Live data from Hacker News

Facebook Network Breach Impacts Up to 50M Users

nytimes.com

431–440 of 635 posts

Re: Facebook Network Breach Impacts Up to 50M Users

#431
post #2

Some more details here: https://newsroom.fb.com/news/2018/09/security-update/

Does anyone have an idea on how this exploit could have worked? If only the hacker(s) would write a blog article or make a LiveOverflow-style video about it. It would be quite entertaining. I'd be so curious/intrigued to know more about this specific exploit, it's a shame it wasn't a responsible disclosure from a white-hat.

Re: Facebook Network Breach Impacts Up to 50M Users

#432
post #320
post #312

Earlier quoted context omitted.

"They're all like this so it's impossible to do good" is an even more morally bankrupt position. It rejects personal responsibility and agency, places you as the victim, and allows you to continue to be a bad actor in the world. You should change this.

It is completely ridiculous to try portraying someone working for FB as morally disabled. I'd suggest people express their moral superiority by deleting their own FB account, without much ado.

if I deleted my profile, I have no control over who squats my name

preventing impersonation is literally the only reason I have an account, since I cannot trust facebook to handle this for me

Re: Facebook Network Breach Impacts Up to 50M Users

#434

Until they can provide some data that say the 50 million number is a fact, I don't believe it's that low. Every breach starts out on the low end, and miraculously ends up being double or triple as they do "more research" and the initial anger dies down.

I'm pretty sure they logged out more than <5% (90m of 2B) of their users, because of the people I talk to on a daily basis on Messenger like well over 2/3s got logged out. I could see if they meant 90m of American users or something.

Re: Facebook Network Breach Impacts Up to 50M Users

#435

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

So is working at Google, Amazon and probably 90% of the big corps of the world in many sectors - from oil to finance to pharmaceutical to telecommunications and so on. And we can include the government. If you're a subcontrator or sold in body rental (modern IT slavery) you're also in the same position as an employee, so you're enabling their evils. Also, if one of those companies is a client of your company you're a…

[deleted]

Re: Facebook Network Breach Impacts Up to 50M Users

#436
post #425

Earlier quoted context omitted.

We are all in the world of opinions here. Share your opinion or criticize his. Comments like this are not helping us make progress on these issues.

Maybe I've just bought into the image Mark wants to give off, but I believe facebook's naivety in its actions to largely result from Mark's optimism and lack of skepticism. He comes off as a person with hope and belief that things are good and positive. He doesnt come off as a cynical, worst case scenario type person. Time and time again, something happens, he writes that "it isnt so bad" and THEN evidence comes out…

I thought you were referring to another post with "Mark". It's ok to call him Mr. Zuckerberg, since most of us don't know him personally.

Re: Facebook Network Breach Impacts Up to 50M Users

#437

Earlier quoted context omitted.

While Google and Amazon both have their ethical problems and serious anti-trust issues, Facebook is in a league of its own. Maybe, but at least Facebook doesn't actively try to manipulate you into believing that they're the "good guys" and "not evil". That's why, after all, my level of respect for FB is still a lot higher than for Google.

> Maybe, but at least Facebook doesn't actively try to manipulate you into believing that they're the "good guys" They don't? News to me.

>> Maybe, but at least Facebook doesn't actively try to manipulate you into believing that they're the "good guys"

> They don't? News to me.

News indeed. Being good IS their mission statement. "Facebook's mission is to give people the power to build community and bring the world closer together."

Re: Facebook Network Breach Impacts Up to 50M Users

#438

I have some friends who were new grads and put on the security team. My first thought was, why put new grads on the security team? Do they really have the experience to protect this sort of data?

How else do you suggest would people who don't have experience gather it?

By first letting them work on frontend and backend code for a while so they understand how security problems originate from daily process?

Re: Facebook Network Breach Impacts Up to 50M Users

#439

Said this yesterday in the other Facebook thread, and I'll say it again. Working for Facebook is a morally bankrupt position. If you are an engineer you have plenty of job opportunities available to you and there is no excuse for you to continue contributing your labor and time to a wholly malignant organization. At a certain point one has to ask how we as an industry will start dealing with those who continue to tak…

We as an industry? Look friend. If I lose my job, you aren't going to do anything to augment my lack of income. You're not going to do anything to provide health insurance. And you're not going to do anything to help me find new employment. There is no "We". Here's an idea. If this topic is something that you feel is important, then perhaps you can set aside half your income to a general fund to help provide benefits…

this needs so many up-votes.

gots ta pay the bills yo.

Re: Facebook Network Breach Impacts Up to 50M Users

#440
post #421

Earlier quoted context omitted.

Can we get proof of this supposed massive PR campaign? You can't just shoo away several real, well-documented, massive breach of trust from Facebook with "well it's the Russians". The hate Facebook is getting comes from them being negligent about user data, and they were well-aware of the problem.

https://www.businessinsider.com/facebook-helped-reveal-china... There are hundreds of more similar articles documenting hacking by China and Russia. The data breach at the parent of this article even is supposed to have been done by a coordinated nation states. How can a company ever compete against a nations resources? Expecting Facebook to magically secure themselves against attacks by a nation is wishful thinking.…

> Mandiant says the hackers would log in to Facebook, Twitter, and Gmail from infected computers. Once logged in, they would send the spearfishing attacks which were the basis of their espionage.

This is a spearfishing attack... That's a totally different beast. Let me look at the gross mishandling of data that facebook had recently:

Remember the Cambridge Analitica scandal? That wasn't a hack. That was facebook deliberately letting apps access user data like it was candy, because that's what facebook does. It was done on purpose. Of course, they didn't expect someone to scrape the whole network at that scale, so it wasn't fully intentional. Still, it was absolutely gross negligence, and is absolutely a breach of trust that happened outside of external government interference: https://www.vox.com/2018/3/20/17138756/facebook-data-breach-...

What about the recent scandal revolving around the use of 2FA SMS numbers being used for ad targeting? Against, this isn't Russia coming in and hacking facebook. This is Facebook shooting themselves in the foot with a bazooka. They should have been aware that, when a user enters their phone number for 2FA, they expect it to be used for this feature and this feature only. Not for ad targeting, not for notifications. Again, facebook breached that trust. No outside interference, just facebook being either lazy, irresponsible, and incompetent around user data: https://9to5mac.com/2018/09/28/facebook-ad-targeting-2fa/

There are many other cases like the above. Facebook doesn't need china to attract hate. They can fuck things up by themselves well enough.

Post reply on HN