Kaamanan Siber

Rincian kabijakan

LOG PERUBAHAN
Dhasar Kabijakan
Kita ngakoni yen kaslametan pangguna kita nyakup kaamanan informasi pribadi, akun, profil, lan entitas Meta liyane sing mbokmenawa diatur dheweke, sarta prodhuk lan layanan sing luwih akeh. Nglumpukake informasi pribadi sensitif utawa melu ngakses sing ora sah kanthi cara ngapusi utawa invasif sing mbebayani kahanan asli, tinarbuka, lan aman sing pengin kita tuwuhake.
Kita ora ngidini:
Upaya kanggo mbobol utawa ngakses akun liwat cara sing ora sah, kalebu:
  • Ngakses akun, profil, utawa entitas Meta saliyane sing sampeyan duwe kanthi cara sing ngapusi utawa tanpa idi sing cetha saka pamilik akun, profil, utawa entitas kasebut.
  • Ngentukake, nguwasani, utawa njaluk informasi login, informasi pribadi, utawa informasi pangguna sing sensitif liyane kanggo tujuan akses sing ora sah, kalebu liwat taktik ing ngisor iki:
    • Phishing, yaiku praktik nggawe komunikasi utawa situs web sing dirancang supaya katon kaya komunikasi utawa situs web sing luwih bisa dipracaya utawa duwe reputasi apik kanggo ngentukake informasi pangguna sing sensitif kanthi cara curang.
    • Rekayasa Sosial, kayata upaya sing dibolan-baleni utawa konsisten kanggo nglumpukake utawa ngentukake wangsulan tumrap pitakonan umum kanggo pamulihan akun utawa sandi.
    • Malware, Greyware, Spyware utawa kode sing mbebayani liyane, minangka sing diterangake ing ngisor iki.
Upaya kanggo ngandumake, ngembangake, ngelola, utawa nyebarake kode sing mbebayani utawa ngrugekake, kalebu:
  • Ngajak utawa ngapusi pangguna supaya ngundhuh utawa mbukak file, nglakokake aplikasi, utawa program sing bakal mbebayani kaamanan online utawa data pangguna, kalebu, ananging ora winates kanggo:
    • Malware, yaiku kode utawa perangkat lunak sing dirancang kanggo mbebayani utawa ngentukake akses sing ora sah menyang sistem. Iki kalebu program sing dirancang kanggo mbebayani sistem komputer, sarta perangkat lunak sing dirancang kanggo njupuk dhuwit saka korban, kayata ransomware.
    • Spyware, yaiku kode utawa perangkat lunak sing nglumpukake data babagan pangguna lan ngirim data kasebut menyang pihak katelu tanpa idi saka pangguna, utawa nggunakake data kasebut kanggo tujuan sing dilarang (contone, sekstorsi, pemerasan, akses sing dilarang menyang sistem).
    • Greyware, yaiku kode utawa perangkat lunak sing ngganggu panggunaan perangkat keras utawa perangkat lunak lan mbokmenawa angel dibusak saka sistem utawa jaringan komputer.
  • Nggawe, ngandumake, utawa ngelola perangkat lunak sing mbebayani kalebu ekstensi browser lan aplikasi seluler, ing sajrone utawa sajabane platform sing nyababake risiko tumrap pangguna utawa prodhuk lan layanan.
  • Ngancam, ngakoni, utawa nyokong tumindak ngretas - Kalebu kanthi ngandumake utawa nggawe iklan perangkat lunak, kursus, utawa prodhuk sing nyababake wong bisa ngendhani sistem kaamanan, kalebu perangkat lunak kanggo ngretas perangkat lunak utawa kredensial.
  • Nyedhiyakake infrastruktur online, kalebu layanan hosting web, server sistem jeneng domain, lan jaringan iklan sing ngidini sesambungan apus-apus, kanthi mayoritas sesambungan kuwi ing layanan kita nglanggar bagean spam utawa kaamanan siber Standar Komunitas.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Threatening, admitting to, or enabling hacking - Including by Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Do not:We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
  • Gaining access to any accounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquireAcquiring or requesting another user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites..
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
  • Gaining access to any account or user data other than your own without explicit permission from the account owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Pangalaman pangguna
Deleng saperangan conto bab panegakan kanggo wong-wong ing Facebook, kayata: cara nglapurake prakara sing miturut sampeyan ora oleh ana ing Facebook, dikabari yen sampeyan wis nglanggar Standar Komunitas kita, lan ndeleng layar panyaruwe tumrap konten tartamtu.
Cathetan: Kita tansah ngupayakake dadi luwih apik, mula sing sampeyan deleng ing kene mungkin rada kadaluwarsa dibandhingake karo sing kita gunakake saiki.
PANGALAMAN PANGGUNA
Nglapurake
PANGALAMAN PANGGUNA
Komunikasi sawise lapuran
PANGALAMAN PANGGUNA
Pangalaman pambusakan
PANGALAMAN PANGGUNA
Layar panyaruwe
Panegakan ukum
Kita duwe kabijakan sing padha ing saindenging ndonya, kanggo sapa wae sing ana ing Facebook.
Tim paninjoan
Tim global kita sing luwih saka 15.000 paninjo kerja saben dina kanggo njaga supaya Facebook aman.
Interaksi pamangku kapentingan
Ahli saka njaba, akademisi, LSM, lan panentu kabijakan mbantu menehi info kanggo nggawe Standar Komunitas Facebook.
Njaluk bantuan babagan kaamanan siber
Sinaoni apa sing bisa sampeyan tindakake nalika ndeleng samubarang ing Facebook sing nglanggar Standar Komunitas kita.
Bukak Pusat Pitulungan