Live data from Hacker News

Have I Been Facebooked?

haveibeenfacebooked.com

111–120 of 230 posts

Re: Have I Been Facebooked?

#111
post #110

How does one know a site like this is not just an other data harvesting site?

There is sourcecode for both front and backend and the creators linked their names. So check the sourcecode and decide whether you trust the people involved that this is actually the code that is running the site

Re: Have I Been Facebooked?

#112
post #46

Can someone bcrypt all these phone numbers & emails and make that public? Share the salt and then everyone can just test their own phone number without sending it to some rando

You can just iterate thru all possible phone numbers. It’s not that large, which is why anyone saying they are hashing your contacts to keep them private isn’t doing a lot of good.

Still maybe from a legal standpoint and depending on countries it'll be better to download and locally test against a hashed set than to download the dump.

An adequately hashed set can be proved to be harmless because you can't revert to real data (as far as you know when downloading). Downloading the original set could be considered malicious by some governments (but idk/ not sure ianal).

Re: Have I Been Facebooked?

#113

My number was leaked (checked the dump myself) but I don't show up on this site. Seems like there are some bugs to work out

I'm not surprised, the data dump was an ugly mess of inconsistently encoded data in inconsistent formats with "delimiters" that often appear in the data itself.

Cleaning that up is a serious effort and requires operations on huge files that are very difficult for most software to deal with.

Re: Have I Been Facebooked?

#114
post #6

"Currently, we don't know if Facebook has fixed the vulnerability since the company hasn't released any statement regarding the breach." "This is old data that was previously reported on in 2019. We found and fixed this issue in August 2019" - FB

It seems like the creators are heading towards a libel lawsuit if they keep that up on their site.

I don't understand libel laws very well. If it's based on that quote, could you explain a bit why that would be?

Re: Have I Been Facebooked?

#115
post #110

How does one know a site like this is not just an other data harvesting site?

When they identified that my data was part of the link, they included an obfuscated first and last name - first letter plus length of each. If they were harvesting data, they certainly appear to already possess it.

Re: Have I Been Facebooked?

#116
post #110

How does one know a site like this is not just an other data harvesting site?

I put up another site for that: https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com

Just enter your email and the site will tell you whether your email has been harvested by https://haveibeenfacebooked.com/

Re: Have I Been Facebooked?

#117
post #51
post #47

Earlier quoted context omitted.

The backlash of GDPR for not informing users may be far more severe.

Sure, but if the cost of paying the fines for that is less than the expected loss of revenue from demonstrating, directly, that you can't keep user data safe (to a global audience, not just Europe), it's rational for Facebook to take the fines (of course, arguing via their lawyers as long as possible that they shouldn't be required to pay them - lawyer bills are harder to spin as an admission of guilt). I don't like…

Sure, but if the cost of paying the fines for that is less than the expected loss of revenue

GDPR allows for fines of up to 4% of global revenue. Unfortunately the agencies that are supposed to enforce it are too feeble to do so.

Re: Have I Been Facebooked?

#118
post #116
post #110

How does one know a site like this is not just an other data harvesting site?

I put up another site for that: https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com Just enter your email and the site will tell you whether your email has been harvested by https://haveibeenfacebooked.com/

Try my site, that checks this guys: https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookedd...

Re: Have I Been Facebooked?

#119
post #6

"Currently, we don't know if Facebook has fixed the vulnerability since the company hasn't released any statement regarding the breach." "This is old data that was previously reported on in 2019. We found and fixed this issue in August 2019" - FB

That is a dishonest statement, as a lot of data is recent, and they know that and are almost pretending like it is some kind of feature.

Re: Have I Been Facebooked?

#120
Aren't telephone directories a thing anymore? At least in my country you can just search for a person online and see their phone number. Someone's phone number seems like the least sensitive PII.
Post reply on HN