Live data from Hacker News

Followup to "I bought more than 1 million Facebook data entries for $5"

talkweb.eu

1–10 of 98 posts

Re: Followup to "I bought more than 1 million Facebook data entries for $5"

#3
I recently had cause to log in to facebook (first time in 6 months) because my account had been compromised and was used to place a bunch of ads ("find hot guys in your area") which they had apparently approved (and ran to ~$100 in a few hours).

I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for recovery versus preventing the intrusion in the first place (ala Google's two-factor auth).

Anyway, in this case they obviously took the wrong approach with the blogger and I hope it blows up in their faces. (Microsoft and everyone else used to not be nice to security researchers, Facebook will no doubt learn that cooperation is a better strategy too).

Re: Followup to "I bought more than 1 million Facebook data entries for $5"

#5
post #3

I recently had cause to log in to facebook (first time in 6 months) because my account had been compromised and was used to place a bunch of ads ("find hot guys in your area") which they had apparently approved (and ran to ~$100 in a few hours). I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for…

FYI Facebook has two-factor auth as well: https://www.facebook.com/note.php?note_id=10150172618258920.

Re: Followup to "I bought more than 1 million Facebook data entries for $5"

#7
I don't know why Facebook reacted like that. But as I understand, those information are not from Facebook itself. They are from an unknown third party app. Also, anyone who has a knowledge in Facebook API can mine those information by creating a Facebook app. I'm sure those app like "God wants you to know" have more than 1 million Facebook information.

By reacting like that, I think Facebook can be considered as guilty as charged.

Re: Followup to "I bought more than 1 million Facebook data entries for $5"

#8
You really don't want to mess with the Facebook police. They'll delete your life.

I wish I had something more substantive to say here, but the problem is that we give Facebook an extraordinarily huge power in our personal lives. It's not just some random web service.

Re: Followup to "I bought more than 1 million Facebook data entries for $5"

#10
post #3

I recently had cause to log in to facebook (first time in 6 months) because my account had been compromised and was used to place a bunch of ads ("find hot guys in your area") which they had apparently approved (and ran to ~$100 in a few hours). I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for…

FYI Facebook has two-factor auth as well: https://www.facebook.com/note.php?note_id=10150172618258920 .

I wonder how frequently used the accounts which are used for fraud are?

But I guess it's tricky -- maybe I'm signing in from a remote location after many months of inactivity to post some vacation photos, and can't receive texts on my phone because it doesn't work in whatever country I'm in...

Post reply on HN