Tag Info

Hot answers tagged

4

This is a normal facebook page. They just redirected you to a "Company page", that actually looks quite different than your personal "feed" page. The wifi actually redirected you to this page: https://www.facebook.com/CityLifeAUS and its pretty common for Wifi's to redirect you to their custom "start page" after authentication as a form of advertisement. ...


3

Yes, that, and a lot more if you use their mobile app. Also, they are not alone on harvesting everything; always read the app permissions list before installing an app, and consider whether you are willing to share your data with the app maker...


2

Despite the fact that Facebook locks accounts after many tries as the other answers said, you should keep in mind that "replacing your IP with a new one" is not as trivial as you make it sound. Most internet service provider allow you to release your IP lease and get a new IP address, but the attacker will usually receive one from a small pool of a few ...


1

If they keep coming back, it means that you have some software running checks on them. You should take some tool to analyze the running processes on your machine. Use Process Explorer to look at the current running processes (so that you can find out which one is recreating the reported keys and Autoruns to check the list of programs initiated ...


1

Token expiration may take place on the server side causing the client to reauth after x time. If youre looking to do social logins this method should be fine as long as youre transmitting the data over SSL and not saving credentials (U/P Combos) on your systems. The login endpoint should be running on HTTPS (again, read, secure) and should be connecting to ...


1

I know that facebook has a few different security settings and that not everyone uses them to the fullest extent, so I will just go with the settings that I know from personal experience. Your mileage may vary. Facebook has a built in method of determining a users chosen devices that are allowed to access the account. If someone from a new device attempts ...


1

Facebook does temporarily lock accounts. After too many authentication failures, it temporarily locks the facebook account for a few hours, and requires a security question/verification code to unlock the account for more verification attempts. After a 24 timeout period, you can log in again. To the consumer, 24 hours without Facebook is not the end of the ...



Only top voted, non community-wiki answers of a minimum length are eligible