Timeline for Does Facebook storing old passwords compromise security?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Sep 25, 2016 at 8:09 | comment | added | dave | +1 to @Wildcard if I could for adding the link! | |
| Sep 24, 2016 at 3:13 | vote | accept | dave | ||
| Sep 23, 2016 at 23:38 | comment | added | abathur | @m1ke Per OP, Facebook confirms the password was once good, and when it stopped being good. If you got the credentials from a breach of a different service, you know they used that password in more than one place. If the breach went public at a known time, you have a little information about how often they change passwords (either by coincidence, or in response to news of breaches). This info isn't exactly a decoder ring, and it's a far cry from uncovering a heavily-recycled password that still works, but it's also far better than asking your Magic 8-Ball which accounts to single out. | |
| S Sep 23, 2016 at 23:30 | history | suggested | Wildcard | CC BY-SA 3.0 |
Add link to mentioned article
|
| Sep 23, 2016 at 22:45 | review | Suggested edits | |||
| S Sep 23, 2016 at 23:30 | |||||
| Sep 23, 2016 at 20:23 | comment | added | ndrix | "into Facebook's UI could leak at least a few types of information" > Wouldn't it just mean that you're trying to authenticate with a set of credentials that no longer works? | |
| Sep 23, 2016 at 16:52 | comment | added | 700 Software | It is great to see detailed answers on edge case attacks that don't normally come to mind. | |
| Sep 23, 2016 at 15:50 | history | answered | abathur | CC BY-SA 3.0 |