Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

111–120 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#111
post #54

Getting to the point where we’re going to need phone, email, and SMS to be deny all by default. Can’t reach me unless you’re information is already in my contacts.

Possibly, but we can't do that either. What we need is some balance of both worlds. OOH, we do actually need to be contactable. OTOH, being too contactable means spam. I doubt there's a perfect balance, but either extreme come with too many problems. Email has decent spam filtering, and I think that kind of cat-mouse system will persist. That said, there's "room" for more whitelisting.

"I doubt there's a perfect balance, but either extreme come with too many problems."

In principle, "pay me a small fee if you're not on my list, if I put you on my list now it's free" would work well (optionally refund someone who contacts you out of the blue that you approve of), but there's a lot of both engineering and social details between where we are now and such a system.

It doesn't take much cost friction to deter mass spamming. I don't think much problem would be left behind from the handful of overconfident spammers who think that they can bust the odds and it's worth 25 cents a message or something.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#112

Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…

>Change your credit/debit cards yearly (say to your bank you 'lost' it).

Huge shoutout to/for privacy.com. Been using for over a year now and it's been a fantastic service.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#113

After my wife's suicide (See the documentary Pain Warriors) I took over Karen's FB account as my own, and I changed the name on the account. Long before this breach I have been getting SMS Spam addressing me as Karen, on a number that did not exist when she was alive. FB data can be the only possible source of that spam. The spam is always trying to sell male enhancement products to 'Karen'. Anyone know how to stop t…

Sorry for your loss. Right now I'm pretty happy that I scrubbed all information of my FB account months ago. If only people could stop using messenger so I could delete it. But I have a similar, but unrelated to FB, problem in that every month I get an offer to work as a nurse in Norway from different agencies. I figured they scraped some "find the number"-site here in Sweden long ago and since my mothers name was on…

Would you mind elaborating on how you "scrubbed" information from your fb account? It's been years since I closed my account but I know (e.g. see this article) this is not enough, so I consider reenabling it only to delete all my info, and then finally (?) deleting it.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#114

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

Not to mention whatsapp is actually broken. It's bound to your phone number and can't change it. If you change SIM, your account is wiped. AND the worst: your contacts are not notified so if they send a message to the old number, it will just silently fail. Absolutely horrible. I never understood how whatsapp could be phone-number bound and not account bound like everything else out there.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#115
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

My experience is completely opposite to yours. I have a facebook account, phone number added and verified, profile privacy set to "friends only", but I can't find myself in the leaks.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#116
post #54

Getting to the point where we’re going to need phone, email, and SMS to be deny all by default. Can’t reach me unless you’re information is already in my contacts.

My phone number (and some other details) were part of Nano Ledger's database that got stolen last year. So, some entrepreneurial scammer started calling me on a daily basis a few months ago. Really annoying. I'm well aware my phone number and email addresses are pretty much public information at this point. I actually put that on my web site even. But stuff like this makes me even less likely to answer unknown number…

So they really had your money then?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#117
post #14

Links to the actual data (allegedly): https://pastebin.com/sq7UDyVb

Thanks, I was looking for that. Aside from linking my name to my cell phone number (which I really can't even assume is private anymore) there's nothing private in there for me.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#118
I tried fully deleting my Facebook account multiple times about 5 years ago. Each time, it became clear that my information was never leaving. Friends were still able to pull up my account. My credentials were still being recognized and allowing me to login to an account I was told was now nonexistent.

Now I see my phone number was part of the breach. I am so fed up with Facebook.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#119
This is very strange. I definitely have a phone number associated with a facebook account because at some point in the past I used FB 2FA. I have not deleted that number. I have tried it in several different formats, including + country code, leading country code, with and without dashes and I am getting "Good news" message.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#120
post #81

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

It's crazy the a phone number is a secret. The problem isn't having the phone numbers; it's all the terrible systems that only work if phone numbers are secret.

Phone numbers are not secret. These service ask for it mostly to be sure to get the right one (checking is expensive) and/or to have plausible deniability of your contentment when they abuse it later.
Post reply on HN