I would like
to know you opinions as programmers / developers.
When I changed my Facebook password yesterday, by mistake I entered
the old one and got this:
Am I missing something here or this is a big potencial risk for users.
In my opinion this is a problem BECAUSE it is FaceBook and is used by, well, everyone and
the latest statistics show that 76.3% of
the users are idiots [source:me], that is more that 3/4!!
All kidding aside:
Isn't this useful information for an attacker?
It reveals private information about
the user!
It could help
the attacker gain access
to another site in which
the user used
the same password
Granted, you should't use use
the same password twice (but remember: 76.3%!!!)
Doesn't this simply increase
the surface area for attackers?
It increases
the chances of getting useful information at least.
In a site like Facebook 1st choice for hackers and (bad) people interested in valued personal information shouldn't anything increasing
the chance of a vulnerability be removed?
Am I missing something? Am I being paranoid? Will 76.3% of
the accounts will be hacked after this post?
Thanks in advance!!
BTW if you want
to try it out, a dummy account:
user:
[email protected]
(old) password: hunter2