{"id":7278,"date":"2024-02-23T09:48:58","date_gmt":"2024-02-23T16:48:58","guid":{"rendered":"https:\/\/www.dresan.com\/blog\/?p=7278"},"modified":"2024-02-24T08:20:39","modified_gmt":"2024-02-24T15:20:39","slug":"welp-looks-like-my-facebook-got-hacked","status":"publish","type":"post","link":"https:\/\/dresan.com\/blog\/2024\/02\/23\/welp-looks-like-my-facebook-got-hacked\/","title":{"rendered":"welp, looks like my Facebook got hacked &#8230;"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"256\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM-600x256.png\" alt=\"\" class=\"wp-image-7280\" style=\"width:717px;height:auto\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM-600x256.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM-300x128.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM-768x328.png 768w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM-640x273.png 640w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.16.23\u202fAM.png 942w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p>And Facebook is a perfect example of customer-service hell in which once one has lost one&#8217;s account, there&#8217;s no way to talk to a person who can get this unfucked.<\/p>\n\n\n\n<p><strong>What happened?<\/strong> As best as I can figure, someone attempted to hack my 2-factor authentication last night while I slept &#8211; I woke up to a text message from Facebook with a 2-factor authentication code. <\/p>\n\n\n\n<p><strong>What did Facebook do?<\/strong> When I went to check, I was logged out of Facebook on all devices, and I was told that my account was suspended for &#8220;not following their rules&#8221;:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"242\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.10.50\u202fAM-600x242.png\" alt=\"\" class=\"wp-image-7281\" style=\"width:717px;height:auto\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.10.50\u202fAM-600x242.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.10.50\u202fAM-300x121.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.10.50\u202fAM.png 621w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p><strong>Is this possible?<\/strong> No. Since I rarely post, I&#8217;m pretty circumspect, and I primarily use it for Messenger to talk to a few old friends, I&#8217;m pretty sure that I wasn&#8217;t doing anything that violated community standards.<\/p>\n\n\n\n<p>And I sure didn&#8217;t while I was sleeping.<\/p>\n\n\n\n<p><strong>Is there a way to fix this?<\/strong> No. I tried to follow their procedures, only to find I didn&#8217;t have a linked auth.oculus.com account, because I didn&#8217;t have an Oculus. And once you do create such an account, there is no mechanism to appeal a suspension &#8211; only this reference in the help files:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"123\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.28.45\u202fAM-600x123.png\" alt=\"\" class=\"wp-image-7282\" style=\"width:717px;height:auto\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.28.45\u202fAM-600x123.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.28.45\u202fAM-300x61.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.28.45\u202fAM-640x131.png 640w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.28.45\u202fAM.png 761w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p>But, probably because these folks were trying to hack my account, they likely mucked with the email, so I never got an email from Meta about this &#8211; not even in my spam folder.<\/p>\n\n\n\n<p><strong>So the hackers did something bad with your account?<\/strong> Maybe? I can&#8217;t tell. So, the next attempt is to report the account as compromised. There is a way to do that, which takes you to the following page:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"201\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.15.33\u202fAM-600x201.png\" alt=\"\" class=\"wp-image-7283\" style=\"width:717px;height:auto\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.15.33\u202fAM-600x201.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.15.33\u202fAM-300x100.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.15.33\u202fAM-640x214.png 640w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.15.33\u202fAM.png 648w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p>But, since the hackers were likely messing with two-factor authentication and trying to break in to the account, we get back to the temporarily blocked state you have above:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"138\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM-600x138.png\" alt=\"\" class=\"wp-image-7279\" style=\"width:717px;height:auto\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM-600x138.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM-300x69.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM-768x177.png 768w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM-640x147.png 640w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.04.05\u202fAM.png 981w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p><strong>Are you sure you were hacked?<\/strong> Pretty sure. The text came in at 2:23am, after I was already asleep.<\/p>\n\n\n\n<p>As a last ditch effort, I remembered I had an open Facebook tab, so I tried to go screenshot it. It quickly logged out, but I got to see, very briefly,  my old Facebook page, and could see the last activity was merely me using Messenger to talk to friends. <\/p>\n\n\n\n<p><strong>How could this be fixed? <\/strong>Easily. This is the kind of thing that a customer service representative, looking at the account, can resolve in five minutes flat over chat, just by looking at the calm history followed by a spike of hacked traffic. And it&#8217;s the responsible thing to do for your customers.<\/p>\n\n\n\n<p>But Facebook doesn&#8217;t provide access for this &#8211; apparently except for business accounts. And, while I&#8217;m not happy with a lot of stuff Elon did at Twitter, this makes me more inclined to use services you pay for. X, in contrast, makes it very easy to appeal a decision via an easily findable and accessible form: <\/p>\n\n\n\n<p>https:\/\/help.twitter.com\/en\/managing-your-account\/suspended-x-accounts <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"107\" src=\"https:\/\/www.dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM-600x107.png\" alt=\"\" class=\"wp-image-7284\" srcset=\"https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM-600x107.png 600w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM-300x54.png 300w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM-768x137.png 768w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM-640x114.png 640w, https:\/\/dresan.com\/blog\/wp-content\/uploads\/2024\/02\/Screenshot-2024-02-23-at-11.42.20\u202fAM.png 785w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p><strong>The bottom line?<\/strong> Someone hacked me while I slept, and a decade plus of Facebook is gone &#8211; principally because Meta does not provide basic tools for customer support.<\/p>\n\n\n\n<p>Welp, nothing to do but call Zuck out about it on Xitter &#8230;<\/p>\n\n\n\n<p>-the Centaur<\/p>\n\n\n\n<p>UPDATE: There are forums, where people are reporting this issue, and customer support representatives for the Meta Quest are responding. Cross your fingers. But it wasn&#8217;t at all obvious that this is a solution! We&#8217;re getting help from people who aren&#8217;t even support staff for the same product.<\/p>\n\n\n\n<p>UPDATE UPDATE: Nope, nevermind, they just redirect you back to the Facebook help center, which as I already confirmed, can&#8217;t help you.<\/p>\n\n\n\n<p>UPDATE UPDATE UPDATE: Apparently Facebook has someone on Twitter who monitors for just this sort of thing. That is an unorthodox solution, but I&#8217;ve heard of the same thing at the Google. I&#8217;ll reach out; we&#8217;ll see. Cross yo fingies &#8230;.<\/p>\n\n\n\n<p>UPDATE UPDATE UPDATE UPDATE: Apparently those people on Twitter are not affiliated with Facebook &#8211; there&#8217;s a huge list people recommending various peeps as people who &#8220;helped me&#8221; and when you look at those users they don&#8217;t appear to be affiliated with Facebook. So, no.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>And Facebook is a perfect example of customer-service hell in which once one has lost one&#8217;s account, there&#8217;s no way to talk to a person who can get this unfucked.&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[209],"tags":[59,5],"class_list":["post-7278","post","type-post","status-publish","format-standard","hentry","category-computing","tag-spam-investigations","tag-we-call-it-living","ratio-2-1","entry"],"_links":{"self":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/7278","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/comments?post=7278"}],"version-history":[{"count":5,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/7278\/revisions"}],"predecessor-version":[{"id":7306,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/posts\/7278\/revisions\/7306"}],"wp:attachment":[{"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/media?parent=7278"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/categories?post=7278"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dresan.com\/blog\/wp-json\/wp\/v2\/tags?post=7278"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}