Live data from Hacker News

The Facebook phone numbers are now searchable in Have I Been Pwned

troyhunt.com

81–90 of 248 posts

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#81

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

It's crazy the a phone number is a secret. The problem isn't having the phone numbers; it's all the terrible systems that only work if phone numbers are secret.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#82

Found my number on there too even though I've deleted Facebook for at least 5 or 6 years now -_- Not sure when I gave them my number either, I hope it wasn't scraped from someone else's contact list... At least it makes sense why I received a bunch of spam calls over the weekend. Anyway it's probably good practice to recycle your number every few years, and not use it for 2FA to make switching numbers a lot easier. W…

> At least it makes sense why I received a bunch of spam calls over the weekend.

Really?

Every phone number is already known to anyone who wants to get it.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#83
post #36

Earlier quoted context omitted.

Couldn't it be there from someone who knows you? I was under the impression that Facebook grabbed people's contacts list on mobile apps.

So, that begs the question: If _my_ phone number is in someone _else's_ contacts, is it still _my_ phone number?

It is still PII which sometimes has specific laws and rules around its use depending on where you are.

If I give someone's social security number to a company that doesn't mean they can publish it on the front page just because the person it belongs to didn't hand it over.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#84

Every time Facebook/Gmail/Google/Amazon/LinkedIn/Tinder/whoever asks me to give them phone number "just in case" my first and only thought is "hell no". I haven't been wrong a single time.

I feel like saying "after you!". What's that Google? No phone number? Oh...

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#85
post #65
post #4

I'm completely unsurprised that my phone number is in there despite the fact that I deleted and closed my account 10 years ago.

If you’re a EU citizen contact your local data protection authority and file a complaint. It literally takes 5 minutes.

I'm not sure citizenship is required?

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#87
post #45

Note to anyone that cares: Make your data as stale as possible: you can't change your address easily, sure. But you can recycle phone numbers (once a year, minimum). Change your credit/debit cards yearly (say to your bank you 'lost' it). When ordering online, always, always, always use a fake number, it's not required. Always use a fake name where possible. Sure, you need to provide that as a 'billing' address, but i…

I do something similar when a site asks for my birthday, i used to pick a random date, but sonce its sometimes used to reset password or asks u to confirm i just use the first of january of the year i was born so i can make sure i remember what i put.

Doesn't that kinda negate the goal of using a fake birth date? After all, they don't really care whether you give your real birth date, it's enough that it is the same on that other website they get your personal information from to correlate.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#88
post #54

Getting to the point where we’re going to need phone, email, and SMS to be deny all by default. Can’t reach me unless you’re information is already in my contacts.

Possibly, but we can't do that either. What we need is some balance of both worlds. OOH, we do actually need to be contactable. OTOH, being too contactable means spam. I doubt there's a perfect balance, but either extreme come with too many problems.

Email has decent spam filtering, and I think that kind of cat-mouse system will persist. That said, there's "room" for more whitelisting.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#89

Honest question: Why would you give your phone number to FB? Related to their app perhaps (which I don't have)?

I haven't used facebook in years, but if I remember correctly it was part of your account verification in some cases.

Re: The Facebook phone numbers are now searchable in Have I Been Pwned

#90
post #57

I'm slightly surprised to find that my number has apparently not been pwned, given the huge uptick in spam calls that I've been receiving which seems to be coincident with the Facebook leak.

Not all phone numbers have finished uploading, check the blog post for details.
Post reply on HN