Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

61–70 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#61
post #31

Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?

I believe their app uploads the address books of other people and those address books might contain your phone number and other details.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#62
post #54

Getting to the point where we’re going to need phone, email, and SMS to be deny all by default. Can’t reach me unless you’re information is already in my contacts.

I get a lot of value out of being reachable by people I do not yet know.

No one said it had to be by force.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#63
post #36

Earlier quoted context omitted.

Couldn't it be there from someone who knows you? I was under the impression that Facebook grabbed people's contacts list on mobile apps.

So, that begs the question: If _my_ phone number is in someone _else's_ contacts, is it still _my_ phone number?

It's your phone number (or possibly also the phone number of the person who had it before you) but, like images of yourself, they're probably in tons of places that you don't control and never will.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#64
post #31

Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?

My number is on my profile, so that my friends can contact me shall they lose my number. Less important now that messenger exists and we can access it any time, but I put it there before it existed. It's come in handy in the past.

I also don't consider my phone number "sensitive" information I want to keep secret - it's already quasi-public and something I give out when I want people to be able to contact me.

I grew up looking people up in the physical phone book when I lost their number, fwiw.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#65
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#66
post #65
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

[deleted]

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#67

Earlier quoted context omitted.

Did you deactivate or delete your facebook account? As I understand, deactivation is temporary, deletion erases all data. But if people did delete their accounts and Facebook didn't erase the private data, aren't there consequences to this?

> As I understand, deactivation is temporary, deletion erases all data That's the problem, what we or regulators understand may well be very different to what actually happens > aren't there consequences to this A slap on the wrist at best, I'd bet my house on it

'Erases' all data, or sets the is_deleted flag.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#68
post #65
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

Relevant links.

"What should I do if I think that my personal data protection rights haven’t been respected? "

https://ec.europa.eu/info/law/law-topic/data-protection/refo...

"European Data Protection Board Members"

https://edpb.europa.eu/about-edpb/board/members_en

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#69
Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend.

Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. Who knows what services I'll be locked out of once I change, let's hope not too many.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#70
post #36
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

Couldn't it be there from someone who knows you? I was under the impression that Facebook grabbed people's contacts list on mobile apps.

My understanding is that all numbers in the dump correspond with Facebook accounts, so this shouldn't be the reason.

Another option would be that someone else has that number listed for their account. Has Facebook always required confirmation that a number is valid? I saw one my friends' numbers in the data except the account had a different name.

Post reply on HN