security - How to deal with iphone pop ups with only ok button?
2014-07
D.K.
I accidentaly clicked on ok button from a pop up message on my iphone 4. There was only an ok button option.The message was explicit in nature with a dollar amount at the end. Is there any way to negate this mistake or is there going to be a charge on my next iphone statement?
Mulki
In light of the latest news
I do know that session hijacking on unsecure networks is a possibility... Besides that(and weak passwords)
What are the other means a hacker can use to get access to my facebook account(or similar web accounts)?
What can I do to stop such hacker's motives ?
How can I secure users on my website from facing similar fate?
Jeremy Sturdivant
A flaw in Facebook's security could come from any of many directions, but most of those are out of your hands. Session hijacking via a Trojan horse on your machine, simple phishing, or password theft via a Trojan would also compromise your account. Finally, sharing passwords with any other sites means possibly giving those sites the keys to your account. Good virus protection catches 2/4, the third (phishing) is a matter of making sure you never enter your password into a site you haven't confirmed to be "facebook.com" (I'd suggest setting up automatic login via another service, for example, a Google account, thus avoiding typing in your password at all) Finally, not sharing passwords between sites is just common sense.
In general, keep your wits about you, don't hand someone access to your account, and you're as safe as the safest facebook user can be.
Tobias Plutat
How can I secure users on my website from facing similar fate?
From a website admin/developer's perspective, the easiest way is using a third-party Single-Sign-On provider like Facebook Connect (well, maybe not them) or, preferrably, the OpenID system, like StackExchange does. This has some important advantages, the most important of which:
- The users don't have to remember additional credentials.
- You don't have to develop and implement all the mechanisms for user authentification make sure the data is safe, because that's left to the OpenID provider.
The Wiki article I linked has some further discussion on the pros and cons. Also, to some, I might sound like I'm preaching the gospel of Jeff, but yeah, he has a point.