Live data from Hacker News

Someone keeps trying to reset my Facebook password

reddit.com

21–30 of 246 posts

Re: Someone keeps trying to reset my Facebook password

#24

I’ve accumulated, what, 3 Facebook accounts over the years? Many mornings I wake up to see that recovery codes have been requested for all of them, at a similar time. Surely this is enough of a signal to act on!? It really speaks to the fact that Meta really just doesn’t give a rats.

I have never had anyone request my Facebook password. Your email addresses were likely compromised from somewhere else.

Re: Someone keeps trying to reset my Facebook password

#25

Happened the other way to me once. When I made my Gmail account I had a . in it. Emails sent from me go from this email address. My Facebook email for ages was my school email (as is tradition, right?) and one day someone registered as my actual email around the time I was doing a bunch of address consolidation because my school was moving all historical accounts to a separate subdomain. I clicked to confirm foolishl…

Fun fact: https://support.google.com/mail/answer/7436150

Re: Someone keeps trying to reset my Facebook password

#26

It’s a satiation attack (my term). The hope is you’ll get so frustrated at the frequency of the emails that you’ll eventually just press yes or ok or whatever it is that allows the reset.

This is how I'm going to describe that attack where you get a zillion authenticator push notifications because Microsoft has designed the damn thing to authenticate you to them but not them to you. Like, how freaking difficult would it be to put a transaction code in there like Apple so that you can match the notification on your phone with the session you're starting on some other device or service?!

Re: Someone keeps trying to reset my Facebook password

#29
Because of the username. Many people forget their own username, for example: my username is pineapple and someone else's is pineapple2. And they end up using their username to recover their password. If your username is a common namesake, word or homonym, this makes the situation worse.

Re: Someone keeps trying to reset my Facebook password

#30

It’s a satiation attack (my term). The hope is you’ll get so frustrated at the frequency of the emails that you’ll eventually just press yes or ok or whatever it is that allows the reset.

This kind of attack is already called an MFA fatigue attack: https://en.wikipedia.org/wiki/Multi-factor_authentication_fa...
Post reply on HN