3 ms·

No info on how this Facebook account takeover is happening? I wish they would provide details...

• floatingatoll 5y ago
  They didn’t have 2FA, so it’s probably as basic as a password reuse attack.
  • bjtitus 5y ago
    The really shocking thing is the lack of any delay with email changes. I've known several people whose accounts were hacked and properly flagged by Facebook within hours but the hacker was able to change the email address immediately with no waiting period and remove the other addresses so access was impossible. I tried this on my own account shortly after and, sure enough, there's no waiting period where previous emails remain allowed to reset passwords.
    • floatingatoll 5y ago
      That point deserves an FP.