Created a fake account and Facebook still figured out who I am. How?

#1

Post by 99percentfound » Fri, Feb 01, 2019, 4:43 PM UTC

Created a fake account and Facebook still figured out who I am. How?
reddit.com

Re: Created a fake account and Facebook still figured out who I am. How?

#2

Post by craftoman » Fri, Feb 01, 2019, 4:54 PM UTC

Of course it's possible, they use tools similiar to https://github.com/Valve/fingerprintjs2 . I found a way to "confuse" such algorithms using a browser called Palemoon, yet there lot of factors that could affect anything, a simple mistake and everything will be screwed up.

Re: Created a fake account and Facebook still figured out who I am. How?

#3

Post by mnmapplications » Fri, Feb 01, 2019, 4:59 PM UTC

I know for sure if you make a second account and sign into a device like a phone or tablet where you've already signed onto another account - it will realize the connection and start suggesting you friends from your original account.

I'm not sure if that's taking MAC address of the device or the phone number into consideration or what - but it's definitely a bit creepy

Re: Created a fake account and Facebook still figured out who I am. How?

#4

Post by ben174 » Fri, Feb 01, 2019, 5:02 PM UTC

If he uploaded his photo maybe it was facial recognition associating him with group pictures in his friends accounts.

Re: Created a fake account and Facebook still figured out who I am. How?

#5

Post by meetuu » Fri, Feb 01, 2019, 5:03 PM UTC

cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry

Re: Created a fake account and Facebook still figured out who I am. How?

#6

Post by [deleted] » Fri, Feb 01, 2019, 5:07 PM UTC

ben174 wrote: post #4

If he uploaded his photo maybe it was facial recognition associating him with group pictures in his friends accounts.

[deleted]

Re: Created a fake account and Facebook still figured out who I am. How?

#7

Post by rayvy » Fri, Feb 01, 2019, 5:08 PM UTC

OP was probably not a very technical user, else he/she would've understood that

1. They should've deleted _all_ relevant cookies (in the browser, as well as in the browsers cookie database)

2. There are many 3rd party companies that sell data packs that derive residential IPs from VPN IPs (we use some at work). A trusted/good VPN is a must

3. They probably came via the same User Agent (didn't mention changing browsers)

IP + Cookie + User Agent = Fingerprint (not a good one, but will work for Facebook's needs)

Re: Created a fake account and Facebook still figured out who I am. How?

#8

Post by megous » Fri, Feb 01, 2019, 5:09 PM UTC

Browsing just/mostly the profiles of people you know is enough, I suppose. You'd have to browse the FB randomly and hide true intentions in the noise.

Re: Created a fake account and Facebook still figured out who I am. How?

#9

Post by smt88 » Fri, Feb 01, 2019, 5:11 PM UTC

megous wrote: post #8

Browsing just/mostly the profiles of people you know is enough, I suppose. You'd have to browse the FB randomly and hide true intentions in the noise.

Don't forget data-sharing relationships with major digital retailers

Re: Created a fake account and Facebook still figured out who I am. How?

#10

Post by megous » Fri, Feb 01, 2019, 5:14 PM UTC

meetuu wrote: post #5

cameradust, browser fingerprinting, graphic/sound card canvas, memory canvas mouse usage, keyboard usage, cpu serial number, MAC, router MAC, system logs, telemetry

Sounds too complicated, and half of that is not even accessible from the browser. He used just the browser.