阿關

尾牙

是辦桌,應該有100桌

生日禮物2

西天

金黃色的

雨過天晴

在中研院出現的彩虹

ACIA

公眾創用國際研討會

曹洞宗東和寺

隱藏在城市裡面

新相簿

Kingkiang.smugmug.com

小西耍白癡

吞叉子

新手機新氣象

拍攝我的耳機套

你重要的照片在Flickr上一點都不保險

聲明一下，我有備份啦，貼出來只是要提醒警告大家小心，並且自行備份！！

After I communicated with the CC and PM of flickr, I realized my photos and metadata won't be restored. I decide to post this on my flickr page to remind all flickr users:
1. You should backup your photos by yourself, because flickr can't restore any of your photos or metadata once it's deleted. Even though you tell them you are not willing to delete it, no matter it's virus or phishing attack.(But why should I pay for a internet storage which can't backup my precious files for me?)
2. Flickr is very proud of their security, so they do nothing in their account deleting process. All rechecking methods are unnecessary, ex.CAPTCHA(Completely Automated Public Turing test to tell Computers and Humans Apart). If your account was deleted, it's all your fault. Because you are stupid or a internet idiot.

會公佈這件事只是在跟flickr和Yahoo奮戰幾天後確定沒有回復的可能性，想提醒大家注意：
1. Flickr不會幫你備份，你得自己備份(話說回來，如果不幫忙備份，我幹嘛付錢用pro，就是覺得自己備份不保險才付錢啊）
2. Flickr對自己的安全機制極有信心，有信心到連刪除帳號頁面CAPTCHA(Completely Automated Public Turing test to tell Computers and Humans Apart)這類圖形驗證都不放，所以帳號被刪都是使用者白目，亂點假頁面或是把自己的密碼給別人，所以損失都是使用者白目，Flickr不會有錯。
-----------------------------------------------------------------------------

My Photos(total 14,933 photos) are all deleted by a virus attack. I only plug a SD card from my friend into PC. In one second, my Flickr account was deleted and Flickr page showed "Kingkiang's account is no longer active ". The virus might attack the bug of account merging between Yahoo! and Flickr.
我是Flickr使用了三年的付費使用者，上面有一萬五千張重要的照片還有三年多來重要的回憶，以及重要的交流紀錄，每年我都乖乖的繳錢給flickr。
上禮拜四（1/3）我用了朋友一張相機的記憶卡，要讀取照片，插進電腦之後，沒想到這張記憶卡可能有病毒，一秒鐘馬上把我的flickr帳號連帶一萬五千張照片刪除了，這病毒可能走Flickr和Yahoo帳號合併的漏洞，而flickr的網頁面對這麼重要的步驟網頁上居然連打認證碼的機制都沒有，就讓他直接通過去刪除帳號。
跟flickr客服幾番來回，都把責任推給使用者，完全無意要解決此問題，說一旦刪除就不可能回復。這麼大的公司居然連資料庫備份的機制都沒有。後來又透過內部的產品經理，得到的答案也類似。
搜尋網路上一堆類似的受害者，他們仍然用如此簡陋的認證機制和資料庫設計來面對使用者珍貴的照片和回憶。而且這些人還是付錢的使用者，真是%&^%#^&$。

I was shocked about it and try to find solutions through Yahoo! and Flickr's customer care. The only thing they said was "I am sorry". Below is the correspondences between Flickr's customer care and me:
----------------------------------------------------------------------------------------------
Thanks for writing in to Flickr Customer Care.

I'm sorry to report that your Flickr account was deleted by someone signed in as you. It appears that your account was the victim of a phishing attack, wherein you were tricked into entering your signin details (Yahoo! ID and password) into a fake Flickr page. The hacker then signed in to your account and deleted it.

Unfortunately, photos and their metadata, once deleted from Flickr, cannot be recovered.

Below is further information that may be useful to understand what phishing is, how it works and how you can protect yourself:

en.wikipedia.org/wiki/Phishing

www.fraud.org/tips/internet/phishing.htm

www.ftc.gov/bcp/conline/pubs/alerts/phishingalrt.htm

I am able to RESTORE your Pro account. The remaining Pro will be restored with the account, but none of the previous photos or metadata will return.
----------------------------------------------------------------------------------------------
Dear Joe,
thanks for your reply. I have used flickr pro 3 years, and have more than 10 thousands photos. Is it possible to recover my photos and metadata. They are really important to me.
Best,
Kingkiang
-------------------------------------------------------------------------------------------
kingkiang:

It was actually 14,933 photos. And I regret to have to tell
you that they're all gone from Flickr.

As stated previously:

"Unfortunately, photos and their metadata, once deleted
from
Flickr, cannot be recovered."

Again, I'm sorry about this.

Regards,
Joe
-------------------------------------------------------------------------
thanks for your kindly reply. I think I will sue your company for this serious mistake, and tell all flickr users that their photos are not safe on flickr. Unless you can give me a better reason.
Kingkiang
-------------------------------------------------------------------------------------
Hello kingkiang:

We took a look into the issue with this account. It appears
your account was deleted by someone who had access to your
Yahoo! ID and password. Investigating, we think there is a
possibility your account was phished. Please read this
information:

www.flickr.com/help/website/#236

In short, in most cases when someone's account has been
phished, a link to a fake Flickr page was left on a photo.
Often it is a link that was left for a bogus award. These
are usually fake login pages that send the ID and password
to the person who has posted this fake page. In a small
number of cases, invasive software has been installed that
logs keystrokes on the Windows operating system. We have no
way to know how you were affected, we do want to make this
clear.

Unfortunately the content from the account cannot be
restored. When accounts are deleted by someone who has
access to the ID and password, we presume it to be the
person who created that ID and is acting upon their wishes
and then the data is deleted. We can restore the account
itself which will restore it's pro status.

We are definitely sorry this has happened. We know this is
disruptive to your experience on Flickr and work you have
created is lost. We don't like seeing this affect our
community.

regards,
Joe
----------------------------------------------------------------
actually, I didn't log in any fake page. I just plug a SD card form one of my friend. My flickr page showed " Kingkiang's account is no longer active" in one second. Please tell me how can I avoid this shit in one second?????????????????????????????????????????????????????
That's all users' fault? your system design and security are perfect? at least you should let user key in secure code before users' account be deleted.
please get my 14,933 photos and metadata recovered, and stop tell me "I am sorry". and fix the bug about account merge with Yahoo!ID. don't let any phishing attack delete users' account. In case it happened, please help victims to find back their data.

Kingkiang
---------------------------------------------------------------------------
I worked in Yahoo! Taiwan in 2004~2006. So I try to communicated with Flickr's PM through my Yahoo!'s ex-colleague. That's their answer:
---------------------------------------------------------------------------------------
There are in fact discussions at the office on this very topic. Your power user in Taiwan was not the only one who lost their photos recently. We’ve had a few cases of users being hacked and deleted and other users accidentally deleting their accounts.
The answer your user got is correct. There is no way to recover deleted photos at this time.
Flickr is currently discussing possible solutions to this issue. Unfortunately that won’t help your user now.
---------------------------------------------------------------------
forum裡面這些員工一直在消毒，把責任都推給使用者使用不當，可惡至極
www.flickr.com/help/forum/en-us/63153/
===============================================
貼一下論壇的回應，看是否有人幫我解惑，基本上我也是flickr的死忠支持者，但有時員工和親衛隊的回復，讓然覺得錯都在使用者，flickr和google這種品牌不可能有錯，那我們的權力該找誰伸張呢？


1. 法律得問題:
www.flickr.com/help/forum/zh-hk/63167/
Wayne Lam (Ramius) Pro User says:

之前在英文討論區看過類似的案例，針對資料庫備份的問題，有人提出實際上不可行的原因。
大意是說因為某些美國當地的資料保護法規的規定，只要使用者主張刪除存放在供應商當的資料，那麼供應商就必須確實的刪除，不可以留任何備份的。
如果真的是法律規定，他們那麼大的公司還真的不敢亂來呢。看來flickr的確是以類似的方式來處理，所以才沒辦法給你回復吧。

不過我也覺得刪除帳號的流程可以再完善一點，尤其是應該加入CAPTCHA(Completely Automated Public Turing test to tell Computers and Humans Apart)這類圖形驗證，才能避免惡意刪除啊。

kingkiang Pro User says:

我在意的就是連這簡單的圖形驗證都不做，一秒鐘就被刪掉了

另外得問題，在法律上被入侵的安全漏洞，並不是使用者"主張"刪除的，不應以此為防護牆，就不補救處理吧？
----------------
2. 病毒是否會藏在記憶卡裡autorun得問題
www.flickr.com/help/forum/en-us/63153/
=============================================
flickr的員工和親衛隊居然喜歡把忠誠的User抹黑成連Phishing都不懂的白癡，來逃避責任，我已經一再強調
I didn't log into any fake page and didn't give anyone password.
please face this fact, and stop said it that way. I am not idiot!!!!!!!!!!!!!
我在這裡說出事實，請求幫助，換來的只是被無情的攻擊
www.flickr.com/help/forum/en-us/63165/