Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

Post reply on HN
Print view View original

121–130 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#121

Post by 52-6F-62 »

scrose wrote: post #72
devgoldm wrote: post #69

Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend. Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. W…

I can’t imagine telling everyone I know that I’m changing my number every couple years, and I’m not even calling/messaging a lot of people nowadays. I have a family member who did something similar(not on purpose) and I still have 3 of her numbers and still get confused which is the working one.

I had a company phone about 6 or 7 years ago for a company I worked for at the time. When I was on my way out they unilaterally revoked my company-provided cellphone after convincing me I should get rid of my old private number for theirs.

I'll never do that again. It happened shortly after ditching social media and I just about all of my contact info and I haven't been in touch with some old friends because of that since then.

Even if you had the time to transfer your contacts, etc, something will inevitably get missed.

Hell, I've updated family and friends to an email address I've been using for closer to a decade and they still email the old one...

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#122

Post by acheron »

sethammons wrote: post #102
mcculley wrote: post #55

Earlier quoted context omitted.

I get a lot of value out of being reachable by people I do not yet know.

I found a novel solution by accident to this. I moved to a new area but kept my old number. 99% of my spam calls are from my phone’s area code. If you are not a contact and a number comes up from that area code, it is spam. If it is my new area code, it is a person or business trying to reach me. You could likely get a far off area coded number.

Same (though "I moved to a new area" happened in 2004). At this point I've just blocked the entire old area code and neighboring ones, aside from existing contacts.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#123

Post by ricardobayes »

avh02 wrote: post #43
aboringusername wrote: post #39

Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…

> When ordering online, always, always, always use a fake number, it's not required Until something's gone wrong in the process and they need to call you to clarify/fix it. (happens regularly to me due to address suffixes not propagating correctly through crappy systems)

This is region dependent. In spanish speaking countries they pretty much never use email. Everyone - including the courier will just call you.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#124

Post by magsnus »

gmargari wrote: post #113
magsnus wrote: post #106

Earlier quoted context omitted.

Sorry for your loss. Right now I'm pretty happy that I scrubbed all information of my FB account months ago. If only people could stop using messenger so I could delete it. But I have a similar, but unrelated to FB, problem in that every month I get an offer to work as a nurse in Norway from different agencies. I figured they scraped some "find the number"-site here in Sweden long ago and since my mothers name was on…

Would you mind elaborating on how you "scrubbed" information from your fb account? It's been years since I closed my account but I know (e.g. see this article) this is not enough, so I consider reenabling it only to delete all my info, and then finally (?) deleting it.

I deleted everything, going through every page and my whole timeline etc pressing delete on everything. I considered changing my number etc. to nonsense and wait a week and the delete it but I figured facebook are probably versioning that stuff anyway.

Right now my profile picture is a plastic duck, there are no photos and no information apart from my name and my throwaway-email adress (which I hope is hidden from the world via settings).

There is also a "privacy page" there where you can check what information they have saved about you and if you forgot to delete something. I would probably have done it this way first if I where to delete my FB-account but for now I need messenger.

If you are running firefox you should also install "facebook container" even if you don't have an account. :)

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#125

Post by ricardobayes »

wccrawford wrote: post #11
jtylr wrote: post #10

Earlier quoted context omitted.

Despite using 2FA and listing my number on my profile - albeit restricted to "just me", I don't appear in the data. It's not as simple as they just having a record of it somewhere.

I'm in the same situation and very surprised. I've sat here wondering if I'm entering my numbers wrong, or if I'm really not in it. I've read the blog post and I'm entering the 1 in front of my 10 digits, because I'm in the USA. My wife's number isn't in there, either. I'm just really surprised, because I checked facebook the other day and it said I was searchable by email and phone number. I even searched my email a…

US numbers are not uploaded yet

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#126

Post by ricardobayes »

KMnO4 wrote: post #98

Hm, I already know phone number is leaked, but searching for it (XXXxxxXXXX) doesn’t work. Once I prepended Canada’s country code: (1XXXxxxXXXX) it worked. Maybe this can be fixed with some simple communication? Ie “No result —- ensure you enter your full phone number including country code”

how do you know it was leaked? got spam?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#128

Post by Madzen__ »

notyourday wrote: post #119

This is very strange. I definitely have a phone number associated with a facebook account because at some point in the past I used FB 2FA. I have not deleted that number. I have tried it in several different formats, including + country code, leading country code, with and without dashes and I am getting "Good news" message.

Considering Facebook has ~2.7 billion users and this breach only contains 533million there are many people not in it.

Troy also mentioned not having processed all numbers yet aswell, but you could check the dump yourself. Downloading country spesific dumps does not take a long time.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#130

Post by Cd00d »

hnrodey wrote: post #108
devgoldm wrote: post #69

Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend. Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. W…

I've had the same phone number for somewhere around 17 years. I kept this number even as I moved across the country (US).

I thought this was the norm. I've had the same number for 20 years now, though have moved through many different area codes since. But, I must be the odd one, because I get asked regularly why I have the area code I do, and the answer "because that's where I was living in 2001" doesn't seem satisfactory.
Post reply on HN