Facebook Logins Easily Stolen From iPhone, Android

[Arthur]

Facebook's iOS and Android clients don't encrypt users' logon credentials, leaving them languishing in a folder accessible to other apps or USB connections.

A rogue application, or two minutes with a USB connection, are all that's needed to lift the temporary credentials from either device – a problem compounded by Facebook's idea of "temporary" as lasting beyond the year 4000. In the case of iOS, one can even lift the data from a backup, enabling the hacker to attach to a Facebook account and access Facebook applications for fun and profit.

...

El Reg
MSNBC

(Can you imagine the howls of derision were this Microsoft.)

 

[Sinbad]

El Reg
MSNBC

(Can you imagine the howls of derision were this Microsoft.)

I think we automatically assume that anything facebook does is inherently insecure...?

 

[lordrage]

lol Arthur, so true if it were MS people would be flaming here.

I use it mostly on my BB, but sometimes on my S2, I wonder if there is a way to secure it?

 

[Toitjie]

lol Arthur, so true if it were MS people would be flaming here.

I use it mostly on my BB, but sometimes on my S2, I wonder if there is a way to secure it?

logging out and deactivating your account

 

[Mercury12]

logging out and deactivating your account

You cant deactivate your account once you have logged out

 

[Kwerty]

wonder if there is a way to secure it?

Enable secure connection on your PC, ditch the app and use your newly secured https conn on your browser

 

[Elimentals]

El Reg
MSNBC

(Can you imagine the howls of derision were this Microsoft.)

Why I have been doing this for years.

http://en.wikipedia.org/wiki/Firesheep

Hell there is even an Android app that lets you steal people's logon's if they use the same WiFi as you
See http://faceniff.ponury.net/

Its more a case of bad design than the OS to blame here.

 

[jargon7]

Why I have been doing this for years.

http://en.wikipedia.org/wiki/Firesheep

Hell there is even an Android app that lets you steal people's logon's if they use the same WiFi as you
See http://faceniff.ponury.net/

Its more a case of bad design than the OS to blame here.

Yoh shocking lol

 

[milomak]

good luck to the person who decides to steal my facebook profile

 

[Malasius]

Enable secure connection on your PC, ditch the app and use your newly secured https conn on your browser

this is the best way to do it. https works via mobile browser so its secure even over open wifi etc

 

[Fudzy]

Oh noes! Somebodies gonna steal muh Farmville critters.