Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

Post reply on HN
Print view View original

241–248 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#241

Post by kergonath »

eru wrote: post #235
kergonath wrote: post #229

Earlier quoted context omitted.

Indeed, citizenship is not required. You just need to be a resident. It would be hard to argue that privacy is a human right and then limit the protections to citizens.

In German legal thought and practice, we have the distinction between Buergerrechte (civil rights, perhaps) and Menschenrechte (human rights). The former is for citizens, the latter for everyone. In the US, privacy falls in something like the former: there are supposed to be legal safeguards to keep US citizens from being spied on, but eg the NSA wiretapping foreigners is fine and even encouraged.

> In German legal thought and practice, we have the distinction between Buergerrechte (civil rights, perhaps) and Menschenrechte (human rights).

That is my experience in a couple of other European countries as well. Of course, some rights are reserved to citizens: vote (although that is changing for local elections), things like service at embassies and consulates abroad, and some aspects of immigration.

But except for these narrow aspects, the law should be the same for everyone: we are not a caste system.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#243

Post by ehsankia »

coatmatter wrote: post #237
ehsankia wrote: post #225

Earlier quoted context omitted.

Looking at the full breakdown [0], a bunch of middle eastern countries have near 100% breach. It seems like they were the target, and all the other countries were just collateral damage maybe? Canada, US, UK, all sitting around 10-20%. [0] https://datastudio.google.com/u/0/reporting/afa08373-621e-4e...

Facebook has released an official statement which appears to confirm my suspicions about how the data was more or less obtained (i.e., via number search): https://about.fb.com/news/2021/04/facts-on-news-reports-abou... (relevant discussion at https://twitter.com/troyhunt/status/1379579465148157953 ). But I too noticed the breach rate in the Middle East seemed unusually high, except my initial assumption was that perh…

The rates in those countries are way too high to be some optional feature like a messenger. It has to be something that was 100% turned on in those countries, but maybe optional/opt-in in the west? Or maybe they were doing gradual rollout of the feature, and they had rolled out in those countries fully and were at like 10-20% rollout in north america?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#244

Post by eru »

kergonath wrote: post #241
eru wrote: post #235

Earlier quoted context omitted.

In German legal thought and practice, we have the distinction between Buergerrechte (civil rights, perhaps) and Menschenrechte (human rights). The former is for citizens, the latter for everyone. In the US, privacy falls in something like the former: there are supposed to be legal safeguards to keep US citizens from being spied on, but eg the NSA wiretapping foreigners is fine and even encouraged.

> In German legal thought and practice, we have the distinction between Buergerrechte (civil rights, perhaps) and Menschenrechte (human rights). That is my experience in a couple of other European countries as well. Of course, some rights are reserved to citizens: vote (although that is changing for local elections), things like service at embassies and consulates abroad, and some aspects of immigration. But except f…

Voting has already been open for people from other EU countries in local elections for quite a while.

> But except for these narrow aspects, the law should be the same for everyone: we are not a caste system.

I agree that it should, but the biggest factor in most people's life is not silly things like voting, but the right to work.

Billions of people would like to live and work in the EU and the US, but are not allowed.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#245

Post by hyyypr »

devgoldm wrote: post #69

Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend. Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. W…

I don't recall ever giving my phone number either and my number is detected by HIBP..

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#246

Post by BoDlulu »

samerjj wrote: post #51

As a Syrian who have used many throw-away accounts on FB, this is a life or death matter for many of us. I'm sure the Syrian regime will use this information to track activists. I have checked and there are 7 million leaked accounts from Syria, probably covers everyone who uses Facebook in the country. Facebook made it mandatory to provide the phone number and now that this is leaked, they bear the moral responsibili…

I'm really sorry for the situation you're in but,

> they bear the moral responsibility for all the people who will be affected by this

Facebook should not be held responsible for dictatorships and totalitarian regimes killing people - even if they use Facebook's leaked data to do so. It's quite unfortunate, but the responsible party to blame is still the people actually doing the killing.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#247

Post by efreak »

sevencolors wrote: post #194
sodality2 wrote: post #184

Earlier quoted context omitted.

Are they not blocked for being VoIP?

I've only run into one instance where they wanted a real number. (Coinbase) I think sites only block those when there's a reason to.

If my banks are all willing to use my Google voice number, then any other site should be willing to as well. And yet, most websites that want a phone number won't take it. My GV account is in use for WF, Discover, PayPal, Steam, and it was previously in use at BofA when I had an account with them.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#248

Post by efreak »

officeplant wrote: post #189
ct0 wrote: post #103

Earlier quoted context omitted.

My phone has an option called Do Not Disturb mode. I have set a schedule to turn it on everyday from 12AM to 11:59PM. What Do Not Disturb will do is block (silence the notification or ringer) every message or call from someone that is not in your phone book. While unfortunately you'll still get the spam SMS, but you wont get the alert. The only way I can see striking back at these spam calls is to pick up the call an…

I enjoy the pixel line of phones having google assistant answer spam calls for me. Sometimes its fun to watch the conversation they attempt to have with the assistant.

This isn't just pixel phones anymore, and it hasn't been for a while. You can also tell that it's not a person sometimes (specifically extended car warranty for me) if you have a cheap phone like mine, because you can hear the message on the other end start as soon as the line opens, before the phone shuts off the speaker and starts playing it's own message; once the assistant finishes talking, you can see the transcript start in the middle because the other end doesn't recognize Google assistant like it (probably) would an answering machine.
Post reply on HN