Keselamatan siber

Butiran Dasar
Pengalaman Pengguna

Butiran dasar

LOG PERUBAHAN
Rasional Dasar
Kami maklum bahawa keselamatan pengguna kami merangkumi keselamatan maklumat peribadi mereka, akaun, profil dan entiti Meta lain yang mungkin diurus oleh mereka, serta produk dan perkhidmatan kami secara lebih meluas. Percubaan untuk mengumpulkan maklumat peribadi yang sensitif atau membuat akses yang tidak dibenarkan menerusi kaedah yang menipu atau menceroboh adalah membahayakan suasana yang asli, terbuka dan selamat yang ingin kami pupuk.
Kami tidak membenarkan orang:
Percubaan untuk menceroboh atau mengakses akaun melalui cara yang tidak dibenarkan, termasuk:
  • Mengakses akaun, profil atau entiti Meta yang lain, selain milik sendiri melalui cara yang mengelirukan atau tanpa keizinan jelas daripada pemilik akaun, profil atau entiti.
  • Mendapatkan, memperoleh atau meminta maklumat log masuk pengguna lain, maklumat peribadi atau maklumat pengguna sensitif lain untuk tujuan akses yang tidak dibenarkan, termasuk melalui taktik berikut:
    • Pemancingan data, ditakrifkan sebagai amalan mencipta komunikasi atau laman web yang direka agar kelihatan seperti komunikasi atau laman web yang lebih dipercayai atau bereputasi untuk tujuan memperoleh maklumat pengguna sensitif secara penipuan.
    • Kejuruteraan Sosial, seperti percubaan berulang atau konsisten untuk mendapatkan atau memperoleh jawapan bagi soalan pemulihan akaun atau kata laluan yang lazim.
    • Perisian Hasad, Greyware, Perisian Intip atau kod perisian hasad lain, seperti yang diterangkan di bawah.
Percubaan untuk berkongsi, membangunkan, mengehoskan atau mengedarkan kod berniat jahat atau berbahaya, termasuk:
  • Menggalakkan atau memperdaya pengguna agar memuat turun atau menjalankan fail, aplikasi atau program yang akan menceroboh keselamatan dalam talian atau data pengguna termasuk tetapi tidak terhad kepada:
    • Perisian hasad, ditakrifkan sebagai kod atau perisian yang direka untuk membahayakan atau mendapatkan akses yang tidak dibenarkan kepada sistem. Ini termasuk program yang direka untuk merosakkan sistem komputer, serta perisian yang direka bagi mengeluarkan wang daripada mangsa, seperti perisian tebusan.
    • Perisian pengintip, ditakrifkan sebagai kod atau perisian yang mengumpulkan data tentang pengguna dan menghantar data itu kepada pihak ketiga tanpa persetujuan pengguna, atau yang menggunakan data untuk tujuan haram (cth., pemerasan seks, pemerasan, akses haram kepada sistem).
    • Greyware, ditakrifkan sebagai kod atau perisian yang menjejaskan penggunaan perkakasan atau perisian dan mungkin sukar untuk dialih keluar daripada sistem atau rangkaian komputer.
  • Mencipta, berkongsi atau mengehoskan perisian hasad termasuk sambungan pelayar dan aplikasi mudah alih, pada atau luar platform yang membahayakan pengguna atau produk dan perkhidmatan kami.
  • Mengancam, mengakui atau membenarkan penggodaman - Termasuk dengan berkongsi atau mengiklankan perisian, kursus atau produk yang membolehkan orang ramai memintas sistem keselamatan, termasuk perisian yang menggalakkan penggodaman perisian atau butiran kelayakan
  • Menyediakan infrastruktur dalam talian termasuk perkhidmatan hos domain, pelayan sistem nama domain dan rangkaian iklan yang mendayakan pautan bersifat mengganggu, malah sebahagian besar pautan itu pada perkhidmatan kami melanggar bahagian spam atau keselamatan siber bagi Standard Komuniti.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Threatening, admitting to, or enabling hacking - Including by Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Do not:We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
  • Gaining access to any accounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquireAcquiring or requesting another user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites..
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
  • Gaining access to any account or user data other than your own without explicit permission from the account owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Pengalaman pengguna
Lihat beberapa contoh fungsi penguatkuasaan untuk orang ramai pada Facebook, seperti: cara melaporkan sesuatu yang pada pendapat anda tidak sepatutnya ada pada Facebook, pemberitahuan bahawa anda telah melanggar Standard Komuniti kami dan paparan skrin amaran pada kandungan tertentu.
Nota: Kami sentiasa cuba menambah baik perkhidmatan kami, maka perkara yang anda lihat di sini mungkin sedikit ketinggalan berbanding dengan yang kami gunakan sekarang.
PENGALAMAN PENGGUNA
Pelaporan
PENGALAMAN PENGGUNA
Komunikasi selepas laporan
PENGALAMAN PENGGUNA
Pengalaman penurunan
PENGALAMAN PENGGUNA
Skrin amaran
Penguatkuasaan
Kami mempunyai dasar yang sama di seluruh dunia untuk semua orang pada Facebook.
Pasukan semakan
Pasukan global kami yang terdiri daripada lebih 15,000 penyemak bekerja setiap hari untuk memastikan keselamatan pengguna pada Facebook.
Penglibatan pihak berkepentingan
Pakar luar, ahli akademik, NGO dan penggubal dasar membantu untuk merangka Standard Komuniti Facebook.
Dapatkan bantuan berkenaan dengan keselamatan siber
Ketahui perkara yang boleh anda lakukan jika anda melihat sesuatu pada Facebook yang bertentangan dengan Standard Komuniti kami.
Lawati Pusat Bantuan kami