thenewseachday US Facebook phone lookup

Security and privacy

breach lookup

SHOW HN2021

44points
65comments
#927of 2,533 in 2021
Top 37%of 2021 by points

How HN took it

CuriousMostly questions and neutral comments

3 positive, 20 neutral or asking, 0 mixed, 13 critical, out of 36 comments about the project. Thread score -0.23.

Privacy: 0 for, 12 againstIdea: 1 for, 1 against

The thread, comment by comment

Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.

positive neutral or mixed critical about another commenter or something else the maker

What HN said

What people liked

  • Useful tool that saves people from downloading the dump.

    From 1 comment
    • Thanks David! Was going to download/parse the data myself to see if I had been impacted so appreciate you making this tool.
      shubik22 on HN
  • Country versions for Australia and NL were appreciated.

    From 2 comments
    • Really helpful - thank you!
      brendanfalk on HN
    • I made a version for NL users, but based on first name/last name (returning the last three digits of their phone number): https://jstsch.com/facebook
      jstsch on HN

Objections

  • Entering a phone number risks privacy, since it adds IP and metadata to the operator's data.

    From 3 comments
    • David may very well be a trustworthy individual, but any time you voluntarily transmit your phone number online (to Facebook, or otherwise...), you are putting your own personal…
      Hydraulix989 on HN
    • If you are in the breach, the site operator already has your name. And now they will also have your IP address. Yes I realize not all users will enter a phone number that is…
      natch on HN
    • They now know you have a Facebook account and can use that to extrapolate your username using the Account Recovery feature of Facebook. If you're part of the breach they get to…
      zelon88 on HN
  • Operator could link numbers to Facebook usernames via account recovery.

    From 1 comment
    • When a person submits their phone number to this website, the website operator can immediately search Facebook for the user name associated with the phone number. No need to save…
      1vuio0pswjnm7 on HN
  • Unknown maker trustworthiness and no way to verify.

    From 1 comment
    • So? What reason would I have to trust it? Seriously. I expect you mean well, but the "news" on that site is just an aggregator, like millions of sites with no-so-good intentions.…
      crispyambulance on HN

Requests

  • Client-side search so the full number never leaves the browser.

    From 2 comments
    • Any plans to add a Paranoid Mode that lets you search for a hash of a phone number (or email address)? I'd imagine that could be more successful on here, heh.
      mckirk on HN
    • True, hashes would be completely trivial to reverse, I didn't think that through :D And you're right, the only way to build a HN-friendly version would probably be to basically…
      mckirk on HN
  • Release the raw data as a CSV for grepping.

    From 2 comments
    • Why not just release a compressed CSV of just the numbers? I could grep it in 1 second without worrying about leaking information.
      ashkankiani on HN
    • Just release a CSV containing just the numbers as a zstd compressed file. We can search it ourselves.
      ashkankiani on HN
  • Add other countries.

    From 1 comment
    • Any plans to create it for the other countries? with partial search maybe?
      tibu on HN

Questions

  • Where to find the leaked dataset?

    From 2 comments
    • Where can I find the data set? I want to grep for my friends and family and see which data is leaked.
      alephnan on HN
    • Where would one find the data though?
      vvatermelone on HN
  • Does the tool store submitted numbers?

    From 1 comment
    • Interesting, I didn't know you could do that. When I write "I'm not saving the phone number you enter" I mean to convey the idea that I'm not doing anything else with that…
      davidjohnstone on HN

Alternatives named

  • Downloading the leaked dataset and grepping it locally.

    From 2 comments
    • Or you could just download the data yourself and grep it. No need to submit your phone number to yet another website.
      Metacelsus on HN
    • Why not just release a compressed CSV of just the numbers? I could grep it in 1 second without worrying about leaking information.
      ashkankiani on HN
  • Have I Been Pwned.

    From 1 comment
    • True, hashes would be completely trivial to reverse, I didn't think that through :D And you're right, the only way to build a HN-friendly version would probably be to basically…
      mckirk on HN

Category, keywords, summaries and labels on this page were made by AI (Thread Reader v2) and not checked by hand. Each point links to the comments it came from.

Add a badge to your READMEShown on HackerShow
[![Shown on HackerShow](https://hackershow.org/badge.svg)](https://hackershow.org/show/26694928)