News for hackers. Stuff that matters.
Re:Facebook does not plan to notify half-billion users affec... by Isinlor on Thursday April 08, 2021 @07:20AM (#26737417)
EU will not notify them, since EU doesn't have technical tools and legal framework to do it.

If DPA finds Facebook in breach of GDPR they will be ordered to do it with additional fines for non complying.

Art. 58 GDPR Powers point 2:

> Each supervisory authority shall have all of the following corrective powers:

> (e) to order the controller to communicate a personal data breach to the data subject;

> (f) to impose a temporary or definitive limitation including a ban on processing;

> (i) to impose an administrative fine pursuant to Article 83, in addition to, or instead of measures referred to in this paragraph, depending on the circumstances of each individual case;

If FB still refuse, it will end up in the court.

If the courts agree with DPA, then FB will be ordered by the courts as well.

Courts can choose their way to force companies to comply with their orders.

Re:Facebook does not plan to notify half-billion users affec... by dathinab on Thursday April 08, 2021 @10:41AM (#26739292)
Yes it won't happen due to legal reasons, but I would love it to happen anyway.

Technically it's not a problem, it's kinda easy to filter phone numbers by country and (less reliable) by carrier. Then you either can use country local SMS gateways or potentially give it to the carrier in question and let them do it.

Again the problem is the legal basis.

Preferably a change of law should:

- make it legal for the goverment to do the contacting, including by passing it to the carrier associated with the number

- require carriers to send the massage (to avoid auto matic SMS spam detection problems). Through you give them some (small!) amount of money for their (lets be honest) small amount of additional work.

Re:Facebook does not plan to notify half-billion users affec... by thecupisblue on Thursday April 08, 2021 @07:29AM (#26737493)
Literally anyone with a fist of dollars and minimal dev knowledge access can parse those leaked numbers, send mass text via API and damage facebook even more than they would damage themselves.
Re:Facebook does not plan to notify half-billion users affec... by Isinlor on Thursday April 08, 2021 @07:37AM (#26737538)
It does not mean that EU can or wants to do it.

Actually, the processing of this data itself is probably a breach of GDPR.