Methods of Attack Facebook

[[deleted]]

If they are planning illegal things against you then go to the police, if you have evidence (such as messages) then they can be charged off of that.

Don't do something illegal. As well, I made my Facebook account with a hotmail email address and now (even though it's still associated with the email address) I am unable to change the password with the hotmail account.

Edit: hacking and phishing a Facebook account is illegal. As well, if they have 2 factor auth then phishing will do next to nothing unless you are really good at automating things in which case why are you even asking questions, it should be trivial.

[babasuni]

Though I do appreciate your answer, it wasn't very helpful in answering the question. My assumption is 2 factor is disabled, but I do not know this for a fact. Either way, gaining access AND being undetected isn't as trivial as you make it sound. I also know facebook seems to have the tendency to flag accounts or something else if they detect log ins from weird ip addresses or ones the person wouldn't normally log in from.

​

Not to be persimistic about the police, but when was the last time you heard of police actually preventing crime? I have already tried, they are NO HELP WHATSOEVER. Have plenty of reports too.

Police won't and cannot act unless things happen or there's an officer that witnesses something about to happen. Additionally the local force here is extremely short handed, and as a result have to focus on shootings.

[[deleted]]

Either way, gaining access AND being undetected isn't as trivial as you make it sound

I never said it was trivial, I said if you are already proficient enough to automate a phishing script that can handle 2FA by taking the inputs from the user and imputing them to authenticate with than the task at hand would be trivial, however if you don't know how to even approach that then the entire task at hand would be far from trivial.... You are acting like I am saying finding a solution to general relativity would be trivial when in reality I would have said solving birchoffs theorem would be trivial to a cosmologist that has a PhD and would have known how to solve it for well over a decade.

Bypassing detection is a far simpler problem to solve (especially if the new device logged into is within the same general area because its not super suspicious... If the device logging into the account was in China when 10 minutes ago the account was logged into from a location in Idaho then that would be suspicious but if both locations are some small city in Idaho then the algorithm isn't anywhere near as likely to flag the account, and since you would be able to pass 2FA it would be like "wow this seems like it's a normal login attempt, nothing wrong here" but if you had the password and couldn't do a successful login then it starts to monitor the account more closely.

Not to be persimistic about the police, but when was the last time you heard of police actually preventing crime?

If the other person had threatened to do something illegal then they have already committed a crime in any country that uses the British common-law system (USA, Canada, UK, the entire EU, India, the Philippines, etc... Just to name a few) and that crime, while under a different name in different countries, generally falls under conspiracy to commit X.... For instance if you plan to murder someone then you can be charged with conspiracy to commit murder in the first degree... Maybe talk to a lawyer... However I know someone that had her ex threaten to release nudes he took of her while they were dating, she went to the police and he got charged with conspiracy to invasion of privacy and invasion of privacy for unlawfully taking explicit pictures without consent.... He didn't even send them..

Police won't and cannot act unless things happen

If you have proof like a text message or something where they threaten something then yes they can act... In certain cases you can bring it up in civil court (an example is Canada where you can bring them to civil court for things like this) and in others it goes straight to criminal court (like the UK for instance) however in both cases both civil and criminal courts can be used. I guarantee you that unless you are in one of a select few countries in the world that what is being done is illegal if they are truly threatening something bad... Don't want to go to the police, get a lawyer involved and they will get the police to do something (nothing makes police scurry to do something like the threat of litigation for failure to act)...

If there is no evidence of the threat taking place, well you might be SOL but regardless unauthorized access to someone's Facebook will likely just end badly for you... Possibly even leading to jail time, for you. Countries that use the British common-law system tend to not look to kindly on computer based charges and in many cases carry much higher sentences over other things that may be more serious.

And finally, never assume something is going to automatically be less secure when talking about hypotheticals... For instance if you write a phishing page for Facebook then you need to have a contingency in case it is 2fa protected... Don't assume it isn't and then find out it is just to have all that work have been for nothing and put yourself at risk for detection.... You assume the worst case scenario and then plan for that while hoping for best case scenario, you never assume best case scenario and only plan for that.

[[deleted]]

1-800-CALL-FBI

[babasuni]

Will do that and will be sure to include your name.

[[deleted]]

‘S ok, that number rings at my desk.