4 ms·
What use is the social captcha if your friends list is public? Many people had this set because it was the new default when the settings switched some half-yea
by pak 16y ago
What use is the social captcha if your friends list is public? Many people had this set because it was the new default when the settings switched some half-year ago. A lot of them probably don't even realize it.
- flyt 16y agoAn attacker would have to: 1: Load the social captcha 2: Load your entire friend list 3: Look at the first photo of a friend, then examine every one of your friends (the average user has a couple hundred) and match them up, assuming that their profile photo is similar to the randomly-selected photo from the social captcha 4: Repeat this whole process two more times Social captchas protect you against somebody from Nigeria hacking your account, and makes this process more computationally intensive. Even if they did login to your account after all this work you'd end up getting an email and SMS saying that there was a login from an unrecognized computer.
- nollidge 16y agoThe screenshot shows that the CAPTCHA is multiple-choice, so they'd only have to look up a handful of people's names in step 3.
- bedris 16y agoLook at the first photo of a friend, then examine every one of your friends (the average user has a couple hundred) and match them up, assuming that their profile photo is similar to the randomly-selected photo from the social captcha The example posted on the FB site looked like a multiple-choice selection was to be made, so the putative hacker would only have to look up those six friends, not look through all of your connections.
- mattmillr 16y agoThe purpose of captcha isn't to keep the bad guys out, it is to make sure that a person, rather than a program, is logging in. I'm not sure this new social captcha is better than traditional captcha at that, but if it is equal but easier for the legitimate user, then it's a win.