Live data from Hacker News

Facebook privacy fuckup reveals who has your number in their phone

alexmuir.com

41–50 of 124 posts

Re: Facebook privacy fuckup reveals who has your number in their phone

#41
You know I've been wondering about Facebook saying they have 500 million + users but I wonder if they count the deactivated. Which is a fancy word for suspend.

I went to delete my account the other day just because there is so much crap and it's time wasting and I go searching for delete but couldn't find a link! I then came across the deactivate which I had heard about before and went with that but they still keep all my data and it's ready for me just by logging in again.

To delete I had to Google and find an actual link in a forum on how to fully delete my account. And after I found the link you are taken to this page that asks you to confirm and then you have to wait two weeks (I guess to let people go back after Facebook withdrawal.) I guess what I'm getting at is: Facebook makes it easy to deactivate with a false sense to their users that it's sort of being 'deleted.' Yet they are keeping everything, even messages, from your account. I wonder if they still count these accounts in their user count?

Re: Facebook privacy fuckup reveals who has your number in their phone

#42
post #40

I'm confused as to how this is possible. Are people syncing their phone books from cellphones to Facebook?

Yep. A lot of android builds have it baked in, and I assume the facebook apps for android/ios have this functionality.

Re: Facebook privacy fuckup reveals who has your number in their phone

#43
I can confirm that the "security check" thing is related to having a fake name, or perhaps an empty profile. Both of those apply to my primary account and I'm prompted to enter a phone number every time I log in.

It doesn't seem to be required, I've always just dismissed those "security" prompts by clicking the FB logo in the top left, which forwards me to the homepage just fine.

The chances of facebook getting my mobile number are about the same as my chances of flying to the moon by willpower alone.

Re: Facebook privacy fuckup reveals who has your number in their phone

#44

You know I've been wondering about Facebook saying they have 500 million + users but I wonder if they count the deactivated. Which is a fancy word for suspend. I went to delete my account the other day just because there is so much crap and it's time wasting and I go searching for delete but couldn't find a link! I then came across the deactivate which I had heard about before and went with that but they still keep a…

Our user metrics are in terms of monthly and daily active users. More than 800 million people logged in last month with more than 500 million logging in on a single day.

Re: Facebook privacy fuckup reveals who has your number in their phone

#45
I am wondering if someone is prescient enough to write a " Facebook is dead " essay.

After a group perfects Gentry's work[1].. someone will gear up a homomorphic scheme combined with a generative personal cloud[2].

The " personal " in PC was most important when C stood for computer. Next, it will be most important when C stands for cloud.

[1] - http://crypto.stanford.edu/craig/

[2] - http://futureoftheinternet.org

Re: Facebook privacy fuckup reveals who has your number in their phone

#46
post #25

I'm not particularly sure about this, but why would revealing the people who have stored YOUR phone number to YOU be such a big deal? I'm assuming phone number verification checks that you own the number via SMS; so it just acts as a reverse-stalker (I'd be worried about people I _don't_ know having my phone number saved).

Because, as the article says, it can reveal Facebook accounts that you didn't knew your friends had, such has this friend of the OP who has a "straight" and a "gay" FB account.

I'm not sure that's such a huge sin -- technically I think FB says that you cannot have more than 1 account/actual person; I'd imagine when this `feature` was baked in the engineers didn't imagine that anyone would maintain an account that 1) they would keep hidden from friends _and_ 2) add their phone numbers to.

At the very least, the friend could have blocked the set of people he didn't want to know about his preferences from the "gay" account: otherwise what stopped a simple search by name from showing both accounts?

Re: Facebook privacy fuckup reveals who has your number in their phone

#47
post #26

I was able to duplicate, but took a little bit different process. Sign up, add your mobile, confirm it, then log out and back in. The result was definitely people who had done what the author said but it was also interspersed with friends of friends, muddying the waters a bit.

I'm glad you've managed to recreate. As mine was a new, friendless account my list was purely people with me in their phonebook.

At first, it didn't recommend anything, but after I made yet another account and added that as friend it recommended 50+ people I had no relationship to, AND one friend that I know of. There's nothing linking me to that person except the phone number I used, so it seems to work somewhat, however, I know for sure there are at least 50 people with my phone number on facebook, why didn't it recommend any of those other people?

Re: Facebook privacy fuckup reveals who has your number in their phone

#48

These little privacy leaks are not important on their own. A little data leaks here, a little there. What is concerning is that we can guarantee private investigators and professional identity fraudsters are well on top of all these little loopholes. And combined, I'd say Facebook is probably pissing data out. Some sweet law enforcement potential here - slap in a request to Facebook on a drug-dealing suspect, find a…

If you are truly concerned about harm to users, did you try reporting this to facebook.com/security or facebook.com/whitehat? FWIW, I've alerted some people.

Your post is unclear on one point. Did you see this screen BEFORE confirming via SMS that you were in possession of the mobile number you entered? If it was after confirmation, that's a very different thing.

Re: Facebook privacy fuckup reveals who has your number in their phone

#49
I think I've found another troublesome method that Facebook is using to suggest new friends.

A few years ago, I created a Google profile with a vanity URL [1] and a Facebook account with the same Gmail address. I never linked those two accounts, used third-party apps or imported contacts into Facebook. I recently created a Google+ profile and publicly circled some users when I suddenly noticed that those circled users started showing up in my Facebook account as "suggested friends". Those users don't follow me on Google+, aren't linked to any of my Facebook friends and they don't know my Gmail address.

I can't think of any other method used by Facebook to recommend those friends, except by crawling my Google+ circles. It's as easy as extracting my Google+ username from my Gmail address and scanning my circles at profiles.google.com/username.

I can't reproduce this with different accounts as vanity URLs aren't available for new Google accounts.

Could anyone with confirm this with their own Google profiles?

Do you think Facebook should be authorized to "scrap" contacts from other social networks, to extend build their own social graph about their users, without possible opt-out and no disclosure?

[1] http://www.labnol.org/internet/vanity-url-for-google-profile...

Re: Facebook privacy fuckup reveals who has your number in their phone

#50

These little privacy leaks are not important on their own. A little data leaks here, a little there. What is concerning is that we can guarantee private investigators and professional identity fraudsters are well on top of all these little loopholes. And combined, I'd say Facebook is probably pissing data out. Some sweet law enforcement potential here - slap in a request to Facebook on a drug-dealing suspect, find a…

http://www.rumint.org/gregconti/ has done a bunch of work on the ramifications of " A little data leaks here, a little there " .. you might enjoy.
Post reply on HN