How I could have hacked any Facebook account

Post by cphoover » Tue, Mar 08, 2016, 9:23 PM UTC

mcone wrote: post #9

How do companies evaluate the severity and impact of the vulnerability? I don't work in security, but it seems like this is worth more than $15,000.

Post by arcticfox » Tue, Mar 08, 2016, 9:28 PM UTC

cphoover wrote: post #8

Frankly I think the amount being award by these companies is minuscule when you compare it to the amount of damage this information could have caused Facebook in the wrong hands.

Post by quadrature » Tue, Mar 08, 2016, 9:39 PM UTC

wallflower wrote: post #14

arcticfox wrote: post #13

Earlier quoted context omitted.

I agree. This was basically unrestricted access to any Facebook account. What a MASSIVE flaw. And who knows if this was already exploited in the wild? $15k is nothing at all compared to the scale of this issue...

$15k and a likely open FB job offer

Post by ethanbond » Tue, Mar 08, 2016, 9:42 PM UTC

Zikes wrote: post #7

jacquesm wrote: post #5

Earlier quoted context omitted.

Very disappointing comment. Everybody is free to choose to use facebook or not to use it. I chose not to use it, but I do not have the right or any moral obligation to stop others from using it. This guy did not have the right - and fortunately chose not to exercise it - to mess with other people's free choices in life. Besides that, the likely only effect any activity like you are suggesting would have had is that h…

Seeing as it's a brute-force per-account attack, a more accurate title would have been "How I could have hacked any Facebook account". Hacking "all of Facebook" would have been prohibitively resource-intensive for the hacker, and would likely have been caught and shut down before any real damage to the platform was done.

Post by unknownzero » Tue, Mar 08, 2016, 9:46 PM UTC