Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Someone keeps trying to reset my Facebook password

reddit.com

Post reply on HN
Print view View original

141–150 of 246 posts

Re: Someone keeps trying to reset my Facebook password

#141

Post by delecti »

pc86 wrote: post #114
delecti wrote: post #89

Earlier quoted context omitted.

Microsoft does let you use other authenticators. My non-MS authenticator app has 3 MS accounts on it.

The funny thing is I have other MS accounts in my Google authenticator, but for one of my accounts specifically (maybe because it's the only one with Azure spend every month?) even though I have it in Google, I kept getting told on login I needed to set up MS Authenticator or SMS - no options for a different Auth app.

I'd attribute this to MS flakiness, or possibly AD policies. I've got work MS accounts, each connected to a multi-million dollar azure account, and each connected to a non-MS authenticator.

Re: Someone keeps trying to reset my Facebook password

#142

Post by ShowalkKama »

jlokier wrote: post #139

I got one of these "someone request a password reset" mails from Facebook yesterday. I don't think I've had one before, and my email on its own domain I've had for ~20 years doesn't seem to be one people type by mistake. I thought it was probably phishing, yet the links all looked legitimate, including the one for password reset and the one to tell Facebook I didn't request the reset. So I thought it might be a homog…

just to be sure if you use firefox you can set network.IDN_show_punycode to false in about:config

this will make the url bar display the encoded version instead (xn--wikipedi-86g.org)

Re: Someone keeps trying to reset my Facebook password

#143

Post by TowerTall »

bhartzer wrote: post #129

I own the domain of my last name. Several family members use (firstname@lastname.com). I once went to get a new phone at Best Buy, and the employee needed my email address. I gave it to here (firstname@lastname.com) and she insisted that it was NOT my email address. She insisted that it MUST end in @gmail.com or @yahoo.com, something like that. We frequently sign up for stuff online, and when we enter our email addre…

I have never had this problem and I have been using firstname@lastname.com for 20+ years

Re: Someone keeps trying to reset my Facebook password

#144

Post by usefulcat »

TowerTall wrote: post #143
bhartzer wrote: post #129

I own the domain of my last name. Several family members use (firstname@lastname.com). I once went to get a new phone at Best Buy, and the employee needed my email address. I gave it to here (firstname@lastname.com) and she insisted that it was NOT my email address. She insisted that it MUST end in @gmail.com or @yahoo.com, something like that. We frequently sign up for stuff online, and when we enter our email addre…

I have never had this problem and I have been using firstname@lastname.com for 20+ years

Same here

Re: Someone keeps trying to reset my Facebook password

#145

Post by alias_neo »

bhartzer wrote: post #129

I own the domain of my last name. Several family members use (firstname@lastname.com). I once went to get a new phone at Best Buy, and the employee needed my email address. I gave it to here (firstname@lastname.com) and she insisted that it was NOT my email address. She insisted that it MUST end in @gmail.com or @yahoo.com, something like that. We frequently sign up for stuff online, and when we enter our email addre…

I have the same, firstname@lastname.com/uk/.co.uk/etc; my family name alone is an absolute pain in the arse for most British English speakers to spell when given it verbally; to make matters worse, when I give people my email, over the phone for example, I get the combination of "what's it @?" and then when they finally get there, that my last name is after the @, another 5 minutes to get them to spell it correctly; Some, despite this dance still end up never getting it right.

My wife constantly (half-jokingly) reminds me of how much of an PITA I've caused her with my name (that she took), when her maiden name was so sophisticated and easy compared to my weird, unidentifiable, "foreign" (I'm British/English) one.

EDIT to add: I don't often have issues with forms, but I reserve that particular address for "important" family related things, the sort of account where I _know_ if I receive an email to it, I need to read it. Everything else I use a gmail for (as does my wife).

Re: Someone keeps trying to reset my Facebook password

#146

Post by laurencei »

joezydeco wrote: post #110
laurencei wrote: post #93

Earlier quoted context omitted.

Yeah - and what is crazy is when you think about it - Microsoft generates a 6 digit code. So it is a "one in a million" to randomly guess what the code is on any given login. But it is "one in a million" for each Microsoft account you know about - and if they have millions of email addresses, and automate it each day (I also get attempts 1-2 times per day). Yes - the odds are small - but there is a greater than 0% ch…

I'm a little confused. Does the code get generated on any attempt to log in, or only those that have the password and MFA is activated? Or when someone attempts password recovery? Because I'm a bit concerned if Microsoft passwords are leaking.

When attempting to login to your Microsoft account, instead of typing your password you can do an optional "one time password" generation thing from Microsoft. So instead of typing your password +2FA - they email you a 6 digit "one time password" that you can use instead.

You cant disable this.

So all Microsoft accounts could have a daily 1 in 1 million chance of been overtaken.

Odds are low - but if you then spam this across thousands of attempts per day - they would statisically "get lucky" from time to time...

Re: Someone keeps trying to reset my Facebook password

#147

Post by matthiaswh »

MarkSweep wrote: post #106
chriscjcj wrote: post #97

I used to use an e-mail address a terrific domain name that I own. Without publicly disclosing specifics, it was like this: @ .com Thousands of people with this name, who didn't want to give out their real e-mail address, used this e-mail address when signing up for things online. They probably never thought it would be someone's actual address. I finally had to quit using it because of the tremendous amount of e-mai…

firstname.lastname@gmail.com can have similar problems. Somehow people miscommunicate or misremember their email address and I get a lot of misdirected messages.

Now imagine how bad it is for the guy with the verbatim email address `firstname.lastname@gmail.com`.

Re: Someone keeps trying to reset my Facebook password

#148

Post by thrill »

chriscjcj wrote: post #97

I used to use an e-mail address a terrific domain name that I own. Without publicly disclosing specifics, it was like this: @ .com Thousands of people with this name, who didn't want to give out their real e-mail address, used this e-mail address when signing up for things online. They probably never thought it would be someone's actual address. I finally had to quit using it because of the tremendous amount of e-mai…

nobody@nowhere.com was my go-to throwaway email address - sorry about that.

Re: Someone keeps trying to reset my Facebook password

#149

Post by yosito »

bhartzer wrote: post #129

I own the domain of my last name. Several family members use (firstname@lastname.com). I once went to get a new phone at Best Buy, and the employee needed my email address. I gave it to here (firstname@lastname.com) and she insisted that it was NOT my email address. She insisted that it MUST end in @gmail.com or @yahoo.com, something like that. We frequently sign up for stuff online, and when we enter our email addre…

I use bestbuy@lastname.com with no issues. I often get customer service people who think I work for their company.

Re: Someone keeps trying to reset my Facebook password

#150

Post by matthiaswh »

iforgotpassword wrote: post #120
bluGill wrote: post #66

Earlier quoted context omitted.

I lost a yahoo account because I put in incorrect information (I claimed to be 99 year old female or some such thing) and then forgot the password. I never really did anything with my yahoo account though, so it doesn't matter other than I couldn't unsubscribe to some mailing list.

Lost my Yahoo account because it forwarded mail to another account and so I never logged in to it. Then Yahoo deleted it for inactivity ... No warning issued, just gone one day. So now I'm locked out of my YouTube account because it wants to send a verification code to the Yahoo address. Fuck this bullshit.

You're in luck. Email forwarding with Yahoo is now a paid only feature.
Post reply on HN