Off Topic - Facebook breached

[shaws]

I have been notified although not a member. Excerpt:

WHAT HAPPENED?

Facebook revealed on Friday, September 28th that a security vulnerability had led to an attack exposing the personal information of at least 50 million accounts.

Learn more

WHAT DATA WAS COMPROMISED?

The current investigation is ongoing but so far indicates that the attackers stole Facebook access tokens that can then be used to take over a user's account as if they are the account holder.

Learn more

I HAVE A FACEBOOK ACCOUNT. WHAT DO I DO?

Facebook is notifying all potentially affected accounts, however, we strongly urge you to take precaution and update your Facebook password along with any accounts using the same or a similar password.

[helvella Administrator Thyroid UK]

This type of issue is why I do not like facebook at all!

Most particularly, I strongly recommend people divorce their existence here from facebook. Use different names and passwords and contact emails (if possible).

[shaws Administrator in reply to helvella]

Several people I know are members and urged me to also join. I said NO I do not want and I think HU as well try to do so.

[Valarian]

I use Facebook, mainly because I am interested in a couple of closed Groups. I never use Facebook to log into anything else, nor do I allow it access to my usual electronic contacts.

If you use Facebook, it's worth checking your privacy and security checkings from time to time.

[dang]

The breach had to do with their ‘View As’ feature, without getting into complicated detail I can assure you that means passwords were not stolen and credit card info likely not seen by the hackers.

What they could have done using the view as feature is likely post on your account, make certain changes, or view information such as your old posts, friends, connections etc... also possible they could have connected to any 3rd party app which is linked to one’s Facebook account, if those 3rd party apps have weak security other damage could have been caused there.

When Facebook fixed the breach they logged out those affected which would have also logged out any hacker, so when the user re-logs in their Facebook is safe again.

Just putting this info here for anyone interested.

having different passwords for everything is a great idea and using 2 Factor authentication is even better.