Hacker News Reader

Snapchat devs explained how to create the database on Dez 27th:

  Theoretically, if someone were able to upload a huge set 
  of phone numbers, like every number in an area code, or 
  every possible number in the U.S., they could create a 
  database of the results and match usernames to phone 
  numbers that way.

http://blog.snapchat.com/post/71353347590/finding-friends-wi...

omg

Um..yeah..I just noticed that. That's REALLY embarrassing for them.

I submitted that blog post here because it was so irritating. I wasn't daring anyone to do anything and had nothing to do with snapchatdb.

Here is a video of guy hacking SnapChat and finding out Mark Zuckberg's logging info like phone#, email. The video was posted on Dec 26th. How come they did not fix this..

https://www.youtube.com/watch?v=JEWugKX98P0

1.805.250.1351

What purpose does posting that serve? I think we've already pretty clearly established the flaw is real. What does intruding on the personal life of an unrelated person have to do with it?

Do we really need rules saying "don't post other people's non-public personal details" like Reddit? Someone needs to tell you that?

zucks cell#? probably want to delete that.

rung for a minute then it ended on his side (no voicemail set up).

You guys are huge cock suckers... You just upvoted a database leaking millions of people's phone number but when somebody posts Zuck's phone number... Oh no! You should delete that.

He's not a king guys.

HN is not a monolith. You are implying hypocrisy where none necessarily exists.

The leaked database: doesn't have full phone numbers and I don't think it should have been posted either -- I didn't upvote it.

Nobody should have their personal contact details posted against their wishes. I do not particularly care about Mark Zuckerberg.

The database is censored (XX instead of the last two numbers of each number)

like other people are saying -- HN is news by committee. just try to post a joke on here one day & see how many rapid downvotes it gets if you ever need proof of how lame & uptight the HN crowd can be once they hit that 500 rep.

i posted a joke on a comment of someone going "This. A million times this." the other day cuz that is the most melodramatic, overused, annoying, lame textual meme... the joke was pretty innocuous & immediately got like 5 downvotes.

I don't mean to hate too hard cuz it is what it is, i dont care about my karma, & obv its good enough that i still read articles here but posters being annoying/hypocritical/oversensitive/humourless/feeling that they are the protectors of society... very common on HN. I think it is some facet of the nature of people thinking they are real sophisticated by reading HN for some odd reason (basing this on all the wannabe devs I know on social sites who make it a point to mention it constantly in posts like "my fav sites to procrastinate on"), whereas there are lots of higher-level programming communities out there who seem to have less of this self-seriousness.

that said, occasionally there is that nice moment of a few reasonable people chatting each other & introducing to tech they may have otherwise overlooked. I'm heavy into Clojure & the other day a Lisper on here pointed me to freenode to get community help rather than SO, for example. It's all percentages, I guess :-/

feeling that they are the protectors of society...

Not society, just the SNR (https://en.wikipedia.org/wiki/Signal-to-noise_ratio).

obvious logic, link to wiki for explanation of common term -- u my friend are due for about 5 upvotes in the HN chain of circular validation.

i understand it as a way for SNR sure, but mostly its just a way to fade the text of people you disagree with. it doesn't solve much for people who can skim, & it usually just makes me more curious about what got downvoted (some of the comments are very insightful but just pissed off those with normative opinion)

im just not into kool-aid drinking & the weird PG (harhar no pun intended) vibe of HN while downvoting & having this weird karma system smacks of lame culty passive aggression, which incidentally is much more offensive to me than actual aggression

also i wasn't gonna say anything but can't help from chuckling about it -- i am an audio DSP engineer so by nature I've probably done more work/research concerning SNR than 99% of people on the planet ever will lol.

i didnt want to come of as indignant tho, its just a funny coincidence. you never quite know who you are condescending to on here

I've worked with audio DSP, too. I think the comparison to audio SNR is appropriate. The wiki link was as much for other readers as for you or me.

And while we're here, "cock sucker" is not an insult, and my fellow gay hackers and I would prefer if you didn't use it as one.

And we wonder why no women are in tech...

why? can't women in your mind take a joke? The women I know are perfectly capable of hearing phrases like that, they aren't some fragile gender that need to be protected.

thanks for speaking for your women (best?) friends for us. brave

Do you know any women? Seriously, most of them are OK when calling assholes (like many of HN users) "cock suckers".

You guys need to go out more, since women are more than OK when people swear, you're not talking to toddlers here.

Now, this is a comment, not a fucking essay or interview (haha PG fucked up really bad huh? So bad he's gonna have a women only conference).

Now I sound like a troll, so I'll shut up, but seriously, women are OK with swearing (that includes all George Carlin's 7 words).

If it ever was his number, it's been changed by now.

> How come they did not fix this..

How would you fix it? The app needs to know if your phone contacts are on snapchat, and if they are, what their usernames are. In other words, the API needs to exist.

Don't allow bulk matching for one. Or require the same secret key with the phone number match that is required for other API actions.

It had never occurred to me that cell phone operators would use area codes. In my small home country, there is basically one 'area code' per cell phone operator. First lesson learnt in 2014! :)

In my experience in the US, the carriers/operators have an area code or two, but it's in the local area code rather than regional area code.

10-digit example: XXX - YYY - zzzz

The leaked data area codes are represented by the regional/XXX block and the carriers are in the local/YYY block in the 10-digit example.

All phone numbers in the North American Numbering Plan (NANP) are allocated first as area codes by region and then by prefix for smaller locations. Some states, like Wyoming, have a single area code (307) while metro areas, like Houston, can have multiple area codes (713, 281, 832, 346) all covering the same physical place. This is a holdover of calling party pays so that a caller will know where a given phone number "lives." This distinction has become less visible with the advent of local number portability and nationwide mobile roaming.

(The NANP covers Canada, the Northern Mariana Islands, the United States, and a large list of island nations in the North American area.)

That doesn’t just apply to small countries. I was also unaware that mobile phone numbers could have area codes and I’m from Germany (where each mobile operator has one three digit code – but even that is becoming meaningless with legally required number portability from operator to operator).

Less visible to people, though the way gsm works means that every call and text you receive entails a lookup to your number's original provider. Prefix allocations to mobile networks are static and they are required to return a new route if you've ported. Which means if a company leaves the market, someone has to take on their allocations or even non-current customers will lose connectivity. Or at least that was true last time a checked, 4 or so years ago. Kind of crazy.

In many countries the caller pays for the cellular airtime. You have to know how much your call is going to cost before you dial it, so a new area code is needed. In the US, the cell phone user pays for the airtime even for calls they receive, so a new area code was never needed.

The only Canadian area codes are for Manitoba and the Far North. Not so bad :)

On the grand scale yes. For those of us in Manitoba (or presumably, the far north), there's not too much solace in that fact.

I think you meant

  cat schat.csv | cut -c1-4 | uniq | wc -l

Oops. That's actually what I ran but I typed the wrong command I to the text box.

It's also worth noting that some states have partial coverage. For example, all the area codes in Massachusetts are missing from the list, with the exception of "857" and "617" (both Boston area codes) but the latter is incorrectly labeled as "Southern Michigan".

Bummer that Hawaii is not in the DB. For once I was actually hoping to see my data leaked somewhere aside from the Adobe incident. Dangit.