Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Best to avoid using the “Have I been facebooked” website

code.express

Post reply on HN
Print view View original

21–30 of 57 posts

Re: Best to avoid using the “Have I been facebooked” website

#21

Post by crtasm »

Bedon292 wrote: post #10
crtasm wrote: post #6

> The answer is: use HIBP, or https://haveibeenpwned.com/ . They’ve got the technical (and social) bits of this process right! While I'd trust HIBP more it isn't doing anything significantly different with the lookup process, is it? "There's no k-anonymity implementation for phone numbers at this point in time." https://www.troyhunt.com/the-facebook-phone-numbers-are-now-... Putting a number sends it directly in the…

The significant difference to me is you know exactly who is running HIBP, and he is open about what he is doing producing a long blog post about it.

Oh I agree, just that the article is saying 'look the string gets sent to the server!' and making out HIBP isn't doing so.

Re: Best to avoid using the “Have I been facebooked” website

#22

Post by scubazealous »

Bedon292 wrote: post #16
thrill wrote: post #11

If you're on the "facebooked" list your number is already disclosed and correlated to you and your email address - inputting it onto a website to see if it's one of the compromised will have absolutely no effect.

But if you aren't in the data you are now giving away information.

I received 10 spam calls in 3 hours yesterday from "Chase Bank" about verifying a purchase in Ohio. All came from my area code and matched the same 3 digits of my phone number. I sometimes receive spam calls but never more than one or two in an afternoon. I was wondering what changed recently or how I got onto a new list.

Now I realize, two days ago I used this website.

Has anyone else had a similar experience? I am not assigning blame here but pointing out a coincidence. It would be great to hear if others going through the same thing.

Re: Best to avoid using the “Have I been facebooked” website

#23

Post by kalleboo »

aeternum wrote: post #2

It's kinda crazy how paranoid people have become around stuff like phone numbers. Even if this site were recording the numbers, what good is it?

There used to be a time when everyone received a book full of everyone's phone number, name and address... Crazy!

Re: Best to avoid using the “Have I been facebooked” website

#25

Post by anonymouse008 »

scubazealous wrote: post #22
Bedon292 wrote: post #16

Earlier quoted context omitted.

But if you aren't in the data you are now giving away information.

I received 10 spam calls in 3 hours yesterday from "Chase Bank" about verifying a purchase in Ohio. All came from my area code and matched the same 3 digits of my phone number. I sometimes receive spam calls but never more than one or two in an afternoon. I was wondering what changed recently or how I got onto a new list. Now I realize, two days ago I used this website. Has anyone else had a similar experience? I am…

Perhaps it’s just been long enough for the original breach to take root in a twilioml app?

Re: Best to avoid using the “Have I been facebooked” website

#26

Post by accelbred »

willcipriano wrote: post #8
kencausey wrote: post #7

Earlier quoted context omitted.

Well, from what I can tell, older people are targeted at far high rate. Age seems to be a valued input to the process. I can guess a number of reasons for that.

Does anyone under 50 pick up the phone if they don't know the number that's calling?

Only when I'm on call.

Re: Best to avoid using the “Have I been facebooked” website

#27

Post by billh »

VWWHFSfQ wrote: post #13
simonw wrote: post #9

Earlier quoted context omitted.

Your phone number is a short unique identifier for you which follows you around for potentially your entire life, because the hassle of changing it is significant. I imagine marketers find it significantly more valuable than an email address.

It's crazy how we have gone from the phone company publishing an entire index of everyone's names, addresses, and phone numbers, to ...this. what happened to the good old days of the white page phone books.

I'm not entirely convinced the good old days of the whitepages was actually good.

The phone companies required you to purchase your privacy for a monthly fee if you didn't want to be included in their publications. Had these publications been privacy focused from the start and required opt-in instead of the extortion for privacy scheme; I have a feeling that these directories would not have existed in the form that they did, if at all.

Re: Best to avoid using the “Have I been facebooked” website

#29

Post by ramphastidae »

willcipriano wrote: post #8
kencausey wrote: post #7

Earlier quoted context omitted.

Well, from what I can tell, older people are targeted at far high rate. Age seems to be a valued input to the process. I can guess a number of reasons for that.

Does anyone under 50 pick up the phone if they don't know the number that's calling?

Sure. Ever gotten a call from a delivery person with food? A doctor’s office with test results? A hair salon confirming an appointment? A teammate with an emergency at work? A taxi driver with the wallet you forgot? A distant relative that needs help? A potential customer referred by a friend?

Re: Best to avoid using the “Have I been facebooked” website

#30

Post by jorts »

KMnO4 wrote: post #28

A safer way: just download the dump for yourself and Ctrl-F your number. An even safer way : Look at your phone log. If you haven’t received 25 spam calls in the past week, your number probably isn’t in the list.

I just counted and I only had 16 so I must be safe. The amount of spam calls I get is staggering.
Post reply on HN