Live data from Hacker News

Facebook Asking for Some New Users' Email Passwords

thedailybeast.com

161–170 of 377 posts

Re: Facebook Asking for Some New Users' Email Passwords

#161

Earlier quoted context omitted.

Easy. The engineers who built it care mostly about their total compensation and getting promoted. They therefore gleefully implement the product requirements. The PMs behind the idea also care about the above, except they are held to account by business objectives. By narrowly optimizing for a particular objective (reducing account fraud) in an unprincipled manner, they come up with an insane feature idea like this.…

I find it fascinating how big tech companies are intent on spending enormous sums of money seeking out the top tech talent in the world. Then rather than listen to them when they voice concerns they try to beat them down into submission. I get that if you worked at a company whose core mission is evil that you just have to accept that when you sign up, but there's no reason facebook needs to be make these active mora…

Top tech talent generally have no idea how businesses make money. So of course you’d ignore them.

Re: Facebook Asking for Some New Users' Email Passwords

#162
post #97
post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

People with any sense of ethics don't work at Facebook.

Most people only have ethics when money is not involved.

(I'm shadowed banned by the Donger?)

Re: Facebook Asking for Some New Users' Email Passwords

#164

Earlier quoted context omitted.

POLi in Australia also asks for your bank username and password, logs into your bank's online portal, and performs a bank transfer on your behalf; which is of course in violation of the bank's policies. It's truly insane, if I see any company accepting payment via POLi it's instant verification the company in question is clueless and that I should avoid using their services whenever possible, because they have zero i…

Trustly does this, too.

Not sure about that. I used trustly last week and only had one authentication that was for the actual payment. No login to my bank.

But I might be misremembering.

Re: Facebook Asking for Some New Users' Email Passwords

#165

I dont know why anyone with any commonsense still uses Facebook, Instagram or Twitter. They're completely uncontrolled nonsense that I wouldn't trust with my email address. Let alone my phone number. Call me crazy or socially inept, but I value privacy.

Fear Of Missing Out. Many people feel compelled to remain on Facebook because they're afraid of missing out on events that get scheduled through Facebook. But here is what I discovered: people who like you will go out of their way to make sure you get the invitation, even if that means using something barbaric and old fashioned like a phone number or email address. FOMO is probably Facebook's most valuable asset, but…

I have also discovered this. Haven't logged on to Facebook since new year's eve, I was a very heavy user before that. 4 months in and I haven't missed out on anything IRL.

Re: Facebook Asking for Some New Users' Email Passwords

#166

Earlier quoted context omitted.

The user that found this and is cited in OP's article mentions there was no alternative to giving Facebook your password: https://twitter.com/originalesushi/status/111249895877604966...

Could the alternative be gasp not using facebook?

people don't register on facebook to check out this cool new social network, it's bee quite while since FB was cool. But imagine a situation of great social pressure, like your kindergarten parent group is communicating there

Re: Facebook Asking for Some New Users' Email Passwords

#167

Earlier quoted context omitted.

LinkedIn has been doing this for years. It's the reason why I don't use it (and the spam they send is the reason why everybody hates them).

You mean emails? I've managed to turn them all off; if that doesn't work, you can file a complaint with the EU who have strict laws against e-mail spam, and the requirement to unsubscribe with as few actions as possible.

Where can I file these complaints? I have looked for this before, but wasn’t able to find out

Re: Facebook Asking for Some New Users' Email Passwords

#168
post #97
post #67

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?". I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

People with any sense of ethics don't work at Facebook.

Maybe, but that's very counter-productive actually. If you want to do ethical stuff FB is a perfect place to try to influence what happens.

Re: Facebook Asking for Some New Users' Email Passwords

#169
post #65

Earlier quoted context omitted.

Swedish payment processor Klarna does something similar to this as well. If bying something through the platform by direct bank transfer you are asked to sign to your bank to accept the payment using BankID [0], which is normal. What is not normal is that they grab your personal identification number and send a login request using BankID before you open your app. When authenticating the login you authorize one of Kla…

POLi in Australia also asks for your bank username and password, logs into your bank's online portal, and performs a bank transfer on your behalf; which is of course in violation of the bank's policies. It's truly insane, if I see any company accepting payment via POLi it's instant verification the company in question is clueless and that I should avoid using their services whenever possible, because they have zero i…

Which is amusing / horrifying because Australia already has good ways to transfer money between bank accounts. BSB/Acct# for normal transfers and BPay for bills.

Re: Facebook Asking for Some New Users' Email Passwords

#170
post #92

Earlier quoted context omitted.

Sure, but is that not what an online password manager is? :P

I want to believe that LastLass uses client side JS to decrypt based on your login credentials, not a plain text database.

They do. It's not pretty, the whole thing is a mess from a lot of engineering aspects, but the basic security principles are solid.
Post reply on HN