Hacker News Reader

Comment by Someone | Hacker News Reader

I think Facebook (rightfully, IMO) would argue the existence of that data dump is no proof that data came from Facebook’s servers.

They can’t assume that, or trolls or unscrupulous competitors would start creating ‘Facebook’ data dumps left and right.

I do wonder what EU regulators will say about their viewpoint that they do not have to inform their users, though.

View on HN

If they can't measure the scope of the breach they must notify all customers that they might have been affected.

>I think Facebook (rightfully, IMO) would argue the existence of that data dump is no proof that data came from Facebook’s servers.

Mark Zuckerbergs phone number was in the dataset. It came from Facebook.

It probably came from Facebook, but that doesn’t follow from the fact that Zuckerberg’s phone number is in the dump. I don’t see how, even before this dump was made public, Facebook could have been the only entity in the world to know that phone number.

One well-known company I worked had a data breach published online and reported on. I know people on the accounts team and security team and have seen the code for how passwords are hardened. No one internally who knew those systems thought it was a breach; it was more likely people reusing credentials that were breached elsewhere.

While I get what you mean, data has the profile links too. Matching the data to real facebook profiles would be near? impossible if the source was not Facebook.

Reply on news.ycombinator.com