Tuesday, December 27, 2011

New security feature in facebook

My account was locked and after spending many suspicious hours finally it got unlocked.
To reopen my account it asked me to give a name of my device. It’s for security so that if anyone hacked your account and open it from some where you will be alerted.  No doubt it is a good security enhancement. However it’s a bad side. Whenever your system IP get changed by DHCP or else you will get an alert mail though still you are opening your account from the same device.
I assume the PHP page get client IP and mapped it with the device name that you provide. Next time, if IP get changed face book identifies the difference and send that alert mail.
Today I have made a suggestion to map Device name with Mac Address instead of Ip.
Through PHP its difficult finding client side Mac address. Using JavaScript it is possible to get client Mac and therefore PHP embedded JavaScript can solve it.