网络安全

政策详情

更新日志
政策依据
我们知道,用户安全涵盖其个人信息、账户、个人主页及其管理的其他 Meta 实体的安全,从更宏观角度来说,还涉及我们产品和服务的安全。我们希望营造真实、开放且安全的环境,而企图以欺骗或入侵手段收集个人敏感信息或执行未授权访问,与我们的这一愿景相悖。
我们禁止:
企图通过未经授权的手段入侵或访问账户,包括:
  • 通过欺骗手段或未经账户、个人主页或其他 Meta 实体所有者明确许可,访问非本人所拥有的账户、个人主页或实体。
  • 取得、捕获或索要其他用户的登录信息、个人信息、或其他敏感用户信息,用于未经授权的访问,包括通过下列手段:
    • 网络钓鱼,定义为:一种经过精心设计的通信内容或网站,模仿可信度或信誉更高的真实通信内容或网站,意图通过欺骗手段窃取用户的敏感信息。
    • 社交工程攻击,例如,反复或持续尝试获取或获得常见账户或密码恢复问题的答案。
    • 恶意软件、灰色软件、间谍软件或其他恶意代码,如下所述。
企图分享、开发、托管或分发恶意代码或有害代码,包括:
  • 鼓励或欺骗用户下载或运行会危及用户线上安全或数据安全的文件、应用或程序,包括但不限于:
    • 恶意软件,定义为:一种意图危害系统或未经授权访问系统的代码或软件。这包括意图危害计算机系统的程序,以及旨在窃取受害者钱财的软件,例如勒索软件。
    • 间谍软件,定义为:一种代码或软件,在未经用户同意的情况下收集用户数据并发送给第三方,或将数据用于非法目的(例如,性勒索、敲诈、非法访问系统)。
    • 灰色软件,定义为:一种代码或软件,会损坏硬件或软件的效能且难以从计算机系统或网络中清除。
  • 在我们平台内外创建、分享或托管恶意软件,包括浏览器扩展程序和移动应用程序,使我们的用户或产品和服务面临风险。
  • 威胁实施、承认或实施入侵行为 — 包括分享或推广使人们能够规避安全系统的软件、课程或产品,包括帮助入侵软件或盗取凭证的软件
  • 提供允许使用违规链接的网络基础设施,包括网站托管服务、域名系统服务器和广告网络,而大部分这类链接违反了社群守则中“垃圾信息”或“网络安全”部分的规定。
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Threatening, admitting to, or enabling hacking - Including by Ssharing or advertising software, courses, or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on our services violate the spam or cybersecurity sections of the Community Standards.
This policy has been updated to reflect the consolidation of all existing policies related to malicious hacking under the Cybersecurity policy.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other FacebookMeta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagramour services violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive userpersonalinformation or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user personalinformation or engage in unauthorized access through the abuse of our platform, products, or services.
Do not:We do not allow:
Attempts to compromise or access accounts via unauthorized means, including:
  • Accessing accounts, profiles, or other Meta, Inc., entities other than one’s own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Obtaining, acquiring or requesting another user’s login information, personal information, or other sensitive user information for the purpose of unauthorized access, including through the following tactics:
    • Phishing, defined as the practice of creating communications or websites that are designed to look like more trusted or reputable communications or websites for the purpose of fraudulently acquiring sensitive user information.
    • Social Engineering, such as repeated or consistent attempts to harvest or acquire the answers to common account or password recovery questions.
    • Malware, Greyware, Spyware or other malicious code, as described below.
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information or other sensitive data - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
Attempts to share, develop, host, or distribute malicious or harmful code, including:
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Encouraging or deceiving users to download or run files, apps, or programs that will compromise a user’s online or data security, including, but not limited to:
    • Malware, defined as code or software designed to harm or gain unauthorized access to systems. This includes programs designed to harm computer systems, as well as software designed to extract money from victims, like ransomware.
    • Spyware, defined as code or software that collects data on users and sends it to third parties without the informed consent of the user, or that uses the data for illicit purposes (e.g., sextortion, blackmail, illicit access to systems).
    • Greyware, defined as code or software which detracts from the use of hardware or software and may be difficult to remove from a computer system or network.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Sharing or advertising software or products that enable people to circumvent security systems, including software that encourages hacking of software, passwords, or credentials
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
Policy Rationale
We recognize that the safety of our users includes the security of their personal information, accounts, profiles and other Meta entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open and safe atmosphere that we want to foster.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, gather sensitive information through deceptive means, or attempt to engage in unauthorized access, including:
  • Gaining access to accounts, profiles Facebook, Inc. entities, or user data other than your own through deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquire or request another user’s login credentials, personal information, or other sensitive informationdata - whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites) or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing or hosting malicious software including browser extensions and mobile applications, on or off the platform that put our users or products and services at risk.
  • Providing online infrastructure, including web hosting services, domain name system servers and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the spam or cybersecurity sections of the Community Standards.
We are making minor clarifications to the policy to better reflect the types of deceptive links we remove, including deceptive links that lead elsewhere on our family of apps and services.
Policy Rationale
We recognize that the safety of our users extends toincludes the security of their personal information and accounts and our services.accounts, profiles, and other Facebook entities they may manage, as well as our products and services more broadly. Attempts to gather sensitive personal information or engage in unauthorized access by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through or engage in unauthorized accessthe abuse of our platform and products., and products, or services.
Do not:
Attempt to compromise user accounts, profiles, or other Facebook entities, abuse our products or services, or gather sensitive information through unauthorizeddeceptive means,, or attempt to engage in unauthorized access,defined as:including:
  • Gaining access to any accounts , profiles, Facebook, Inc. entities, or user data other than your ownthrough deceptive means or without explicit permission from the account, profile, or entity owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security, including through malicious software or websites.. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Attempting to obtain, acquireAcquiring or requesting another user’s login credentialsor other sensitive information, , whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites)or the use of malicious software or websites..
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information, either on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Creating, sharing, or hosting malicious software browser extensions and mobile applications, on or off platform that put our users or products and services at risk.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
Section 19: Cybersecurity:
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
We recognize that the safety of our users extends to the security of their personal information and accounts and our services. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster, and can be used to compromise user accounts and our services. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Section 19: Cybersecurity (New):
Policy Rationale
We recognize that the safety of our users extends to the security of their personal information. Attempts to gather sensitive personal information by deceptive or invasive methods are harmful to the authentic, open, and safe atmosphere that we want to foster. Therefore, we do not allow attempts to gather sensitive user information through the abuse of our platform and products.
Do not:
Attempt to compromise user accounts or gather sensitive information through unauthorized means, defined as:
  • Gaining access to any account or user data other than your own without explicit permission from the account owner.
  • Encouraging or deceiving users and entities to download or run files or programs that will compromise a user’s online or data security. Such files and programs will be deemed malicious software or "malware" if they harm or gain unauthorized access to a computer, device, or network.
  • Acquiring or requesting another user’s login credentials, whether explicitly or through deceptive means such as phishing (e.g. fake surveys designed to capture log-in info or links to fake login pages or impostor websites).
  • Attempting to obtain the sensitive information of others such as usernames, passwords, or other personal information, through deceptive means or the use of malicious software or websites.
  • Publicly sharing your own or others’ login information on platform or through a third party service.
  • Creating, sharing, or hosting malicious software or malicious browser extensions to compromise accounts or gain access to user data.
  • Providing online infrastructure, including Web Hosting Services, Domain Name System servers, and ad networks that enables abusive links such that a majority of those links on Facebook or Instagram violate the Spam or Cybersecurity sections of the Community Standards.
用户体验
通过一些示例了解 Facebook 用户所体验到的政策执行是怎样的,例如举报您认为不应当出现在 Facebook 上的内容、被告知您违反了我们的社群守则,以及看到给特定内容添加的警告画面分别是怎样的体验。
注意:我们从未停下优化的脚步,因此这里所呈现的用户体验可能会较实际情况稍有滞后。
用户体验
举报
用户体验
举报后通信
用户体验
内容移除体验
用户体验
警告画面
政策执行
我们的政策在全球通行,并且对所有 Facebook 用户一视同仁。
审核团队
我们在全球拥有一支包含 15,000 多名审核人员的团队,负责全天候保障 Facebook 用户的安全。
与利益相关方沟通
参考外部专家、学者、非政府组织和政策制定者提供的专业意见制定 Facebook 社群守则。
获取有关网络安全的帮助
了解在 Facebook 看到违反我们社群守则的内容和行为时,您应该怎么做。
请访问我们的帮助中心