Live data from Hacker News

Facebook does not plan to notify half-billion users affected by data leak

reuters.com

191–200 of 315 posts

Re: Facebook does not plan to notify half-billion users affected by data leak

#191

Someone should get the leaked data and notify everyone. It does contain contact information after all...

If you mean by email, good luck not getting blacklisted as spammer everywhere. Maybe the likes of Microsoft and Google could bother to "notify" their users without such a fear. But there are other considerations.

Re: Facebook does not plan to notify half-billion users affected by data leak

#192
post #179

Earlier quoted context omitted.

> If Facebook has since deleted some of those accounts or associated phone numbers, they may no longer have a way to contact those users That would totally defy logic. I don't think that Facebook deletes anything ever .

I deleted my account a few months ago and was pleasantly surprised to find that it didn't surface in the breach. It could just be hiding in a different datastore of course, but it's definitely more fucks than I thought they gave.

Same here, deleted about 6 months ago. Was just as surprised.

Re: Facebook does not plan to notify half-billion users affected by data leak

#193
post #165

Earlier quoted context omitted.

The leak did not include email addresses, so your email spam issue is unrelated.

That's not true, many of the accounts did have email addresses.

The only email addresses in the leak are of those who have specifically set their email address to be public on their facebook profile.

Re: Facebook does not plan to notify half-billion users affected by data leak

#194
post #155
post #87

For years companies have been steadily asking, mandating or even trickling users to give them their phone numbers under the excuse of security (while the real reasons were different), now what? How can they be trusted anymore? This also strikes a great point about the data sharing between Facebook and WhatsApp. Linking data between services augments the dangers and the consequences are not obvious to the end user. I…

> I think Facebook should offer their users the option to remove their phone numbers with a real deletion. Man sometimes I think people forget phone books existed for a long time.

the phone book are completely a different animal. As example they are almost useless to reverse lookup a number...

Re: Facebook does not plan to notify half-billion users affected by data leak

#195

Earlier quoted context omitted.

> My university is known to offer the option payment of tuition through a popular online system. This option is done by sending each student, at the start of the year, an SMS with a link to a payment option. They don't email this information? They don't put it on an online notification system? I have no idea why SMS seems like the logical option for this.

The email option is arguably an easier (cheaper) attack vector than the SMS messages would be.

Yeah, I thought of that after I wrote it. Send it to all the university accounts you can get your hand on, see who you catch. It's probably just personal preference showing through as well, as I wouldn't be comfortable paying with my phone. I also have no idea how people substitute their PC with an iPad or phone. Much harder to fill out a page of fields and navigate around, and I'm sure that Google Pay won't support $15,000 payments.

Re: Facebook does not plan to notify half-billion users affected by data leak

#196
post #155
post #87

For years companies have been steadily asking, mandating or even trickling users to give them their phone numbers under the excuse of security (while the real reasons were different), now what? How can they be trusted anymore? This also strikes a great point about the data sharing between Facebook and WhatsApp. Linking data between services augments the dangers and the consequences are not obvious to the end user. I…

> I think Facebook should offer their users the option to remove their phone numbers with a real deletion. Man sometimes I think people forget phone books existed for a long time.

> Man sometimes I think people forget phone books existed for a long time.

If the notion were introduced today, nobody would tolerate them. That they once existed is hardly an argument that such things are a good idea.

Re: Facebook does not plan to notify half-billion users affected by data leak

#197

Earlier quoted context omitted.

If they find a match against the leaked data, that would validate it and prove it had not been tampered with and at least allow them to contact a subset of users. Why can't they do that at least?

They can do that. They probably won't because they'll argue it's all part of peoples public profiles and therefore published information rather than private information.

That distinction doesn’t matter for the GDPR. Publicly available information can be personal data, even if the entire world knows about it.

Re: Facebook does not plan to notify half-billion users affected by data leak

#198

I’ve said it before and I’ll say it again, unless and until, companies like Facebook are fined appropriate amounts they’ll never stop. Quite literally, every business school on the fucking planet will tell you do something if it’s cheaper. It is cheaper for them to not give a fuck, than to give one. Unless they are fined upwards of $20-50bn it’ll never stop because it’s always going to benefit their bottom line. Full…

Its complicated. Some large companies make every effort, but are still plagued by lawsuits. Do everything to the best of your ability, still sometimes somebody will cut themselves shaving or whatever, and sue. I know of one that settles for anything under a quarter million without even determining merit. Because it never ends.

I know, Facebook has made an egregious error. But overreacting (kill them all!) is not a good solution?

Re: Facebook does not plan to notify half-billion users affected by data leak

#199

Earlier quoted context omitted.

Do kids still text or is that a generation or two removed from the current iMessages/WhatsApp/Signal/WhateverComesAfterSignalBecauseImOldAndDontKnow?

I'm sure they'd prefer to receive notifications from their university on WhateverComesAfterSignalBecauseImOldAndDontKnow, but I imagine that SMS is the 2nd best thing (and probably still generates eye-rolling about the university being old fashioned).

But then you're stuck logging into the payment portal and filling out the form information with your phone, which is my own personal hell.

Re: Facebook does not plan to notify half-billion users affected by data leak

#200

> Because the scraping took place prior to GDPR, Facebook chose not to notify this as a personal data breach under GDPR. From here https://www.dataprotection.ie/en/news-media/press-releases/d...

Thanks for posting the only useful addition to the thread. :)

So the authority is still looking into it. They could still reach an agreement with Facebook on what to do. Then Facebook would probably be shielded from whatever liability those actions would supposedly cause (their excuse "we might make mistakes"), because "we were told to".

Post reply on HN