Just got this note, you should see

VixFit2011

A friend just sent me the following warning on Facebook. I know a lot of you use Facebook so here's the note she sent:

URGENT: FB changed something again & failed to let us know. Look at your URL address (top box on your screen.) If you see "http" instead of "https" you DO NOT have a secure session & can be HACKED. Go to Account - Account Settings - Account Security - click Change. Check box (secure browsing), click Save. FB has automatically set it on the non-secure setting! Do your friends a huge favor, copy & re-post

craftylatvian

Bump for later

kennie2

http is used for most login scripts. https is only used for banking or other things that deal with money. facebook has never used https

rainunrefined

FYI MFP is http as well.. just as most other sites are. You can be 'hacked' anywhere, just don't download junk or click on fishy links.

christinehay78

Facebook actually does use https. If you want to play games though it will ask you to disable the https to http and will let you know that when you log in again it will go back to secure settings.

From my own account:
Account Security
Control your browsing and login security


Secure Browsing (https)
You have temporarily turned off secure browsing in order to access an unsupported application. To enable secure browsing again, please logout and login again.

lisamarie1227

if you play games on facebook, changing those settings will mess up the game posts on your news feed and you won't see them anymore. i made that mistake and like to have never figured out how to get it changed back.

amandalc980

https can be hacked just as easily. Not only that but HTTPS only protects the internet session, it does not protect your computer or the cookies on your computer (which most hackers can get to).

Just remember when setting your passwords keep the important ones different from the non essential. Your bank username and password should not be the same as your MFP, Facebook, or email. Your bank password should not be a real word. Dictionary attacks are super quick and easy to perform on passwords. Use something that is twelve characters long and is a mixture of upper, lower and special characters. Do not use number that fall in order, for example don't put 12 at the end of your regular password and feel confident.

There is a reason your company has you change your password frequently, use the same rule of thumb for your bank. Many times the reason you have to reset your password in 3 months is because with a password cracker tool your password can be cracked in 4 months.

VixFit2011

http is used for most login scripts. https is only used for banking or other things that deal with money. facebook has never used https

Go to facebook and look at the security in your account. I didn't think they used it either but they do. I changed mine and now it shows https.