Followup to "I bought more than 1 million Facebook data entries for $5"
1–10 of 98 posts
Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#2Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#3I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for recovery versus preventing the intrusion in the first place (ala Google's two-factor auth).
Anyway, in this case they obviously took the wrong approach with the blogger and I hope it blows up in their faces. (Microsoft and everyone else used to not be nice to security researchers, Facebook will no doubt learn that cooperation is a better strategy too).
Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#4Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#5I recently had cause to log in to facebook (first time in 6 months) because my account had been compromised and was used to place a bunch of ads ("find hot guys in your area") which they had apparently approved (and ran to ~$100 in a few hours). I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for…
Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#6Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#7By reacting like that, I think Facebook can be considered as guilty as charged.
Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#8I wish I had something more substantive to say here, but the problem is that we give Facebook an extraordinarily huge power in our personal lives. It's not just some random web service.
Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#9Re: Followup to "I bought more than 1 million Facebook data entries for $5"
#10I recently had cause to log in to facebook (first time in 6 months) because my account had been compromised and was used to place a bunch of ads ("find hot guys in your area") which they had apparently approved (and ran to ~$100 in a few hours). I was impressed with the account recovery process ("you entered an old password -- do you want to recover your account?"), but I felt like they were completely optimized for…
FYI Facebook has two-factor auth as well: https://www.facebook.com/note.php?note_id=10150172618258920 .
But I guess it's tricky -- maybe I'm signing in from a remote location after many months of inactivity to post some vacation photos, and can't receive texts on my phone because it doesn't work in whatever country I'm in...