Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

Post reply on HN
Print view View original

211–220 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#211

Post by coatmatter »

chrischen wrote: post #209

I’m so confused. I intentionally refused to give my phone number to facebook and it is not set in my profile, yet my number was pwned in this facebook breach. Is FB associating or storing my number without permission? I have a different number set for 2-factor and amazingly it was not pwned!

I think you may have allowed Facebook to allow other Facebook users to search for your profile via your number. Can you check my earlier comment at https://news.ycombinator.com/item?id=26712835 and let us know whether or not this is/was the case?

> "Facebook Settings > Privacy > How people can find and contact you > Who can look you up using the phone number you provided?"

Is/was it set to "Everyone"?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#212

Post by reaperducer »

coldpie wrote: post #197
3pt14159 wrote: post #142

Earlier quoted context omitted.

It's a hard problem to crack. Some legitimate places need to be able to call you without you knowing them ahead of time. Say your sibling was mugged in Mexico and the local little police station let them borrow the landline to call the only number they still remember without having to check their contacts in their phone. Are you not going to pick up? There are a lot of these little edge-cases. Journalists, lawyers re…

I'm in my 30s and I can't think of a single time I have ever received a phone call that I didn't expect. I get several spam calls every day. I would make the trade (and recently have, I block all unknown numbers now).

I'm in my 30s and I can't think of a single time I have ever received a phone call that I didn't expect.

I've read that people not answering their phones is the number one reason that COVID contact tracing doesn't work.

But your comment makes me think that you've never had food delivered. Never used an Uber. Never owned a business. Never bought or sold real estate. Never rented a place to live. Never went to a restaurant with a wait list. Never done a lot of things that are perfectly ordinary, and require allowing people to contact you when they have questions.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#213

Post by chrischen »

coatmatter wrote: post #211
chrischen wrote: post #209

I’m so confused. I intentionally refused to give my phone number to facebook and it is not set in my profile, yet my number was pwned in this facebook breach. Is FB associating or storing my number without permission? I have a different number set for 2-factor and amazingly it was not pwned!

I think you may have allowed Facebook to allow other Facebook users to search for your profile via your number. Can you check my earlier comment at https://news.ycombinator.com/item?id=26712835 and let us know whether or not this is/was the case? > "Facebook Settings > Privacy > How people can find and contact you > Who can look you up using the phone number you provided?" Is/was it set to "Everyone"?

Yes, but my number is not set to the one that was pwned!

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#214

Post by biot »

jerf wrote: post #111
dalbasal wrote: post #88

Earlier quoted context omitted.

Possibly, but we can't do that either. What we need is some balance of both worlds. OOH, we do actually need to be contactable. OTOH, being too contactable means spam. I doubt there's a perfect balance, but either extreme come with too many problems. Email has decent spam filtering, and I think that kind of cat-mouse system will persist. That said, there's "room" for more whitelisting.

"I doubt there's a perfect balance, but either extreme come with too many problems." In principle, "pay me a small fee if you're not on my list, if I put you on my list now it's free" would work well (optionally refund someone who contacts you out of the blue that you approve of), but there's a lot of both engineering and social details between where we are now and such a system. It doesn't take much cost friction to…

This is nearly a few decades old (2004): https://craphound.com/spamsolutions.txt

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#216

Post by weird-eye-issue »

cjflog wrote: post #215

I have been pwned. Also of note, while my phone number was on my Facebook account, it has had its visibility set to "only me" for years. Still leaked.

Not really surprising. That just sounds like a UI option. You realize they still have to store it right?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#218

Post by PostThisTooFast »

yosito wrote: post #46

A note for people with US numbers who aren't finding their info: > And finally, one last note on the data load process: At the time of publishing this blog post, all phone numbers beginning with international codes 4, 6, 8 and 8 have completed loading. The other codes are in progress and may take several hours more before they're searchable. US numbers begin with international code 1, and it seems that they aren't ye…

You gave a real phone number to Facebook?

Egads.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#219

Post by nonameiguess »

jillesvangurp wrote: post #92
cwhiz wrote: post #54

Getting to the point where we’re going to need phone, email, and SMS to be deny all by default. Can’t reach me unless you’re information is already in my contacts.

My phone number (and some other details) were part of Nano Ledger's database that got stolen last year. So, some entrepreneurial scammer started calling me on a daily basis a few months ago. Really annoying. I'm well aware my phone number and email addresses are pretty much public information at this point. I actually put that on my web site even. But stuff like this makes me even less likely to answer unknown number…

I've been called twice by my bank to warn me of possible fraudulent activity. Both times I hung up on them and called back at the bank's own public customer service line and asked them if that was really them calling. Once it was and once it was not, so I'm glad I was that careful.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#220

Post by nonameiguess »

reaperducer wrote: post #212
coldpie wrote: post #197

Earlier quoted context omitted.

I'm in my 30s and I can't think of a single time I have ever received a phone call that I didn't expect. I get several spam calls every day. I would make the trade (and recently have, I block all unknown numbers now).

I'm in my 30s and I can't think of a single time I have ever received a phone call that I didn't expect. I've read that people not answering their phones is the number one reason that COVID contact tracing doesn't work. But your comment makes me think that you've never had food delivered. Never used an Uber. Never owned a business. Never bought or sold real estate. Never rented a place to live. Never went to a restau…

Most delivery services with an app have messaging built-in so you don't need to rely on calls, but I also know when I'm expecting a delivery or a driver to pick me up, and if an unknown call comes from my area code (the one I'm actually in, not the one my phone number is in), I'll answer that. It's pretty easy to distinguish between times I might expect a call and all other times.

For all those other things, though, I'm not sure why you need to answer unknown numbers. I've never owned my own business, but did manage a small business and we had dedicated business lines. No one needed to call my personal phone. For buying and selling real estate, there are agents that act as go-betweens and you can put their number on your contacts list. For renting, put the management company on your contacts list.

Post reply on HN