Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Says Hackers Stole Detailed Personal Data from 14M People

bloomberg.com

Post reply on HN
Print view View original

141–150 of 217 posts

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#141

Post by tokyodude »

jcranendonk wrote: post #23
hermanradtke wrote: post #15

Earlier quoted context omitted.

People are social engineering a random string when talking to customer care. The attacker says “Ah, a bunch of random characters, do I have to say it?” or even worse I have had a customer service rep look at it, laugh and say never mind. I use “batteryhorsestaple” type of passwords stored in a password manager for the security questions. Those are easy to say over the phone and more resistant to social engineering.

1password actually supports password generation of the 'correct horse battery staple' variety, bypassing this issue entirely.

when will 1password be hacked? genuine question. is that a worry or is there something about the implementation that makes that not a worry?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#142

Post by exolymph »

tokyodude wrote: post #141
jcranendonk wrote: post #23

Earlier quoted context omitted.

1password actually supports password generation of the 'correct horse battery staple' variety, bypassing this issue entirely.

when will 1password be hacked? genuine question. is that a worry or is there something about the implementation that makes that not a worry?

When LastPass was hacked, the way they stored data helped protect users: https://blog.lastpass.com/2015/06/lastpass-security-notice.h...

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#143

Post by tokyodude »

exolymph wrote: post #142
tokyodude wrote: post #141

Earlier quoted context omitted.

when will 1password be hacked? genuine question. is that a worry or is there something about the implementation that makes that not a worry?

When LastPass was hacked, the way they stored data helped protect users: https://blog.lastpass.com/2015/06/lastpass-security-notice.h...

It's funny that in a topic complaining about a company who spies on it's users someone brings up Last Pass which says right in it'a TOS they spy on all your browser traffic and share that info with marketing partners

https://www.logmeininc.com/legal/privacy

it basically says they collect everything possible to collect and will use it for anything they want including sharing with 3rd parties

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#144

Post by andrewflnr »

philsnow wrote: post #102
dhimes wrote: post #34

Earlier quoted context omitted.

FB should timestamp these articles. It happened a couple of weeks ago, or is this new news?

Everybody should timestamp all articles. People don't want to because they want their content to be "evergreen" and they think that if there's a date that's more than a year or so old, people will disregard / discount the content. So by default many blog CMSs default to not showing the date of any articles.

If your content is "evergreen", show me a "last updated" timestamp in the last year.

/grump

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#145

Post by propman »

If I type my full name on google, I can find my home and cell phone number, age, all family members, home address, my last home address, and my google + (fb and LinkedIn I changed settings so not searchable).

And it’s a pain to ask them to delete the info. It’s obscure and time consuming and no guarantees. That in my mind is worse than anything here. I didn’t allow that info to be public, we need more privacy laws.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#146

Post by gukov »

rlt wrote: post #135

I'm one of the unlucky 400,000 who had the most information stolen. Complete notification: Is my Facebook account impacted by this security issue? Yes. Based on what we've learned so far in our investigation, attackers accessed the following Facebook account information: * Name. * Primary email address. * Most recently added phone number. Additionally, the attackers also accessed other account information, including:…

All companies that deal with personal data should be required to display a list similar to the above as a warning: "In case of a security breach, your personal information will be made available, including but not limited to: ..."

The warning should be displayed during registration and then repeated monthly as a reminder.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#147

Post by alain94040 »

propman wrote: post #145

If I type my full name on google, I can find my home and cell phone number, age, all family members, home address, my last home address, and my google + (fb and LinkedIn I changed settings so not searchable). And it’s a pain to ask them to delete the info. It’s obscure and time consuming and no guarantees. That in my mind is worse than anything here. I didn’t allow that info to be public, we need more privacy laws.

Sounds like a startup opportunity. For only $5, we'll file take down notices left and right for all the info that is available online about you.

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#148

Post by grenoire »

alain94040 wrote: post #147
propman wrote: post #145

If I type my full name on google, I can find my home and cell phone number, age, all family members, home address, my last home address, and my google + (fb and LinkedIn I changed settings so not searchable). And it’s a pain to ask them to delete the info. It’s obscure and time consuming and no guarantees. That in my mind is worse than anything here. I didn’t allow that info to be public, we need more privacy laws.

Sounds like a startup opportunity. For only $5, we'll file take down notices left and right for all the info that is available online about you.

I think you'll be burning through a lot of VC money to pay anybody to do it for five bucks, hell, why not Fiverr?

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#149

Post by blazespin »

propman wrote: post #145

If I type my full name on google, I can find my home and cell phone number, age, all family members, home address, my last home address, and my google + (fb and LinkedIn I changed settings so not searchable). And it’s a pain to ask them to delete the info. It’s obscure and time consuming and no guarantees. That in my mind is worse than anything here. I didn’t allow that info to be public, we need more privacy laws.

Right to be forgotten

Re: Facebook Says Hackers Stole Detailed Personal Data from 14M People

#150

Post by adanto6840 »

40acres wrote: post #75

Regulation is coming. If data is the new oil these are the oil spills that lead to the EPA.

Spot on. Another comment here sounds like it may be suggesting mandatory bounties -- at first glance that sounds very bad for small players, but some thresholds and/or percentages of revenue make the concept more palatable. The users themselves should be able to receive some kind of equitable relief too, but it's difficult when a single user's data is worth cost to the user is potentially a much larger sum.

Regardless, I completely agree - that's almost surely where this is headed.

Post reply on HN