Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Meta is using my 2FA to call and sell me

news.ycombinator.com

Post reply on HN
Print view View original

51–60 of 84 posts

Re: Tell HN: Meta is using my 2FA to call and sell me

#51

Post by toast0 »

kritiko wrote: post #38
cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

Using Facebook Business Tools requires you to accept an arbitration clause, which may limit your ability to pursue small claims against them: https://www.facebook.com/legal/commercial_terms/update

Sure, but you can pursue the claim in arbitration, and they'll pay the fees as long as you don't claim too much.

> Each party will be responsible for paying any AAA filing, administrative and arbitrator fees in accordance with AAA Rules, except that we will pay for your filing, administrative, and arbitrator fees if your Commercial Claim for damages does not exceed $75,000 and is non-frivolous (as measured by the standards set forth in Federal Rule of Civil Procedure 11(b))

Re: Tell HN: Meta is using my 2FA to call and sell me

#52

Post by xvector »

celestialcheese wrote: post #43

Facebook is the absolute worst with this, Google second. We spend >$10m on ads annually on FB, yet haven't had a dedicated account rep since 2019. Instead, they farm out "account marketing specialists" who pitch you on giving up more control to FB algo and generally have significantly less insight and experience with FB ads than the people they are calling. One week last summer, I received 8 calls in a single day fro…

It probably wasn't Meta but some scammers.

Re: Tell HN: Meta is using my 2FA to call and sell me

#53

Post by wrs »

cmatthias wrote: post #29
gdsdfe wrote: post #28

Earlier quoted context omitted.

Because you can sue a lawyer for misrepresentation but you can't sue someone for giving their advice

Yep. Since I'm not a lawyer it probably wasn't necessary to include the "not legal advice" bit, but I'm just trying to be clear.

It’s illegal for a non-lawyer to claim to be giving legal advice, so it’s traditional to be clear that you aren’t doing that. (Of course, I’m not claiming to give you legal advice on this.)

Re: Tell HN: Meta is using my 2FA to call and sell me

#55

Post by Dave_TRS »

rsync wrote: post #54

Don't use your personal mobile phone for 2FA. Use a "2FA Mule" that is only for that purpose: https://kozubik.com/items/2famule/ I have the ringers silenced on mine so I wouldn't know if they got any spam calls ... and I assume they do ...

Google Voice is free and will forward SMS's to email, which can then be set up with rules to various other emails. Most banks accept google voice numbers

Twilio numbers are a dollar a month and will also forward to email or you can log into the twilio web interface to pick up sms codes if needed. Rejected by more places the demand 2FA

Re: Tell HN: Meta is using my 2FA to call and sell me

#56

Post by nicce »

Nextgrid wrote: post #49
uncletammy wrote: post #41

Earlier quoted context omitted.

> I have a feeling that Meta has some kind of internal system for slurping up everyone's contact info Yes. It's called Facebook Messenger. All your friends have it installed on their phone and it has access to all the data in their phone's contact list, including anyone who might have saved it in the email field of their contact entry for you. Right? Isn't this the oldest criticism of Facebook Messenger?

Or WhatsApp for that matter, which has access to a lot more people's contacts, even those who might otherwise deny contacts permission to Facebook Messenger.

And people call me still crazy because I haven't given WhatsApp access to my contact list...

While I understant that it helps only a little since all my friends have given.

Re: Tell HN: Meta is using my 2FA to call and sell me

#58

Post by Macha »

gamegoblin wrote: post #7

I have a feeling that Meta has some kind of internal system for slurping up everyone's contact info, and that some kind of bugs/criteria occasionally cross some streams. Meta recruiting somehow got a hold of my name@amazon.com employer email -- which I have never posted publicly -- and started sending me recruitment emails to my work email. This struck me as incredibly unprofessional, though I understand it's almost…

Inversely, Amazon has also emailed me at my company address

Re: Tell HN: Meta is using my 2FA to call and sell me

#59

Post by cmatthias »

kritiko wrote: post #38
cmatthias wrote: post #11

If you are in the USA, then what you received are unsolicited marketing phone calls under the TCPA, a law which allows you to personally collect up to $1500 per violation of the law or associated regulations, per phone call that you received. If your personal phone is on the federal "Do Not Call" registry, it's possible that there are at least two violations of the law per phone call you received. I would suggest sen…

Using Facebook Business Tools requires you to accept an arbitration clause, which may limit your ability to pursue small claims against them: https://www.facebook.com/legal/commercial_terms/update

This definitely makes the situation quite a bit more sticky, however hope is not completely lost IMHO. For example, there have been several cases recently dealing with binding arbitration clauses and the TCPA, and in several of them, the binding arbitration clause was found to be unenforceable [1].

If it were me, I'd still send the demand letter and see how it plays out.

[1] https://www.dnc.com/news/compelled-arbitration-tcpa-defense-...

Re: Tell HN: Meta is using my 2FA to call and sell me

#60

Post by Firmwarrior »

nicce wrote: post #56
Nextgrid wrote: post #49

Earlier quoted context omitted.

Or WhatsApp for that matter, which has access to a lot more people's contacts, even those who might otherwise deny contacts permission to Facebook Messenger.

And people call me still crazy because I haven't given WhatsApp access to my contact list... While I understant that it helps only a little since all my friends have given.

I learned my lesson about that the hard way back in the early 00s

I logged into LinkedIn, and it seemed like it was loading, but then the login failed and it prompted me to log in again. I tried and it didn't work, then looked more carefully.. and the second login prompt was actually a "Give us your e-mail login so we can scrape all your contacts and spam them" prompt.

Hoo boy, glad I was using separate passwords for everything

Post reply on HN