Live data from Hacker News

533M Facebook users' phone numbers and personal data have been leaked online

businessinsider.com

101–110 of 524 posts

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#101
Is it possible to download this without giving money to criminals? (The article says free, but my 2 minutes of googling hasn't found it, somewhat unsurprisingly).

Is doing so legal?

If the answer to both of those questions are yes... I'd like to take a peak. Mostly to check whether or not some numbers I know haven't been directly give to fb are there.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#102

Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…

I agree, but also we’ve made it more complicated by using phone numbers as 2FA credentials.

Now suddenly a “white pages of cell numbers” becomes a very convenient tool for getting in to people’s accounts.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#103

Earlier quoted context omitted.

That kinda sad, because that is what’s going to happen and then we’ll nothing more. At this point I’m not really sure what it will take for companies, like Facebook, to understand that you need to not fuck around with peoples private data.

Put a monetary cost of holding user data, and a steep monetary cost on losing user data. Ex, pay x amount per month in perpetuity for each piece of information about a user your keep. And have to pay the "net present value" of those payments if you lose the data. Having to pay for hoarding user personal data changes the incentives from gobble up as much as possible, to instead only pay for a users data that is worth…

Who would get this money? I agree that it needs to be some solution involving a cost, given that most of these companies have shown multiple times that profit isn’t just their main concern, it’s the only concern.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#104

Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…

The "new" risk with phone numbers is the overreliance on them for login and 2fa and the relative easy of taking one over. I use security keys but still have accounts I can't remove the phone 2fa from despite having two keys tied in.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#105

Earlier quoted context omitted.

Put a monetary cost of holding user data, and a steep monetary cost on losing user data. Ex, pay x amount per month in perpetuity for each piece of information about a user your keep. And have to pay the "net present value" of those payments if you lose the data. Having to pay for hoarding user personal data changes the incentives from gobble up as much as possible, to instead only pay for a users data that is worth…

Who would get this money? I agree that it needs to be some solution involving a cost, given that most of these companies have shown multiple times that profit isn’t just their main concern, it’s the only concern.

The government typically... who might in turn do something like a tax rebate (write a check to everyone, ontario has been doing with the carbon tax) or just stick it into the general pool of taxes (reducing everyone's taxes).

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#106

Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…

I agree, but also we’ve made it more complicated by using phone numbers as 2FA credentials. Now suddenly a “white pages of cell numbers” becomes a very convenient tool for getting in to people’s accounts.

Only if you can hijack their number. Knowing a phone number seems like by far the easiest part of breaking SMS 2FA...

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#108

Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…

As far as I can remember, the white pages don't include "biographical information". The kind of details used for idiotic "security questions" on websites too lazy to implement 2FA (your mom's maiden name, your first school, the name of your first pet, etc).

As for public tax returns in Scandinavia, first of all it has guardrails - searches are recorded with your information when you lookup someone - and second, countries have different culture and History for a reason.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#109

Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…

Spam calls are likely not even affected by leaked numbers. Source of suspicion: My partner and I have phone numbers in close numeric vicinity, and deliberately use one for public purposes and the other one is not known outside of a very close circle of family.

We still get spam on both numbers within short time frames - so I'd say it's likely spammers just auto-dial through.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#110
post #98
post #33

Great, and while you can get sued into oblivion for downloading a Metallica album, all our personal data is downloadable from a public website for 3€. Like for real, it took me 2mins to find the leak myself...

Where did you get the data leak, I want to check too.

https://t.me/freedomf0x/12553

I haven't checked the content myself, but this tg channel is usually legit

Post reply on HN