Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook does not plan to notify half-billion users affected by data leak

reuters.com

Post reply on HN
Print view View original

41–50 of 315 posts

Re: Facebook does not plan to notify half-billion users affected by data leak

#41

Post by varispeed »

kuu wrote: post #34
PaulKeeble wrote: post #14

Zuckerberg is probably right in this one. Whatever fines might come out in the EU around this will be nothing compared to the cost of loosing the customers they notify and the cost of notifying them.

Then we need to reform the law to impose bigger fines or other tools that dissuade FB not notifying the users

I would advocate not only for fines, but companies should be required to pay compensation to people affected by the leak. To the extent that if someone address got compromised, Facebook would be required to relocate that person / family to a new address of comparable standard.

Re: Facebook does not plan to notify half-billion users affected by data leak

#42

Post by varispeed »

fwn wrote: post #15
alephu5 wrote: post #7

Earlier quoted context omitted.

Are you seriously claiming it's too hard? They could send out emails, Facebook messages or show some banner in the profile page. This is Facebook ffs, they almost have a monopoly on communication.

Not our parent claims it's too hard to find the users affected by that breach, Facebook does. Curiously. Quote from the source article: > The Facebook spokesman said the social media company was not confident it had full visibility on which users would need to be notified.

Did they not see the user ids in the leak? Just do facebook.com/user_id and you got the person...

Re: Facebook does not plan to notify half-billion users affected by data leak

#43

Post by shawnz »

dathinab wrote: post #25
PaulKeeble wrote: post #14

Zuckerberg is probably right in this one. Whatever fines might come out in the EU around this will be nothing compared to the cost of loosing the customers they notify and the cost of notifying them.

Utile the does the EU does notify them, which would be really funny tbh. Just imagine getting a SMS (chain): > You phone number and some of your data ( ) had been involved into a Facebook data breach. While Facebook is required by to inform you about this breach they insists of not complying with the law and keeping they users in the dark. As such we decided to do so. More information can be found here:

Of course a government body would never actually do this. Isn't it more likely a concerned citizen would?

Re: Facebook does not plan to notify half-billion users affected by data leak

#44

Post by cosmodisk »

blackoil wrote: post #27
tuxone wrote: post #10

This huge leak has definitely killed the SMS text messaging service. Sender can be spoofed and spam/scam/phishing have reached an intolerable level. The fact that they can cross reference you and then produce a more personalized content is huge. Changing password is easy (ok less easy if you recycle it) but changing phone number is something that I am not even relaxed to do.

> Sender can be spoofed Is this worldwide or US? I for now trust the senderid and assume them to be valid if they are coming from bank etc. I also haven't heard of anyone spoofing SMS. Should I be more cautious?

We heavily use programmatic SMS sending at work. There are two options how it could appear on the recipient's end: as a normal phone number, to which you can reply,etc. We had to purchase a dedicated number for this. The other option is to simply put whatever sender ID you want- we use company name.This way you can't reply to the message,so we mainly use it for marketing purposes. Nothing stops me from replacing with

Re: Facebook does not plan to notify half-billion users affected by data leak

#45

Post by matwood »

PaulKeeble wrote: post #14

Zuckerberg is probably right in this one. Whatever fines might come out in the EU around this will be nothing compared to the cost of loosing the customers they notify and the cost of notifying them.

> compared to the cost of loosing the customers

Given everything else FB has done to hose its users, I don't think this is the last straw.

Re: Facebook does not plan to notify half-billion users affected by data leak

#46

Post by orf »

shawnz wrote: post #43
dathinab wrote: post #25

Earlier quoted context omitted.

Utile the does the EU does notify them, which would be really funny tbh. Just imagine getting a SMS (chain): > You phone number and some of your data ( ) had been involved into a Facebook data breach. While Facebook is required by to inform you about this breach they insists of not complying with the law and keeping they users in the dark. As such we decided to do so. More information can be found here:

Of course a government body would never actually do this. Isn't it more likely a concerned citizen would?

Good idea, I’ll just pop on my SMS machine issued to all concerned citizens and crank out half a billion messages.

Re: Facebook does not plan to notify half-billion users affected by data leak

#47

Post by Isinlor »

dathinab wrote: post #25
PaulKeeble wrote: post #14

Zuckerberg is probably right in this one. Whatever fines might come out in the EU around this will be nothing compared to the cost of loosing the customers they notify and the cost of notifying them.

Utile the does the EU does notify them, which would be really funny tbh. Just imagine getting a SMS (chain): > You phone number and some of your data ( ) had been involved into a Facebook data breach. While Facebook is required by to inform you about this breach they insists of not complying with the law and keeping they users in the dark. As such we decided to do so. More information can be found here:

EU will not notify them, since EU doesn't have technical tools and legal framework to do it.

If DPA finds Facebook in breach of GDPR they will be ordered to do it with additional fines for non complying.

Art. 58 GDPR Powers point 2:

> Each supervisory authority shall have all of the following corrective powers:

> (e) to order the controller to communicate a personal data breach to the data subject;

> (f) to impose a temporary or definitive limitation including a ban on processing;

> (i) to impose an administrative fine pursuant to Article 83, in addition to, or instead of measures referred to in this paragraph, depending on the circumstances of each individual case;

If FB still refuse, it will end up in the court.

If the courts agree with DPA, then FB will be ordered by the courts as well.

Courts can choose their way to force companies to comply with their orders.

Re: Facebook does not plan to notify half-billion users affected by data leak

#48

Post by cm2187 »

shatnersbassoon wrote: post #29
villgax wrote: post #4

It's from 2019 is the stupid excuse they have. The amount of laxity they have shown in this matter is appalling!!

If you change your DoB every year like I do, you'll be fine...

I took the habit of treating the DOB like a password when asked by an entity that has no business knowing it. I give a random date and keep track of it in my password manager.

Re: Facebook does not plan to notify half-billion users affected by data leak

#49

Post by adav »

Hamuko wrote: post #31
pibefision wrote: post #20

This is one of the best cases to see if GDPR truly works in Europe

It's kind of an edge case since the breach happened before GDPR enforcement started.

GDPR was enforceable from 25th May 2018. Leak dates to 2019 from the news sources I've seen.

Re: Facebook does not plan to notify half-billion users affected by data leak

#50

Post by jlis »

shawnz wrote: post #43
dathinab wrote: post #25

Earlier quoted context omitted.

Utile the does the EU does notify them, which would be really funny tbh. Just imagine getting a SMS (chain): > You phone number and some of your data ( ) had been involved into a Facebook data breach. While Facebook is required by to inform you about this breach they insists of not complying with the law and keeping they users in the dark. As such we decided to do so. More information can be found here:

Of course a government body would never actually do this. Isn't it more likely a concerned citizen would?

Well I guess no one wants to pay for sending millions of text messages. Also, there might be problems regarding the DSGVO since you can't just text a large amount of people without their permission.
Post reply on HN