Important Message for Anyone who uses Facebook! (Conspiracy?)

When I read the first sentence of this chain mail I thought it was just another load of rubbish. But its true and is worth looking into and sharing if you use Facebook. This is the message.

WARNING: Facebook has changed and said nothing. Take a look at your URL (top box on your screen.) If you see "http" or just "www" instead of "https" you DO NOT have a secure session & can be hacked. Go to Account Settings - Account Security (on the left hand side) - click Edit. Check box (secure browsing), click Save. FB has automatically set it on the non-secure setting! Do everyone a huge favour, copy & re-post

If you use Facebook you may as well right?
Don't want an ex girlfriend getting busy with your profile.
Drastic.

EDIT TO ADD: Just realised there is the possibility of conspiracy.. If all profiles have been changed so they aren't secure any more.. what would be the reason for this?

So police/whoever can more easily access peoples profiles?
Especially after all these riots in the UK and the use of social networking sites for rallying.

Might just be wearing my tinfoil hat a bit too tightly..

The only thing https does is encrypt the transmission of data between your browser and the facebook servers. It doesn't mean you can't get hacked - it just means people cannot intercept the information being sent back and forth through the internet. It is most beneficial if you are using a wireless network where people can hack your signal. But if you're concerned about letting TPTB know which animal you just bought on Farmville then I suggest you turn it on immediately.

Originally posted by fenceSitter
The only thing https does is encrypt the transmission of data between your browser and the facebook servers. It doesn't mean you can't get hacked - it just means people cannot intercept the information being sent back and forth through the internet. It is most beneficial if you are using a wireless network where people can hack your signal. But if you're concerned about letting TPTB know which animal you just bought on Farmville then I suggest you turn it on immediately.

Obviously you can still be hacked just not as easily.
Its not TPTB that I am worried about. They can watch me talk about the fascist corporate machine all they like. What I am worried about is the invasion of privacy which can then be used to charge and prosecute people.

Thanks for the tip !


Turned on right now

reply to post by TechUnique


Thank you so very much!

thanks for the tip.

I wonder how many people get caught out.
My better half had her profile picture hacked yesterday but no other details changed.
Needless to say FB was working via http and not https, so it is believable that someone could have changed something.

Don't know about conspiracy. I reckon this is down to plain old greed. Facebook has been having trouble with an infinite redirect loop for ages. Problems occur when you want to use an external app (most of the fun stuff) and have to change from https to http. This is well documented and affects all browsers and has been ongoing for 2 years at least. For the legions of non computer-savvy users it is a subject of a lot of frustration as they get noo help from Facebook so they use it less. Just my opinion. Besides, what info have you got stored thats worth being hacked? If you can answer that question, why HAVE you got that info stored there.

reply to post by TechUnique


I remember seeing this on ATS a while ago (it may have been last year), I then changed it straight away. I don't really know what adding the 's' does, but better safe than sorry. I have also made it so strangers cannot see anything on my profile, apart from my name and picture I think.

I will probably terminate my account when google+ comes out, although some people have said that google+ will be shady; and with google's track record (see: google street view, etc) that may very well be true.

The other thing that is very dodgy about facebook is that they have taken it upon themselves to list everyone's number that has stupidly linked their mobile number to their facebook account. Apparently meaning that anyone you give your number to can access your profile.

Picture is too long, so I have linked it instead

reply to post by fenceSitter


It doesn't even add much security, on wireless networks especially. SSL encryption can easily be removed using an ARP spoofing attack ( very simple, most small networks are not secured against it ) and a program known as SSLStrip which simply strips off the encryption - most people won't even notice. Takes 5 minutes to set up.

There should be more layers of encryption with a better way of notifying users if the page is no longer encrypted.

Here is why I do NOT have Farcehook and similars:

Facebook Leaks Its Own Code. . .
www.pcmag.com...

Facebook Security Lapse Leaves Private Photos Exposed. . .
www.readwriteweb.com...

Facebook A Black Hole For Personal Info. . .
yro.slashdot.org.../02/12/1354255&from=rss

Blue skies.