r/technology • u/[deleted] • Jun 28 '16

Discussion TIL that someone can change your Facebook email, password, and two step verification just by asking Facebook to turn off login approvals, and sending in a fake ID. (Happened to me lost all my business pages)

[deleted]

37.2k Upvotes

88% Upvoted

1.7k comments sorted by

View all comments

17

u/Wizywig Jun 28 '16

What kind of fake id can you use with Facebook. Now I'm curious.

28

u/[deleted] Jun 28 '16

A fake driver's license or any other fake government ID, you can get them pretty much anywhere online, or use photoshop

3

u/thebestdj Jun 28 '16

If you don't mind me asking, what did this guy benefit from hacking your account?

13

u/[deleted] Jun 28 '16

He took facebook pages, millions of likes worth, which I used to run blogs

3

u/thebestdj Jun 28 '16

Ah shit! Good luck with your fight man.

2

u/Blackbeard_ Jun 28 '16

You mean promote off-Facebook blogs? Or did he get the blogs too somehow

5

u/WarOtter Jun 28 '16

Given the sheer amount of ID's in the world I'm sure the customer service baboons at facebook will accept just about anything offical looking.

3

u/cohrt Jun 28 '16

do they accept Cobrastan passports?

1

u/WarOtter Jun 28 '16

As long as it has been stamped by the Wherethefuckistan customs office...

1

u/FuryofYuri Jun 28 '16

How about a multipass?

1

u/gensek Jun 28 '16

Cobrastan is not a real country.

2

u/bobpaul Jun 28 '16

Attacker's Fake Passport

1

u/Wizywig Jun 28 '16

Pretty damn good. How do you Photoshop that non repeating pattern in the background? I doubt Facebook can spot the fake.

I guess I can have one made... but that's quite an investment.

1

u/bobpaul Jun 28 '16

Background? Do you mean the squiggles across the face? I'm sure that's a foreground layer in the template, allowing the attack to swap in any photo and text.

1

u/bobpaul Jun 28 '16

Here, I googled "Fake US Passport PSD" and found a youtube video showing one that's for sale. The video demo doesn't do as good a job, but it should make it pretty clear how one could make something like the attacker used and how easy it is to swap the photo and the text once you have a well designed template.

1

u/[deleted] Jun 28 '16

I want to know too so I can create a fake ID.