Have I Been Facebooked?

Facebook should email those affected... surely they know who was compromised or not. Shouldn't have to use random sites for this. Why has there been no communication from them?

Re: Have I Been Facebooked?

#6

Post by aiur » Mon, Apr 05, 2021, 11:03 PM UTC

"Currently, we don't know if Facebook has fixed the vulnerability since the company hasn't released any statement regarding the breach."

"This is old data that was previously reported on in 2019. We found and fixed this issue in August 2019" - FB

Re: Have I Been Facebooked?

#7

Post by type0 » Mon, Apr 05, 2021, 11:10 PM UTC

x3sphere wrote: post #5

Facebook should email those affected... surely they know who was compromised or not. Shouldn't have to use random sites for this. Why has there been no communication from them?

> Why has there been no communication from them?

It's not like they care even a bit. And they wouldn't win any goodwill from it. If you have been zucked, you've been zucked, that is it.

Re: Have I Been Facebooked?

#8

Post by sumeno » Mon, Apr 05, 2021, 11:12 PM UTC

I'm looking forward to the sequel, "Have I Been 'Have I Been Facebooked'ed" when it turns out this is just a data harvesting operation.

If you don't want your phone number leaked don't hand it over to a random website that pinky swears it won't keep it. It's maybe not a scam, but still...

Re: Have I Been Facebooked?

#9

Post by nottorp » Mon, Apr 05, 2021, 11:15 PM UTC

Hmm I haven't given facebook a phone number. How can I check if my account is included in the leak? Haveibeenpwned doesn't include facebook in the leaks with my FB email, but I'm not sure I'm checking in the right place.

Re: Have I Been Facebooked?

#10

Post by aeturnum » Mon, Apr 05, 2021, 11:19 PM UTC

Flatcircle wrote: post #2

why would I enter my info on a random site though?

I think this is the really interesting legitimacy vacuum that hacks like this place us into. The official source on this is silent and may stay silent for a long time. People who wait for an official, safe answer may need to wait a long time. On the other hand, the illicit nature of the data makes it legally questionable for other organizations to step into the role of notifier.

So why enter your info on a random site? Because it may be the lowest (definitely not zero) risk way to check if your info is in the leak. If you wait or you build your own thing you may risk less, but balancing the risk with the certainty of obtaining an answer requires a real level of expertise.

Does seem like an easy way to collect phone numbers.