Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

Post reply on HN
Print view View original

161–170 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#161

Post by macintux »

duffyjp wrote: post #149
3pt14159 wrote: post #142

Earlier quoted context omitted.

It's a hard problem to crack. Some legitimate places need to be able to call you without you knowing them ahead of time. Say your sibling was mugged in Mexico and the local little police station let them borrow the landline to call the only number they still remember without having to check their contacts in their phone. Are you not going to pick up? There are a lot of these little edge-cases. Journalists, lawyers re…

My iPhone is set to "Silence Unknown Callers." It's the perfect compromise. If a call is legitimate they'll leave a voicemail and I just call them back.

I discovered recently that my Verizon phone service’s voicemail had been full for several months. I’m not sure how I was ever supposed to discover that, but I ignored what turned out to be an important phone call and got burnt because I assumed I’d get a voicemail.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#162

Post by bogwog »

kube-system wrote: post #146
bogwog wrote: post #129

Earlier quoted context omitted.

Identity theft most likely, and the consequences arising from that.

What is the monetary amount, and do you have evidence of the theft?

I'm speaking hypothetically of course, I haven't actually been affected by this leak (so far).

But that doesn't seem hard to prove at all. At the very least, you could claim that Facebook's leak forced you to pay for identity theft protection/monitoring as a very reasonable precaution, and whatever that cost you would be the damages.

Then of course there's the possibility that someone did actually steal your identity and used it to drain money from your accounts, or simply caused you to waste a bunch of time hunting down for example fake accounts opened using your information, credit cards, etc.

And I'm not a lawyer, but I'm pretty sure somewhere in all this fuckupery you can throw in some punitive damages.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#165

Post by milofeynman »

shnp wrote: post #17
drcongo wrote: post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

I deleted my phone number around mid-2018 and it’s also part of the leak tying the phone number to my name and gender https://news.ycombinator.com/item?id=26708923

Similar experience. Class action?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#166

Post by yosito »

untouchable wrote: post #144
yosito wrote: post #46

A note for people with US numbers who aren't finding their info: > And finally, one last note on the data load process: At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 8 have completed loading. The other codes are in progress and may take several hours more before they're searchable. US numbers begin with international code 1, and it seems that they aren't ye…

According to the edit at the bottom of the post, "1" is now complete.

Interesting. I've still got no hits, which surprises me.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#168

Post by hendersoon »

yosito wrote: post #166
untouchable wrote: post #144

Earlier quoted context omitted.

According to the edit at the bottom of the post, "1" is now complete.

Interesting. I've still got no hits, which surprises me.

Only ~32m of ~190m USA Facebook accounts were in this leak. The US is surprisingly poorly represented-- a good thing!

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#169

Post by hendersoon »

shnp wrote: post #17
drcongo wrote: post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

I deleted my phone number around mid-2018 and it’s also part of the leak tying the phone number to my name and gender https://news.ycombinator.com/item?id=26708923

We don't know exactly when the data was exfiltrated, just that it ended in early 2019. It could have been taken at any point before that time.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#170

Post by hendersoon »

coatmatter wrote: post #157

Non-technical speculation, but based on my own experience as an ordinary Facebook user: I'm increasingly confident that this breach/leak has come about mostly through the privacy search setting (buried in Facebook's privacy settings - https://www.facebook.com/settings?tab=privacy -) which allows "Everyone" to search for a number in order to find your profile if so enabled. This is a bit like an option that PayID/Osko…

Only ~32m of ~190m US FB accounts were in this breach, so it's not surprising if you live in that country and are not in the breach.
Post reply on HN