Live data from Hacker News

Facebook Network Breach Impacts Up to 50M Users

nytimes.com

311–320 of 635 posts

Re: Facebook Network Breach Impacts Up to 50M Users

#311
post #107

Worst case: the attacker now has 90 million user's messaging history. Fun times.

...is that seriously possible with this scope and such little time?

I know for sure that you can view all of the pictures sent in a conversation if you have never "ended" the conversation. All I can think about is all of my partners who have sent x rated photos using messenger. It could very well be the next "fappening" and tied to real identities.

Re: Facebook Network Breach Impacts Up to 50M Users

#312

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors - from oil to finance to pharmaceutical to telecommunications and so on. And we can include the government. If you're a subcontrator or sold in body rental (modern IT slavery) you're also in the same position as an employee, so you're enabling their evils. Also, if one of those companies is a client of your company you're a…

"They're all like this so it's impossible to do good" is an even more morally bankrupt position. It rejects personal responsibility and agency, places you as the victim, and allows you to continue to be a bad actor in the world.

You should change this.

Re: Facebook Network Breach Impacts Up to 50M Users

#313
post #4
post #2

Some more details here: https://newsroom.fb.com/news/2018/09/security-update/

> But it’s clear that attackers exploited a vulnerability in Facebook’s code that impacted “View As”, a feature that lets people see what their own profile looks like to someone else. This allowed them to steal Facebook access tokens which they could then use to take over people’s accounts oh boy, what a mess.

Am catching up. Would these tokens be the signed JWT’s, if so am wondering how they were able to figure out the signature part?

Re: Facebook Network Breach Impacts Up to 50M Users

#314
post #281

Its sad that everytime there is a post about Facebook the comments are extremely toxic and negative, and don't really even discuss the article itself. I would argue that 80% of all tech companies are doing close to 0 in making the world a 'better place'.

But few are actively making the world a worse place.

Re: Facebook Network Breach Impacts Up to 50M Users

#315

Earlier quoted context omitted.

So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors - from oil to finance to pharmaceutical to telecommunications and so on. And we can include the government. If you're a subcontrator or sold in body rental (modern IT slavery) you're also in the same position as an employee, so you're enabling their evils. Also, if one of those companies is a client of your company you're a…

Too much common sense for the internet. I'd love to know the organizations all the Facebook and Google haters work for. No firm is perfect.

HN trends to think there's nothing else besides Google, Facebook, Amazon, Microsoft, and Silicon Valley startups. Truth is, there are tens of thousands small software shops all around the world, working on - in HN's opinion - "mundane" software like machine controllers, production management software, ERP systems, etc. without collecting and indirectly selling all personal data they can get their hands on.

Re: Facebook Network Breach Impacts Up to 50M Users

#316

Recently talked to 2 friends working for fb. According to them, the culture there is very toxic. For a master's degree, once get in, you need to get promoted in 22 months (I might misremember the actual number.) or you will have to leave. Debugging is never counted as a real work, so for quick promotion, nobody wants to solve bugs unless a bug becomes too obvious. And they also complained about no work-life balance.…

I suspect that that's very team-dependant (in a company with thousands of engineers in tens of offices, most things are). Personally I got promoted based on debugging / code cleanups / reliability work, and I don't remember the last time I worked outside my self-assigned working hours (~10am-6pm) (Aside from on-call shifts, where I got one false-alarm on a weekend a few weeks ago). If one of my teammates messaged me asking for code review at midnight and it wasn't a "the site will be down if this doesn't land right now" issue, then I'd reject their code on the basis that we should all be in bed :P

My understanding of the "get promoted or leave" thing is "engineers hired as juniors are expected to get to mid-level in under 5 years (with a half-way milestone at 2 years)"; once you're mid-level it's up to you if you want to carry on climbing. Personally once I got there I switched to a "work more efficiently in fewer hours and keep the same overall productivity" approach instead of trying to get promoted into the senior levels, and that's worked out nicely so far :)

Re: Facebook Network Breach Impacts Up to 50M Users

#317

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

It's pretty interesting to me how incredibly polarizing the topic of Facebook is on the web. People seem convinced that Facebook is an evil enterprise and has to be stopped and its board, employees, and shareholders should all suffer. At least that's how it seems based on the loudest voices on the web because defending Facebook is a highly unpopular position.

But why? Use of the platform is entirely voluntary. Beyond that, what are they doing besides targeting ads at people based on pretty basic info that those users (almost entirely) provided to Facebook of their own free will. Yeah, I know they were found recently to be using "shadow contact info" to target ads. But even that study seems fairly contrived- they had to upload an entire organization's private data without their consent just to prove the point they were making in the article. But even if we all agree that that's bad, so what? Okay, so if they stop using MFA data and shared contact data not necessarily shared by the users to target ads are they suddenly not evil? My guess is that most people would remain unconvinced.

I think there's some part of society that just hates the idea of advertising of all kinds. They think they should be able to move through life without having information foisted in front of them without their consent. That's a fine view, but the reality of our society is that it relies on businesses being able to sell and they do that largely by advertising to consumers. I also think a lot of the lament comes from the idea that using these platforms is a waste of time, which obviously is more of a personal value judgment call.

But above all this, I believe Facebook is hated because it's powerful. But it's powerful because people the world over use it and use it a lot. And that doesn't seem to be changing at all based on Facebook's last several earnings reports. People seem convinced that everyone should agree that Facebook and targeted advertising is evil and the use of the platform isn't worth the trade-offs. And yet people don't care. That stubborn fact. People just simply do not care about having their phone numbers, ages, political beliefs, genders and interests used to target ads at them. Lots of people can't wrap their minds around that fact- that not everyone is so concerned about using that info for ad targeting. Some fraction of the active FB user base probably does care- but not enough to delete the app and stop using it. "Your actions speak so loudly that I cannot hear what you say."

Re: Facebook Network Breach Impacts Up to 50M Users

#318
Here's the banner that they put up on peoples newsfeeds: https://imgur.com/G7sBbwX

Nowhere on that banner does Facebook make it clear that there was recently a severe security issue that may have resulted in the loss of personal user information (Making it much less likely for the user to actually click 'Learn More'). It's misleading to title this with just "An Important Security Update" and make it seem like they've just updated their systems. No mention of the recent compromise until you click 'Learn More'.

Re: Facebook Network Breach Impacts Up to 50M Users

#319
Are they under-estimating that 90 million people (out of 2 billion accounts) have to log back in?

I had to log back in and so did 6 out of the 8 people I've asked so far. Purely anecdotal, but it just seem unusual that if only 5% of accounts are affected that so many of the people I talk to would be potentially affected.

Re: Facebook Network Breach Impacts Up to 50M Users

#320
post #312

Earlier quoted context omitted.

So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors - from oil to finance to pharmaceutical to telecommunications and so on. And we can include the government. If you're a subcontrator or sold in body rental (modern IT slavery) you're also in the same position as an employee, so you're enabling their evils. Also, if one of those companies is a client of your company you're a…

"They're all like this so it's impossible to do good" is an even more morally bankrupt position. It rejects personal responsibility and agency, places you as the victim, and allows you to continue to be a bad actor in the world. You should change this.

It is completely ridiculous to try portraying someone working for FB as morally disabled. I'd suggest people express their moral superiority by deleting their own FB account, without much ado.
Post reply on HN