Facebook has been hacked - Information of 533 million users posted online

  • 🏰 The Fediverse is up. If you know, you know.
  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
A "hack"? No, someone just found a way to easily page through every public facebook account and scrape the public data. Nothing private was taken. Calling it a hack is just Buisiness Insider trying to get clicks. When people say "script kiddy", this is what they mean. This is literal script kiddy shit, and it's hilarious that Facebook trannies are so incompetent that they allowed this to happen
Phone numbers have been leaked. I think that's the only non-scrapable thing that has been leaked with every person that actually is in those datasets. Here and there some emails, too.

Might not have been the most impressive hack (no password hashes, no emails with every entry) etc. But I am sure you can make a few bucks selling phone numbers to Indians that will try to scam you.

Another interesting point about the data is that every entry includes a phone number, but after checking some of the userIDs they don't have it public. Maybe they were public at the point of scrape, and facebook changed the default setting.
I have checked friends' accounts, and of at least one I know for a fact they never had their phone number public. However it is in the leak.
 
Depends which articles you read, Yahoo News (archive) has it at 540M so it's plausible.

Good point

Guessing skids bypassed that or something. If so that pushes it closer to breach than simple public data scraping since the security policy was violated (by FB's incompetence).
Fair enough. In that case I'm going to assume it's the same data then.

The numbers are a weird one though, and the fact I haven't found anyone I know so far.
 
Phone numbers have been leaked. I think that's the only non-scrapable thing that has been leaked with every person that actually is in those datasets. Here and there some emails, too.

Might not have been the most impressive hack (no password hashes, no emails with every entry) etc. But I am sure you can make a few bucks selling phone numbers to Indians that will try to scam you.
Oh definitely. And yeah with certain things being non-public, I'm imagining Facebook stores all the data you can possibly make public in one place (think just a table/database with rows of possibly public info for all users), and has a layer above that which decides what is served publicly. This saves on storage space, but info-sec wise isn't optimal

A possible alternative. The database with all public information should be obscured by another database, filled with NaNs for the non-public info, that has a layer in-between them which tells what information is copied over. Then the table used for serving information would be told what to serve or not. If anyone were to access the top-layer data (which is not an impossibility, as we've just seen happen), then the "hidden" information would be truly hidden, as it wouldn't be in the top-layer database. This takes up extra storage and computing power, but it's basically inexcusable that Facebook doesn't incorporate this or other measures to obscure people's personal data as much as possible

But again, this is essentially just a scrape with a minimally invasive exploit. It's fucking absurd Facebook would let this happen
 
Glad I never linked Facebook with my phone number.
 
Now the Chinese can have my mom's personal information for free instead of paying Zucc for it
 
That's what you get for making the deal with the devil.
 
I remember vividly when Facebook asked for my ID-card for verification when I tried to create a new account for usage in school (fellow university students wanted to communicate through Facebook, unfortunately). Good laughs were had by all.

In all seriousness, do you fine folk believe that people in general have wisened up to the immense hazards of uploading personal information on the Internet? To do so is sadly necessary to partake in some societal functions nowadays, like with the necessity of applying mobile bank-id to certain transactions, but otherwise one should obviously stay as far away from such things as possible. I don't believe my parents, for example, are aware of just how risky it is to leave personal information to all these various companies. They're aware of all the african princes on the net, but they aren't aware of the fact that large, established companies are incredibly susceptible towards data breaches, and that their defences against these are in many cases a joke. One has to wonder if all demographics in society are roughly equally as unknowledgeable on just how utterly useless and dangerous social media is?
 
In all seriousness, do you fine folk believe that people in general have wisened up to the immense hazards of uploading personal information on the Internet?
no
To do so is sadly necessary to partake in some societal functions nowadays, like with the necessity of applying mobile bank-id to certain transactions,
no
but otherwise one should obviously stay as far away from such things as possible.
yes
 
People who work in industries that demand them for background checks.

If you try to get a decent paying job in tech and you don't at the very least have a LinkedIn with your full name, work history and professional looking photo then you're gonna have a rough time unless you know some people. Not having social media tends to be a big red flag for most white collar jobs nowadays, especially if you're below 40.
This. I've seen work applications that require you to link at least 3 "active" social media accounts that are older than 6 months.
 
Back
Top Bottom