5 ms·

Yes. https://arstechnica.com/information-technology/2018/09/50-million-facebook-accounts-breached-by-an-access-token-harvesting-attack/ https://arstechnica.com

Yes. https://arstechnica.com/information-technology/2018/09/50-million-facebook-accounts-breached-by-an-access-token-harvesting-attack/ https://arstechnica.com/information-technology/2018/09/50-mi...

buboard 7y ago
Well no, facebook has pretty good security. 50 Mil stolen credentials in 15 years out of what is probably more than ten billion accounts is nothing.
- root_axis 7y ago
  https://www.cbsnews.com/news/millions-facebook-user-records-exposed-amazon-cloud-server/ https://www.cbsnews.com/news/millions-facebook-user-records-... I'm guessing your response will be that it wasn't Facebook's fault. I would also note that there aren't even 10 billion people living on earth, so it sounds like you're just making stuff up.
  - buboard 7y ago
    you 'll notice in that article that it wasn't facebook's servers that were breached. Also facebook has probably way more accounts than humans, i think just recently they deleted 3 billion fake ones. Regardless, imho from many years working with their platform, they do take security seriously and they ve helped to popularize methods for securing accounts and passwords.
    - root_axis 7y ago
      > you 'll notice in that article that it wasn't facebook's servers that were breached A distinction without a difference. If Facebook's security policy permits PII to be moved into insecure systems then Facebook itself is insecure. Here's another: https://www.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4 https://www.businessinsider.com/facebook-uploaded-1-5-millio... Yeah. 1.5 million, who cares right? No big deal. This is clearly a pattern, not an isolated incident.
      - buboard 7y ago
        this is a privacy issue, but their security is still pretty good, relative to the staggering size of the users and data they hold.
        root_axis 7y ago
        > still pretty good, relative to the staggering size of the users and data they hold. Hundreds of millions of exposed users is not "pretty good", it's objectively horrible. > this is a privacy issue It is a privacy issue but primarily a security issue since the scandal is that the data was unintentionally leaked, not that it was shared with a 3rd party.
    - grey-area 7y ago
      Regardless, imho from many years working with their platform It is difficult to get a man to understand something, when his salary depends on his not understanding it. Upton Sinclair
      - buboard 7y ago
        nah i wish that was the case
- kerng 7y ago
  Normalization of Deviance at its finest- 50 million (and over time and aggregated its been way more) is not something to be proud of, rather the opposite CSO, maybe even CEO should have resigned for how frequent they have breaches and "bugs".

Yes. https://arstechnica.com/information-technology/2018/09/50-million-facebook-accounts-breached-by-an-access-token-harvesting-attack/ https://arstechnica.com/information-technology/2018/09/50-mi...

buboard 7y ago

Well no, facebook has pretty good security. 50 Mil stolen credentials in 15 years out of what is probably more than ten billion accounts is nothing.

root_axis 7y ago
https://www.cbsnews.com/news/millions-facebook-user-records-exposed-amazon-cloud-server/ https://www.cbsnews.com/news/millions-facebook-user-records-... I'm guessing your response will be that it wasn't Facebook's fault. I would also note that there aren't even 10 billion people living on earth, so it sounds like you're just making stuff up.
- buboard 7y ago
  you 'll notice in that article that it wasn't facebook's servers that were breached. Also facebook has probably way more accounts than humans, i think just recently they deleted 3 billion fake ones. Regardless, imho from many years working with their platform, they do take security seriously and they ve helped to popularize methods for securing accounts and passwords.
  - root_axis 7y ago
    > you 'll notice in that article that it wasn't facebook's servers that were breached A distinction without a difference. If Facebook's security policy permits PII to be moved into insecure systems then Facebook itself is insecure. Here's another: https://www.businessinsider.com/facebook-uploaded-1-5-million-users-email-contacts-without-permission-2019-4 https://www.businessinsider.com/facebook-uploaded-1-5-millio... Yeah. 1.5 million, who cares right? No big deal. This is clearly a pattern, not an isolated incident.
    - buboard 7y ago
      this is a privacy issue, but their security is still pretty good, relative to the staggering size of the users and data they hold.
      - root_axis 7y ago
        > still pretty good, relative to the staggering size of the users and data they hold. Hundreds of millions of exposed users is not "pretty good", it's objectively horrible. > this is a privacy issue It is a privacy issue but primarily a security issue since the scandal is that the data was unintentionally leaked, not that it was shared with a 3rd party.
  - grey-area 7y ago
    Regardless, imho from many years working with their platform It is difficult to get a man to understand something, when his salary depends on his not understanding it. Upton Sinclair
    - buboard 7y ago
      nah i wish that was the case
kerng 7y ago
Normalization of Deviance at its finest- 50 million (and over time and aggregated its been way more) is not something to be proud of, rather the opposite CSO, maybe even CEO should have resigned for how frequent they have breaches and "bugs".