Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

71–80 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#72

Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend. Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. W…

I can’t imagine telling everyone I know that I’m changing my number every couple years, and I’m not even calling/messaging a lot of people nowadays. I have a family member who did something similar(not on purpose) and I still have 3 of her numbers and still get confused which is the working one.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#73
After my wife's suicide (See the documentary Pain Warriors) I took over Karen's FB account as my own, and I changed the name on the account. Long before this breach I have been getting SMS Spam addressing me as Karen, on a number that did not exist when she was alive.

FB data can be the only possible source of that spam.

The spam is always trying to sell male enhancement products to 'Karen'. Anyone know how to stop this SMS spam crap?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#74
post #31

Is it just me or... why do people even share their phone number with Facebook? What did you use it for? It wasn't mandatory or anything. Why the Pikachu faces?

In addition to other reasons already given, I'm not sure if this is still the case because I haven't used Facebook in a while, but back in the day, the only options for 2FA were code generator in the Facebook app itself or SMS. So if you didn't want to have the Facebook app on your phone, giving them a phone number was the only way to enable 2FA.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#75
post #65
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

And Facebook will promptly ignore that too: https://ruben.verborgh.org/facebook/

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#76
post #53

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

Let's not forget the notable case of Twitter "accidentally" using your provided phone number for advertising purposes [0], and to this day still banning you after registration if you refuse to give it. [0]. https://www.eff.org/deeplinks/2019/10/twitter-uninentionally...

Facebook did this as well.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#77
post #46

A note for people with US numbers who aren't finding their info: > And finally, one last note on the data load process: At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 8 have completed loading. The other codes are in progress and may take several hours more before they're searchable. US numbers begin with international code 1, and it seems that they aren't ye…

[deleted]

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#79

I'm sure not to be the first one to point this out, but checking other people's emails is quite revealing. It's very much documenting in public which sort of websites about every person you know is visiting. Among them [1] "Baby Names", "Ashley Madison", "Adult FriendFinder", "diet.com". Want to profile your friends – there you are. I wonder if the benefits of haveibeenpwned outweights this. [1] https://haveibeenpwne…

Funny that I never thought about this.

Now I'm wondering how this actually plays with legislation such as CCPA or GDPR, as it is quite revealing even without the more delicate sites mentioned here.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#80
post #65

Earlier quoted context omitted.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

And Facebook will promptly ignore that too: https://ruben.verborgh.org/facebook/

1. That article is about downloading, not deleting.

2. You don't negotiate with Facebook, you norify the regulators so they can asses another billion-euro fine.

Post reply on HN