{"id":58915,"date":"2018-02-15T10:26:13","date_gmt":"2018-02-15T10:26:13","guid":{"rendered":"https:\/\/www.biphoo.com\/bipnews\/?p=58915"},"modified":"2018-02-15T10:26:13","modified_gmt":"2018-02-15T10:26:13","slug":"facebooks-two-factor-authentication-system-auto-posts-replies-on-your-profile","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/facebooks-two-factor-authentication-system-auto-posts-replies-on-your-profile.html","title":{"rendered":"Facebook’s two-factor authentication system auto-posts replies on your profile"},"content":{"rendered":"

Facebook\u2019s two-factor authentication system auto-posts replies on your profile<\/span><\/strong><\/span><\/h2>\n

Facebook\u2019s two-factor authentication (2FA) system has come under fire today for some bizarre design elements that seem to have gone largely unnoticed for quite some time. Bay Area software engineer Gabriel Lewis noticed earlier this week that Facebook was using the same phone number he used for 2FA, which offers a more secure way to log into an online account by asking for secondary confirmation of the user\u2019s identity, to notify him about friends\u2019 posts.<\/span><\/p>\n

Even worse, it seems that replying to this message with any message, such as \u201cPlease stop,\u201d auto-posts that message to your Facebook profile. (It doesn\u2019t cause the messages to stop, either.) The Verge confirmed that this behavior occurs with any reply to a Facebook 2FA text message, and other users have popped up on Twitter to say both Facebook and Instagram have spammed them with notifications to their 2FA phone number. In Lewis\u2019 case, he says he never opted in to notifications via text messaging in the first place.<\/span><\/p>\n

Lewis\u2019 case gained steam today when prominent technology critic and sociologist Zeynep Tufekci tweeted about it in a series of harsh criticisms of Facebook and its behavior regarding alleged \u201cjuicing\u201d of its user engagement metrics:<\/span><\/p>\n

There\u2019s a legal layer to this situation, as well. Facebook is currently embroiled in a number of class-action lawsuits over alleged violations of the Telephone Consumer Protection Act, or TCPA, which states that no company may contact you via text without being given express permission first. In those past cases, Facebook was spamming users with birthday reminder text messages and other automated spam, even when users opted out of text message notifications or had never given Facebook their phone number.<\/span><\/p>\n

It is unclear whether this more recent behavior is a bug, though the auto-posting feature certainly looks like one. If the company is indeed intentionally using 2FA phone numbers to lure users back to Facebook without getting those users\u2019 express user consent, it could open the company up to lawsuits.<\/span><\/p>\n

In a statement, a Facebook representative did not address whether the auto-posting of replies was intentional or a bug. (The Verge is seeking clarification on this matter.) The company also says that it\u2019s looking into the text notification issue, and that it\u2019s 2FA system can be used with a code generator if any user does not wish to provide a phone number. \u201cWe give people control over their notifications, including those that relate to security features like two-factor authentication. We\u2019re looking into this situation to see if there\u2019s more we can do to help people manage their communications,\u201d the statement reads. \u201cAlso, people who sign up for two-factor authentication using a U2F security key and code generator do not need to register a phone number with Facebook.\u201d<\/span><\/p>\n

Source:-\u00a0https:\/\/www.theverge.com\/2018\/2\/14\/17014116\/facebook-2fa-two-factor-authentication-auto-post-replies-status-updates-bug<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t