Live data from Hacker News

533M Facebook users' phone numbers and personal data have been leaked online

businessinsider.com

321–330 of 524 posts

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#322

Earlier quoted context omitted.

the telegram has a text file with links to links by country, I've just stuck that at https://pastebin.com/3SvG1FJ0

Goes without saying, do not use the link above. Downloads malware.

Which link? The ufiles? Why does it go without saying? Not like stuff is instantly executed by downloading. All I got for my selected country was a plain text file.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#323
post #23

Earlier quoted context omitted.

"Is there a trustworthy phone number version of https://haveibeenpwned.com ?" An "exact" google search excluding adjacent phone numbers seems to work well for my numbers, and culls a lot (not all) of the autogen pages. So if your number was 212-555-1239, search Google with these strings: "(212)555-1239" -1240 -1238 "212-555-1239" -1240 -1238

Dear god, fastpeoplesearch.com is a horribly obnoxious treasure trove of information.

so if I search my phone number, it brings me to my name and everything. But if I search my name it doesn't get my phone number right. Any ideas why it's like that?

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#325
post #120

Earlier quoted context omitted.

Hi, how do you know? It is of personal interest to me as I don’t use FB but do use WhatsApp. It may also reduce the piling of downvoters.

Here's the source: https://www.spiegel.de/international/business/whatsapp-ceo-o... Quote: "Cathcart: It’s true that we do have some information about how people use WhatsApp and that we do know, for example, the device ID. We collect this only to secure our services and protect from attacks. When you use WhatsApp and allow access to your phone book, we only see the phone numbers, not the name. DER SPIEGEL: Do you sha…

“The updated privacy policies will actually not change anything globally in our ability to share data with Facebook.”

I don’t see how that “globally” can be true. If one compares the WhatsApp terms of service in the EEA (https://www.whatsapp.com/legal/updates/terms-of-service-eea/...) with those elsewhere (https://www.whatsapp.com/legal/updates/terms-of-service/?lan...), you’ll see the latter adds:

Affiliated Companies. We are part of the Facebook Companies. As part of the Facebook Companies, WhatsApp receives information from, and shares information with, the Facebook Companies as described in WhatsApp's Privacy Policy, including to provide integrations which enable you to connect your WhatsApp experience with other Facebook Company Products; to ensure security, safety, and integrity across the Facebook Company Products; and to improve your ads and products experience across the Facebook Company Products. Learn more about the Facebook Companies and their terms and policies here.

AFAIK, that addition was what caused the uproar earlier this year.

(Also note the dark pattern in both terms of service that seed confusion as to which are the ones that apply to the EU. In the first sentence, “If you live in the European Region, WhatsApp Ireland Limited provides the Services to you under this Terms of Service and Privacy Policy.”, ‘this’ doesn’t refer to the text you’re reading, but to the texts behind the hyperlinks)

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#326

I mean, at this point I think everyone should just accept that at the very least their name, age, address(es), email(s), phone number(s) and screen name(s) have been fully leaked if you have ever had any kind of online presence. Not saying that's right or good, but at this point it's just a fact. So if that's the case, I think we should move beyond really even trying to think of this info as private or a marker of id…

The scary thing is how much ones phone number (a somewhat ephemeral thing) is actually bound to your IDENTITY. Considering your phone number is more and more being used in 2FA ... if you were to ever change your number and someone else got it, this would pose a serious security risk if you failed to change over ALL of your internet accounts 2FA to the new number.

I've always thought the most scary thing about this practice is that your (unique) phone number is a powerful "foreign key" which could potentially join data from many other leaked databases, forming an even larger dataset on you.

There are plently of other places we give our phone numbers to, which might not have anywhere near the protections that Facebook say they provide.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#328

Looking at the leak others have pointed to, there are a surprising number of people working in a particular imaginary company: sqlite> select company, count(*) as c from usa where length(company) > 0 group by company order by c desc limit 10; company c ---------------------------------------- ---------- Self-Employed 459119 Facebook 181013 Retired 71210 The Krusty Krab 61550 Hollister Co. 42304 U.S. Army 39682 Stay-a…

Could you please tell me how did you convert it to sqlite? I've got a huge 1 GB txt file that crashes my comp every time I try to search for myself there :( Thank you!

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#329
post #301

Would like to know if non Facebook users are included because Facebook has non Facebook user's phone numbers due to the fact that Whatsapp uploads the entire phonebook to Whatsapp. That means Facebook is likely to know your phone number although you don't use Facebook or Whatsapp.

This is why I don't use my real phone number with apps and HATE apps using phone numbers as a proxy for a user id. Get a virtual phone number if any service requires a phone number from you. Don't submit to this nonsense.

It's not about the information you give, it's all those friends and family who signed up for it and uploaded their address book... They now have your phone number and email probably your date of birth, and even some photos of you.

They are like the credit companies, they have information on you whether you allow them to or not.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#330

Earlier quoted context omitted.

Google has a huge number of activist (and surely some corruptible) employees, and yet the incidents of users data getting out are very close to zero. I think this demonstrates that user data can be managed safely and effectively. Usually the incidents reports on user data leaks show that the company seemed to barely be trying - We need laws that force them (even small companies) to put serious effort into it.

You don't know that. While the publicly available data leaks are indeed rare, you cannot know if they don't use the data for trading or other purposes for their personal gain without disclosing it to the public.

There are infinite things we can't know - opening the discussion up to that really makes anything possible, but the discussion wasn't even about what they might do with the data beyond leaking or selling it.
Post reply on HN