Wouldn't be the first time this happened, but it's hard to verify this without any hard data. Follow up with Meta via your business account and ask them to explain or you'll go the FTC and press (me).
Tell HN: Meta is using my 2FA to call and sell me
31–40 of 84 posts
Re: Tell HN: Meta is using my 2FA to call and sell me
#32Your anecdote isn't really evidence of anything and I'm skeptical that this is the case.
Re: Tell HN: Meta is using my 2FA to call and sell me
#33They already paid a multi billion dollar fine for misusing 2FA phone numbers and have insane process to prevent this specific scenario. Way more likely that OP put their phone number somewhere else.
Re: Tell HN: Meta is using my 2FA to call and sell me
#34https://reportfraud.ftc.gov/
Assuming this kind of thing is fraud how does it manage to even happen at a company as large as Facebook? Is it on accident through some reckless merging of databases or is it on purpose and they think they are just too big to care about laws? It seems like Facebook must know what the law is.
My guess would be institutional pushes against any checks on data usage. Somebody implements 2FA. Somebody reduces the number of redundant databases. Somebody implements a new marketing plan. Somebody audits their legal compliance, and finds nothing wrong because the database doesn't record the provenance of each entry.
Individuals at Facebook know the law, and may even have individual incentives to follow the law. Facebook as an emergent entity, as an inhuman eldritch being built upon humans as component parts, cares nothing for the law.
Re: Tell HN: Meta is using my 2FA to call and sell me
#35Please stop using phones/sms as 2FA.
Re: Tell HN: Meta is using my 2FA to call and sell me
#36Did not get a sales pitch, but added my phone number as 2FA a couple days ago and started receiving FB notifications via text msg. Despite having muted all FB notifications years ago.
Re: Tell HN: Meta is using my 2FA to call and sell me
#37If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…
> ... this is not legal advice How is it not?
Because only lawyers can give legal advice. Paralegals give paralegal advice. Non certified citizens give advice.
Re: Tell HN: Meta is using my 2FA to call and sell me
#38If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…
Using Facebook Business Tools requires you to accept an arbitration clause, which may limit your ability to pursue small claims against them:
Re: Tell HN: Meta is using my 2FA to call and sell me
#39If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…
> ... this is not legal advice How is it not?
The same way someone who is not a doctor telling you to take apple cider vinegar pills to help with your digestive issues isn't medical advice.
Re: Tell HN: Meta is using my 2FA to call and sell me
#40So meta engineers saw all those headlines about Twitter misusing 2FA phone numbers and instead of making sure it didn’t happen to them, kept them available to employees to “accidentally” use as well. Oopsie daisy! Tee hee, it was an honest mistake because ${team} didn’t know they weren’t supposed to!
Well no nice rhetoric but there are privacy reviews at Meta now to prevent these things. OP should collect evidence for why they think it was Meta and report it. Then it can be investigated properly and dealt with if true. I’m skeptical that it was Meta, given the zero evidence provided here. Unless the OP just pays for a phone number that is only used for Meta 2FA.. but that is a lot of money to have a phone number…
Nice rhetoric yourself. I am sure big mega corp has nice checks in place to try and prevent these things, but no system is perfect, nor exhaustive. That's the problem when you are a data sink as a business, your #1 incentive is to keep the data flowing in.
You would think that when you hand someone your telephone number and they promise to secure it or only use it for a specific purpose, the onus is on them to prove they didn't misuse it.