Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Meta is using my 2FA to call and sell me

news.ycombinator.com

Post reply on HN
Print view View original

21–30 of 84 posts

Re: Tell HN: Meta is using my 2FA to call and sell me

#21

Post by Jochim »

ignite wrote: post #12
cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

I thought that companies you are doing business with are allowed to call you. He has an account, they can call. Also not a lawyer.

I'd assume in this case that they'd be allowed to call his business.

It sounds like his personal contact details are entirely separate from his business ones. I don't believe they should ever be using personal details to contact a business.

Even if he did provide them his phone number. In many places, that data may only be used for the purpose for which it was given. If they request a phone number for 2FA and then use it to contact you it could absolutely be considered illegal.

Re: Tell HN: Meta is using my 2FA to call and sell me

#23

Post by gamegoblin »

minraws wrote: post #14
gamegoblin wrote: post #7

I have a feeling that Meta has some kind of internal system for slurping up everyone's contact info, and that some kind of bugs/criteria occasionally cross some streams. Meta recruiting somehow got a hold of my name@amazon.com employer email -- which I have never posted publicly -- and started sending me recruitment emails to my work email. This struck me as incredibly unprofessional, though I understand it's almost…

generally most people check company then do, - firstname@company.email - firstnamelastname@company.email - firstname-lastname@company.email - firstname.lastname@company.email from the recruitment side, cause I have asked this question to my company's HR... :P hackers do it as well hence why I am always stressed about phishing, though recruitment mail on professional ids is still rather rare, recruiters also prefer to…

It was definitely not phishing -- I had a friend of mine who works for Meta reach out to the specific recruiter internally and ask them to not do that. They apologized, but a few months later a different recruiter reached out to the same work email.

They have my personal email, because they send recruitment spam to that one too.

Re: Tell HN: Meta is using my 2FA to call and sell me

#24

Post by MattGaiser »

transcriptase wrote: post #8

So meta engineers saw all those headlines about Twitter misusing 2FA phone numbers and instead of making sure it didn’t happen to them, kept them available to employees to “accidentally” use as well. Oopsie daisy! Tee hee, it was an honest mistake because ${team} didn’t know they weren’t supposed to!

Engineers don’t make decisions like that. Engineers got told to do it.

Re: Tell HN: Meta is using my 2FA to call and sell me

#25

Post by fsociety »

transcriptase wrote: post #8

So meta engineers saw all those headlines about Twitter misusing 2FA phone numbers and instead of making sure it didn’t happen to them, kept them available to employees to “accidentally” use as well. Oopsie daisy! Tee hee, it was an honest mistake because ${team} didn’t know they weren’t supposed to!

Well no nice rhetoric but there are privacy reviews at Meta now to prevent these things. OP should collect evidence for why they think it was Meta and report it. Then it can be investigated properly and dealt with if true.

I’m skeptical that it was Meta, given the zero evidence provided here. Unless the OP just pays for a phone number that is only used for Meta 2FA.. but that is a lot of money to have a phone number per a 2FA.

Re: Tell HN: Meta is using my 2FA to call and sell me

#26

Post by CoastalCoder »

cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

> ... this is not legal advice

How is it not?

Re: Tell HN: Meta is using my 2FA to call and sell me

#27

Post by therealmarv »

rodric wrote: post #22

You should probably use an app like Aegis (Android) or Raivo (iOS) for two-factor authentication rather than your personal phone number.

FB does not allow you to use 2FA apps like that without giving them a phone number first (at least this is how it worked in the past).

Re: Tell HN: Meta is using my 2FA to call and sell me

#28

Post by gdsdfe »

CoastalCoder wrote: post #26
cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

> ... this is not legal advice How is it not?

Because you can sue a lawyer for misrepresentation but you can't sue someone for giving their advice

Re: Tell HN: Meta is using my 2FA to call and sell me

#29

Post by cmatthias »

gdsdfe wrote: post #28
CoastalCoder wrote: post #26

Earlier quoted context omitted.

> ... this is not legal advice How is it not?

Because you can sue a lawyer for misrepresentation but you can't sue someone for giving their advice

Yep. Since I'm not a lawyer it probably wasn't necessary to include the "not legal advice" bit, but I'm just trying to be clear.
Post reply on HN