Comment by KeyserSosa on 30/10/2019 at 17:18 UTC*

60 upvotes, 14 direct replies (showing 14)

View submission: Reddit Security Report -- October 30, 2019

We have some labels for things that might not exactly line up with expectations, so let me try to define them with some more detail:

**Content manipulation reports** - This is the number of reports we received for spam, vote manipulation, or community interference.
**Admin content manipulation removals** - How much content is removed for spam, vote manipulation, or community interference. This can either be content that was reported or detected via our own methods.
**Admin content manipulation account sanctions** - The number of accounts that we have taken action against for the above reasons.
**3rd party breach accounts processed** - The “third party” part here is key. A lot of companies have suffered data breaches recently. And, a lot of users lazily recycle credentials[1] (username *and* password) between accounts. We get access to that breach data (like most of the rest of our peers) and use it to attack our own password database to see if anyone needs the next item on the list:
**Protective account security actions** - If we find a password match with a breach, there’s nothing stopping a malicious third party from doing as much. We alert the user and lock the account to make sure it can be recovered. This is why you should make sure to: * Verify an email address with your account, and * Set up 2FA if you care about your account. Or even if you don’t, in which case at least care about *us* who have to clean up after the unloved account getting taken over and used to push pills or worse.

Replies

Comment by [deleted] at 30/10/2019 at 17:42 UTC

32 upvotes, 1 direct replies

How do you attack your own database? Isnt it hashed or something?

Comment by FunnyMan3595 at 30/10/2019 at 19:41 UTC

3 upvotes, 1 direct replies

When are we going to get U2F[1] support? Token-based 2FA, while an improvement over none, is still very insecure compared to public-key 2FA.

1: https://en.wikipedia.org/wiki/Universal_2nd_Factor

Comment by ASAP_Stu at 31/10/2019 at 02:05 UTC

1 upvotes, 3 direct replies

There’s obviously vote manipulation that is being paid for in the politics sub. There is just no way that any sub Reddit can maintain such a consistent place at the top of r/all, at the same times every day. I would love something to be done about this. It’s every single day at 9 AM, and 5 PM, Eastern. No matter what the news cycle is, there’s a politics post in the top five of all. Stop the sponsored content, especially such hyper partisan political content.

Comment by comrade_delta873 at 31/10/2019 at 01:59 UTC

1 upvotes, 0 direct replies

Just to be sure there is no way to regain posting privleges of an account if it was never linked to a email? Asking because my main account ended up being flagged for *suspicious behavior* and i cant do anything on it anymore

Comment by [deleted] at 30/10/2019 at 19:54 UTC

1 upvotes, 0 direct replies

A lot of companies have suffered data breaches recently (if possible, with a link to every item on that sentence)

The parenthetical is a little humourus. I guess it wasn't possible to find links to all those breaches?

Comment by mjsdabeast at 30/10/2019 at 22:23 UTC

1 upvotes, 2 direct replies

Hi u/KeyserSosa, I’m not sure where else to bring attention to this but I was recently banned on r/politics for reporting a violent death threat. I questioned the moderator and they said that I had made the comment myself when this was untrue. I’m now permanently banned and concerned that the original commenter got away with it because r/politics doesn’t want to come away as being violent or risk being quarantined

Comment by biznatch11 at 31/10/2019 at 01:01 UTC

1 upvotes, 0 direct replies

Have you added the option to "remember this device" for 2fa so we don't have to input the 2fa code upon every sign in even if it's on the device I use all the time?

Comment by LPKKiller at 30/10/2019 at 20:37 UTC

1 upvotes, 1 direct replies

Are there any updates about when we can see who is following us? It was supposed to start rolling out this last month but I haven’t heard anything on it.

Comment by o_Oo_Oo_Oo_Oo_Oo_O at 30/10/2019 at 20:16 UTC

0 upvotes, 2 direct replies

/r/politics is a hot fucking mess of manipulated content and fake users. Why the fuck don’t you guys do anything about it?!

Comment by [deleted] at 31/10/2019 at 03:52 UTC

1 upvotes, 0 direct replies

Why is it tradition to downvote the redirect post comment?

Comment by alma_perdida at 30/10/2019 at 18:35 UTC

-14 upvotes, 1 direct replies

your one comment on the other post that links here says more than anyone else can say about how infantile and incompetent you fools are.