3 ms·
Potential Facebook Security Flaw
- jdee 16y agoPretty shocking. What sites don't verify emails in 2020?
- kgermino 16y agoUmm 2020? Interesting story though, and one more thing that would make me concerned about having a FB account.
- dzlobin 16y agoI raised the same question as the the first commenter on this post a few months ago: http://news.ycombinator.com/item?id=1341852 http://news.ycombinator.com/item?id=1341852
- deleted 16y ago[deleted]
- mike-cardwell 16y agoI don't consider this a Facebook security flaw. The person with the Facebook account added your email address to their profile. It's tantamount to them giving you a copy of their house key, you using it to get into the house, and then stating that there is a security flaw in the door.
- screenreach 16y agoI think looking at it as i tried to outline in the post that Facebook should really only send out messages to confirmed email addresses. If this was the case it would effectively stop the problem and not allow bypassing the security questions
- what 16y agoWhat happens if someone gets access to your email though? For example, a silly person might forget to logout of their email when using a public computer. If I notice this, I can just hijack their Facebook account.
- mike-cardwell 16y agoYou're kidding right? If you get access to somebody's email account then all bets are off. You could take over somebody's HackerNews account exactly the same way. You could take over accounts on most websites this way...
- deleted 16y ago[deleted]