Facebook starts rolling out HTTPS by default

Discussion in 'privacy technology' started by ronjor, Nov 20, 2012.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,242
    Location:
    Texas
    http://www.h-online.com/security/news/item/Facebook-starts-rolling-out-HTTPS-by-default-1753364.html
     
    ronjor, Nov 20, 2012
    #1
  2. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    This is great news, sick and tired of changing peoples login bookmarks to the https version. Which then has no effect if they type it in manually!
     
    elapsed, Nov 20, 2012
    #2
  3. siljaline

    siljaline Registered Member

    Joined:
    Jun 29, 2003
    Posts:
    6,617
    Article
     
    siljaline, Nov 20, 2012
    #3
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    164,242
    Location:
    Texas
    ~Off topic post removed~
     
    ronjor, Nov 20, 2012
    #4
  5. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    6,039
    Location:
    Parallel Universe
    Finally. Great news. :thumb:
     
    ams963, Nov 22, 2012
    #5
  6. addi6584

    addi6584 Registered Member

    Joined:
    Jan 3, 2012
    Posts:
    58
    Location:
    United States
    well, this is utterly useless for people not using the https directly. I just confirmed on my end that FB is still vulnerable to sslstrip w/o any issues. Any special characters used in the passwd are just url encoded w/ a java encodeURI()

    my login and pass came through no problem.

    fwiw ive only seen one site (a bank) actually obfuscate credentials while being sent back to the client. the login comes through in plan text but the area where the passwd would be was just "********"

    this website for example is vulnerable to sslstrip attacks
     
    Last edited: Dec 1, 2012
    addi6584, Dec 1, 2012
    #6
  7. happyyarou666

    happyyarou666 Registered Member

    Joined:
    Jan 29, 2012
    Posts:
    803
    seriously fb? lols , https or not its a one way ticket to exposing your private info, i dont recommend it AT ALL, even with its so called "security settings" , but whatever rocks your boat i suppose ,lol
     
    happyyarou666, Dec 2, 2012
    #7
  8. elapsed

    elapsed Registered Member

    Joined:
    Apr 5, 2004
    Posts:
    7,076
    Clearly they should just stop improving the service for their millions of users, pack up, and close down... get a grip.
     
    elapsed, Dec 2, 2012
    #8
  9. happyyarou666

    happyyarou666 Registered Member

    Joined:
    Jan 29, 2012
    Posts:
    803
    i wouldnt mind ;)
     
    happyyarou666, Dec 2, 2012
    #9
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...