Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Post a boarding pass on Facebook, get your account stolen

michalspacek.com

Post reply on HN
Print view View original

81–90 of 313 posts

Re: Post a boarding pass on Facebook, get your account stolen

#81

Post by wila »

raverbashing wrote: post #19
djsumdog wrote: post #13

Earlier quoted context omitted.

"Your mother's maiden name has numbers in it?" (bank teller, DMV person, etc.) "You .. give real answers for your security questions? Seriously?" I do the same thing, real birthday if it's financial or employee related, but for everything else, I'm a few years older on another date. I often pick a security question that I don't have a real legit answer to as well.

Yes, I try to make the fake answer sound legitimate though City you were born? Just pick any (random/unrelated) city instead of 2DXSDGREDV@#! It's easier if you have to go through a person (which is usually forced to go through a script) also easier on the phone

Not just easier, but actually more safe. The person on the phone isn't usually aware about your security "paranoia" and is being evaluated on how much customers he/she has been able to help.

As such most helpdesk employees will accept the answer "Oh I forgot, I do remember I put some random characters in there"... and your random password end up not helping you after all.

Re: Post a boarding pass on Facebook, get your account stolen

#84

Post by [deleted] »

bogomipz wrote: post #68

>"I've known Petr Mára for few years now, he's a nice guy. He's a speaker, trainer, video blogger, and deploys iOS & macOS wherever possible." Why are any of these facts relevant? He deploys macOS? What? What does this have to do with anything? And then author makes the reference to his friend Petr a link to his personal website? Seriously? Incidentally, Petr's webiste is really entertaining as there are no less than…

[deleted]

Re: Post a boarding pass on Facebook, get your account stolen

#85

Post by TomMarius »

distances wrote: post #74
bogomipz wrote: post #68

>"I've known Petr Mára for few years now, he's a nice guy. He's a speaker, trainer, video blogger, and deploys iOS & macOS wherever possible." Why are any of these facts relevant? He deploys macOS? What? What does this have to do with anything? And then author makes the reference to his friend Petr a link to his personal website? Seriously? Incidentally, Petr's webiste is really entertaining as there are no less than…

> He deploys macOS? What? What does this have to do with anything? And what does that even mean? That he buys Apple stuff? Indeed the weirdest endorsement I've heard in a while.

To be fair, Petr himself uses these exact words (on his website) to describe him.

Re: Post a boarding pass on Facebook, get your account stolen

#87

Post by cesarb »

fredley wrote: post #6

It's amazing that with the algorithmic power Facebook brings to bear on every photo you upload, finding faces etc., that they can't spare a few cycles for security. It would be simple to run barcode detection over any post and blur the result (maybe prompt the user just in case they actually wanted to post one?). Almost any barcode is assumed to be private information, even a barcode on a store receipt can be used fo…

> Almost any barcode is assumed to be private information

Wouldn't the most common barcode be the EAN-13, which is not private information?

Re: Post a boarding pass on Facebook, get your account stolen

#88

Post by user5994461 »

grogenaut wrote: post #45
csomar wrote: post #33

Earlier quoted context omitted.

I was traveling with a friend and we could benefit from changing flights. So my friend went to the counter to just ask about the possibility. He had my boarding pass but not my passport. He returned 20 minutes later with both boarding passes changed. The counter stuff just took his "word" for "he is my friend". Edit: An hour later driving and thinking about it, I think it is the right move from the airline. The risk…

So what's going to happen is that 2 of the same person show up to the plane... and the copy cat goes on the plane and then you check in, and they say, nope, not you. And then you pull your passport. And then they go get the other person off the plane.

The scammer may have changed the flight time but it's still the original name and ID on the ticket. The scammer would have to fake your passport to be able to onboard as yourself. That's a pretty high bar.

Re: Post a boarding pass on Facebook, get your account stolen

#89

Post by bogomipz »

Xoros wrote: post #77
bogomipz wrote: post #72

Earlier quoted context omitted.

>"It's amazing that with the algorithmic power Facebook brings to bear on every photo you upload, finding faces etc., that they can't spare a few cycles for security." Do you really believe the problem here is FB? Do you really believe FB should be the arbiter of what incidental information their users's pictures can and can not convey? And even if they did parse pictures for sensitive data do you believe that FB, gi…

> Do you really believe FB should be the arbiter of what incidental information their users's pictures can and can not convey? Aren't they already do it for other stuff they don't want to see online ? Surely a nipple isn't a barcode and legal implication aren't the same. And people sharing personal stuff ARE responsible for sharing those stuff. So I guess it shows us again that FB is not our friend :)

Ha, yes you make a good point, I suppose this is already true. The removal of a posting Nick Ut’s iconic Vietnam War photo certainly comes to mind. Cheers.
Post reply on HN