Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

111–120 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#112

I guess I don't really understand the frustration of some people. I do but I don't. I don't have a facebook account, or instagram, or any social media, haven't had one in many years. No one NEEDS to have one. I guess to me, if you don't want this info to be exposed, just don't have an account. Assume the worst can happen. This is not like other sites, I get that you're "trusting" them with your info, but you are will…

You forget that you don't need to have a Facebook account for Facebook to create a profile for you. You just have to exist. The same is true for many other social networks. So while you're posting about being all smug and happy that you never signed up for one of these services, your personal data is still in their servers, ready to be exploited by both the company and hackers.

Oh yes I understand that very much, but I do what I can not to help them. The point I was making is about people who willingly put all of their info there, photos, addresses, location etc.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#115

Earlier quoted context omitted.

Not to mention those of us with deleted Facebook accounts. It looks like I’m not affected but to anyone who had an account during those dates and deleted it since, how do they find out? Yet another reason they should email affected users, guess they care more about not publicizing bad information than taking responsibility.

They explicitly state they will email impacted users.

Does a user with a deleted account qualify as an impacted user? I think the visibility is an issue.

As one of those people, this summer I encountered a spotify issue where my spotify would randomly start playing Cannabis Club ATL. Others had the same issue. Perhaps unrelated, too difficult to tell, especially if FB doesn't consider me an active user.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#116

Earlier quoted context omitted.

I see the same thing. Wonder if anyone was informed that actually had been affected.

I have been affected, quoting text: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: Name. Email addresses. Phone number. Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as: Account passwords. Payment card or credit…

Mine continues:

Additionally, the attackers also accessed other account information, including:

- The following information associated with your Facebook account:

    - Username.
    - Date of birth.
    - Gender.

 - Types of the devices you've used to access Facebook.
 - The language you choose to use Facebook in.

 - If you previously added this specific information to your Facebook account, it was also accessed:

    - Relationship status.
    - Religion.
    - Hometown.
    - Current city.
    - Work.
    - Education.
    - Website.

 - The 10 most recent locations you've checked in to or been tagged in. These locations are determined by the places named in the posts, such as a landmark or restaurant, not location data from a device.

 - The 15 most recent searches you've entered into the Facebook search bar.

 - People or Pages you follow on Facebook.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#117

Earlier quoted context omitted.

Not to mention those of us with deleted Facebook accounts. It looks like I’m not affected but to anyone who had an account during those dates and deleted it since, how do they find out? Yet another reason they should email affected users, guess they care more about not publicizing bad information than taking responsibility.

They explicitly state they will email impacted users.

Does that mean they are still storing my email address? I deleted my account 2 years ago.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#118

Earlier quoted context omitted.

They explicitly state they will email impacted users.

Does a user with a deleted account qualify as an impacted user? I think the visibility is an issue. As one of those people, this summer I encountered a spotify issue where my spotify would randomly start playing Cannabis Club ATL. Others had the same issue. Perhaps unrelated, too difficult to tell, especially if FB doesn't consider me an active user.

Does a user with a deleted account qualify as an impacted user?

If they still store some user details (which it seems they do) and then this leaks - absolutely.

What about those who have never been users yet Facebook stores plenty of information about?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#119
post #29
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

But you can give that answer to any question they ask. That's what fake answers are all about.

It depends, in the cases that they ask you for the answer you have control, but sometimes security question like things will just end up being personal data queries like "To what address did we send account statements in June of 2016" and if a bank (or whatever) asks questions like that to confirm identity over the phone there's no way you can compel them to do otherwise, short of taking your business elsewhere. Techniques like asking them to add a note to your account or flag it as locked... those only work if the CS people read and obey them, often times social engineering attempts will re-dail CS lines until they find someone who is tired or generally sloppy and get them to push the change through.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#120
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.

I use 1Password but it's not fool proof. I did fake answers for a business account then promptly forgot about it and locked myself out of the account a few months later. But yes, this is the best way to do it by far.
Post reply on HN