AirB&B security

[Karla-and-Eric0]

Hi, I've just been notified that someone from Cambridge, Mass. has accessed by account (not me.)  So I've promptly changed by password.  However, in doing so, I was able to access a "login history" screen which was very disconcerting.  There are logins from Malaysia, Singapore, Turkey, Pakistan.  Also not me...I live in the US.  So what is going on with the AirB&B security???

[Steve143]

Hello @Karla-and-Eric0,

Sometimes the login history shows the officially registered address of the internet provider used for login.

For example, while I live in Limerick in Ireland my logins show as having been made from Dublin, 240 Km away.

In your case it's very unlikely that the above explains them all.

Make sure to click "log out" for all the logins and then log back in. Also check that your details like email address and payout method have not been changed.

I'm not sure if the new two step login procedure is rolled out everywhere. Here, whenever I log in from a new device or location or have deleted cookies in my browser, the login process asks me to enter a code that Airbnb sends by email or SMS. When that's done the login proceeds.

Steve.

[Matthew285]

@Karla-and-Eric0 the ability to figure out where a person is logging in from is not perfect, so don't expect it to always get the location right.

However, it generally won't mistake a login from Malaysia, Singapore, Turkey, Pakistan for login from the USA. 

Don't forget: if you re-use the password you use for AirBnB anywhere else, you should change it there also.

By the way: given that there are many, many ways a person can compromise someone's username/password, why do you automatically say "what is going on with the AirB&B security???"

The most common attack vectors are attacks on the security of a home user's computer (where the security is very low).

Is there something that leads you to believe there was a breach in the security of AirBnB's systems?

(Note: I don't know either way. I just thought it was a funny conclusion to reach, given the high percentage of home computers with known and exploitable security holes.)