Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

Post reply on HN
Print view View original

191–200 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#191

Post by feanaro »

lapnitnelav wrote: post #138
ryandrake wrote: post #53

Earlier quoted context omitted.

I’d love to know which businesses have such an asinine policy. Name and shame! They are basically allowing a password reset with zero authentication.

Any business large enough to have call centre like operations - and the cost-centre mindset that goes along - where people are underpaid and pressured to take as many calls as they can?

Naming and shaming of sufficient magnitude would put pressure to select for more strict customer service representatives. If they could get fired for doing that, they would think twice.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#192

Post by _Tev »

Kalium wrote: post #167
panic wrote: post #164

Earlier quoted context omitted.

Why is that ridiculous?

It's only possible with a very different set of tradeoffs around risk and innovation than are the norm in software. It takes NASA-grade layers of slow development processes to be 100% certain that there will never be any incidents. Most companies, most developers, and most consumers would not be happy with the cost and speed this would result in. In short: it's not that it's impossible. We know how to do it. It just…

And let's keep in mind how successful NASA safety policies actually were.

Perfect safety is a pipe dream.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#193

Post by jypepin »

Spiritus wrote: post #183
zavi wrote: post #162

Earlier quoted context omitted.

> The 15 most recent searches you've entered into the Facebook search bar. I can see how the attacker can use this to blackmail somebody.

I don't. Can you provide an example or two?

"single female friends who live in " while you are married, for example?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#194

Post by salimmadjd »

rlt wrote: post #135

I'm one of the unlucky 400,000 who had the most information stolen. Complete notification: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: * Name. * Primary email address. * Most recently added phone number. Additionally, the attackers also accessed other account information, including:…

I’m curious do you post random stuff on FB or do you do a lot of political activism? I’m curious if these are random or targeted? Also how many FB friends do you have?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#195

Post by [deleted] »

YetAnotherNick wrote: post #178
panic wrote: post #164

Earlier quoted context omitted.

Why is that ridiculous?

Let me ask you this: Have you done any programming yourself? Facebook has some of the best information security researchers, takes bug bounty seriously, and they have got very low hacks compared to the effort hackers put to hack it.

[deleted]

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#196

Post by pbhjpbhj »

tokyodude wrote: post #133
jxramos wrote: post #65

Earlier quoted context omitted.

I forget what the text looks like in your second link when you're not logged in but after I logged in the verification text appears as follows: """ Is my Facebook account impacted by this security issue? Based on what we've learned so far, your Facebook account has not been impacted by this security incident. If we find more Facebook accounts were impacted, we will reset their access tokens and notify those accounts.…

I'm curious did they reset everyone's tokens? I remember the day when I was meeting friends for dinner and all or just got logged out of fb at the same time. I get the same message that I'm not likely impacted

Same, I think, I commented to my wife something like "that's worrying I've been logged out, sometimes that means your account is compromised", but I get the "you're not affected" message too.

IIRC that was on Facebook Lite on Android. I don't know my password so didn't log in at the time, but it just worked the next time I tried.

Might be unrelated.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#197

Post by pbhjpbhj »

thomasahle wrote: post #116
teovoinea wrote: post #91

Earlier quoted context omitted.

I have been affected, quoting text: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: Name. Email addresses. Phone number. Based on what we've learned so far in our investigation, the attackers did not gain access to certain information, such as: Account passwords. Payment card or credit…

Mine continues: Additionally, the attackers also accessed other account information, including: - The following information associated with your Facebook account: - Username. - Date of birth. - Gender. - Types of the devices you've used to access Facebook. - The language you choose to use Facebook in. - If you previously added this specific information to your Facebook account, it was also accessed: - Relationship st…

There's lots of "verification" data there, and lots of info to make convincing phishing attempts. That's serious juju.

Like if I say "I'm calling from Samsung about your SMA500FU, phone number #####, ..." that gives me a lot of trust for a phish.

I wonder, say, how many phones I could get by mailing people an envelope saying their phone was at risk of exploding, sending corresponding texts, etc..

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#198

Post by pbhjpbhj »

cortesoft wrote: post #173
EpicEng wrote: post #67

Earlier quoted context omitted.

>The attacker says “Ah, a bunch of random characters, do I have to say it? The vast majority of users aren't using random characters, so how would they know to say that to begin with? Are you implying they try that line, idk, 10,000 times until it (maybe) works?

Nah, it would go like this: Support: what is your fathers middle name? Hacker: Michael Support: sorry that is wrong Hacker: oh shoot, I forget I always put the incorrect information in this one... i can't remember, did I put a fake name or random characters? Or was this the one I put a bunch of words into? Support: yeah, it looks like random characters... let's move on

Proper training, required. That person presumably is legally liable as they've breeched the providers security by giving information; and maybe given away PII.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#199

Post by pbhjpbhj »

notimetorelax wrote: post #30
cobookman wrote: post #20

Earlier quoted context omitted.

Got the same message. So what's the recommended thing to do. Rotate all your passwords and security questions?

I guess in this case, - rotate all your names, phone numbers, and addresses. :( In all earnestness, Facebook would have required password reset if it were needed.

If you were I've of the unlucky ones then check your security data at banks and any other place that has financial info, or ability to spend money (Amazon, etc.).

More important is perhaps to warn less savvy people to be vigilant about phishing attempts.

Post reply on HN