News for hackers. Stuff that matters.

A comment on Facebook Says Hackers Stole Detailed Personal Data from 14M People. Parent comment

Re:Facebook Says Hackers Stole Detailed Personal Data from 1... by EpicEng on Friday October 12, 2018 @03:54PM (#18204234)
>The attacker says “Ah, a bunch of random characters, do I have to say it?

The vast majority of users aren't using random characters, so how would they know to say that to begin with? Are you implying they try that line, idk, 10,000 times until it (maybe) works?

[ Parent | on HN ]
Re:Facebook Says Hackers Stole Detailed Personal Data from 1... by cortesoft on Saturday October 13, 2018 @12:37AM (#18206452)
Nah, it would go like this:

Support: what is your fathers middle name?

Hacker: Michael

Support: sorry that is wrong

Hacker: oh shoot, I forget I always put the incorrect information in this one... i can't remember, did I put a fake name or random characters? Or was this the one I put a bunch of words into?

Support: yeah, it looks like random characters... let's move on

[ Parent | on HN ]
Re:Facebook Says Hackers Stole Detailed Personal Data from 1... by pbhjpbhj on Saturday October 13, 2018 @07:17AM (#18207440)
Proper training, required. That person presumably is legally liable as they've breeched the providers security by giving information; and maybe given away PII.
[ Parent | on HN ]
Re:Facebook Says Hackers Stole Detailed Personal Data from 1... by acct1771 on Sunday October 14, 2018 @12:38AM (#18211397)
This is the point of failure. This never comes to fruition.

"Computers are hard, and I'm just not very good with them!"

[ Parent | on HN ]
Re:Facebook Says Hackers Stole Detailed Personal Data from 1... by bsurmanski on Saturday October 13, 2018 @12:16AM (#18206403)
one idea:

attacker accesses recovery answers for site A. Sees that it is random characters. Attacker has access to site A.

Attacker phones sites B,C,D and E, trys social engineering. Attacker now has access to site B,C,D,E also.

[ Parent | on HN ]