Live data from Hacker News

A database of Facebook users’ phone numbers found online

techcrunch.com

71–80 of 177 posts

Re: A database of Facebook users’ phone numbers found online

#72
post #70

Will haveibeenpwned add phone numbers? That'd be neat.

That would be dangerous: it would be much easier to mine haveibeenpwned by enumerating phone numbers and see what sites have been hacked with a certain number. You would then know exactly which sites to target with which phone number, and that's already eliminating a lot of work. Get a password dataset or two in the darknet and you can now hack into many accounts.

Re: A database of Facebook users’ phone numbers found online

#73

Earlier quoted context omitted.

Yep. As far as I’m accustomed most people do whatever they can to maintain their phone numbers even across services. So much so that it’s law in Canada a provider can’t lock in your number and must let you take it with you to another provider.

Good to know it's a law. I was discussing this yesterday as being easy and frequent to port over number between providers. Do you know if providers are allowed to charge a fee for the transfer?

No, but if you were on a contract they can charge you the device cost prorated to how much time was left on your contract. And the new carrier can charge a setup or admin fee, though most carriers don’t for competitive reasons, or they call it a SIM card fee and waive it if you activate via eSIM. All the fine print in Plain English: https://crtc.gc.ca/eng/phone/mobile/num.htm

Actual ruling: https://crtc.gc.ca/eng/archive/2005/dt2005-72.htm

Further regulation covers number portability beyond the named carriers, and require all carriers to register with the CRTC, etc. https://crtc.gc.ca/eng/archive/2017/2017-11.htm In return, the CRTC helps guarantee access to the large players’ wholesale networks, though in practice the fight is still ongoing over newly installed fibre optic networks and the uncompetitive rates the incumbents charge for full speed service on their networks.

It’s not all good news - A particularly disappointing CRTC ruling followed Bell Canada’s recommendation that Canadian TV should only be provided via Internet if the household has internet from that TV provider directly. Which has effectively locked out any over the top competition such as YouTube TV from Canadian markets as they won’t be able to offer Canadian OTA channels. Sadly, I can’t find the ruling in the mess on the CRTC site, as CRTC language is obscure to say the least, but as TV is heavily regulated in Canada, the CRTC has old fashioned rules saying IPTV providers must provision a box and a line for service (Internet) in order to offer TV. This limits competition to only those willing to provide Internet in Canada to every household, or requires third-parties to negotiate with incumbents for access to such households. Existing third-party ISPs/Canadian IPTV companies go along with the above rules because nobody wants US providers entering the market, they just want to carve out cheaper Internet+TV price points with competitive Internet speeds that the incumbents don’t offer at competitive wholesale rates and benefit from a high switching cost where switching TV providers means switching ISPs knowing most people won’t do it. Until we have enough VOD content, Canadians are either pirating, using VPNs or paying their ISP for television, not having any other legal choices in this country...

While I can’t find the ruling just yet, here’s an article from 2015 highlighting Bell’s requirement that IPTV be restricted to ISP lines: https://www.cbc.ca/news/business/bell-crtc-25-basic-tv-1.375... And here’s an article where Bell refused to license their networks to VMedia’s Roku app arguing that by going over the public Internet, VMedia was running the content on a private network outside Bell’s control (Most IPTV providers find it cheaper to bundle with Bell’s VDSL) https://www.cbc.ca/news/business/bell-vmedia-iptv-internet-r... This later led to the ruling that only ISPs can provide TV...

Personally I’m more irritated by how much VOD content Bell has exclusive license to, such as their Crave+HBO, which is cheap for now, but helps Bell compete with channels offered by Amazon Prime Video. Corus, formerly owned by Shaw (another cable provider) licenses a lot of US content, and so might limit what content is available north of the border. It’s particularly hard to find VOD episodes from Turner and Viacom networks and the expanded licensing STARZ has with Hulu is completely absent north of the border. When you can’t find a show legally on any VOD network in your country including iTunes, what are you supposed to do...? CRTC rules are not making this any easier for Canadians to watch what they want, wherever they want (ISP requirement means your cell phone must also have service from your IPTV provider, it’s nuts), and on whatever device they want...

Re: A database of Facebook users’ phone numbers found online

#74

Earlier quoted context omitted.

You are likely in this database if you added your phone number to your Facebook account. There was a point where if you just typed a phone number into facebook it'd return the person who associated their account with that number.

Even worse. You are likely in this database if even a single one of your contacts uploaded their contacts to Facebook. The probability of your phone number not being uploaded to Facebook is basically 0.

The article says that each entry has an ID associated with a Facebook account. What leads you to think that there are entries in this dataset for non-users?

Re: A database of Facebook users’ phone numbers found online

#75

Earlier quoted context omitted.

How many people change their phone numbers more than once a decade? How many people change their facebook accounts ever? The age of this data may be "old" by whatever definition Facebook is using, but it is still of great interest to identity thieves and ne'er-do-wells.

Yep. As far as I’m accustomed most people do whatever they can to maintain their phone numbers even across services. So much so that it’s law in Canada a provider can’t lock in your number and must let you take it with you to another provider.

> So much so that it’s law in Canada a provider can’t lock in your number and must let you take it with you to another provider.

Same in Germany.

Re: A database of Facebook users’ phone numbers found online

#76

Kinda curious how you never find those dumps by a normal search on Google, basically you have no way to know if your data is there if you don't know where to look. I don't use Facebook but I always suspected my data is there due to friends having me in their contacts and using their apps.

You are likely in this database if you added your phone number to your Facebook account. There was a point where if you just typed a phone number into facebook it'd return the person who associated their account with that number.

Well, I never had an FB account. But I have friends who I know have contact search enabled on their phones, so they probably have my phone and maybe first name.

Re: A database of Facebook users’ phone numbers found online

#77

Facebook: "This dataset is old and appears to have information obtained before we made changes last year to remove people’s ability to find others using their phone numbers." Not that "old." Some of those "update" dates are just a few days ago.

I've had my phone number since 2002. It doesn't matter how "old" their dataset is when some of the data predates the entire company.

Re: A database of Facebook users’ phone numbers found online

#78
post #43
post #25

Heads up: when Facebook asks you to give them your phone number to "prevent you getting locked out of your account", they really just want it so they can identify your other profiles in datasets they've bought/own (e.g. WhatsApp). If you've ever given the service your number, you should consider your real identity linked to it.

That's not the only reason. They also allow advertisers to target based on specific phone numbers. It's one of the creepiest features, along with targeting based on e-mail.

What's targeting by specific phone numbers? Area code as a proxy for geo location, or something more sophisticated?

Re: A database of Facebook users’ phone numbers found online

#79

Earlier quoted context omitted.

Even worse. You are likely in this database if even a single one of your contacts uploaded their contacts to Facebook. The probability of your phone number not being uploaded to Facebook is basically 0.

The article says that each entry has an ID associated with a Facebook account. What leads you to think that there are entries in this dataset for non-users?

It's well known that Facebook collects information on non users as well, frequently called "shadow profiles.", Zuck admitted as much to Congress although he claimed not to know what shadow profile meant. [0]

Whether or not that information was part of this database isn't clear, but it also isn't something the parent comment claimed.

[0] https://slate.com/technology/2018/04/facebook-collects-data-...

Re: A database of Facebook users’ phone numbers found online

#80
post #34
post #18

Earlier quoted context omitted.

Google only really does http/https, finding mongodb requires scanning for 27019 and then pointing a client at it. I believe Shodan does this.

Is the background image on the TechCrunch article an UI for monogodb? Or is it just a FB GraphQL query browser UI?

It's MongoDB Compass, a client for Mongo.
Post reply on HN