8 ms·
Facebook Doubles Down on Misusing Your Phone Number
- bitxbitxbitcoin 8y agoSo the only way to keep your number from being searchable on FB is by not having 2fa?
- Ozzie_osman 8y agoWhich do you prefer: privacy or security? Because you can't get both. EDIT: you can do 2fa without SMS: https://thenextweb.com/facebook/2019/03/04/psa-dont-give-out-your-phone-number-for-facebook-2fa-use-an-app-instead/ https://thenextweb.com/facebook/2019/03/04/psa-dont-give-out...
- koolba 8y agoSure you can. Just go back in time and have the foresight never to sign up for Facebook.
- Pharmakon 8y agoIt’s weird to have spent almost a decade with people on and offline scoffing at everyone who never signed up for FaceBook. Now it’s a case for time travel. I’d argue that with only a modicum or foresight it was possible to see that FB was to be avoided, but the hard part is withstanding the peer pressure. I’m glad that I did.
- sverige 8y agoI am too. The unstated sales job that has been so effective for hooking and keeping so many is fear-based, specifically the fear of missing out. I don't think I've missed anything at all important by never having had Facebook. But every time the discussion is had, a high percentage who say they wish they didn't have it also hang onto it with "it's how I stay in touch with people." My counter argument is, Delete it and find out who really wants to stay in touch with you.
- untog 8y agoOr use non-SMS 2FA, which is a good idea anyway (not that I'm defending FB for a second here)
- markovbot 8y agoOr by not having a facebook, obviously. If you have one, you're part of the problem :)
- on_and_off 8y agonot having an account won't prevent fb from creating one for you and storing your phone number when one of your contacts uploads their address book
- mirimir 8y agoTrue :( Here's an idea. Use a service that generates phone numbers that redirect to your actual phone number. Maybe Twilio. Just as some do with email addresses. Create a new number for each use. For each family member and friend. For each site registration. For each whatever. Have an app that searches periodically online for all of those numbers. If any of them show up linked to Facebook, or whatever else concerns you, nuke them. And maybe ping whoever/whatever got that number with an admonition, saying that they're no longer a trusted contact. That would be extreme, I know. And you'd need to cut some slack for close family, your employer, etc. But would it be doable?
- sanxiyn 8y agoYou can use OTP 2FA with Facebook.
- locust101 8y agoIs there any other authentication method like google authenticator for 2fa to use facebook?
- EquallyJust 8y agohttps://www.facebook.com/help/www/358336074294704 https://www.facebook.com/help/www/358336074294704
- qrbLPHiKpiux 8y agoI can’t see this site because I use Pihole and this: https://github.com/jmdugan/blocklists/blob/master/corporations/facebook/all https://github.com/jmdugan/blocklists/blob/master/corporatio...
- EquallyJust 8y agoIn that case, a help article on FB isn't going to be very helpful for you anyways
- mikestew 8y agoDon’t get him wound up, or he’ll start in on how he doesn’t even own a TV, err, I mean have a FB account.
- pxeboot 8y agoFacebook supports U2F security keys for 2 factor auth [1]. [1] https://m.facebook.com/notes/facebook-security/security-key-for-safer-logins-with-a-touch/10154125089265766/ https://m.facebook.com/notes/facebook-security/security-key-...
- BFLpL0QNek 8y agoThe UX I'd say is following dark patterns for this. You cannot enable U2F without first enabling SMS Auth and or OTP Auth. Once u2f enabled if you delete both SMS Auth and OTP auth it disables 2 factor auth and takes you to a welcome screen to get started enabling it again with the only 2 options SMS / OTP, once enabling one of them you can add U2F again. Also I have "security.webauth.u2f" enabled in Firefox but Facebook is the only U2F service I use that doesn't work in Firefox so it falls back to the SMS / OTP methods on login.
- fuckFacebook 8y agoNo surprises.
- mnm1 8y agoIs it time for regulation yet? How many abuses are we going to let this motherfucking company get away with? Wasn't rigging the 2016 election enough?
- philliphaydon 8y agoPeople are still beating the rigged election dead horse?
- kuzehanka 8y agoYou rather it was swept under the rug and forgotten about?
- imustbeevil 8y agoFacebook did the same thing Fox News and CNN did: Accept advertisements that affect who votes and for whom. It's not something Facebook created. Nor is it something that happened for the first time in 2016. It's a significant historical misunderstanding to believe propaganda was invented by Facebook in the 21st century.
- Pharmakon 8y agoI despise Fox News and CNN, but unless they took foreign money for those ads and didn’t go through the proper declarations making that clear, you’re presenting a false comparison. Fox and CNN, for all of their hideousness, also didn’t host bots and people having conversations with themselves to manipulate public discussion. They didn’t give the IRA a platform, and didn’t allow the likes of Cambridge Analytica to target high value voters in close states.
- TylerE 8y agoFox certainly took plenty of NRA money, and they were/are taking tons of foreign cash.
- burtonator 8y agoThe other day I logged out of Instagram on my phone, created a totally new account (for our dog), cleared all the cache and it STILL found my coworkers. I didn't want my coworkers to see my dog account because I act silly and want to be professional. I'm CERTAIN they just sent data I didn't agree to send (phone number, etc). They didn't re-prompt to access my contacts so I assume they think that since the APP has permission every account I create ALSO has permission to access my contacts. Fuck facebook!
- temp1928384 8y agoMight be the wifi network if you logged in while at work...
- thisisit 8y agoDiscussed earlier: https://news.ycombinator.com/item?id=19298692 https://news.ycombinator.com/item?id=19298692
- grecy 8y agoPeople say things like "what do you want, privacy or security?, you can't have both". But something I always think about, we're talking about Facebook here. It's a social media platform with pretty pictures and comments. What's the big deal? It's not like we're talking about your online backing or medical records. Why does the "security" of something as unimportant as Facebook really matter enough to require 2FA? To boogy-man "Security" has escalated so much it's like everyone wants it everywhere, no matter the cost.
- echlebek 8y agoFacebook is one of the main identity providers on the internet, next to Google and Apple. Access to facebook can imply access to a wealth of other apps.