Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
This is why you don't use the same password for multiple accounts. For example if I used the same email and password for my Facebook account as my Apple account then both would be compromised. This is one common way people get their accounts "hacked" then they'll blame whatever account for this. LOL

I would probably argue a "middle" approach, which is "just as secure" Not entirely, but the result would be the same..

You use one "complex" password everywhere

Yes, it would get out because, leaks etcc.. but due to the complexity it will be just as strong.

Not what i do, it it would serve the same purpose.... At least yo only have to keep (one) complex password, and not many (which would be the ultimate goal)
 
I would probably argue a "middle" approach, which is "just as secure" Not entirely, but the result would be the same..

You use one "complex" password everywhere

Yes, it would get out because, leaks etcc.. but due to the complexity it will be just as strong.

Not what i do, it it would serve the same purpose.... At least yo only have to keep (one) complex password, and not many (which would be the ultimate goal)
It would not be nearly as good. If the password gets out it doesn't matter how strong it is. The password and email combination would be tried on various sites and all of those would be compromised.
 
  • Like
Reactions: fairuz and bobmepp
It would not be nearly as good. If the password gets out it doesn't matter how strong it is. The password and email combination would be tried on various sites and all of those would be compromised.

Not as good as different everywhere, but if a complex password got out,, brute force is less of a than a simple one getting out.

The underlying problem would still be to keep all passwords unique anyway, but a middle man approach.

The only exception if there was a big issue tomorrow that came to light as you could brute force a complex password in a mater of "minutes" not "years" or more. 16 character minimum complexity.
 
Not as good as different everywhere, but if a complex password got out,, brute force is less of a than a simple one getting out.

The underlying problem would still be to keep all passwords unique anyway, but a middle man approach.

The only exception if there was a big issue tomorrow that came to light as you could brute force a complex password in a mater of "minutes" not "years" or more. 16 character minimum complexity.

I'm guessing we're not talking about the same thing. When I say your password got out from a website I mean like if Facebook were to let your password leak out. There is no brute force used. Your email and password will be known by the persons that have it. It doesn't matter if your password is Jgrfpu;[ylaqw&oi67etnskKGrh(5#sd5eDF they will simply put that in the password field. I guess it will take them longer to type it if they don't copy and paste so maybe more secure in that sense.
 
  • Like
Reactions: bobmepp
"Stored passwords" is bad already. Never store them, even encrypted. There's not even a reason to. Store the salted hash.

Btw, "many of the passwords came from Facebook Lite users"? I never knew about this Facebook Lite.
[doublepost=1553416664][/doublepost]
This is why you don't use the same password for multiple accounts. For example if I used the same email and password for my Facebook account as my Apple account then both would be compromised. This is one common way people get their accounts "hacked" then they'll blame whatever account for this. LOL
Not if your Apple account has 2FA. Still "best practice" to not reuse passwords for important things, but you're probably fine either way.
[doublepost=1553416957][/doublepost]
If you are still using Facebook... that's on you.
Yeah it is. I don't care. This isn't the first time my password's leaked, nor will it be the last, and I'm prepared for it.
[doublepost=1553417299][/doublepost]
I wish someone would offer a Facebook alternative. A simple scrolling timeline shouldn't be hard to create. The problem is if anyone made it how would they make money?
Many have, including a federated and open-source system called Discourse that's pretty nice. I've made my own too, just a newsfeed thing where people forward messages amongst each other. There are ways to make money non-invasively, only it's less profitable. And ofc way fewer people use the other social networks.
[doublepost=1553417654][/doublepost]
Yahoo isn’t purposefully malicious—they are just wildly incompetent.
Yeah they are malicious. The Yahoo! toolbar and their other browser hijack software used to come bundled with everything. It was devious. I used to wipe that off my grandpa's PC every time I visited.
 
Last edited:
Not if your Apple account has 2FA. Still "best practice" to not reuse passwords for important things, but you're probably fine either way.
Agreed but my Apple account is one of the few that have 2FA. My bank account doesn't, my credit card accounts don't, none of my online bill pay accounts have it, only one of my email accounts has it, some of my online gaming accounts have it, none of my social media accounts have it, and I'm sure if I thought about it I have lots more without 2FA. Most of my online accounts don't offer 2FA. I bet for most people their Apple account is the only one with 2FA. Not because they want it but rather Apple mandates it.
 
Agreed but my Apple account is one of the few that have 2FA. My bank account doesn't, my credit card accounts don't, none of my online bill pay accounts have it, only one of my email accounts has it, some of my online gaming accounts have it, none of my social media accounts have it, and I'm sure if I thought about it I have lots more without 2FA. Most of my online accounts don't offer 2FA. I bet for most people their Apple account is the only one with 2FA. Not because they want it but rather Apple mandates it.
Surprised about the banking. I'd never use a bank that doesn't have 2FA. Not only is that unsafe, but it's a sign that they're incompetent. I know Chase does. Steam has good 2FA. Most social media and other gaming sites don't, but whatever. Gmail has optional 2FA, but I don't bother with it unless it's the recovery or 2FA email for something important. They have good enough threat detection anyway.
 
Surprised about the banking. I'd never use a bank that doesn't have 2FA. Not only is that unsafe, but it's a sign that they're incompetent. I know Chase does. Steam has good 2FA. Most social media and other gaming sites don't, but whatever. Gmail has optional 2FA, but I don't bother with it unless it's the recovery or 2FA email for something important. They have good enough threat detection anyway.
I'm not sure why my bank doesn't have 2FA. They have a nice app that works with FaceID and will text or call me about unusual activity but no 2FA. Maybe it's something I should bring up to them.
 
  • Like
Reactions: fairuz
So .... I guess we can deduce you're not a big Facebook fan? :p

Meh.... there's a whole lot to dislike about that web site, but I still think the whole thing was based on a worthy premise. In fact, as "social media" is concerned, I think Facebook may be the gold standard?

I look at all the other creations they consider social media and I just don't see much originality. Everything they did was either a small sub-set of what Facebook already offered, or an attempt to copy-cat the majority of it (a la Google+).

So many people are making a big deal out of leaving Facebook due to their poor business practices, and then hopping right onto Instagram, which Facebook owns anyway! It's really kind of laughable.

I'd love to see a real competitor emerge, but I don't know if it'll happen. It's just like the auction site situation. No matter how much people complain about eBay, it keeps chugging along. You can TRY to use all the alternatives out there in protest ... but after you realize Craigslist (which eBay partially owns!) only lets you really sell within your local area, and all the phone-based classified sales apps like "LetGo" are just a photo gallery of items with almost no descriptions ..... you realize nobody has the "reach" and "depth" of eBay.


I dont feel bad for Zuckerberg for a second over the autobahn speed dumpster fire car crash that is Facebook that none of us can look away from.

Karma is so frigging beautiful. And to think, the demise of Zuck/FB is only in its earliest phase. Popcorn.gif

Good luck with that new privacy-centric platform pitch too, credible Lizardman! ;)

He'll be lucky to go the way of Tom; irrelevant. In more likelihood, jail time and litigation issues / scandals piling up until his old age. He certainly will not have gotten the last laugh, proverbially speaking.

I think in the end, Tom wasn't just everyone's friend on MySpace, he was indirectly everyone's friend IRL.

The platform caving on itself was a great 'avante-garde' gift to humanity; Nobel Peace Prize worthy imo!

And while I engage in debate often in polarizing pol threads, I think we *all* can rally behind the fact both sides are equally furious (for different reasons) at Facebook... Maybe thats the sort of common ground unity we need?
 
So .... I guess we can deduce you're not a big Facebook fan? :p

Meh.... there's a whole lot to dislike about that web site, but I still think the whole thing was based on a worthy premise..

Hard to say now, since proverbially speaking, the plot is lost.
 
Why dont we get up in arms when banking staff can access our accounts without our passwords? #justsaying
Because bank accounts are records of our transactions with the bank. They are a party to all those transactions, and our bank accounts cannot be secret as far as the bank is concerned. When you deposit money into a bank account, you are giving the bank money to loan out. It needs to know who gave it money, how much, and when. The bank is also required, by law, to keep this information.
 
  • Like
Reactions: Colonel Blimp
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.