Live data from Hacker News

Facebook claimed phone number was only for 2FA. Now it's searchable

twitter.com

11–17 of 17 posts

Re: Facebook claimed phone number was only for 2FA. Now it's searchable

#11
Some mobile apps have two account creation options: Facebook login or phone number.

I recently chose phone number (because screw FB) but then noticed that the SMS verification is performed by Facebook anyways.

What the hell are App developers thinking? If I choose not to use my FB login in your app it's because I don't want FB snooping on me.

But then you turn around and use Facebook to validate my phone number without proper consent?

Re: Facebook claimed phone number was only for 2FA. Now it's searchable

#12
post #11

Some mobile apps have two account creation options: Facebook login or phone number. I recently chose phone number (because screw FB) but then noticed that the SMS verification is performed by Facebook anyways. What the hell are App developers thinking? If I choose not to use my FB login in your app it's because I don't want FB snooping on me. But then you turn around and use Facebook to validate my phone number witho…

I totally agree with you.

From a developer side: Google, Facebook, etc have well developed and much safer password and login authentication and the liability technically falls on them for any screw ups. Although I have a very secure hashing system for my online game login I still plan to make logging in with your Google and, maybe, Facebook account. It also adds convenience.

I’m imagining the dev found some tool to do sms verification that Facebook makes simple (or maybe that’s all they know how to use considering you didn’t mention any google login...).

Re: Facebook claimed phone number was only for 2FA. Now it's searchable

#13

For some unfathomable reason Google no longer allows Google Voice clients to forward their calls to Project Fi numbers. So my new layer of abstraction is a $3/mo Call Centric number routed to a $12 SIP deskset. Call Centric lets you whitelist so step one is to upload your contacts to them and then drop any calls not in your list. Goodbye telemarketers. Second step is to leave the phone unplugged altogether unless you…

"No longer..."?

No, it never was possible. The two systems use the same underlying infrastructure but for different purposes, which leads to a frustrating interplay of technical constraints and security/privacy controls.

Re: Facebook claimed phone number was only for 2FA. Now it's searchable

#15

Synchrony branded credit cards do the same thing, they use your SSN to obtain phone numbers from one of the Transunion skip trace databases. So even though I’ve only ever given Synchrony my dummy number, when I try to change my password I get a selection of phone numbers that they want to send a verification code to, and those numbers only exist in that Transunion database. You can’t correct or remove anything from t…

I'm not sure if it's Transition, but those "verify information only you'd know" questions that credit card companies ask now has bogus data on me, and I've had trouble getting into my own accounts because of it. For example, "which one of these did you work at?" and all 4 answers are false. But they expect one of them to be true. It's a huge hassle.

Re: Facebook claimed phone number was only for 2FA. Now it's searchable

#17
post #13

For some unfathomable reason Google no longer allows Google Voice clients to forward their calls to Project Fi numbers. So my new layer of abstraction is a $3/mo Call Centric number routed to a $12 SIP deskset. Call Centric lets you whitelist so step one is to upload your contacts to them and then drop any calls not in your list. Goodbye telemarketers. Second step is to leave the phone unplugged altogether unless you…

"No longer..."? No, it never was possible. The two systems use the same underlying infrastructure but for different purposes, which leads to a frustrating interplay of technical constraints and security/privacy controls.

I distinctly remember being able to do it at one time. Then a friend complained he could never reach me and I discovered my cell number was dropped from forwarding and couldn't be added back. I may have managed to sneak it in by porting in a forwarded number.
Post reply on HN