Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Have I Been Facebooked?

haveibeenfacebooked.com

Post reply on HN
Print view View original

191–200 of 230 posts

Re: Have I Been Facebooked?

#191

Post by joe45643234 »

shnp wrote: post #124

I deleted my (outdated) phone number from facebook years ago and it's still part of the leak, with my name and gender in it. I did not replace the phone number with another phone number. Really says something about what delete means for fb.

> Really says something about what delete means for fb.

Since the storage of data is so cheap, any company will archive data, for future profit.

Why did you believe any data will be deleted in the first place? Were you counting that government will take action if it finds out? Are there any case like this in the past.

I find it surprising even programmers believe their data will be deleted by the company.

Most people even programmers believe a company will delete their data. Whats your background? Are you a coder?

Re: Have I Been Facebooked?

#192

Post by 2Gkashmiri »

sleavey wrote: post #157
tngranados wrote: post #141

Not sure what’s going on but it says my number is not part of the leak, but I’ve checked myself and it is actually leaked. Just be aware that it may not be complete.

Same, for a contact's number (I'm checking on their behalf). It shows up in the raw dump [1] but not this site. [1] https://archive.is/MZqak

pakistan seems to be missing. Any ideas why?

Re: Have I Been Facebooked?

#193

Post by Kiro »

mjhagen wrote: post #138
Kiro wrote: post #120

Aren't telephone directories a thing anymore? At least in my country you can just search for a person online and see their phone number. Someone's phone number seems like the least sensitive PII.

Usually those phone directories don't include other personal information, like gender.

They actually do in Sweden and some also include all sorts of things such as social security numbers, criminal sentences etc. Very few things in Sweden that are not public data.

Re: Have I Been Facebooked?

#194

Post by peteretep »

deeblering4 wrote: post #188
peteretep wrote: post #74

Earlier quoted context omitted.

1 factor of 2 factor auth is completely useless without any identity to tie it to

we’re talking about the facebook data leak that associates a number to an identity.

We’re talking about a website that allows you to enter a number to see if it’s in a leak.

People are saying you shouldn’t put a number in there because if it’s not already in there, you are leaking some kind of privileged information.

That’s not true.

Re: Have I Been Facebooked?

#195

Post by paledot »

2Gkashmiri wrote: post #181
shnp wrote: post #124

I deleted my (outdated) phone number from facebook years ago and it's still part of the leak, with my name and gender in it. I did not replace the phone number with another phone number. Really says something about what delete means for fb.

i have had an idea. The last time i deleted my facebook account, it had been a 6-7 year old legacy thing and i ended up with manually deleting stuff, photos videos, contacts, calender entries. then waiting for months. I had an idea. This was back when "shadow profiles" had appeared on the news. i figured if i outright delete the account, maybe it would keep it in a "deleted because not coming back" DB. instead if i d…

It's not illegal to soft delete your pictures, and it may be illegal not to in isolated cases where a court preservation order is in effect. It is, however, illegal (by the GDPR) to not hard delete your account on request.

Re: Have I Been Facebooked?

#196

Post by meiraleal »

joe45643234 wrote: post #191
shnp wrote: post #124

I deleted my (outdated) phone number from facebook years ago and it's still part of the leak, with my name and gender in it. I did not replace the phone number with another phone number. Really says something about what delete means for fb.

> Really says something about what delete means for fb. Since the storage of data is so cheap, any company will archive data, for future profit. Why did you believe any data will be deleted in the first place? Were you counting that government will take action if it finds out? Are there any case like this in the past. I find it surprising even programmers believe their data will be deleted by the company. Most people…

> Why did you believe any data will be deleted in the first place?

Ethics? Morals? That is what we would expect from "delete my account".

Re: Have I Been Facebooked?

#197

Post by camillomiller »

robthebrew wrote: post #187
helb wrote: post #166

Troy just added phone number search to Have I Been Pwned as well: https://www.troyhunt.com/the-facebook-phone-numbers-are-now-... ( https://news.ycombinator.com/item?id=26709848 )

I get different results from this and HIBP

This seems to be more reliable. The obfuscated name and other info matched my own number.

Re: Have I Been Facebooked?

#198

Post by fvv »

my 2c security tips:

- i trust my browser and site owner version : text in clear

- i barely trust site owners ( if a match is found they still have access the fact that I've verified that number ) :

hash each phone address hashed ie using bcrypt and using a composed salt ( ie : site address + email in the account + phone address ) so rainbow table will be impossible to use ( this because phone numbers are low entropy and even without rainbow table IMO are not that very secure )

than ask user for the hashed version in the text field ( also write a linux terminal style command that can be used to hash given salt and hashing , or redirect to a trusted hasher service online (multiple links can be provided ) )

both text fields can be provided to allow the user a choice

Re: Have I Been Facebooked?

#199

Post by elwell »

Syonyk wrote: post #60
elwell wrote: post #54

Earlier quoted context omitted.

Thanks for the thorough response. > They're not much more evil than any other publicly traded Ok, that's basically my point, but people seem adamant that they are somehow exceptionally evil. > content repackager > companies who take user-generated content, repackage it What do you mean by taking user-generated content and repackaging it? I understand that users often do this themselves, but what exactly is Facebook r…

> ...but people seem adamant that they are somehow exceptionally evil. They are more directly responsible for keeping people in a mentally toxic {outraged, angry, upset} state than most other companies. Their reach far exceeds Twitter (2.5B active users vs about 180M for Twitter), so I'll consider them "more evil" in that they have a far greater reach. While I may have plenty of bones to pick with Google, Amazon, etc…

Thanks again for the thorough and thoughtful responses.

I started to write a number of counterpoints, then I realized it might not get us anywhere together. Perhaps it comes down to the way that I view web services: it's just a platform. Since Facebook is such a large platform, the evil parts of human nature will certainly be evident there. I'm aware that the "it's just a platform" viewpoint isn't for everyone. With that said, it's hard for me to leave that camp without carrying a lot of cognitive dissonance with me.

Is Ethereum evil because Vitalik doesn't spawn a fork every time innocent people get scammed out of their money (why only do it once (DAO hack)?)? Is Bitcoin evil because it allows people to evade taxes, hurting society? Do you think government should moderate the internet once AI can handle that task? I hope these aren't seen as strawman scenarios.

Re: Have I Been Facebooked?

#200

Post by robthebrew »

kevingadd wrote: post #189
robthebrew wrote: post #187

Earlier quoted context omitted.

I get different results from this and HIBP

If you read the bottom of the post, the complete phone number database has not loaded into HIBP yet. The results will likely change once it's done.

To be clear: I was listed on HIBP but not on this tool
Post reply on HN