Live data from Hacker News

533M Facebook users' phone numbers and personal data have been leaked online

businessinsider.com

341–350 of 524 posts

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#341
post #252

Somewhat ironically, Mark Zuckerberg (and 2 other FB founders) are in the dataset - along with phone numbers. Hopefully this disaster will be the catalyst for better data privacy controls.

What Facebook user id is Mark? Is it #1?

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#342
post #328

Looking at the leak others have pointed to, there are a surprising number of people working in a particular imaginary company: sqlite> select company, count(*) as c from usa where length(company) > 0 group by company order by c desc limit 10; company c ---------------------------------------- ---------- Self-Employed 459119 Facebook 181013 Retired 71210 The Krusty Krab 61550 Hollister Co. 42304 U.S. Army 39682 Stay-a…

Could you please tell me how did you convert it to sqlite? I've got a huge 1 GB txt file that crashes my comp every time I try to search for myself there :( Thank you!

Firstly don’t do something like open it in notepad. 1GB text files are not exactly difficult to work with once you use a proper text editor or parsing tools.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#343
post #23

Earlier quoted context omitted.

"Is there a trustworthy phone number version of https://haveibeenpwned.com ?" An "exact" google search excluding adjacent phone numbers seems to work well for my numbers, and culls a lot (not all) of the autogen pages. So if your number was 212-555-1239, search Google with these strings: "(212)555-1239" -1240 -1238 "212-555-1239" -1240 -1238

Dear god, fastpeoplesearch.com is a horribly obnoxious treasure trove of information.

[deleted]

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#344

Earlier quoted context omitted.

Thanks. I'm just getting a "Please open Telegram to view this post from @freedomf0x" message. Any way to access this without signing up for Telegram? The irony of giving my personal info to another 3rd party just to check if my personal info was leaked by a different party is too much...

the telegram has a text file with links to links by country, I've just stuck that at https://pastebin.com/3SvG1FJ0

Is there an alternative to ufile?

I've tried three different browsers and none can get the download to work. It's possible I'm blocking some tracking domain at the router-level that's integral to the download functioning.

Edit: Turns out I was blocking Google's captcha.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#345

Looking at the leak others have pointed to, there are a surprising number of people working in a particular imaginary company: sqlite> select company, count(*) as c from usa where length(company) > 0 group by company order by c desc limit 10; company c ---------------------------------------- ---------- Self-Employed 459119 Facebook 181013 Retired 71210 The Krusty Krab 61550 Hollister Co. 42304 U.S. Army 39682 Stay-a…

I definitely know real people (especially highschoolers or college students) who put fictional jobs in their profile. Also common is using some fake name, like that of a fictional character.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#346
post #213

Earlier quoted context omitted.

Dear god, fastpeoplesearch.com is a horribly obnoxious treasure trove of information.

Tried it, you're right. Got 6 of my past addresses, 9 past phone numbers, 8 relatives, all correct. Some incorrect info, but not much as a percentage. If you reverse search the PO Box address listed on the site contact page, you'll find an Amateur Radio license listed to a person that is probably the owner of the site, based on his past experience.

Also, searching for their Adsense publisher id reveals some other sites they own: peoplesearchnow.com, fastbackgroundcheck.com, smartbackgroundchecks.com

Those sites have new and different PO Boxes in other cities, etc.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#347

The root of the problem is not the privacy policy or the system security. The root of the problem is the collection itself. All large businesses, health care providers, and governments maintain databases. Every one of them will eventually be leaked. All it takes is a corruptible trusted insider.

> Every one of them will eventually be leaked.

Equifax has more at stake than most. And they've been hacked. Repeatedly. The government has been hacked. Yahoo was COMPLETELY owned. I mean, if someone would put together a list, it would make for shocking reading. It's become so common, that we go, "Oh no! Anyway."

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#348
post #87

Earlier quoted context omitted.

As always, the spying agencies are NOT particularly interested in your actual messages, but your metadata. They want to know who talks to who. Limited data? What a bunch of horseshit.

"Limited" is a weasel word, as it can mean anything. e.g. a "limited time offer" can mean it lasts for 2 days or 2 years, because it is not unlimited. Likewise, sharing a limited amount of information with Facebook simply means they don't hoover up every single bit. Perhaps Facebook is not interested in those automated texts you get confirming haircut appointments...

On the other hand, if you just got a haircut, then they know that you’ll be looking for another one in a set amount of time (based on your hairstyle, which they also know from photos), and they could advertise hairsalons to you then.

I’m not sure their algorithm is this refined, but it’s not impossible.

Re: 533M Facebook users' phone numbers and personal data have been leaked online

#349

The root of the problem is not the privacy policy or the system security. The root of the problem is the collection itself. All large businesses, health care providers, and governments maintain databases. Every one of them will eventually be leaked. All it takes is a corruptible trusted insider.

This.

I don't trust in the government, but I think digital "personal data" should be only available for "confirmation" to companies that need it. Say, a government entity could have an API that allow you to send hashed personal data that they can verify is right. This way companies will ask the user for their data and hash it client-side. Then they can send the hashes (hashed with a custom provided salt to the entity (government, maybe private) who will basically reply with a True or False on the verification of the different data.

It may even be an interesting use case for a public blockcahin, where your personal data is stored in a Merkle Tree type of data structure, so that one can verify that certain pesonal data of a person is true, without disclosing the data.

Post reply on HN