News for hackers. Stuff that matters.
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by tptacek on Tuesday October 12, 2010 @08:02PM (#1785500)
A nonsensical comment. Software security is one of the many things that can be purchased using money. Facebook has a lot of money, and they have used it to buy serious software security talent. I trust Facebook with my data more than I trust WePay. And I like WePay.
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by Groxx on Tuesday October 12, 2010 @10:20PM (#1785796)
Trust them to do what, precisely? Give it away for free, when they change your security settings to "public" by default, while doing a good job at preventing people from hacking in to get almost identical information?
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by ax0n on Wednesday October 13, 2010 @08:40AM (#1786875)
That was mostly my point to begin with. At best, these new "security" controls prevent attackers from stealing my account and defacing my data. Facebook loses the confidentiality battle and thus the war.
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by tptacek on Wednesday October 13, 2010 @01:34PM (#1788045)
So, we're not allowed to reason about the security of Facebook's actual software, because you disagree with their business practices? Sorry, it simply does not follow that because they don't revere your privacy as much as you do that their service must be insecure.
Re:More Ways to Stay Secure (Facebook introduces one-time pa... by ax0n on Wednesday October 13, 2010 @03:11PM (#1788450)
You're allowed to reason about the security of Facebook's software. I simply posit that the security of their software makes little difference when they've already taken a compromising stance with their business practices. Also, I don't disagree with their business practices. It's their place. They can run it however they like just as pg runs this place however he likes. I respect that, and I compensate by being cautious (and wish more people would do the same.)

Notice that throughout the entirety of this, I've stated my opinion. No more, no less. I even lauded this move as a way to potentially increase Integrity assuming proper implementation and use, yet I get buried.