Facebook "low account protection" warning

[punky]

Just saw this...



...on my Facebook which looked very suspicious (not least because it was bundled in with the ads down the side. So I googled it and found a great article explaining it so as not to scare people. Whether you think you should click or not, read the article and then make an informed descision.

http://nakedsecurity.sophos.com/2010...tatus-warning/

Yes, I got this a few nights ago - it's (mostly) bolleaux.

As someone puts in the linked article

a better way to have phrased the message would have been: "We can help you recover your account if it gets hacked, want to know more?"

I don't see how handing over my mobile number can make my account any safer especially as I don't use my mobile to go online..

They send you a text if they think your account has been compromised.

[Stuart]

Although if someone compromises your account, they *could* just change all the access options, including the mobile.

it wants you to add contact info mines on medium and wants my phone number

[toonlight]

Originally Posted by punky

Just saw this...



...on my Facebook which looked very suspicious (not least because it was bundled in with the ads down the side. So I googled it and found a great article explaining it so as not to scare people. Whether you think you should click or not, read the article and then make an informed descision.

http://nakedsecurity.sophos.com/2010...tatus-warning/

Well if you going to use, places like face book- suffer the concessions of very little privacy in you own life, mostly on the matter for the small minded people. There other places with all the features as "Facebook" with much more better security measure at hand plus is anonymous, all the time. (Hint: onion)

Just think when the government, agents (LEA) -what do you think what going to come up in there background search on you with personal life online, for everyone to read - even steal your own ID for criminal purposes. Even most companies do background checks on you now days, so if you want it to stay private- keep it that way not out in the open.
I'm just saying how it is out there in the 21st century with jobs market/personal life - another thing that just came to me, even the criminal minded/burglar know how to use, facebook etc for places to empty out for easy cash now days...... it makes you wonder on how many ways, with your personal life or daily habits in the open can be used against you.

Thank you for reading, how about your views?

[wwe]

yer i keep getting it as well but i just do northing as Ive not got another e-mail and I'm not signing up to face book mobile

[Stuart]

Originally Posted by toonlight

Well if you going to use, places like face book- suffer the concessions of very little privacy in you own life, mostly on the matter for the small minded people. There other places with all the features as "Facebook" with much more better security measure at hand plus is anonymous, all the time. (Hint: onion)

Just think when the government, agents (LEA) -what do you think what going to come up in there background search on you with personal life online, for everyone to read - even steal your own ID for criminal purposes. Even most companies do background checks on you now days, so if you want it to stay private- keep it that way not out in the open.
I'm just saying how it is out there in the 21st century with jobs market/personal life - another thing that just came to me, even the criminal minded/burglar know how to use, facebook etc for places to empty out for easy cash now days...... it makes you wonder on how many ways, with your personal life or daily habits in the open can be used against you.

Thank you for reading, how about your views?

What is the point of a social network where you are anonymous? Hardly "social", is it? Also, if it's legit, why just give a hint? Why not give a link? After all, it's a social network, so the more members, the better.

Facebook is perfectly safe as long as you are careful not to reveal too much on it, and are careful to lock down your account using the privacy controls. Same as any site where you chose to register.

For instance, if you look me up on Facebook, you will only find that I live in London, I work for a University, my birthday and that I like Douglas Adams and drinking. I also go to the gym regularly. All this info is available elsewhere, so is hardly a secret.

You will also find that I make the majority of my status updates on the iPhone. However, this is not a good indication of where I am because I leave places turned off (I do believe that feature is at best pointless and at worst dangerous) and I use facebook on the iPhone whether I am home or not.

[toonlight]

Originally Posted by Stuart

What is the point of a social network where you are anonymous? Hardly "social", is it? Also, if it's legit, why just give a hint? Why not give a link? After all, it's a social network, so the more members, the better.

"Tor's application independence sets it apart from most other anonymity networks: it works at the Transmission Control Protocol (TCP) stream level. Applications whose traffic is commonly anonymised using Tor include Internet Relay Chat (IRC), instant messaging and World Wide Web browsing."

link: http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29#References

Look in the links reference section - it works too I may add. I use it to chat & few times with no problem. Plus every use of every software has a good & bad side to it "never judge a book by it's cover".

Originally Posted by Stuart

Facebook is perfectly safe as long as you are careful not to reveal too much on it, and are careful to lock down your account using the privacy controls. Same as any site where you chose to register.

For instance, if you look me up on Facebook, you will only find that I live in London, I work for a University, my birthday and that I like Douglas Adams and drinking. I also go to the gym regularly. All this info is available elsewhere, so is hardly a secret.I make the majority of my status updates on the iPhone.

Well with all the information you have just gave is already too much, you have me three pieces of information that is to start (I need) to track you down :

~ Location - look in electoral register list in london
~ above with your age reference workout your DOB

~ Your place/type of employment, tax/employment records - contact them/break into their system(bug)

~Your hobbies/ habits/lifestyle day-to-day movements.Monitor your movements/ then build a plan of your life over a few days/months.

~Your Ip address - rough location

~Your apple phone will be the easiest point of access from its blue tooth connection + how you view your net accounts. Your Mobile phone/s are your weakness point form any point of understanding.

~Once located you take a few rubbish bags to see you thrown away a few financial documents etc once I got some pieces of information on you, I can go to the birth & death record office, to get a copy of your birth certificate (legal), then all your lifes work, can be all mine with a few phone calls.

With all you have given me I can narrow you down to a few hundred's people then, narrow down even more with you lifestyle & Facebook postings/accounts - location/ time/place/daily pattern etc Just keep narrowing you down til you make a mistake, which we all do as humans. Then if I was going to take over you life or your finance, I could all too easy or to ruin your life If wanted to do all these things - this is just an easy example how much information is out on everyone - scary isn't it. Which I don't wish to do anyhow.

This loop hole in our own personal detail was exposed in over 30yrs ago, by a man doing a study on how easy our detail to easy to get - the government hasn't closed this loop hole yet after all this time, not forgetting all the details that private companies have on us too, eg your mobile phone provider, they keep every single action you do (locations, texts, phone call recording) for years.

Oh Just to add didn't you know that LEA loves when they get handed apple phones as it tall too easy recover the information from it without much know how - a built in back door .........now a black berry is a totally different thing all together too, it encrypted from the start. Remember mid to late last year the UAE banned the blackberry devices, to be used as they couldn't tap or read the users actions as they used them, few months on they change the ruling few months onwards as a agreement was reached - they had access to the network to do the above following again.

This my reply to all, not a plan of action just a open but bluntly view on what people can do with right know how. Mobile devices are not be trusted nor even hard drives in any modern devices either. Trash/smash them before you resell anything modern with a drive.

To Stuart, thank you for reading my reply, you have a view? do reply in good faith

toonlight

[Stuart]

Originally Posted by toonlight

"Tor's application independence sets it apart from most other anonymity networks: it works at the Transmission Control Protocol (TCP) stream level. Applications whose traffic is commonly anonymised using Tor include Internet Relay Chat (IRC), instant messaging and World Wide Web browsing."

link: http://en.wikipedia.org/wiki/Tor_%28anonymity_network%29#References

Look in the links reference section - it works too I may add. I use it to chat & few times with no problem. Plus every use of every software has a good & bad side to it "never judge a book by it's cover".

Tor is only as trustworthy as the endpoint you are connected to. Not all of the people who run these are honest.

Well with all the information you have just gave is already too much, you have me three pieces of information that is to start (I need) to track you down :

~ Location - look in electoral register list in london

Assuming the info I have given is correct.

~ Your place/type of employment, tax/employment records - contact them/break into their system(bug)

~Your hobbies/ habits/lifestyle day-to-day movements.Monitor your movements/ then build a plan of your life over a few days/months.

~Your Ip address - rough location

~Your apple phone will be the easiest point of access from its blue tooth connection + how you view your net accounts. Your Mobile phone/s are your weakness point form any point of understanding.

Actually, no. It won't. I have disabled bluetooth on it as I have no need for it, and it's just wasting battery power.

~Once located you take a few rubbish bags to see you thrown away a few financial documents etc once I got some pieces of information on you, I can go to the birth & death record office, to get a copy of your birth certificate (legal), then all your lifes work, can be all mine with a few phone calls.

With all you have given me I can narrow you down to a few hundred's people then, narrow down even more with you lifestyle & Facebook postings/accounts - location/ time/place/daily pattern etc Just keep narrowing you down til you make a mistake, which we all do as humans. Then if I was going to take over you life or your finance, I could all too easy or to ruin your life If wanted to do all these things - this is just an easy example how much information is out on everyone - scary isn't it. Which I don't wish to do anyhow.

This loop hole in our own personal detail was exposed in over 30yrs ago, by a man doing a study on how easy our detail to easy to get - the government hasn't closed this loop hole yet after all this time, not forgetting all the details that private companies have on us too, eg your mobile phone provider, they keep every single action you do (locations, texts, phone call recording) for years.

Oh Just to add didn't you know that LEA loves when they get handed apple phones as it tall too easy recover the information from it without much know how - a built in back door .........now a black berry is a totally different thing all together too, it encrypted from the start. Remember mid to late last year the UAE banned the blackberry devices, to be used as they couldn't tap or read the users actions as they used them, few months on they change the ruling few months onwards as a agreement was reached - they had access to the network to do the above following again.

This my reply to all, not a plan of action just a open but bluntly view on what people can do with right know how. Mobile devices are not be trusted nor even hard drives in any modern devices either. Trash/smash them before you resell anything modern with a drive.

To Stuart, thank you for reading my reply, you have a view? do reply in good faith

toonlight

The thing is, nearly everything you say is possible whatever I put on facebook. As such, facebook is largely irrelevant to your argument. I am aware of how easy it is to track people. As for your idea about using the electoral role. Good luck. There are many people with my surname. Not all with the same date of birth, but I believe you also need to know which borough/area they are registered in. I rarely, if ever, give that out. Oh, and thanks to the fact that my ISP does not appear to maintain precise location details, IP Geolocation will get you to within a 6-10 mile radius of me. I live in a heavily populated area, so that's really not much help.

If someone is really determined to track you down, they will. Facebook may help them, but it's far for the only place. Tor will not help you, and depending on the how honest the owner of the endpoint is, may actually hinder you.

[toonlight]

Originally Posted by Stuart

Tor is only as trustworthy as the endpoint you are connected to. Not all of the people who run these are honest.

Tor will not help you, and depending on the how honest the owner of the endpoint is, may actually hinder you.
Assuming the info I have given is correct.

Well it's the best of the both, nor in a public system but not a easy position to track. Either way it makes the net that much more secure, to the concerned surfers (net) out there. There is another system out there, frost using freenet ver: 5 or 7 which to date hasn't been traceable with all the LEA has to offer.. Any takers?
(LEA's worst nightmare + true script pw'd encripted hd drive)

link: http://freenetproject.org/
(download, run it then down load XML package for the sites you want to link up to - up to 24hr set up)

Originally Posted by Stuart

Actually, no. It won't. I have disabled bluetooth on it as I have no need for it, and it's just wasting battery power.

Thats good to know, as I don't know many that have - they trust too much their over priced phone too much.
But all things mobile in general are/have always been the first port of call to tap or listen into for intelligence then other things, GCHQ comes to mind.

Mind me asking Stuart, you run a wireless/wired network?

You seam to me you run a the safer option (wired) though do tell me if you wish. I ask a there are the second best way to tap into a persons life beside the weak mobile phone no matter how much you pay for it! Plus in the UK the owner is solely responsible for it use now days, even they didn't do anything > illegal or legal They get the full weight of law against them.

Happy talking to you Stuart

Toonlight

[formula_86]

Originally Posted by punky

Just saw this...



...on my Facebook which looked very suspicious (not least because it was bundled in with the ads down the side. So I googled it and found a great article explaining it so as not to scare people. Whether you think you should click or not, read the article and then make an informed descision.

http://nakedsecurity.sophos.com/2010...tatus-warning/

When the person uploaded the picture to Wordpress, what was the point in showing the thing underneath as well about "Friend's Photo Albums" if they have to blur it out anyway? Why couldn't they have just cropped the picture to show the account protection thingy only?

[punky]

Originally Posted by formula_86

When the person uploaded the picture to Wordpress, what was the point in showing the thing underneath as well about "Friend's Photo Albums" if they have to blur it out anyway? Why couldn't they have just cropped the picture to show the account protection thingy only?

Because it is to show the positioning of it.