Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

131–140 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#131

Earlier quoted context omitted.

I have been affected, quoting text: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: Name. Email addresses. Phone number. Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as: Account passwords. Payment card or credit…

Mine continues: Additionally, the attackers also accessed other account information, including: - The following information associated with your Facebook account: - Username. - Date of birth. - Gender. - Types of the devices you've used to access Facebook. - The language you choose to use Facebook in. - If you previously added this specific information to your Facebook account, it was also accessed: - Relationship st…

Had the same list as you, I was just happy it did not mention Messenger since that would be accessing truly private data.

The data you listed is semi-public in my case.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#132
post #85
post #49

Earlier quoted context omitted.

FYI people will downvote you for suggesting someone hasn't read the post. (And I don't think it was necessary to make your point.) HN guidelines: https://news.ycombinator.com/newsguidelines.html >Please don't insinuate that someone hasn't read an article.

Hm, that's a bit of a silly rule. This isn't the best example, but there are certainly instances where someone is arguing from a point of complete ignorance about details in the article. Even the rule's preferred example of "The article mentions that." still seems to me to insinuate someone hasn't read the article.

People have pride. publicly claiming they messed up is a direct challenge , and it will hurt that pride. regardless of whether or not they did. When you hurt that pride, conversations go sour. And, in all fairness, do we expect someone to say “well, gosh, you’re right; I did indeed mess up. Sorry!” You can probably imagine that’s not how people work.

It’s a rule because of the effect it has on the conversation that follows, not because it is Just or Unjust. In that sense, HN is not like a court. As much as people, at times, seem to think it is :p

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#133
post #65

Facebook posting: https://newsroom.fb.com/news/2018/10/update-on-security-issu... Check if you are affected here: https://www.facebook.com/help/securitynotice (posting because it took 10+ mins to find it - many media outlets are not linking directly to it)

I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows: """ Is my Facebook account impacted by this security issue? Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.…

I'm curious did they reset everyone's tokens? I remember the day when I was meeting friends for dinner and all or just got logged out of fb at the same time.

I get the same message that I'm not likely impacted

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#134
post #62

Earlier quoted context omitted.

Why is that ridiculous? Here are the facts: 1. A software company had a security incident. 2. They urgently resolved the issue. 3. They looked into who was impacted, and sent customized notifications letting people know how they were impacted. None of this behavior is ridiculous. It's quite responsible. What would you expect to happen differently?

Well, let's see. A feature used to view profile information had a vulnerability that allowed an attacker to get my phone number. My phone number isn't even listed on my profile. This means the credentials from the original implementation of said feature weren't locked down to only data available from your viewable profile. While my phone number may be available elsewhere outside of FB, I only have it tied to my accou…

> This means the credentials from the original implementation of said feature weren't locked down to only data available from your viewable profile.

Yeah, that's the entire security incident. So are you saying you expect software companies to never have security incidents? Now that's ridiculous.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#135
I'm one of the unlucky 400,000 who had the most information stolen. Complete notification:

    Is my Facebook account impacted by this security issue?

    Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information:

      * Name.
      * Primary email address.
      * Most recently added phone number.
      
    Additionally, the attackers also accessed other account information, including:

      * The following information associated with your Facebook account:
        * Username.
        * Date of birth.
        * Gender.
        * Types of the devices you've used to access Facebook.
        * The language you choose to use Facebook in.
      * If you previously added this specific information to your Facebook account, it was also accessed:
        * Relationship status.
        * Religion.
        * Hometown.
        * Current city.
        * Work.
        * Education.
        * Website.
      * The 10 most recent locations you've checked in to or been tagged in. These locations are determined by the places named in the posts, such as a landmark or restaurant, not location data from a device.
      * The 15 most recent searches you've entered into the Facebook search bar.
      * People or Pages you follow on Facebook.

    A small subset of Facebook accounts, including yours, had additional Facebook information made available to the attackers. Learn more about how this information was made available. This is specifically information that appears when viewing your own profile and includes additional information, such as:

      * Posts from your timeline.
      * Your Friends list.
      * Messenger conversation names, but not their contents.
      * If you are a Page admin, you may have also had messages to your Page made available to the attackers.
      * Groups you're a member of.

    Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as:

      * Account passwords.
      * Payment card or credit card information.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#136
post #135

I'm one of the unlucky 400,000 who had the most information stolen. Complete notification: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: * Name. * Primary email address. * Most recently added phone number. Additionally, the attackers also accessed other account information, including:…

> If you are a Page admin, you may have also had messages to your Page made available to the attackers.

That seems to stand out to me as a bit of an outlier. Depending on the kind of page that an affected individual operates, that could be pretty big.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#138

Earlier quoted context omitted.

> wised up and switched to random 16-character responses As an earlier comment pointed out [1], random responses to security questions are a bad idea. I've personally tested this by entering a random security answer, calling the service, saying I forgot my password and entered gibberish as my security answer, and being let through. I presume technically-savvy people think this is more secure; if I can guess that, an…

I’d love to know which businesses have such an asinine policy. Name and shame! They are basically allowing a password reset with zero authentication.

Any business large enough to have call centre like operations - and the cost-centre mindset that goes along - where people are underpaid and pressured to take as many calls as they can?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#139
post #100

When will we start prosecuting these companies for letting user data getting hacked? If you cannot protect user data, you have no business dealing with them. At the very least, there should be monetary compensation.

We’ve accepted their terms on signup...

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#140

Earlier quoted context omitted.

They explicitly state they will email impacted users.

Does that mean they are still storing my email address? I deleted my account 2 years ago.

I don't know? I don't see you would be impacted without an account.
Post reply on HN