Hijacking a Facebook Account with SMS

Re:Hijacking a Facebook Account with SMS by fatbat on Wednesday June 26, 2013 @06:28PM (#5949554)

Looks like there was a 2-day window between when the reveal post was made vs when Facebook fixed it.

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by mayank on Wednesday June 26, 2013 @06:41PM (#5949602)

Facebook isn't a startup; I'm surprised it took 2 days to be honest. This should have been an all-out panic mode, level-1 alarm and push.

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by xmodem on Thursday June 27, 2013 @09:45AM (#5952216)

Given that at any big company, every change (even a critical security fix!) has to go through review and QA, most startups are probably better equipped to fix this sort of thing than most big companies.

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by mknappen on Wednesday June 26, 2013 @07:05PM (#5949700)

"23rd May 2013 - Reported 28th May 2013 - Acknowledgment of Report 28th May 2013 - Issue Fixed"

5 Days to Acknowledge: Yipes!

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by nuclear_eclipse on Wednesday June 26, 2013 @07:34PM (#5949811)

In all fairness, it was reported on a major holiday weekend...

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by r2qgFKq2XxnxCBr on Wednesday June 26, 2013 @07:07PM (#5949712)

Looks more like a 1 day window. Bug was acknowledged on the 28th of May and fixed the same day. This post is almost a month after-the-fact - 26th of June.

[ Parent | on HN ]

Re:Hijacking a Facebook Account with SMS by MiguelHudnandez on Wednesday June 26, 2013 @07:31PM (#5949799)

A one day window from acknowledgement to correction, but still a five day window from report to correction.

[ Parent | on HN ]