Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

201–210 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#201
post #171
post #161

Earlier quoted context omitted.

How do I check if I've deleted Facebook? Does deleting Facebook mean I no longer have a right to know if my data was breached while I was a member?

What if I never signed up. I am sure they know about me. Wonder if there is a way to request that information from them...

If any of your other apps are connected to fb then all your info was likely granted to fb as well .

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#203
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

Security questions are DUMB. They are the exactly same authentication mechanism as password (i.e. proving you know some piece of information). So you basically have multiple backup password in case you forgot the first one. But worse.

If you create a different password for them. Because you rarely use those answer, you won't be able to remember them when they are actually needed. If you generate them with your password manager, then when you loss your password you loss them too. If you actually answer the questions with real information, you basically created a weak password.

All in all, security questions is a terrible idea.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#204

Earlier quoted context omitted.

I guess in this case, - rotate all your names, phone numbers, and addresses. :( In all earnestness, Facebook would have required password reset if it were needed.

If you were I've of the unlucky ones then check your security data at banks and any other place that has financial info, or ability to spend money (Amazon, etc.). More important is perhaps to warn less savvy people to be vigilant about phishing attempts.

s/I\'ve/one

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#205
post #192
post #167

Earlier quoted context omitted.

It's only possible with a very different set of tradeoffs around risk and innovation than are the norm in software. It takes NASA-grade layers of slow development processes to be 100% certain that there will never be any incidents. Most companies, most developers, and most consumers would not be happy with the cost and speed this would result in. In short: it's not that it's impossible. We know how to do it. It just…

And let's keep in mind how successful NASA safety policies actually were. Perfect safety is a pipe dream.

I mean, I'm not aware of any software security incidents involving the Apollo or Shuttle systems, so the system seems to work that far.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#206
post #75

Regulation is coming. If data is the new oil these are the oil spills that lead to the EPA.

The current administration is actively dismantling the EPA, so I'm not sure this is the best analogy.

There's no real appetite for regulation of commercial data use in the US on either end of the political spectrum. And this is a good thing, because GDPR-style regulation would do nothing but further entrench the big players and crowd out innovation.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#207

The multi-billion dollar question is still... how many of them were EU citizens?

Why? Do you think they didn't report this breach to a supervisory authority? Even though they made it public?

That is not the only thing you can get fined for under GDPR.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#208
post #171

Earlier quoted context omitted.

What if I never signed up. I am sure they know about me. Wonder if there is a way to request that information from them...

Yes they do, it's called a shadow profile[1]. If you're in Europe you might have some some recourse (GDPR and such), but if you're from the US you are most likely out of luck. Regardless, Facebook might have a detailed profile on you but not know your name. I doubt there is much you can do. [1]: https://theconversation.com/shadow-profiles-facebook-knows-a...

On the other hand, there's no way to log into a shadow profile, and shadow profile information is never displayed to any logged in user, so you're safe against this particular exploit.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#209

Facebook posting: https://newsroom.fb.com/news/2018/10/update-on-security-issu... Check if you are affected here: https://www.facebook.com/help/securitynotice (posting because it took 10+ mins to find it - many media outlets are not linking directly to it)

Thx for the check-link :)

I understand in general that only "pure" facebook users were impacted and that "WhatsApp" users aren't?

(not sure how integrated WhatsApp is with the Facebook infrastructure - I do use WhatsApp but I don't have a Facebook account)

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#210

Earlier quoted context omitted.

Why? Do you think they didn't report this breach to a supervisory authority? Even though they made it public?

That is not the only thing you can get fined for under GDPR.

I’m fairly knowledgeable in the GDPR and I’m legitimately curious what you think the fine basis would be related to this breach.
Post reply on HN