111–120 of 524 posts
Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…
Obviously it is bad if your personal data is compromised after you (or some else) upload it to an online service like Facebook. But in this case, it’s important to remember that phone companies used to regularly leak most of their customer’s phone numbers (and names) in the form of a telephone directory. So a question to consider is: suppose that the white pages were still commonly produced and contained most people’…
Don’t worry, Facebook will soon put out a press release including the phrase “we need to do better.”
the security handbook[^1] has a chapter on that actually, and they basically say that role playing is the only way of not getting burned. Humans are excellent at role playing, and it can help you prevent a lot of catastrophe without having experienced them before.
Earlier quoted context omitted.
> Every one of them will eventually be leaked. [X] Doubt
On a long enough timeline everything and everyone can be compromised (or the institution fails before then)
There's always an incentive to steal or leak it to other companies for money; so as long as the incentives are aligned with GATHER ALL DATA and KEEP IT FOREVER then yes, it will just be a matter of a time before each data store is compromised by mistake or purposefully.
Earlier quoted context omitted.
That doesn't seem to be correct, although what does 'phone numbers' mean in this context? Quote: "WhatsApp, which was acquired by Facebook in 2014, does share some limited data with Facebook, including phone numbers. However, the firm has reassured users that messages will always be protected by end-t0-end encryption, which means neither WhatsApp or Facebook can see these private conversations" Source: https://www.fo…
As always, the spying agencies are NOT particularly interested in your actual messages, but your metadata. They want to know who talks to who. Limited data? What a bunch of horseshit.
Likewise, sharing a limited amount of information with Facebook simply means they don't hoover up every single bit. Perhaps Facebook is not interested in those automated texts you get confirming haircut appointments...
Earlier quoted context omitted.
Every time someone argues that people can avoid the privacy problems of Facebook by simply not using it, I point out this issue (plus the shadow accounts).
I recently purchased a phone that had the Facebook app preinstalled. If I had to guess, the mere act of connecting to WiFi caused a whole slew of info to get sent.
A lot of password reset flows work via username + SMS using "we've sent a code to your phone number (xxx) xxx-xx12". This database unmasks that phone number, so my assumption is this makes sms hijacking more viable, but perhaps someone more knowledgeable can weigh in.
Does Facebook allow password resets like this, and can that be disabled?
Earlier quoted context omitted.
This is the same fallacy that leads to apps asking for permission to access your whole picture library. Facebook could have an API by which an app can prompt its user to show a list of all of that user’s friends who have the app installed. The app would only learn the identities of people whom the user explicitly selects, and phone numbers would not be part of that identity.
It works for photos because the threat model is about protecting local files against malicious apps. But for phone numbers, you about protecting Facebook API (which is publicly available via the internet) against arbitrary devices, which Facebook has no way to tell from legitimate ones
The sooner we get rid of the cancer that FB is, the better. I didn’t share my contact book with FB apps either. It was probably her—a person in her 70s, not necessarily experienced with tech.
The main reason this company exists, or that ad tech can maintain a facade of not being a mainly bullshit industry with made up metrics, is the lack of informed consent.
It’s almost funny how we accept the current situation as normal. Because, I think that we’ll look back at these times with disbelief of reckless we were and how cheap we’d sell ourselves.
Earlier quoted context omitted.
Whatsapp doesn't share phone book data with Facebook.
Hi, how do you know? It is of personal interest to me as I don’t use FB but do use WhatsApp. It may also reduce the piling of downvoters.
Quote:
"Cathcart: It’s true that we do have some information about how people use WhatsApp and that we do know, for example, the device ID. We collect this only to secure our services and protect from attacks. When you use WhatsApp and allow access to your phone book, we only see the phone numbers, not the name.
DER SPIEGEL: Do you share these numbers with your parent company Facebook?
Cathcart: No, we don’t. The updated privacy policies will actually not change anything globally in our ability to share data with Facebook."