Re:Have I Been Facebooked?
by szundi on Tuesday April 06, 2021 @02:09AM
(#26708483)
How does one know a site like this is not just an other data harvesting site?
[ Parent
| on HN ]
I put up another site for that: https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com
Just enter your email and the site will tell you whether your email has been harvested by https://haveibeenfacebooked.com/
Re:Have I Been Facebooked?
by emayljames on Tuesday April 06, 2021 @02:46AM
(#26708778)
Try my site, that checks this guys: https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookedd...
That's an easy one: yes :)
There is sourcecode for both front and backend and the creators linked their names. So check the sourcecode and decide whether you trust the people involved that this is actually the code that is running the site
How do you know that the source code they published is the same code that the site uses?
Re:Have I Been Facebooked?
by bidirectional on Tuesday April 06, 2021 @04:36AM
(#26709514)
You don't. Their comment literally says that. You can choose whether or not you trust the authors.
https://www.troyhunt.com/the-ethics-of-running-a-data-breach...
Other than Troy Hunt being well known and building a reputation on being a white hat security guy.
In the world of data the only thing you can trust in absolute terms is encryption. Anything else involving people involves shades of grey.
Re:Have I Been Facebooked?
by Mordisquitos on Tuesday April 06, 2021 @04:16AM
(#26709376)
Even if they were running it with nefarious purposes, it's barely even data. All they could realistically "harvest" would be knowing that the user behind a certain IP address was curious as to whether this or that number was a telephone number in the leak, and there's nothing to guarantee that the number belongs or ever belonged to the person looking it up, or even whether it is an actual telephone number or not.
I could see the "big-data" value of that information if they managed to get a significant proportion of the population to check this website, but even that would be barely worth the effort.
Re:Have I Been Facebooked?
by wodenokoto on Tuesday April 06, 2021 @04:20AM
(#26709407)
I feel like I was doing the same mental gymnastics when I gave fb my phone number in order to log into messenger on my phone, and look where it got us.
what mental gymnastics? Giving your phone number to facebook associates it with your account, who you know, your browsing habits etc. This does nothing of the sort.
Re:Have I Been Facebooked?
by Mordisquitos on Tuesday April 06, 2021 @04:33AM
(#26709490)
How did Facebook know that it was a valid phone number, how did they associate it with your identity, and how did they know that number was really yours?
Re:Have I Been Facebooked?
by wodenokoto on Tuesday April 06, 2021 @07:19AM
(#26710509)
It’s probably been a decade since I gave them my phone number, so I don’t remember the details. I believe they required it for the messenger app and did a 1 time SMS code for first time log in to messenger.
When they identified that my data was part of the link, they included an obfuscated first and last name - first letter plus length of each. If they were harvesting data, they certainly appear to already possess it.
They are in the EU, which means that you are protected by the GDPR. And the websites clearly states that no data is being harvested. I believe that two italian teenagers would not want to get sued to bankruptcy :)