Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

In light of the latest news

I do know that session hijacking on unsecure networks is a possibility... Besides that(and weak passwords)

What are the other means a hacker can use to get access to my facebook account(or similar web accounts)?

What can I do to stop such hacker's motives ?

How can I secure users on my website from facing similar fate?

share|improve this question

closed as off topic by Bobby, Daniel Beck, Mokubai, Sathya, ChrisF Jan 27 '11 at 11:40

Questions on Super User are expected to relate to computer software or computer hardware within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

    
you have 3 separate questions all rolled into one - please split your questions into 3 distinct ones. –  Sathya Jan 27 '11 at 11:35

2 Answers 2

How can I secure users on my website from facing similar fate?

From a website admin/developer's perspective, the easiest way is using a third-party Single-Sign-On provider like Facebook Connect (well, maybe not them) or, preferrably, the OpenID system, like StackExchange does. This has some important advantages, the most important of which:

  • The users don't have to remember additional credentials.
  • You don't have to develop and implement all the mechanisms for user authentification make sure the data is safe, because that's left to the OpenID provider.

The Wiki article I linked has some further discussion on the pros and cons. Also, to some, I might sound like I'm preaching the gospel of Jeff, but yeah, he has a point.

share|improve this answer

A flaw in Facebook's security could come from any of many directions, but most of those are out of your hands. Session hijacking via a Trojan horse on your machine, simple phishing, or password theft via a Trojan would also compromise your account. Finally, sharing passwords with any other sites means possibly giving those sites the keys to your account. Good virus protection catches 2/4, the third (phishing) is a matter of making sure you never enter your password into a site you haven't confirmed to be "facebook.com" (I'd suggest setting up automatic login via another service, for example, a Google account, thus avoiding typing in your password at all) Finally, not sharing passwords between sites is just common sense.

In general, keep your wits about you, don't hand someone access to your account, and you're as safe as the safest facebook user can be.

share|improve this answer
    
+1 for the conclusion. –  Martin Jan 27 '11 at 10:38

Not the answer you're looking for? Browse other questions tagged or ask your own question.