Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

31–40 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#32

I'm sure not to be the first one to point this out, but checking other people's emails is quite revealing. It's very much documenting in public which sort of websites about every person you know is visiting. Among them [1] "Baby Names", "Ashley Madison", "Adult FriendFinder", "diet.com". Want to profile your friends – there you are. I wonder if the benefits of haveibeenpwned outweights this. [1] https://haveibeenpwne…

It's set up so that you have to prove you own the email address before knowing if you're included in "sensitive" breaches.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#33
post #31

Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?

It is very convenient for your friends/family to be able to get your phone number from your facebook profile.

I have used it a few times to contact people for whom immediate contact was preferable to facebook post/message.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#34

I'm sure not to be the first one to point this out, but checking other people's emails is quite revealing. It's very much documenting in public which sort of websites about every person you know is visiting. Among them [1] "Baby Names", "Ashley Madison", "Adult FriendFinder", "diet.com". Want to profile your friends – there you are. I wonder if the benefits of haveibeenpwned outweights this. [1] https://haveibeenpwne…

I did a lot of searching through the Ashley Madison dump back when it came out. It was pretty easy to find people living on my neighborhood that had accounts. They might not have done anything (it was just billing details after all) but any of that information could have easily been used to blackmail someone. There were also a whole bunch of people using .gov or .mil email addresses. Like if you are going to cheat on your wife, don't make it that easy for someone to realize that you can be exploited for government secrets.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#35
post #31

Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?

Your comment is disingenuous. Facebook has been around for nearly two decades. There's plenty of time there for people to make mistakes and try to fix them. Unfortunately they're competing with their contacts who re-add those same mistakes and also competing with Facebook's own incentives to not delete data.

It'll be fun if/when any of these numbers can prove they requested Facebook to delete their data under GDPR.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#36
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

Couldn't it be there from someone who knows you? I was under the impression that Facebook grabbed people's contacts list on mobile apps.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#37
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

Did you deactivate or delete your facebook account?

As I understand, deactivation is temporary, deletion erases all data.

But if people did delete their accounts and Facebook didn't erase the private data, aren't there consequences to this?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#38

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

Sadly, many companies now require a phone number to use their services. For example: Signal, Telegram, Whatsapp, social networks like Instagram and Vk. They don't like anonymous users. For some users, Google requires a phone number to sign up. Twitter requires a phone number if they see something "suspicious" in user's behaviour.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#39
Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it).

When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but in some cases it stops other third parties getting that info (on eBay you can type a random name to ship to, I've had fun with this :) ).

But lastly, LOL. Giving your data to facebook this is what you deserve, and for society accepting facebook as a standard part of life.

When do we protest to delete the website?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#40

> "One last note on the data load process: At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 9 have completed loading. The other codes are in progress and may take several hours more before they're searchable." https://twitter.com/troyhunt/status/1379366099544797189

Thanks, because the end of the blog post mentions 8 instead of 9:

> At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 8 have completed loading. The other codes are in progress and may take several hours more before they're searchable.

So I was like: what about another 8?

Edit: Actually, it is "4, 6, 7 and 8"! cf. https://twitter.com/troyhunt/status/1379377818618884098

Post reply on HN