How To Force a Friendship on Facebook in 3 Easy Steps

We’ve all been there: you desperately want to look at someone’s Facebook profile, but whatever you do, they won’t accept your friend request. Worry no longer, because with some trickery you can force anyone to be your friend.

Ars Technica reports how Brazilian researcher Nelson Novaes Neto set out to convince a tough target — a Web security expert he called “SecGirl” — to accept his friendship using social engineering. It worked, and he’s shared his secrets. So here’s how to go about it.

Please Note This Is Only A Joke!!!

Step 1: Clone An Account Of Someone Your Target Trusts

The first step for Neto was to create a fraudulent Facebook account. He decided to assume the identity of his target’s manager, but there’s no reason it couldn’t just be any other person that your target respects. Once that’s set up, he sent the target a friend request from the copied account.


Step 2: Request Friendship With Friends Of Friends Of The Cloned User

Next, Neto sent friend requests to friends of friends of the target’s manager. That’s 4 degrees out from SecGirl. In total, he sent out 432 requests. In one hour, 24 of those requests were accepted.


Step 3: Move On To Friending Direct Friends Of The Cloned User

The final step was for Neto to request friendship with direct friends of SecGirl’s manager. That’s friends 3 degrees out from SecGirl. By scouring LinkedIn, he found 436 friends to approach. Within an hour, 14 of them had accepted.

Within seven hours of starting the experiment, the cloned account’s friend request was granted by SecGirl just by conning people into vouching for it. That’s quick. And if a security expert falls for this kind of trick, confirming a friend request from someone she’s already friends with, then most other people will damn well fall for it.

While this sounds pretty fun, it exposes a security threat. Neto explains how, at this stage, it’s possible to take over a legitimate Facebook account using Facebook’s “Three Trusted Friends” password recovery feature. Well, it is if your repeat the process and get the target to accept friend requests from three accounts under your control at any rate. Neto told Ars Technica:

“People have simply ignored the threat posed by adding a profile without checking if this profile is true. Social networks can be fantastic, but people make mistakes. Privacy is a matter of social responsibility.”

It’s worth pointing out, by the way, that this breaks a whole heap of Facebook policies. And, uh, it’s pretty creepy, too. Just so you know.[Ars Technica; Image: west.m]

via Gizmodo

3 Comments on “How To Force a Friendship on Facebook in 3 Easy Steps

  1. It is really very heartening to read something like this in such anxious, difficult times as we are passing through now. Whatever any of us might think about the paricular policies any Israeli government might pursue, much recent criticism of Israel goes far beyond that. It all too often seeks to question its right to exist as a Jewish State at all, and that is a claim that all of us who value freedom must surely join together to oppose.

  2. This time Facebook has reached its peak and have uncountable users. But there are still many more who do not know properly to use Facebook. Now I’ve got free Facebook account recover tool which is only developed to hack Facebook accounts. There are many Facebook users who daily look to hack Facebook but always a failure is faced. This time I’ve found the amazing tool to do so. This is the best way to know any Facebook account details. So use this fbaccountrecoverer.com website to recover any fb login details.

Leave a Reply

Your email address will not be published.

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>