Live data from Hacker News

Facebook Network Breach Impacts Up to 50M Users

nytimes.com

71–80 of 635 posts

Re: Facebook Network Breach Impacts Up to 50M Users

#71

Fun fact: https://newsroom.fb.com/news/2018/09/security-update/ was published at 16:42:44. https://www.nytimes.com/2018/09/28/technology/facebook-hack-... was published at 16:45:41. NYT writes fast :)

It's possible they emailed the release out before it was published on the web, I suppose. It would make sense, as I imagine news outlets have follow up questions.

Re: Facebook Network Breach Impacts Up to 50M Users

#73
post #2

Some more details here: https://newsroom.fb.com/news/2018/09/security-update/

So is this what the hacker was going to livestream the deletion of Zuck's page? In the end, they submitted a bug to FB so I'm assuming this is the exploit that was intended to be used.

Re: Facebook Network Breach Impacts Up to 50M Users

#75
post #21

I wonder where the "50M users" estimate comes from. It seems like the feature that caused it, "View As", is probably available to more than that many people. Does this mean that they managed to trace the attacker capturing the access tokens of 50M users? Even allowing for the bug in the first place, it seems like exploiting it should be detected before 50M uses.

Probably they have stats on how many people actually used the feature.

Most likely this. I have a few dev accounts, one which I know I used the feature at some point, another few which did not and those were not reset.

Re: Facebook Network Breach Impacts Up to 50M Users

#76
post #28

On the one hand, every time another scandal or breach is revealed about centralized networks, I want to post this and have everyone recognize the root problem and the solution: https://Qbix.com (see the video) On the other hand, I feel like I’m shamelessly promoting/shilling my own company. How to do it in a classy way? I really believe that there is a problem people are not recognizing enough to do something about i…

I spent 10 minutes on your site, still have no idea what it's about. If you say it's the "decentralized facebook", I don't see anything about a feed/updates, no way to post/broadcast anything. The only thing I see are contact grouping and shared calendar?

Re: Facebook Network Breach Impacts Up to 50M Users

#77

Fun fact: https://newsroom.fb.com/news/2018/09/security-update/ was published at 16:42:44. https://www.nytimes.com/2018/09/28/technology/facebook-hack-... was published at 16:45:41. NYT writes fast :)

It's also possible a bunch of them got logged out this morning, new something was up, and started fleshing out their prewritten template with details like the date and symptoms.

I suspected there was a breach of some sort, when my tokens expired in three places simultaniously, this morning. First thing I did was search google news, nothing had been written yet. I wasnt sure they would ever announce it, probably depends on the scale.

Re: Facebook Network Breach Impacts Up to 50M Users

#78
post #44

Is it wrong to be glad FB's reputation has tarnished (and stock price sideways) over the past year or so? For so long they've monopolized the talent pool in the Bay Area. If more people decide 1) they don't want to work at FB and 2) FB employees are itching to leave then I see any stain on FB's employment brand as a net positive to the greater tech + startup ecosystem.

they havent monopolized talent, they pay for talent. Facebook paying high salaries has increased all of our pay, equity etc, whether you work there or not. The only thing this may be bad for is founders who are in a zero sum competition with FB for talent and now need to spend more money and equity to get it.

A friend in HR that has friends in many of the Bay's companies told me that people at Google and other big companies hire to keep people away from other companies. Because they can.

So, yes, I believe they are trying to corner the market on the best programmers.

Re: Facebook Network Breach Impacts Up to 50M Users

#79
From Facebook's announcement: "After they have logged back in, people will get a notification at the top of their News Feed explaining what happened."

I personally did not get any explanation as to why I had to log back in. It did surprise me to be logged out this morning and was wondering why.

Re: Facebook Network Breach Impacts Up to 50M Users

#80
post #33

Earlier quoted context omitted.

You only get to see your own profile. It's a very useful tool to make sure you're not leaking data you people you'd rather not give it to.

... until the mechanism turns out to have an exploit, as just happened here.

Could have been any other mechanism on the site.
Post reply on HN