Live data from Hacker News

Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

news.ycombinator.com

221–230 of 240 posts

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#221
post #16

Sometimes company legal teams can be the most accessible way to draw attention to something like this, and I don't mean in a combative way. They're very risk conscious, they see a '10+ years of building a heavy metal community, gone like a puff of smoke' in terms of risks, both of bad publicity but also if you were to somehow litigate because of the damage to your business or project. Often they have an email address…

> You can potentially request all your data (and data about the hack) It is impossible to backup the existing page using Facebook Download Page tool for a page with large number of users, I've been trying that for months[1] to delete my Facebook account. Perhaps if initiated by their end it might be possible but then again does requesting user data using personal account include page data as well? There's now a 'How…

In the OPs case it would be less about getting an actual copy of the data, and more about the asking from the legal team (or some other human). The data I was thinking about was logs to help catch the hacker and a record of all the actions taken on the page (event history), as opposed to the 57k users. Like in the above linked article from patio11 (Dangerous Professional), it's a papertrail.

I agree that it's irritating that a lot of the big companies make it almost impossible to speak to a human, but I understand why. I've been on the other side of support enough times to know that they have to wade through an enormous volume of stupid questions for every one legitimate problem. It just doesn't scale.

There does need to be an escalation path somewhere for items like this, but how do you differentiate between this and the million people that claim their page was hacked when in reality they just forgot the password or accidentally deleted it.

That doesn't make it appropriate, but it does make it easier to understand. Everything is systems at a certain level. Capitalism is one part of that, but also just the sheer scale of it. Facebook has 2.6 billion monthly active users[1].

Lets say that every year 5% will think they need help, it's an arbitary figure, because I just don't know. They may or may not need help but they come across a problem they can't solve and want to reach out for support. Note: It's not necessarily the same 2.6 billion users each month, but let's ignore that.

    mau = 2.6 billion
    needing_help_yearly = mau * 0.05                   // 130,000,000
    needing_help_each_day = needing_help_yearly / 365  // 356,164
The average time to resolve a ticket is hard to know but I found one example that suggests 8.6 minutes[2]. I have no idea how accurate that is, or whether it's applicable to social networks.

    average_time_in_mins = 8.6 minutes
    support_mins_per_day = average_time_in_mins * needing_help_each_day     // 3,063,013 min 42 s
    support_hours_per_day = support_mins_per_day in hours                   // 51,050 h 13 min 42 s
    humans_needed_for_support = support_hours_per_day / 8                   // 6,381
This is a gross simplification, and you could play with a lot of variables to change these numbers, but it gives an idea of the scale.

Compound this with an attitude that they don't NEED a human in the mix, and the complexities and costs of managing a a support team and it starts to make sense why they don't offer support (even if they should).

[1]: https://www.statista.com/statistics/268136/top-15-countries-... [2]: https://www.thinkhdi.com/library/supportworld/2019/metric-of...

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#222
Someone once took control of a personal Facebook account for a friend of mine, which was connected to his Business Manager and all the campaigns he was running.

We still have no idea how that guy took control since the account had the 2FA setup, but still. No way to contact FB, no help at all, we ended up nuking the cards connected to the BM and restart his profile from scratch.

Facebook won't help you in any way.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#223
This won't help you but Facebook seems to have zero interest in such things. After spending thousands in ads my account got finally blocked early 2021 appearantly for advertising the masks my grandmum was selling on Etsy. Appeals were commentless ignored. I lost access to several big groups and pages.

The same happened a few years before with my last real name account, first they asked for my passport, pictures, identifying friends and then still commentless blocked me, removed my pages and groups as well as my semi popular apps.

The reality is Facebook doesn't care.

And if you build any kind of dependency or business around it you are playing with fire.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#224
post #222

Someone once took control of a personal Facebook account for a friend of mine, which was connected to his Business Manager and all the campaigns he was running. We still have no idea how that guy took control since the account had the 2FA setup, but still. No way to contact FB, no help at all, we ended up nuking the cards connected to the BM and restart his profile from scratch. Facebook won't help you in any way.

That's a smart security model. No idea how they got in (maybe session stealing in a public WiFi?) But just doing the same problematic thing again.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#225

Universally necessary services like communication, healthcare, and social media (the digital plaza) can never be justly managed by private companies. It is an inherent structural contradiction that has failed and will continue to fail our society until we are willing to organize resistance beyond the realm of consumer choice.

The problem is the expectation that these services are gratis to users. If users are prepared to pay, this metal community for example would be on its own domain with a PHPBB or similar. Many people do this by the way. Even for non technical topics.

People pay a lot for internet access both through mobile and land connections but are less willing to pay for things on the internet or maybe its the hassle of setting up a site (comparable to the hassle of say buying a car: a hassle but not insurmountable for anyone).

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#226

Earlier quoted context omitted.

I never said only communist states could own/owned telecoms. A lot of these changes - even in the west - came to be after communism in Europe has fallen.

The original quote was: > The yellow pages were absolutely run by state-owned telecom operators, less than 25 years ago, all over Europe. You then said > Only because of the communist past How is that not saying that it is only due to a communist past that there were state run telcos that were producing yellow pages? Tbf I didn’t mention each and every name of the yellow pages equivalent (because time) but I think th…

What I meant was that it was "all over Europe" only because a half of it was communist, not that only communist states had public telecoms and/or the entire Europe was communist. I'm very sure at least the eastern part would have been mostly private-run if it wasn't taken over by the communists.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#227
post #221

Earlier quoted context omitted.

> You can potentially request all your data (and data about the hack) It is impossible to backup the existing page using Facebook Download Page tool for a page with large number of users, I've been trying that for months[1] to delete my Facebook account. Perhaps if initiated by their end it might be possible but then again does requesting user data using personal account include page data as well? There's now a 'How…

In the OPs case it would be less about getting an actual copy of the data, and more about the asking from the legal team (or some other human). The data I was thinking about was logs to help catch the hacker and a record of all the actions taken on the page (event history), as opposed to the 57k users. Like in the above linked article from patio11 (Dangerous Professional), it's a papertrail. I agree that it's irritat…

Large number of users is not an excuse as several businesses use Messenger bots to handle common customer queries and handover to humans for escalation.

Heck, I myself have developed Messenger bots with over 100M conversations through them.

So actual `humans_needed_for_support` would be much lesser if Facebook used their own product.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#228
post #210
post #33

I'm sorry that this happened to you. What i am about to propose is not a solution for you for now unfortunately. But maybe something to help for the future...Have you considered starting a new presence for yourself and your community on the fediverse (e.g. mastodon, pleroma, diaspora, friendica, etc.)?? This will take work and time of course and maybe not all members will follow you over, but if you start a new commu…

How would a distributed system help? Being on a distributed system wouldn't keep hackers from taking control of your self hosted page and hosing it.

You're correct that by itself distributed systems - like the fediverse - do not automatically prevent hacks/security events. Although diversity of nodes (and decentralization of nodes too) does help because if one node is struck, then others can still operate; not foolproof but does offer some level of resilience. Also, to clarify, my proposal was more about sovereignty and added control of one's comunity and by extension content/voice. Certainly, if the relevant community lived on the fediverse, perhaps there could have been more that might have been done to continue even after some hack...maybe.

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#229
post #33

I'm sorry that this happened to you. What i am about to propose is not a solution for you for now unfortunately. But maybe something to help for the future...Have you considered starting a new presence for yourself and your community on the fediverse (e.g. mastodon, pleroma, diaspora, friendica, etc.)?? This will take work and time of course and maybe not all members will follow you over, but if you start a new commu…

There is no "legacy FB page" to join as a participant. That's the problem. The hackers deleted the page. I mentioned it to another poster here, but essentially I tried to inform my subscribers about the hack before the page was deleted, as part of a high-profile post (the end of year best metal albums post, which is the yearly highlight of the page, and always gets a lot of visibility). Unfortunately, not many people…

> There is no "legacy FB page" to join as a participant. That's the problem. The hackers deleted the page...

Yeah, the lack of the page does hamper things greatly. I'm sorry again that this happened.

> ...To be honest, it's more like the commenter below says. If my Heavy Metal community A disappears overnight, chances are people will simply jump over to Heavy Metal community B rather than start looking for 'fediverse' stuff (I don't even know what that is, to be honest, and I doubt many of my subscribers would either)...

My hope for you is that you and your fellow community members can in fact continue - whether it is on something like Heavy Metal community B, etc. Obviously, your call if you are or not interested in researching other options like the fediverse...Although, you (and other community members) should start thinking of plans for what to do if another hacking incident happens. (I sincerely hope that this kind of thing does not happen to you and your community ever again.)

Re: Ask HN: Hacker claimed ownership and then deleted my Facebook Page of 50k users

#230
post #221

Earlier quoted context omitted.

In the OPs case it would be less about getting an actual copy of the data, and more about the asking from the legal team (or some other human). The data I was thinking about was logs to help catch the hacker and a record of all the actions taken on the page (event history), as opposed to the 57k users. Like in the above linked article from patio11 (Dangerous Professional), it's a papertrail. I agree that it's irritat…

Large number of users is not an excuse as several businesses use Messenger bots to handle common customer queries and handover to humans for escalation. Heck, I myself have developed Messenger bots with over 100M conversations through them. So actual `humans_needed_for_support` would be much lesser if Facebook used their own product.

I agree that there are many tools including bots that can cut that number down. Every time you're prompted with a bunch of articles before you submit a ticket to any help desk, it's part of that (given your bot reference I'm fairly sure you know this).

The numbers are a fantasy scenario anyway, even 10% of that (600 support staff) is not small, and it's not a cost Facebook wants to bear.

They should do support, but then, they should do a lot of things that they don't do.

Post reply on HN