0

In light of the latest news

I do know that session hijacking on unsecure networks is a possibility... Besides that(and weak passwords)

What are the other means a hacker can use to get access to my facebook account(or similar web accounts)?

What can I do to stop such hacker's motives ?

How can I secure users on my website from facing similar fate?

1
  • you have 3 separate questions all rolled into one - please split your questions into 3 distinct ones.
    – Sathyajith Bhat
    Jan 27 '11 at 11:35
1

A flaw in Facebook's security could come from any of many directions, but most of those are out of your hands. Session hijacking via a Trojan horse on your machine, simple phishing, or password theft via a Trojan would also compromise your account. Finally, sharing passwords with any other sites means possibly giving those sites the keys to your account. Good virus protection catches 2/4, the third (phishing) is a matter of making sure you never enter your password into a site you haven't confirmed to be "facebook.com" (I'd suggest setting up automatic login via another service, for example, a Google account, thus avoiding typing in your password at all) Finally, not sharing passwords between sites is just common sense.

In general, keep your wits about you, don't hand someone access to your account, and you're as safe as the safest facebook user can be.

0
1

How can I secure users on my website from facing similar fate?

From a website admin/developer's perspective, the easiest way is using a third-party Single-Sign-On provider like Facebook Connect (well, maybe not them) or, preferrably, the OpenID system, like StackExchange does. This has some important advantages, the most important of which:

  • The users don't have to remember additional credentials.
  • You don't have to develop and implement all the mechanisms for user authentification make sure the data is safe, because that's left to the OpenID provider.

The Wiki article I linked has some further discussion on the pros and cons. Also, to some, I might sound like I'm preaching the gospel of Jeff, but yeah, he has a point.

1
  • +1 for OpenID. Lord knows how many passwords that saves me.
    – user366447
    Mar 24 '15 at 17:27

Not the answer you're looking for? Browse other questions tagged or ask your own question.