Just got this note, you should see

Options
VixFit2011
VixFit2011 Posts: 663 Member
in Chit-Chat
A friend just sent me the following warning on Facebook. I know a lot of you use Facebook so here's the note she sent:

URGENT: FB changed something again & failed to let us know. Look at your URL address (top box on your screen.) If you see "http" instead of "https" you DO NOT have a secure session & can be HACKED. Go to Account - Account Settings - Account Security - click Change. Check box (secure browsing), click Save. FB has automatically set it on the non-secure setting! Do your friends a huge favor, copy & re-post

Replies

  • craftylatvian
    craftylatvian Posts: 599 Member
    Options
    Bump for later
  • kennie2
    kennie2 Posts: 1,171 Member
    Options
    http is used for most login scripts. https is only used for banking or other things that deal with money. facebook has never used https
  • rainunrefined
    rainunrefined Posts: 850 Member
    Options
    FYI MFP is http as well.. just as most other sites are. You can be 'hacked' anywhere, just don't download junk or click on fishy links.
  • christinehay78
    christinehay78 Posts: 82 Member
    Options
    Facebook actually does use https. If you want to play games though it will ask you to disable the https to http and will let you know that when you log in again it will go back to secure settings.

    From my own account:
    Account Security
    Control your browsing and login security


    Secure Browsing (https)
    You have temporarily turned off secure browsing in order to access an unsupported application. To enable secure browsing again, please logout and login again.
  • lisamarie1227
    lisamarie1227 Posts: 88
    Options
    if you play games on facebook, changing those settings will mess up the game posts on your news feed and you won't see them anymore. i made that mistake and like to have never figured out how to get it changed back.
  • amandalc980
    amandalc980 Posts: 383 Member
    Options
    https can be hacked just as easily. Not only that but HTTPS only protects the internet session, it does not protect your computer or the cookies on your computer (which most hackers can get to).

    Just remember when setting your passwords keep the important ones different from the non essential. Your bank username and password should not be the same as your MFP, Facebook, or email. Your bank password should not be a real word. Dictionary attacks are super quick and easy to perform on passwords. Use something that is twelve characters long and is a mixture of upper, lower and special characters. Do not use number that fall in order, for example don't put 12 at the end of your regular password and feel confident.

    There is a reason your company has you change your password frequently, use the same rule of thumb for your bank. Many times the reason you have to reset your password in 3 months is because with a password cracker tool your password can be cracked in 4 months.
  • VixFit2011
    VixFit2011 Posts: 663 Member
    Options
    http is used for most login scripts. https is only used for banking or other things that deal with money. facebook has never used https

    Go to facebook and look at the security in your account. I didn't think they used it either but they do. I changed mine and now it shows https.

Categories