Hacker News new | past | comments | ask | show | jobs | submit login

True, they did break into his own network, but that wouldn't matter if Facebook had a secure login page (SSL).



Facebook does appear to use SSL. If you look at the login form, they are submitting to: https://login.facebook.com/login.php?login_attempt=1


Which means next to nothing if the page with the login form isn't encrypted. A man in the middle attack would just replace the Facebook login page, and the user would likely never notice.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: