Tag Info

New answers tagged

0

Short awnser: Yes and No Explanation: Facebook Claims they use TLS/SSL everywhere, but after a bit of poking around using Wireshark, i found out that logging in, visiting timeline etc. all go over HTTPS (no port 80 connections detected), when visiting certain elements though, like apps/games, photo's and such, i detected HTTP connections through port 80. ...


1

I suspect it really means «They have stolen your cookies and can impersonate you. Change your password in order to invalidate the session» Another explanation would be that they could show a fake login prompt (eg. simulating that you got logged out, or entered a wrong password) and obtain your password from there.


34

This is simply Facebook trying to provide a better user experience for those users who may have Caps Lock enabled, or who's devices automatically capitalize the first letter of the password. I don't think there any any cookies per your question. It is likely that the password hashing and storage is as standard as you would expect. The alternate passwords ...


1

First of all, a JAR file is a Java Runtime file, it runs a java-based program. What is commmon with OSX is that it checks the author fingerprint, and would give warnings if the Application or file isnt "trusted", which can mean its not gained through the Appstore, or is not signed (applications can be signed by an author). JAR Files if im right, cannot be ...


2

There's an option "Who should see this?". As far as I know, changing that to custom and including someone, as you've mentioned here, your mom into "Don't share this", you can avoid getting monitored. For that commenting thing, you can choose to share only close friends, or like above, choose custom list. I guess, that's the only way


1

You can use a cloud-based password manager and a USB dongle. This would be the safest and most convenient solution especially if your phone is unavailable. USB dongle can be strengthened with a code. The token serves as a "something you have" factor and the code is "something you know" just like with your credit card. The database of your login credentials ...


2

Several initiatives are ongoing to address this issue. Google has been working with the YubiKey folks to create a tiny dedicated USB dongle device to act as a second factor. You can see details here Forbes story here. You can also use YubiKey today to kludge up a solution if you are so inclined.



Top 50 recent answers are included