Hacker News Reader

Comment by Macha | Hacker News Reader

Did you ever set up SMS 2fa? Did any of your contacts use the Facebook app to sync their contacts (at least at one point a default behaviour)? Then Facebook has your number. I remember when I still used it being promoted by a bar at the top of the web UI "Is this your number?" With my actual number suggesting I add it to my profile, so I know they have mine.

View on HN

Despite using 2FA and listing my number on my profile - albeit restricted to "just me", I don't appear in the data. It's not as simple as they just having a record of it somewhere.

I'm in the same situation and very surprised. I've sat here wondering if I'm entering my numbers wrong, or if I'm really not in it. I've read the blog post and I'm entering the 1 in front of my 10 digits, because I'm in the USA.

My wife's number isn't in there, either. I'm just really surprised, because I checked facebook the other day and it said I was searchable by email and phone number.

I even searched my email address, and a lot of other breaches show, but not Facebook.

I guess I got lucky?

US numbers are not uploaded yet

Ah, that makes sense then. I assumed they were because the instructions showed the US style specifically.

Thanks!

Likewise, it seems there's more nuance to this leak. I checked the data out and a large number of my contacts have correct numbers in it. At the same time, numerous people don't appear in it, even if they do have a phone number on their profile.

I've been intentionally breaking my social graph since at least 2012.

Looks like its worked here.

When I make a Facebook account, usually for my living complex's community or a bunch of Gen-Xer's doing a burning man thing, I use a new email or new phone number for signup and one time passwords.

I don't let it get access to my contacts, assuming I inadvertently installed the Facebook app on a phone.

Doesn't look like they meaningfully go deeper than that.

I find the social graph to be very fungible, so if I really ever want to recreate it I can just add my phone number or give any app access to my contacts. This knowledge also lets me not be married to any of these services.

I'm very content downloading the account data and then deleting the account.

I have had the exact same experience. Interestingly, it took them a few tries to get to my actual number and they still carried on throwing other random phone numbers I did not recognize.

Reply on news.ycombinator.com