News for hackers. Stuff that matters.
Re:Have I Been Facebooked? by davidcbc on Monday April 05, 2021 @07:12PM (#26705867)
I'm looking forward to the sequel, "Have I Been 'Have I Been Facebooked'ed" when it turns out this is just a data harvesting operation.

If you don't want your phone number leaked don't hand it over to a random website that pinky swears it won't keep it. It's maybe not a scam, but still...

Re:Have I Been Facebooked? by neogodless on Monday April 05, 2021 @07:30PM (#26706034)
My phone number is a 10-digit number, the first 3 of which are an area code. It gets spam calls and texts (though that miraculously decreased on November 4th...) as it is. Now, combined with browser fingerprinting, perhaps this site can tie my specific 10-digit number to some other aspects of who I am, but I'll leave that part as an exercise for a willing volunteer. I'm not terribly concerned about entering my phone number, disconnected from other identifying information, into a random web site.

Convince me why I should be!

Re:Have I Been Facebooked? by omgJustTest on Monday April 05, 2021 @07:44PM (#26706146)
TFA? If there is ever an exploit on phone codes, it will be massive. I removed my phone number as a TFA from most services within the last few days.
Re:Have I Been Facebooked? by deeblering4 on Monday April 05, 2021 @09:40PM (#26707043)
2 factor sms authentication
Re:Have I Been Facebooked? by peteretep on Monday April 05, 2021 @10:38PM (#26707399)
1 factor of 2 factor auth is completely useless without any identity to tie it to
Re:Have I Been Facebooked? by deeblering4 on Tuesday April 06, 2021 @07:48AM (#26710714)
we’re talking about the facebook data leak that associates a number to an identity.
Re:Have I Been Facebooked? by peteretep on Tuesday April 06, 2021 @08:37AM (#26711030)
We’re talking about a website that allows you to enter a number to see if it’s in a leak.

People are saying you shouldn’t put a number in there because if it’s not already in there, you are leaking some kind of privileged information.

That’s not true.

Re:Have I Been Facebooked? by deeblering4 on Tuesday April 06, 2021 @04:18PM (#26716859)
If that's the case then please go ahead and post a comment containing your full phone number
Re:Have I Been Facebooked? by peteretep on Tuesday April 06, 2021 @07:27PM (#26718629)
If I posted it as a comment, it would be tied to my identity.
Re:Have I Been Facebooked? by welder on Friday April 09, 2021 @01:01AM (#26746897)
It's super easy to find your identity from just your IP. I can't remember the service that does it... maybe drift.com?

So putting your phone into a website also ties it to your identity.

Re:Have I Been Facebooked? by imgabe on Monday April 05, 2021 @11:42PM (#26707747)
Knowing the phone number doesn't mean you can get the texts that are sent to it.
Re:Have I Been Facebooked? by welder on Tuesday April 06, 2021 @12:01AM (#26707831)
Re:Have I Been Facebooked? by GormHouj on Monday April 05, 2021 @09:44PM (#26707068)
The commenter is leery of entering their phone number into the article link.
Re:Have I Been Facebooked? by skinnymuch on Monday April 05, 2021 @08:03PM (#26706297)
Any one can enter any phone number. What does leaking a phone number without any ties except an IP mean?
Re:Have I Been Facebooked? by dylan604 on Monday April 05, 2021 @08:49PM (#26706689)
You look up my number, and then I'll look up your number. Now, we're anonymized as the tracking codes that could be employed will associate my number with you, and vice versa.

no problemo

Re:Have I Been Facebooked? by Syonyk on Monday April 05, 2021 @07:31PM (#26706041)
> If you don't want your phone number leaked don't hand it over to a random website that pinky swears it won't keep it.

What's the worst they can do with it? Call me all hours of the day trying to sell me an extended factory warranty for my free Medicare brace that, by the way, has a Security Number that is under arrest by the Security Administration because it made fraudulent IRS payments with iTunes gift cards to lower my student loan payments because I didn't listen when Microsoft called about my Windows Virus?

Oh, wait, sorry, it hung up on me after dialing because their call center was full. Even if they answer, they just won't play anymore - as soon as they think you might be messing with them (or just aren't going to buy whatever they're selling), they hang up. Twenty years ago, you could have an hour long conversation with the credit card people if you were bored...

Even with spam blockers in place, that sort of garbage is the bulk of the calls my phones get. At least for my personal phone, I live in a different area code from where the phone is (insert XKCD about your area code being where you lived in 2002), so anything that's my phone's area code and not in my contact list is clearly unwelcome.

Phone numbers just aren't a large space to randomly dial looking for valid numbers if you're on a scum VOIP gateway, and clearly the scammers and spammers already have lists of what might be worth calling.

Re:Have I Been Facebooked? by watersb on Monday April 05, 2021 @09:05PM (#26706824)
"The worst that can happen"...

In a world where

your bank thinks that SMS is good enough for 2FA...

phone number plus other info is good enough for credit reporting agencies to send out your complete file...

Variations of this theme.

Also, this dump is once more confirmation that Facebook owns lots of data about its users, and doesn't care to protect that data, or to give its users the ability to control personal information. Why should they care? They suffer no consequences for this lack.

Re:Have I Been Facebooked? by neogodless on Monday April 05, 2021 @10:23PM (#26707310)
Yup - there's another thread related to this breach. A comment led me to do a google search on my phone number.

I found FastPeopleSearch.com, which not only had my current phone number and physical address, but my previous cell phone number, land lines (from back when those were a thing), my Vonage phone number, and previous addresses, all dating about 20 years. If you know my name, you can get a lot more... thanks to these aggregators of public records.

You can attempt to have yourself removed but there are a lot of these types of sites.

Of course, if you take "a" phone number, and use the google search technique, you'll find one of those sites like FastPeopleSearch and learn a lot more about who the phone number belongs to. But presumably anyone who's trying to make use of all this information could do all that without the Facebook breach, if they automate the process.

Of course, the Facebook breach ties a bunch of information to a phone number in a, perhaps, tidy package?

Re:Have I Been Facebooked? by Syonyk on Monday April 05, 2021 @09:08PM (#26706843)
I've had my phone number for... oh, 18-19 years. I assume it's utterly trivial for anyone who cares to find it, if they care to. I know it is, because I've had the occasional random call from people who wanted to give me a call for one reason or another.

And, certainly, Facebook suffers no consequences. A while back, some people noticed that if a company was in the news for a catastrophic data breech, their stock tended to climb immediately afterwards. No such thing as bad press coverage, at least in the age of the trading algorithms!

Re:Have I Been Facebooked? by renewiltord on Monday April 05, 2021 @11:52PM (#26707796)
My phone number is my username. It’s not a password. It’s public.
Re:Have I Been Facebooked? by baby on Tuesday April 06, 2021 @02:53AM (#26708839)
I already get daily spam and robocalls on my phone number anyway...
Re:Have I Been Facebooked? by tonymet on Monday April 05, 2021 @08:54PM (#26706730)
exactly! They should be testing a hash of your phone number, not the number itself. Amateur hour here.
Re:Have I Been Facebooked? by davidjohnstone on Monday April 05, 2021 @10:09PM (#26707220)
I don't think that helps, because the address space of numbers is too small so anything is reversible. My solution to this was to generate 99 extra random numbers that start with the same digits as the real one and send them all to the server. The front-end then shows just the result the user cares about but the back-end doesn't know which is which.

https://www.thenewseachday.com/private-facebook-phone-number...

Re:Have I Been Facebooked? by sneak on Monday April 05, 2021 @10:37PM (#26707391)
There is a movie from the 80s called Wargames that you might enjoy.