Live data from Hacker News

533M Facebook users' phone numbers and personal data have been leaked online

businessinsider.com

201–210 of 524 posts

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#201
post #93

Earlier quoted context omitted.

Every time someone argues that people can avoid the privacy problems of Facebook by simply not using it, I point out this issue (plus the shadow accounts).

I recently purchased a phone that had the Facebook app preinstalled. If I had to guess, the mere act of connecting to WiFi caused a whole slew of info to get sent.

Obligatory mention: mbasic.facebook.com it's like a clean needle exchange for Facebook.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#202

Earlier quoted context omitted.

You do know how this happened right? Wifi SSIDs with similar strengths reveal if people are in the same area, then just correlate timestamps and viola! I wouldn't throw the elder person under the bus on this one, the tactics are sophisticated, and honestly, just a precursor to what will happen with AR. To give a bit more of how it's implemented (at least how I would propose it in iOS), Insta/FB/Whats queries availabl…

> and viola I love this typo.

I could play Hot Cross Buns on this typo.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#203

I mean, at this point I think everyone should just accept that at the very least their name, age, address(es), email(s), phone number(s) and screen name(s) have been fully leaked if you have ever had any kind of online presence. Not saying that's right or good, but at this point it's just a fact. So if that's the case, I think we should move beyond really even trying to think of this info as private or a marker of id…

s/if you have ever had any kind of online presence./if you, your friends, your family, your cleaning lady etc. has ever had any kind of online presence.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#204

I don’t have FB or or WhatsApp but my Insta account (using a separate email address and no personal details) keeps recommending my therapist to me. How are we still ok with this shit? The sooner we get rid of the cancer that FB is, the better. I didn’t share my contact book with FB apps either. It was probably her—a person in her 70s, not necessarily experienced with tech. The main reason this company exists, or that…

You do know how this happened right? Wifi SSIDs with similar strengths reveal if people are in the same area, then just correlate timestamps and viola! I wouldn't throw the elder person under the bus on this one, the tactics are sophisticated, and honestly, just a precursor to what will happen with AR. To give a bit more of how it's implemented (at least how I would propose it in iOS), Insta/FB/Whats queries availabl…

>You do know how this happened right? Wifi SSIDs with similar strengths reveal if people are in the same area, then just correlate timestamps and viola!

The problem is that someone decided to correlate them, not to mention without asking.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#205

I don’t have FB or or WhatsApp but my Insta account (using a separate email address and no personal details) keeps recommending my therapist to me. How are we still ok with this shit? The sooner we get rid of the cancer that FB is, the better. I didn’t share my contact book with FB apps either. It was probably her—a person in her 70s, not necessarily experienced with tech. The main reason this company exists, or that…

> is the lack of informed consent. what's making it possible is the lack of privacy regulation. People by and large don't care enough about privacy,it's too diffuse, too complicated, the damage to oneself and others is too intangible etc. Only way to end this is to destroy the business models that make it possible. What stands in the way of it is the mindset that this somehow harms innovation. (Innovating who can dri…

>People by and large don't care enough about privacy

Not to play dumb or sealion, but what opportunities are they given to do so? How often have those opportunities been one-and-done, "if you don't do something to protect your privacy in this particular instance at this particular moment, it's gone forever?"

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#206

I don’t have FB or or WhatsApp but my Insta account (using a separate email address and no personal details) keeps recommending my therapist to me. How are we still ok with this shit? The sooner we get rid of the cancer that FB is, the better. I didn’t share my contact book with FB apps either. It was probably her—a person in her 70s, not necessarily experienced with tech. The main reason this company exists, or that…

The metastasis is companies and organizations that have FB groups and insist that’s the only way to get data or collaborate with them and their members or customers.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#207
post #57

Earlier quoted context omitted.

They could store a salted hash instead for almost everything except using the number as actual phone number (call/SMS)

You need to do a bit more than that; a one-way transform with no secrets isn't good enough for easily brute-forceable data like phone numbers, SSNs, passport numbers, credit card numbers etc. There's just not enough entropy in the data. There are ways to do these things though so the spirit of your comment is correct.

Amalgamation of data before encryption?, encrypt full rows of data? etc.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#208

I don’t have FB or or WhatsApp but my Insta account (using a separate email address and no personal details) keeps recommending my therapist to me. How are we still ok with this shit? The sooner we get rid of the cancer that FB is, the better. I didn’t share my contact book with FB apps either. It was probably her—a person in her 70s, not necessarily experienced with tech. The main reason this company exists, or that…

> I don’t have FB or or WhatsApp but my Insta account (using a separate email address and no personal details) keeps recommending my therapist to me. So what? What's the harm? People sure like to write emotionally charged posts arguing for privacy, but they're always suspiciously low on details on what bad things (actually) happened. Even in this case with phone numbers and other data leaked, so what? What harm do da…

> Even in this case with phone numbers and other data leaked, so what? What harm do data leaks cause?

Lets imagine a situation. You've got an officially looking letter, from unknown to you organization, claiming that for example, your lawn is infected by a grass variant of COVID-19 and must be disinfected, and this organization could do it in a jiffy for a mere $1k.

Probably it is a scam, isn't it? How do you judge it? One of the sign of a scam is a lack of personal information in the letter. But if you see that letter contains your name, address, phone number, lawn dimensions, then you probably shouldn't throw letter to a garbage bin, you should find some other kind of test to judge is it a scam. Isn't it?

So when you made your personal information public, scam detection is going to impose bigger costs on you. Even if we assume that you are perfect scam detector and will not let any of scam to pass you undetected, then the lot of people are not perfect in this regard. So the more difficult detection is, the more prey for scammers. It impose costs for a society overall, because society start to give money to scammers, to finance all that activity that is counter productive for an economic growth.

But as for me it is just a nuisance to decipher such letters trying to spend as little time on a scam detection as possible while having no false positives.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#209

That’s why you never use your real name nor birthdate ... on social media.

Except... that's only the tip of the iceberg.

Facebook/Google (et al) farms data from everyone! There really is no escaping it in today's unregulated privacy free-for-all.

Friends/family/associates will provide your personal info in their contact/meta data.

Companies (and their 3rd parties) you've done business with willingly sell/provide your personal info.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#210
post #147

I removed my phone number from Facebook when it was reported that Facebook used this as some sort of tracking mechanism across third party vendors - specifically with purchases from merchants - in order to serve more "relevant ads". From what I recall, if the merchant is somehow hooked up into FB APIs then regardless of whether you signed up for their rewards program using an e-mail + password or via FB SSO, then the…

When did you remove your phone number? Looks like this relates to a vulnerability that was patched in 2019.

I'm slightly concerned about this myself. I'm also seriously ticked off with Zuckerberg and co. I can tolerate the fact that internally they do scumbaggy things with my data. I tend to have less forbearance when they let my data out into the wild.

Post reply on HN