Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Asking for Some New Users' Email Passwords

thedailybeast.com

Post reply on HN
Print view View original

111–120 of 377 posts

Re: Facebook Asking for Some New Users' Email Passwords

#111

Post by tgsovlerkhgsel »

x38iq84n wrote: post #106
unionpivo wrote: post #94

Earlier quoted context omitted.

Ignoring their recent fail at logging passwords. It has been established as minimal practice, that NO ONE should be asking you about your password. If this would become a normal, it would also make regular people more likely to give out their passwords. And email is key to your online kingdom, so it's a big deal, if it gets compromised.

This is security by "no one should be asking for your password". The responsibility is with the user and they need to be taught "you must not disclose your password to just anyone who asks for it".

And having well-known entities ask for people's passwords normalizes such behavior and teaches users that this is normal and OK to do.

Re: Facebook Asking for Some New Users' Email Passwords

#113

Post by de_watcher »

Simple_Guy wrote: post #89
kyle-rb wrote: post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

Why is this insane? It's just asking. If you don't want to, don't give your pw to facebook. You make a proposition to an entity, they evaluate the risk-benefit and respond. Unless of course, you think adults are actually childiren and should be protected from themselves by the technocrats.

You know, when I moved from one country to another I've seen directly how a global action is better than dealing with those things as individual and wearing spikes 24/7 everywhere.

Re: Facebook Asking for Some New Users' Email Passwords

#114

Post by UweSchmidt »

baroffoos wrote: post #55
joering2 wrote: post #31

Honest question - is it the time for a new social network already??

There already are new social networks. Why aren't you using them?

Network effects keep people in place. Switching social networks would need a bit of a movement, which OP maybe wanted to low-key initiate?

The next social network would also have to provide the simplicity, performance and features people expect, while showing real, understandable improvements in terms of privacy or the economic model (e.g. no risk being bought by Facebook like WhatsApp).

In general, 'new social networks' seem rarely discussed, here in HN or elsewhere; can you maybe name a few of the options you have in mind?

Re: Facebook Asking for Some New Users' Email Passwords

#116

Post by x38iq84n »

tgsovlerkhgsel wrote: post #111
x38iq84n wrote: post #106

Earlier quoted context omitted.

This is security by "no one should be asking for your password". The responsibility is with the user and they need to be taught "you must not disclose your password to just anyone who asks for it".

And having well-known entities ask for people's passwords normalizes such behavior and teaches users that this is normal and OK to do.

Does it really? It is wrong and the users need to know it.

Re: Facebook Asking for Some New Users' Email Passwords

#117

Post by tragic »

deanclatworthy wrote: post #112

What am I missing here? I have to type my password when I log in to Facebook. They are probably storing a hash of each of the users passwords (after changes) and then comparing against index[0]?

They're asking for the password to your email account, not your Facebook account.

Re: Facebook Asking for Some New Users' Email Passwords

#118

Post by gvand »

kyle-rb wrote: post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

That's why they prefer young people? Yep, they could be smart like anyone else, but they also care/need more about money for obvious reasons and in the long run they tend to fall in line more easily.

Re: Facebook Asking for Some New Users' Email Passwords

#119

Post by hasa »

Nullabillity wrote: post #105
Benjamin_Dobell wrote: post #83

Earlier quoted context omitted.

POLi in Australia also asks for your bank username and password, logs into your bank's online portal, and performs a bank transfer on your behalf; which is of course in violation of the bank's policies. It's truly insane, if I see any company accepting payment via POLi it's instant verification the company in question is clueless and that I should avoid using their services whenever possible, because they have zero i…

Trustly does this, too.

Tink not mentioned yet

Re: Facebook Asking for Some New Users' Email Passwords

#120

Post by j16sdiz »

missingcolours wrote: post #2

Title seems misleading. Per the article it seems they demand email confirmation, but merely offer to access your email for you in order to accomplish that. (This is not a defense of Facebook's actions here)

No, that was an excuse. They use that to pull your contact list.
Post reply on HN