facebook security issue

focusowner

guys i set up an email address this morning purely to set up a facebook account

no issues setting up the email address the name was available

set up facebook account-email address already in use thought for a minute id hit the button twice but no i hadnt so i decided to reset the password as it gave me the option and sure enough the password reset link appeared in my new email address

followed link and hey presto im in my facebook account but ..... Its not my facebook its a facebook account that had been previously set up using this new email address

the email address must have been inactive long enough (similar to mobile number) to allow it to be used by someone else so now ive full access to some english guys facebook account which he cant access cos of me changin the password and he cant reset it cos it comes to my new email

i have access to all his info pics friends etc that has to be a serious security issue is it not ?

davet82

Facebook is a security issue.




Delete it.

Fluorescence

Post a message as his status to let him know wtf has just happened :pac:

Dravokivich

The only risk to your privacy that facebook poses is the amount of information you put on there about yourself.

Its all user submitted content.

MungBean

So he'll report his account as being hijacked and your IP will be flagged and banned from facebook forever.

MungBean

And I think the risk here lies with using an e-mail address as your id on the website and then allowing it to time out (must be years without logging in?). Most intelligent people use their current e-mail address for websites that have their private information.

focusowner

MungBean wrote: »

So he'll report his account as being hijacked and your IP will be flagged and banned from facebook forever.

i aint no hacker but surely there is something seriously wrong with being able to do something like that

focusowner

MungBean wrote: »

And I think the risk here lies with using an e-mail address as your id on the website and then allowing it to time out (must be years without logging in?). Most intelligent people use their current e-mail address for websites that have their private information.

2008 seems to be when he last logged in on it


but his friends are still active and he has friend requests(he could have died maybe ) ??

_feedback_

focusowner wrote: »

i aint no hacker but surely there is something seriously wrong with being able to do something like that

He obviously set it up yonks ago and never used it. The email provider must have some time limits, where the email address times out and is recycled.

Facebook don't know that, and have sent the reset link to the email address listed.

It is yer mans fault. Let him know, and move on with your life

MungBean

focusowner wrote: »

i aint no hacker but surely there is something seriously wrong with being able to do something like that

You just gained access to his account and changed the password. Facebook wont care what you are they will just pencil you in as up to no good.

The fault lies with the idiot who used a dead e-mail address for his password back up reset. Probably a rare enough thing to happen but facebook cant be blamed. No different than a weak password really.

hatrickpatrick

That's not a Facebook security issue, that's an email issue.
Specifically, no decent email service should allow lapsed accounts to be re-registered by someone else, that's absolute madness.

dilallio

MungBean wrote: »

So he'll report his account as being hijacked and your IP will be flagged and banned from facebook forever.

No it won't.

Facebook will email the address assigned to the facebook account, and the OP owns this.

dilallio

hatrickpatrick wrote: »

That's not a Facebook security issue, that's an email issue.
Specifically, no decent email service should allow lapsed accounts to be re-registered by someone else, that's absolute madness.

+1

OP - Who is the provider of the email address?

cloptrop

focusowner wrote: »

2008 seems to be when he last logged in on it


but his friends are still active and he has friend requests(he could have died maybe ) ??

I wouldnt be able to resist waiting till easter sunday and pretending I came back to life.
Ok I would cause serious heart break for his friends and family but I just wouldnt be able to stop myself.

focusowner

windows live email

franciebellew

Can facebook expose your bank account details?

frag420

Should you not be worrying about what you can do to embarrass him to all his facebook buddies.

You nhave been given a once in a lifetime opportunity to frape a complete stranger and your worried about internet security.

After hrs seems to have a security issue if you ask me!!

CardBordWindow

OP, are you sure that you are who you think you are?
Have you recently recovered from any concussion or head trauma?

electrobanana

Have you tried turning it off and on again?

Super-Rush

Moved from After Hours.