How I could have hacked any Facebook account
anandpraka.sh
How I could have hacked any Facebook account
1–10 of 168 posts
Re: How I could have hacked any Facebook account
#2Very disappointing. This guy had the ultimate power of doing so much good--bringing down Facebook in one fell swoop--and he didn't bother!
Re: How I could have hacked any Facebook account
#3A great example of responsible disclosure, and the company acknowledging, fixing and rewarding the bug and finder. Great job to both Facebook and Anand.
Re: How I could have hacked any Facebook account
#4Good reminder here that all publicly-visible services are part of your overall attack surface, including beta sites and other things you never expect people to look at. The DROWN vulnerability from last week was similar: people disabled SSLv2 on their web servers, but not their mail servers.
Very nice find: super simple but super effective. I'm glad Facebook paid up promptly.
Re: How I could have hacked any Facebook account
#5Very disappointing. This guy had the ultimate power of doing so much good--bringing down Facebook in one fell swoop--and he didn't bother!
Very disappointing comment. Everybody is free to choose to use facebook or not to use it. I chose not to use it, but I do not have the right or any moral obligation to stop others from using it. This guy did not have the right - and fortunately chose not to exercise it - to mess with other people's free choices in life. Besides that, the likely only effect any activity like you are suggesting would have had is that he would have ended up in jail and facebook would merrily continue.
Re: How I could have hacked any Facebook account
#6Good on Facebook for being so quick to reward Anand and fix the issue.
Re: How I could have hacked any Facebook account
#7Very disappointing. This guy had the ultimate power of doing so much good--bringing down Facebook in one fell swoop--and he didn't bother!
Very disappointing comment. Everybody is free to choose to use facebook or not to use it. I chose not to use it, but I do not have the right or any moral obligation to stop others from using it. This guy did not have the right - and fortunately chose not to exercise it - to mess with other people's free choices in life. Besides that, the likely only effect any activity like you are suggesting would have had is that h…
Seeing as it's a brute-force per-account attack, a more accurate title would have been "How I could have hacked any Facebook account". Hacking "all of Facebook" would have been prohibitively resource-intensive for the hacker, and would likely have been caught and shut down before any real damage to the platform was done.
Re: How I could have hacked any Facebook account
#8Frankly I think the amount being award by these companies is minuscule when you compare it to the amount of damage this information could have caused Facebook in the wrong hands.
Re: How I could have hacked any Facebook account
#9How do companies evaluate the severity and impact of the vulnerability? I don't work in security, but it seems like this is worth more than $15,000.
Re: How I could have hacked any Facebook account
#10Very disappointing. This guy had the ultimate power of doing so much good--bringing down Facebook in one fell swoop--and he didn't bother!
Very disappointing comment. Everybody is free to choose to use facebook or not to use it. I chose not to use it, but I do not have the right or any moral obligation to stop others from using it. This guy did not have the right - and fortunately chose not to exercise it - to mess with other people's free choices in life. Besides that, the likely only effect any activity like you are suggesting would have had is that h…
Very disappointing comment. Completely humorless and extremely preachy.