Maybe they could save time by notifying the people who were -not- affected.
Facebook does not plan to notify half-billion users affected by data leak
81–90 of 101 posts
Re: Facebook does not plan to notify half-billion users affected by data leak
#82So after longing it out, today I had a look on haveibeenpwned, and it seems I am one of those whose data has leaked. After re-reading all of the events of this breach, it seems that the exploit was fixed in Aug 2019 (as claimed by Facebook). I had deleted my account some 2 years prior to that. Either these attackers have had access for over 2 years, or Facebook has not deleted my data, and likely everyone else's data…
Assuming that the data is just your phone number and name/email, is it not possible that this is just from friends who have allowed Facebook and/or Messenger to share contact info? Your original account data almost certainly would have been deleted/purged due to various regulatory requirements, but that doesn't necessarily stop your contact info from being shared again and making its way back into the system.
But then again, Occam's razor would suggest that FB never deleted the data in the first place.
By the way, data is not "making its way back" like some sort of salmon trying to get back to the source, it is forcefully harvested by FB.
Re: Facebook does not plan to notify half-billion users affected by data leak
#83Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?
[deleted]
Re: Facebook does not plan to notify half-billion users affected by data leak
#84Aren't they required to disclose this, at least to California residents, under California's data breach disclosure laws? Or was it not the type of PII covered under the law?
All 50 states have some form of data breach notification law, not just California: https://www.ncsl.org/research/telecommunications-and-informa...
Re: Facebook does not plan to notify half-billion users affected by data leak
#85Earlier quoted context omitted.
Assuming that the data is just your phone number and name/email, is it not possible that this is just from friends who have allowed Facebook and/or Messenger to share contact info? Your original account data almost certainly would have been deleted/purged due to various regulatory requirements, but that doesn't necessarily stop your contact info from being shared again and making its way back into the system.
But then again, Occam's razor would suggest that FB never deleted the data in the first place. By the way, data is not "making its way back" like some sort of salmon trying to get back to the source, it is forcefully harvested by FB.
Presenting a screen/dialog to the user at first login asking for permission to access contact data does not sound like "forcefully harvested". Users rarely understand the consequences of their decision, which is why I would love to see iOS and Android eliminate the option of wholesale contact access, but use of Facebook apps is not predicated upon receiving your contact data.
Re: Facebook does not plan to notify half-billion users affected by data leak
#86Earlier quoted context omitted.
But then again, Occam's razor would suggest that FB never deleted the data in the first place. By the way, data is not "making its way back" like some sort of salmon trying to get back to the source, it is forcefully harvested by FB.
Presenting a screen/dialog to the user at first login asking for permission to access contact data does not sound like "forcefully harvested". Users rarely understand the consequences of their decision, which is why I would love to see iOS and Android eliminate the option of wholesale contact access, but use of Facebook apps is not predicated upon receiving your contact data.
It does if your average user is so uneducated they freeze up and whack the next button until the screen with all those words on it goes away.
Re: Facebook does not plan to notify half-billion users affected by data leak
#87Earlier quoted context omitted.
But then again, Occam's razor would suggest that FB never deleted the data in the first place. By the way, data is not "making its way back" like some sort of salmon trying to get back to the source, it is forcefully harvested by FB.
Presenting a screen/dialog to the user at first login asking for permission to access contact data does not sound like "forcefully harvested". Users rarely understand the consequences of their decision, which is why I would love to see iOS and Android eliminate the option of wholesale contact access, but use of Facebook apps is not predicated upon receiving your contact data.
Maybe that adjective is not quite right, "rapaciously" perhaps?
Re: Facebook does not plan to notify half-billion users affected by data leak
#88Earlier quoted context omitted.
Presenting a screen/dialog to the user at first login asking for permission to access contact data does not sound like "forcefully harvested". Users rarely understand the consequences of their decision, which is why I would love to see iOS and Android eliminate the option of wholesale contact access, but use of Facebook apps is not predicated upon receiving your contact data.
It does if your average user is so uneducated they freeze up and whack the next button until the screen with all those words on it goes away.
If someone signs a bad contract because they refuse to read and understand it, and just signs it anyways, they're still generally bound by the terms of the contract. iOS and Android both have pretty clear descriptions in their permissions dialog of what the app is asking for.
Re: Facebook does not plan to notify half-billion users affected by data leak
#89So after longing it out, today I had a look on haveibeenpwned, and it seems I am one of those whose data has leaked. After re-reading all of the events of this breach, it seems that the exploit was fixed in Aug 2019 (as claimed by Facebook). I had deleted my account some 2 years prior to that. Either these attackers have had access for over 2 years, or Facebook has not deleted my data, and likely everyone else's data…
My phone number is in haveibeenpowned. Maybe it's from another leak? I deleted my Facebook account years ago and it doesn't have my new number. WhatsApp does.
I only recently deleted my WhatsApp, so could very well be. Though, according to HIBP it's from the same leak that has recently become known, but who knows.
Re: Facebook does not plan to notify half-billion users affected by data leak
#90Earlier quoted context omitted.
My phone number is in haveibeenpowned. Maybe it's from another leak? I deleted my Facebook account years ago and it doesn't have my new number. WhatsApp does.
I only recently deleted my WhatsApp, so could very well be. Though, according to HIBP it's from the same leak that has recently become known, but who knows.
Yeah, same here, it's the Facebook leak. So why does it have my number? Maybe I activated it for something, changed the number, and forgot. Its not impossible with me.