Live data from Hacker News

Look Up Unknown Phone Numbers Using Facebook Reset Password

bytexd.com

21–30 of 140 posts

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#21
Those will work (maybe), but their usefulness is limited, as just about every bad call I get, is spoofed.

I have a canned response txt, that I send, when declining the call.

I often get “message failed to send,” but I sometimes get a confused text from someone, telling me they didn’t call.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#22
post #19

Earlier quoted context omitted.

Phone number meant to be private shouldn’t be associated with any other info whatsoever.

Whats the rationale behind this? Outside of prank calling, I don't see what the benefit of having a private phone number. When I hit someone's voice mail I can get their name, so it's not like most people consider it to be private.

>I don't see what the benefit of having a private phone number.

What's the benefit of having a public phone number? You get more advertisements and spam. With a private phone number only people you've given the number to will call you. You can limit who can bother you.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#23
post #22
post #19

Earlier quoted context omitted.

Whats the rationale behind this? Outside of prank calling, I don't see what the benefit of having a private phone number. When I hit someone's voice mail I can get their name, so it's not like most people consider it to be private.

> I don't see what the benefit of having a private phone number. What's the benefit of having a public phone number? You get more advertisements and spam. With a private phone number only people you've given the number to will call you. You can limit who can bother you.

I don't think this is really true, because spammers call numbers at random (or perhaps, in sequence). They are not working through the published phone book.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#24
post #18

Tried this with my friends phone number. Facebook didn't show her picture or name. Just first letter of the email.

I don't post my real phone number on Facebook, and I don't know why anyone would.

If anyone with you as a contact uses Facebook then Facebook probably knows it anyway

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#25

password reset flows are generally a privacy leak if you use email as some kind of account key, you can generally find out whether that email has signed up (if not the username) automatic password reset and email verification are good for businesses and users in a lot of ways so this is a tradeoff if FB is showing the specific account linked to an SMS that's IMO negligent but shrug, they employ more lawyers than I do…

Can't you just say that a password reset email has been sent? That is what we did when I worked in banking as a way to prevent this.

Whether or not you have an account, the system says a reset email has been sent.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#26

password reset flows are generally a privacy leak if you use email as some kind of account key, you can generally find out whether that email has signed up (if not the username) automatic password reset and email verification are good for businesses and users in a lot of ways so this is a tradeoff if FB is showing the specific account linked to an SMS that's IMO negligent but shrug, they employ more lawyers than I do…

In most cases attackers can use the signup flow to see if an email is registered so as long as it isn’t less protected (with a captcha etc) it isn’t any more of a privacy leak in that regard.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#27
post #18

Earlier quoted context omitted.

I don't post my real phone number on Facebook, and I don't know why anyone would.

If anyone with you as a contact uses Facebook then Facebook probably knows it anyway

They probably know it in some database, but won't let you log in with it. So this password recovery thing won't work on dheera.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#28
When I still had a social life, Facebook was returning the account simply by searching the phone number or email.

So useful.

I also loved the first release of graph search (not the dumbed down version they released shortly after) which was letting you specify very specific queries. I managed to find a girl I met on a train (whose number I stupidly didn't ask) just with her first name, university and knowing something she liked.

Later on, trying to replace graph search, I had to write some hacky scripts to scrape data across a network of friends (likes, groups, friends, who interacted with you on your public profile + recursively scrape data from friends of friends) to find people.

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#29

password reset flows are generally a privacy leak if you use email as some kind of account key, you can generally find out whether that email has signed up (if not the username) automatic password reset and email verification are good for businesses and users in a lot of ways so this is a tradeoff if FB is showing the specific account linked to an SMS that's IMO negligent but shrug, they employ more lawyers than I do…

Are you being sarcastic about the FTC?

https://www.ftc.gov/news-events/press-releases/2019/07/ftc-i...

Re: Look Up Unknown Phone Numbers Using Facebook Reset Password

#30
post #29

password reset flows are generally a privacy leak if you use email as some kind of account key, you can generally find out whether that email has signed up (if not the username) automatic password reset and email verification are good for businesses and users in a lot of ways so this is a tradeoff if FB is showing the specific account linked to an SMS that's IMO negligent but shrug, they employ more lawyers than I do…

Are you being sarcastic about the FTC? https://www.ftc.gov/news-events/press-releases/2019/07/ftc-i...

oh yeah other than the one time. but if they had done anything really bad there would have been some kind of 5 billion dollar for the deceptive disclosure and settings and some kind of toothless compliance council involving the board of directors
Post reply on HN