6 ms·
> Once a hacker gains access to a Facebook account, they can proceed to activate email encryption. > This renders recovery emails sent to the user’s email addr
by repelsteeltje 3y ago
> Once a hacker gains access to a Facebook account, they can proceed to activate email encryption.
> This renders recovery emails sent to the user’s email address unreadable, as only the hacker has the encryption keys.
So: PGP encrypted emails were rarely used, except to lock out the legit user after account was compromised.
- sebstefan 3y agoGithub asks you to log in again to add SSH keys in, this could've been similar They're just looking for excuses
- crtasm 3y agoA lot of account compromise is due to reused passwords so I'm not sure that's a complete solution.
- Kwpolska 3y agoSending a PGP-encrypted email with a verification link to activate the feature should solve that.
- westurner 3y agoWhat are the disadvantages of only signing (and not encrypting the message body of) account reset emails?
- sebstefan 3y agoThe point is that much more sensitive things exist online and it's a solved problem
- jhanschoo 3y agoWhat use case for FB relies on this feature?
- martin_a 3y agoAlmost sounds like a feature. :-)