Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

codewriteplay.com

Post reply on HN
Print view View original

241–250 of 388 posts

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#241

Post by [deleted] »

kapp_in_life wrote: post #213
strgcmc wrote: post #190

Earlier quoted context omitted.

I'm not the person you're responding to, but I would say unequivocally and unironically, yes! The end result is more competition, lower prices, and more options for the end consumer. Sure the raw idea of this mechanism is a little naive and could be refined, but the outcomes you paint sound totally reasonable to me... think of this as a creative way to apply a new kind of tax to the criminally undertaxed big tech beh…

You are allowed to do that(as far as I understand scraping legality), but google/amazon/facebook are also well within their rights to blacklist your IPs, or implement other methods to prevent scraping of their IP(intellectual property in this case).

[deleted]

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#242

Post by int_19h »

potatolicious wrote: post #53
unyttigfjelltol wrote: post #18

So in this story Facebook was responsible for $50 of charges, a business disruption and a huge and ongoing hassle. And Facebook refuses so much as to pick up the phone to discuss it. In the old days the equivalent would have been one of those roach motel businesses rated 'F' on the Better Business Bureau, buckets arrayed on the floor to catch rain leaking through the roof. And yet in this day it's one of the most pro…

> And Facebook refuses so much as to pick up the phone to discuss it. It's part of the business model - each FB user generates so little revenue for the company that you can't afford to offer anything resembling "real" support channels. The company is massively profitable by sheer scale - by making a small amount of money per year off of a vast number of users. This applies to Google as well - or really any ad-based…

This is exactly why the anti-trust sledgehammer is desperately overdue for them.

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#243

Post by micromacrofoot »

tibbon wrote: post #108

For those who have worked at Facebook - why in the world are their policies like this? Why is customer support so... unfriendly and unhelpful? No escalations possible? No way to reach anyone?

ok so on the flip side... why should they? they've become enormously successful without customer support

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#244

Post by judge2020 »

judge2020 wrote: post #143
zmmmmm wrote: post #135

I really think for the Oculus side of this, they should be on the hook for refunding a significant portion of the cost of the user's Oculus library when they ban the account. This would put the cost of a ban to Facebook for real users in the order of hundreds of dollars which is more than enough to have a support person do a realistic evaluation of the situation. It also reflects the non-recoverable portion of the co…

This is another good part of steam - even if your account is banned from the entire community for site-wide spam, you don’t lose access to your game library.

Edit: looks like, of course, they can ban you and lose access to your games, however it requires threatening legal action against Valve.

https://www.oneangrygamer.net/2020/06/steam-user-loses-game-...

Looks like this user received this message[0] after being banned from the community and only because he mentioned russian law did Steam suspend his account.

> Going to support and blalblab again my rights and the russian law, they slapped me with a perma community ban and 1 month ban to contact the support.

0: https://i.imgur.com/uciPvDC.png

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#245

Post by int_19h »

someguydave wrote: post #146
fitzroy wrote: post #118

What is the point of setting up a hardware or Google Authenticator-type 2FA solution when most companies will fallback to SMS? Is there a way to prevent the SMS fallback (last I checked it was 'No' for most sites except maybe Google if I remember, and then you still had to go in and manually delete it)? Does a master list exist of companies that don't use SMS, or allow the user to exclude it? Otherwise it seems like…

> What is the point of setting up a hardware or Google Authenticator-type 2FA solution when most companies will fallback to SMS? One possible point is that you could still log in somewhere that has internet but no cell service

We have a better way of handling that these days:

https://en.wikipedia.org/wiki/Generic_Access_Network

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#246

Post by warkdarrior »

strgcmc wrote: post #190
kapp_in_life wrote: post #159

Earlier quoted context omitted.

That's pretty silly. Should I be able to use Amazon APIs to host reviews for my competing ecommerce site? Or be able to proxy user search requests to google and then intersperse my own advertisements in the results for my web search service?

I'm not the person you're responding to, but I would say unequivocally and unironically, yes! The end result is more competition, lower prices, and more options for the end consumer. Sure the raw idea of this mechanism is a little naive and could be refined, but the outcomes you paint sound totally reasonable to me... think of this as a creative way to apply a new kind of tax to the criminally undertaxed big tech beh…

If you come up with a cool service on top of Amazon's API, should Amazon be allowed to use your APIs to scrape your service data and use it in their offering?

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#247

Post by IntelMiner »

xondono wrote: post #124
potatolicious wrote: post #53

Earlier quoted context omitted.

> And Facebook refuses so much as to pick up the phone to discuss it. It's part of the business model - each FB user generates so little revenue for the company that you can't afford to offer anything resembling "real" support channels. The company is massively profitable by sheer scale - by making a small amount of money per year off of a vast number of users. This applies to Google as well - or really any ad-based…

> One of many reasons I pay Google to host my email rather than use a free Gmail - when you are generating a non-negligible revenue stream suddenly companies' willingness to answer emails and pick up phones increases. If you think that does any difference, I hope you good luck. Google is unreachable for support, even if you are a paying user.

As the Terraria developer showed with Google Stadia, even if you're actively developing software for their brand new products you'll be ignored

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#249

Post by fastball »

TomVDB wrote: post #112
optymizer wrote: post #110

Earlier quoted context omitted.

How would someone use that code to hack into my GV account? Wouldn't they also need to know my password or have access to my e-mail account to login or to reset your password?

They don’t. They want to link a new GV account to a real phone number that is not theirs, so that they can use the GV number for other scams. It only works when your phone number doesn’t already have a GV linked to it.

Seems easier to just buy a SIM card for cash, no?

Re: Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

#250

Post by [deleted] »

exporectomy wrote: post #217
grishka wrote: post #212

Earlier quoted context omitted.

> It also reflects the non-recoverable portion of the cost to most users And then people wonder why I'm never buying anything digital. That's the reason. Buying digital makes your continued access to the thing dependent on your account being not banned and the servers being up. In other words, even if you "own" it, you're still at the mercy of the seller. But if you bought something on a physical medium (or torrented…

Just think of it as like paying to see a movie. I bought a $10 app once, used it for what it was for, and now several phones later, I don't know or care what's happened to it. I got my value out of it and don't need to hoard every possession I "buy". Remember people who used to have a huge collection of video tapes or CDs? They hardly used them for anything except decoration of their living room. Hoarding old crap th…

[deleted]
Post reply on HN