to the Carter Tomorrow Fund" /> 
<meta name="description" content="Show your support and help out with a small gift" /> 
<link rel="image_src" href="http://cartercole.com/images/exp.png" />

and get this result:

Notice how i have overridden the default title, description and image Facebook would share for this document... this is very neat in itself :) it can help us get our shared links noticed more and makes sure the user doesn't use wrong image on the page they are sharing. But it does have one disadvantage :( we have to live with these meta titles and descriptions for the rest of our users(not cool) so we employ a trick known as cloaking. Cloaking is usually referring to showing different content to search engines than regular users and is frowned upon but this type of cloaking is good cloaking because it HELPS the user. We will cloak only these special tags in the head to show when the Facebook's UA [facebookexternalhit] requests the page and show our other meta tags(the ones optimized for SEO instead of social media) to everyone else.

Here's both flavors of the code:

ASP

<head>
<%if(instr(Request.ServerVariables("http_user_agent"),"facebookexternalhit") > 0) then
'facebook%>
<meta name="title" content="Custom Facebook title for share link" /> 
<meta name="description" content="Description of link Facebook uses" /> 
<link rel="image_src" href="http://site.com/betterimageforpage.png" />
<%else%>
<meta name="title" content="Different title than Facebook sees" /> 
<meta name="description" content="Whatever description you want search engines to see" /> 
<%end if%>
And the other version:

PHP

<head>
<?if (strrpos($_SERVER['HTTP_USER_AGENT'], "facebookexternalhit") === false){
//not facebook?>
<meta name="title" content="Different title than Facebook sees" /> 
<meta name="description" content="Whatever description you want search engines to see" /> 
<?}else{?>
<meta name="title" content="Custom Facebook title for share link" /> 
<meta name="description" content="Description of link Facebook uses" /> 
<link rel="image_src" href="http://site.com/betterimageforpage.png" />
<?}?>
this code will show the custom social media text to Facebook and give everyone else the correct meta title and description... if you have any questions get me on twitter im @cartercole
Hope it helps and have a great day / night / whenever you happen to be reading this

Monday, December 7, 2009

google has gone realtime!

looks like Google finally has their realtime search running kinda like bings twitter search but better... and "Of course, none of this would be possible without the support of our new partners that we're announcing today: FacebookMySpaceFriendFeedJaiku and Identi.ca — along with Twitter, which we announced a few weeks ago" (from Google blog post)

i tried some of the searches and didn't see anything new.

i got it working!

for this query: search for [realtime search] on experimental Google. @mattcutts re-tweeted a link to this page that seems to use realtime search more. this is the way cool video that shows it working (and its got cool music) ill be posting more here as i find out more so check back soon

Tuesday, September 22, 2009

googles picasa facial recognition works perfect

I just installed Picasa and I saw the post about facial recognition so i am testing it out. It works perfectly but all I want to know is how do I mash it with Facebook? Check this out



its detecting my face and is trained once I give it hints of the new angles of my face. I have always hated the repetitiveness of tagging and wanted to hook facial recognition into Facebook for awhile and ill I am asking Google is how I can do it with this code? Is it open source? Or can Google let me borrow the code so I can do it? It’s such an awesome technology and with all the data becoming open it’s so fun for me to be a developer right now. It’s obvious that the Picasa facial recognition is superior. I know dealing with the privacy of facial recognition on a social media site will be difficult but nothing worse than that town that kicked out the street view car right? Who would I even talk to at Google for that?I guess ill tweet at @mattcutts ill bet he can point me in the right direction. God I love web 2.0, social media,viral marketing,twitter world that we live in now woohoo


Thursday, September 3, 2009

Carter Cole the Guru | Great link bait and viral marketing



We all love ourselves so when i saw this little flash ad that Cisco made i decided i would actually click on it this time. It connected to my webcam took my picture and made this awesome movie. they allow you to share on Facebook as well as Twitter and you can even embed it. This is free advertising and i wanted to make a point of how simple it can be make something everyone is going to want to share and then make it easy to do so. Retweet buttons as well as making sure your pages have the correct markup so Facebook can create a pretty link for you.

this is how my donation page looks when shared in Facebook
cool huh? it has a custom description and title different from what would normally be shared by Facebook.
i use 3 meta tags



so now you know how to add some support to share your page on Facebook and don't forget carter is a total web guru

thanks for the video Cisco! Great marketing