Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

Post reply on HN
Print view View original

91–100 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#91

Post by teovoinea »

godelmachine wrote: post #87
jxramos wrote: post #65

Earlier quoted context omitted.

I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows: """ Is my Facebook account impacted by this security issue? Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.…

I see the same thing. Wonder if anyone was informed that actually had been affected.

I have been affected, quoting text:

Is my Facebook account impacted by this security issue?

Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information:

    Name.
    Email addresses.
    Phone number.
Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as:

    Account passwords.
    Payment card or credit card information.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#92

Post by anonu »

godelmachine wrote: post #87
jxramos wrote: post #65

Earlier quoted context omitted.

I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows: """ Is my Facebook account impacted by this security issue? Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.…

I see the same thing. Wonder if anyone was informed that actually had been affected.

I also got an alert in my feed. I stopped using Facebook 2 years ago... I didnt delete my account. But this incident highlights the latent risk our data poses across hundreds of websites...

Is my Facebook account impacted by this security issue?

Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information:

  Name.
  Email addresses.
  Phone number.
Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as:

  Account passwords.
  Payment card or credit card information.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#93

Post by jjeaff »

barkingcat wrote: post #35
SketchySeaBeast wrote: post #25

Earlier quoted context omitted.

> name, email address and phone number I kind of work on the assumption that those things are largely public. I mean, phone books were a thing for a very long time. Don't get me wrong, leak bad, very bad, but they didn't leak my bank accounts or a list of my worst fears.

Did you read the article? "For 14 million people, the attackers accessed the same two sets of information, as well as other details people had on their profiles. This included username, gender, locale/language, relationship status, religion, hometown, self-reported current city, birthdate, device types used to access Facebook, education, work, the last 10 places they checked into or were tagged in, website, people or…

Can you have that information entered into Facebook without then showing to anyone but yourself? If so, why would you have the info in there? If not, and as is common, you allow friends to see it, then that information is basically public anyway unless you are very, very selective in who you accept as a friend.

Even when being selective, there is no identity verification, so it is common for spammers or data collectors to simply make an account using the name and profile pic of any of your friends and requesting to be your friend.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#94

Post by tantalor »

therein wrote: post #48
jlmorton wrote: post #43

If Facebook could go back in time and choose between: a) Paying out a $1m USD bug bounty, or b) Accepting the reputational hit from a successful exploit I wonder which they would choose with perfect hindsight? Facebook runs a great bug bounty program, but given Facebook's size, data footprint, and profitability, perhaps it's worth increasing the rewards.

Perhaps any vulnerability reported that can lead to the compromise of user data at a scale should be automatically paid out $1M.

Are you suggesting requiring this by law?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#95

Post by [deleted] »

godelmachine wrote: post #87
jxramos wrote: post #65

Earlier quoted context omitted.

I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows: """ Is my Facebook account impacted by this security issue? Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.…

I see the same thing. Wonder if anyone was informed that actually had been affected.

[deleted]

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#97

Post by jjeaff »

delecti wrote: post #85
Joe-Z wrote: post #49

Earlier quoted context omitted.

FYI people will downvote you for suggesting someone hasn't read the post. (And I don't think it was necessary to make your point.) HN guidelines: https://news.ycombinator.com/newsguidelines.html >Please don't insinuate that someone hasn't read an article.

Hm, that's a bit of a silly rule. This isn't the best example, but there are certainly instances where someone is arguing from a point of complete ignorance about details in the article. Even the rule's preferred example of "The article mentions that." still seems to me to insinuate someone hasn't read the article.

I think it is just more polite to cite the article than make an accusation. There is no real benefit in accusing someone of not reading the article. This seems like a case of fostering civil discussion without losing any clarity. Since "you must not have read the article." or "did you even read the article?" adds nothing to the discussion.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#98

Post by bogomipz »

shiado wrote: post #42

As with any breach it is always interesting to see how the scope gets broadened day by day. Tomorrow there might be some headline like "Hackers actually took all of your location data, a timestamp of every breath you took in the last week, and 4K video of everything you looked at through your eyes for the last ten years."

And of course they make sure that the bad news comes out on a Friday. FB has the all the credibility of a greasy politician at this point.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#99

Post by jjeaff »

ryandrake wrote: post #39
nathanaldensr wrote: post #22

Earlier quoted context omitted.

Good point. Looking at my database it seems that most of the time I just choose fake answers, and sometimes use words that don't relate to the question (e.g., "Favorite food: Manchester").

I used to use real answers but then wised up and switched to random 16-character responses. I wish there was a way to find out which services I’m vulnerable on due to my stupidly using real data, without attempting to do a password reset on all of my online accounts.

I think a better idea, due to the issues pointed out by others, is to use valid sounding answers but not real answers. So if your mother's maiden name is Smith, don't put f4jjedglkej. Put something like "Anderson" and then store that answer in your password manager. This is what I do in order to avoid potential social engineering or employees that are simply confused by a gibberish answer.
Post reply on HN