[deleted]
The Facebook phone numbers are now searchable in Have I Been Pwned
41–50 of 248 posts
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#42Earlier quoted context omitted.
Did you ever set up SMS 2fa? Did any of your contacts use the Facebook app to sync their contacts (at least at one point a default behaviour)? Then Facebook has your number. I remember when I still used it being promoted by a bar at the top of the web UI "Is this your number?" With my actual number suggesting I add it to my profile, so I know they have mine.
Despite using 2FA and listing my number on my profile - albeit restricted to "just me", I don't appear in the data. It's not as simple as they just having a record of it somewhere.
Likewise, it seems there's more nuance to this leak. I checked the data out and a large number of my contacts have correct numbers in it. At the same time, numerous people don't appear in it, even if they do have a phone number on their profile.
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#43Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…
> When ordering online, always, always, always use a fake number, it's not required
Until something's gone wrong in the process and they need to call you to clarify/fix it. (happens regularly to me due to address suffixes not propagating correctly through crappy systems)
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#44Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…
> When ordering online, always, always, always use a fake number, it's not required
Don't do this if you order anything that doesn't ship small parcel. The freight company may need to contact you and it will complicate matters and delay your final delivery.
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#45Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…
I do something similar when a site asks for my birthday, i used to pick a random date, but sonce its sometimes used to reset password or asks u to confirm i just use the first of january of the year i was born so i can make sure i remember what i put.
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#46A note for people with US numbers who aren't finding their info:
> And finally, one last note on the data load process: At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 8 have completed loading. The other codes are in progress and may take several hours more before they're searchable.
US numbers begin with international code 1, and it seems that they aren't yet searchable.
I was surprised that mine hadn't come up, since I've had a few Facebook accounts over the years with my phone number, and this explains it.
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#47I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.
Did you deactivate or delete your facebook account? As I understand, deactivation is temporary, deletion erases all data. But if people did delete their accounts and Facebook didn't erase the private data, aren't there consequences to this?
> As I understand, deactivation is temporary, deletion erases all data
That's the problem, what we or regulators understand may well be very different to what actually happens
> aren't there consequences to this
A slap on the wrist at best, I'd bet my house on it
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#48[deleted]
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#49Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?
I have my phone number and mailing address on my Facebook, set to friends only.
Why not? When I grew up, we had a phone book listing everyone’s name and address and phone number so you could find them to contact.
I consider all of this essentially public information and would rather make it easier for people I know to contact me. If it gets lost in a breach, whatever. I already get plenty of junk mail because I give to charities and they sell my address.
Re: The Facebook phone numbers are now searchable in Have I Been Pwned
#50I have noticed an uptick in the number of scam calls and texts I've been receiving over the last few days. No surprise that my number was included in this dataset.