I'm among the hacked people. I'm feeling so disappointed.
Don't feel bad... everyone, everywhere has been compromised. The corporations that say they have not are either ignorant or lying.
Facebook Says Hackers Stole Detailed Personal Data from 14M People
21–30 of 217 posts
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#22Earlier quoted context omitted.
I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.
People are social engineering a random string when talking to customer care. The attacker says “Ah, a bunch of random characters, do I have to say it?” or even worse I have had a customer service rep look at it, laugh and say never mind. I use “batteryhorsestaple” type of passwords stored in a password manager for the security questions. Those are easy to say over the phone and more resistant to social engineering.
Good point. Looking at my database it seems that most of the time I just choose fake answers, and sometimes use words that don't relate to the question (e.g., "Favorite food: Manchester").
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#23Earlier quoted context omitted.
I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.
People are social engineering a random string when talking to customer care. The attacker says “Ah, a bunch of random characters, do I have to say it?” or even worse I have had a customer service rep look at it, laugh and say never mind. I use “batteryhorsestaple” type of passwords stored in a password manager for the security questions. Those are easy to say over the phone and more resistant to social engineering.
1password actually supports password generation of the 'correct horse battery staple' variety, bypassing this issue entirely.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#24This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…
Security questions are IMO an awful form of account recovery, as they often use publicly available data about yourself. It's basically downgrading the security of the account more often than not.
If there are no custom security question, I use my password manager to store them and put random answers not tied to myself personally.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#25Logged in today and found: "[name], we have more information about the security incident we discovered on September 25, 2018. An unauthorized third party accessed your name, email address and phone number. We acted quickly to secure the site and took action to protect your account, and we're working closely with law enforcement to address the incident." Ridiculous.
> name, email address and phone number
I kind of work on the assumption that those things are largely public. I mean, phone books were a thing for a very long time. Don't get me wrong, leak bad, very bad, but they didn't leak my bank accounts or a list of my worst fears.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#26> For about 14 million people the hackers accessed information such as the last 10 places that person checked into, their current city and their 15 most-recent searches...
I imagine such information will be very useful for fine-tuning phishing scams. E.g. something like “we saw you the other day at the Baton Rouge State Fair, and it’d be a shame if anyone saw what you did there. Send 0.5 BTC here so no one finds out.”
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#27That's one of the numerous reasons I'll never use fb as a payment or ecommerce platform when they launch these products.
I doubt other payment or ecommerce platforms are any more secure. Given its size, I assume Facebook has a lot of smart people working on security. And they still screw it up. How are smaller platforms, who can't attract or pay for the very best talent, going to do any better (other than by being smaller targets, I guess)?
One thing a smaller platform could do to outperform Facebook would be to not collect as much personal info... privacy by design is a thing.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#28Earlier quoted context omitted.
I doubt other payment or ecommerce platforms are any more secure. Given its size, I assume Facebook has a lot of smart people working on security. And they still screw it up. How are smaller platforms, who can't attract or pay for the very best talent, going to do any better (other than by being smaller targets, I guess)?
Visa and MasterCard seems to handle security ok.
Companies that do 1 thing tend to do that thing well. Companies like Facebook or Google that do dozens tend to be sloppy.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#29This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…
But you can give that answer to any question they ask. That's what fake answers are all about.
Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People
#30Logged in today and found: "[name], we have more information about the security incident we discovered on September 25, 2018. An unauthorized third party accessed your name, email address and phone number. We acted quickly to secure the site and took action to protect your account, and we're working closely with law enforcement to address the incident." Ridiculous.
Got the same message. So what's the recommended thing to do. Rotate all your passwords and security questions?
I guess in this case, - rotate all your names, phone numbers, and addresses. :(
In all earnestness, Facebook would have required password reset if it were needed.