Facebook Beefs Up Security With Social Captchas and All HTTPS, All The Time

http://techcrunch.com/2011/01/26/facebook-security-https-social-captchas/

by bpeters • 15 years ago

12 8 15 years ago

techcrunch.com

igravious• 15 years ago

This is already on the front page with a link to the actual Facebook blog: http://news.ycombinator.com/item?id=2143415

bpeters• 15 years ago

Opps, good catch :)

tlrobinson2• 15 years ago

Finally! I've been waiting for a "force HTTPS" option for a long time.

Now, how do you enable it? I looked around the settings and didn't find anything.

daveman692• 15 years ago

It's under "Account Security" on https://www.facebook.com/editaccount.php?ref=mb&drop.

tlrobinson2• 15 years ago

Hmm, does anyone else not see it there? Perhaps they're still rolling it out.

thinkcomp• 15 years ago

...and yet someone is still able to post random Turkish phrases on my Facebook profile as if they are coming from me. I guess now they'll be secure Turkish phrases at least.

http://news.ycombinator.com/item?id=2105378

jessedhillon• 15 years ago

Regarding the social CAPTCHA: I hope they use some heuristics to gather who is really my friend and who is a "friend-me-once-and-never-talked-to-me" connection. There are a number of faces they could show that I wouldn't be able to put a name to.

I also hope they change the default privacy settings so that a person's friend list is hidden from unrelated viewers, otherwise a determined attacker could presumably browse your friends until they find the person in the CAPTCHA.

Facebook Beefs Up Security With Social Captchas and All HTTPS, All The Time

Related Stories