Hacker News Reader

Comment by davidjohnstone | Hacker News Reader

I created https://www.thenewseachday.com/facebook-phone-numbers-us and https://www.thenewseachday.com/facebook-phone-numbers-austra... to check if phone numbers are in the data. (The data is split by country and I've made them for the US and Australia so far.)

View on HN

Serious question: the initial leak misspelt "Austria" as "Austriaia", and chaos has ensued... the initial forum leak along with all ufile references and telegram groups I've been able to find all seem to have this "bug".

So I'm very interested about any insight you may have.

I don't have much insight on this. I accidentally downloaded that one first when I meant to download the Australian one, but quickly realised my mistake because the CSV file inside the archive was correctly spelt. Then I got the actual Australian one.

Would you be able to provide info on how you found the aussie one. So far i've only seen the bugged versions.

Some careful googling somehow turned up the following pieces of "never believe what you read on the internet" 'insight':

https://boards.4channel.org/g/thread/80982465#p80984158

> Anonymous 04/04/21(Sun)19:14:02 No.80984158▶>>80985592

> >>80984122

> That's because it's the austrian dump file. There's an update with the australian dump in the original raidforums thread, it's just missing from the pastebin index

https://boards.4channel.org/g/thread/80973470#p80985270

> Anonymous 04/04/21(Sun)21:15:35 No.80985270▶

> >>80985097

> they were mixed as one file. leaker was australian

I obviously have no citations of my own for this anecdata.

Regarding the first post, I went through approximately ~80 pages of "thanks", and one pair of mildly sore eyes later, was unable to find any "update". A torrent *was* posted somewhere around page 80 but this had the wrongly-named file in it. I have also seen a few TG groups that have renamed the file, but it's still the wrong one (like the GP described).

I can confirm that Austraiaia has an eclectic mix of Australia and Austria though - and also that grepping for 'Australia.*Austria\|Austria.*Australia' returns 170 results, grepping for 'Austria' returns 446375 results, and grepping for 'Australia' returns 408 results.

FWIW I'm still looking myself. If you see this, feel free to email me (you don't have an email in your profile), and I can let you know if I turn anything up.

FWIW: I don't think I found the canonical source material - I honestly have no idea where to look - but I did find something. Email is in profile...

Mine is in the Australia set, is there any meaningful next step to see what was leaked or does it not really matter?

I don't know what there is to do other than to be aware that the combination of your name and number (and maybe some other details) are not private, so there's no reason to trust anyone just because they know those things.

As far as seeing what was leaked, you could find the data yourself (but I'm uncomfortable giving instruction on how to get it). It would be nice if it was possible to extend the tool to be able to send the information for a number to the number (because that's the only way I can think of that demonstrates ownership of the data) but that can't be done for free and it therefore seems too complicated to set up.

I grew up with phone books so I suppose that's not the worst thing in the world. I have received more scam calls lately but so has everyone I know.

Eagerly awaiting the news that Facebook takes security seriously.

Reply on news.ycombinator.com