Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

11–20 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#12
Logged in today and found:

"[name], we have more information about the security incident we discovered on September 25, 2018. An unauthorized third party accessed your name, email address and phone number. We acted quickly to secure the site and took action to protect your account, and we're working closely with law enforcement to address the incident."

Ridiculous.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#13
post #9

That's one of the numerous reasons I'll never use fb as a payment or ecommerce platform when they launch these products.

I doubt other payment or ecommerce platforms are any more secure. Given its size, I assume Facebook has a lot of smart people working on security. And they still screw it up. How are smaller platforms, who can't attract or pay for the very best talent, going to do any better (other than by being smaller targets, I guess)?

> I assume Facebook has a lot of smart people working on security.

I am not willing to roll the dice on that assumption.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#15
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.

People are social engineering a random string when talking to customer care. The attacker says “Ah, a bunch of random characters, do I have to say it?” or even worse I have had a customer service rep look at it, laugh and say never mind.

I use “batteryhorsestaple” type of passwords stored in a password manager for the security questions. Those are easy to say over the phone and more resistant to social engineering.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#16

Title says 14M people but Facebook's notice says this: >We have now determined that attackers used access tokens to gain unauthorized access to account information from approximately 30 million Facebook accounts.

They got 30 million users' access tokens. They didn't do anything with 1 million of them but grabbed contact info from 29 million people and additional profile info from 14 million of them, according to Facebook.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#17
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

I use KeePass for password management and the way I handle this is I generate a random string for each security question answer, then just include it in the Notes field of the entry.

I do exactly the same.

Big pain the few times I've had to read over the phone a giant randomized string, but the phone reps always seem to think it's funny.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#18
post #9

That's one of the numerous reasons I'll never use fb as a payment or ecommerce platform when they launch these products.

I doubt other payment or ecommerce platforms are any more secure. Given its size, I assume Facebook has a lot of smart people working on security. And they still screw it up. How are smaller platforms, who can't attract or pay for the very best talent, going to do any better (other than by being smaller targets, I guess)?

Visa and MasterCard seems to handle security ok.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#19
post #6

This is why I hate not having custom security questions from Banks. What is my fathers middle name? Well, if you have facebook and he puts it up there you can find out. I have no control over that. I could start using fake answers but trying to remember the fake answers vs real answers is tough. Whereas when I get a custom question I have a custom answer that I will always remember. Such as made up on the spot Name o…

In my password manager, I save nonsensical answers (not a string of random characters) to built-in questions.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#20

Logged in today and found: "[name], we have more information about the security incident we discovered on September 25, 2018. An unauthorized third party accessed your name, email address and phone number. We acted quickly to secure the site and took action to protect your account, and we're working closely with law enforcement to address the incident." Ridiculous.

Got the same message. So what's the recommended thing to do. Rotate all your passwords and security questions?
Post reply on HN