11–20 of 177 posts
proper link? I'm curious to see if I'm on there
Check Settings -> Privacy -> Who can look you up using the phone number you provided? If I understood this story correctly, it was scraped from accounts that had this preference set to public.
Kinda curious how you never find those dumps by a normal search on Google, basically you have no way to know if your data is there if you don't know where to look. I don't use Facebook but I always suspected my data is there due to friends having me in their contacts and using their apps.
Facebook: "This dataset is old and appears to have information obtained before we made changes last year to remove people’s ability to find others using their phone numbers." Not that "old." Some of those "update" dates are just a few days ago.
Facebook: "This dataset is old and appears to have information obtained before we made changes last year to remove people’s ability to find others using their phone numbers." Not that "old." Some of those "update" dates are just a few days ago.
> changes last year to remove people’s ability to find others using their phone numbers. What? That's not true, I reported the issue about user enumeration via phone numbers being possible in Whatsapp, Messenger and Instagram to them last week and they claimed (paraphrased) "it's a feature, not a security issue".
It's clearly a mongo database. I'm curious if there was no password because mongo doesn't password protect by default or if it was intentionally left public.
Kinda curious how you never find those dumps by a normal search on Google, basically you have no way to know if your data is there if you don't know where to look. I don't use Facebook but I always suspected my data is there due to friends having me in their contacts and using their apps.
Does anyone know where to obtain this dump? I would like to know if I am compromised.
URL -> https://haveibeenpwned.com/
It's clearly a mongo database. I'm curious if there was no password because mongo doesn't password protect by default or if it was intentionally left public.
My guess would be that it was setup by someone for test/dev and then it was forgotten about. I've found this to be a "time honored" problem heh.