17 ms·
Have I Been Facebooked?
- Flatcircle 6y agowhy would I enter my info on a random site though?
- Z0rb 6y agoLol good point
- aeturnum 6y agoI think this is the really interesting legitimacy vacuum that hacks like this place us into. The official source on this is silent and may stay silent for a long time. People who wait for an official, safe answer may need to wait a long time. On the other hand, the illicit nature of the data makes it legally questionable for other organizations to step into the role of notifier. So why enter your info on a random site? Because it may be the lowest (definitely not zero) risk way to check if your info is in the leak. If you wait or you build your own thing you may risk less, but balancing the risk with the certainty of obtaining an answer requires a real level of expertise. Does seem like an easy way to collect phone numbers.
- eyeareque 6y agoWhy would you give it to Facebook?
- Syonyk 6y agoBecause 12-13 years ago when a lot of people signed up, it wasn't clear that they were exceptionally evil. Pre-IPO, pre-ads, back when it was just status updates and photos, it didn't strike a lot of people (myself included) as a particularly bad idea. We hadn't seen the monster social media would become when it suddenly had to improve quarterly profits.
- cozzyd 6y agowhen I signed up in 2005 it was only open to people at colleges, and your info could only be seem by people at the same college... (hence the name, facebook, which no longer makes sense).
- skinnymuch 6y agoAds began in 2007, over 13 years ago. I purchased my first FB ad in late summer 2007. Not sure if that’s also when it opened up.
- Syonyk 6y agoI don't think the first few years of ads really made a big difference - Facebook couldn't really figure out how to make advertising terribly profitable while not driving people off. Like most things, it took a few years to really take off. They IPO'd in 2012, and then really had to prove they could turn a profit (and increase it over time). I've honestly not been a heavy enough Facebook user to be able to pin the transition to a particular point in time (and it was almost certainly a long period of time, pushing for more and more), but the transition of the "Like" widget on random pages from an image icon to a data collection tool was probably a good indication of the transition. In any case, by... oh, 2014 or so at the latest, they'd definitely started showing their true colors. Engagement Uber Alles. Because ads.
- skinnymuch 6y agoI don’t see much of a difference. It’s obvious this was going to happen. Is there any instance of a big site that doesn’t go this way? It seems as if sometimes people will always act surprised when sites monetize heavily. As if the site was always going to remain as basic as it was in its early days while growing. This is almost never the case except in cases where it goes paid [only]. Even those have exceptions (newspaper sites vs Substack)
- elwell 6y agoELI5 why facebook is exceptionally evil. (Of course I'm inviting downvotes, but please give me a comment too; ideally a reason that isn't also applicable to 'internet as a whole').
- 8note 6y agoBy accident? They used to sync contacts on android
- marshmallow_12 6y agowhat i want to know is where you can find this information. Also, is it even legal for the website owner to hold stolen information.
- bnj 6y agoThey could get hashed copies of the information and find out whether a given phone number was present without needing to retain the original leak.
- pnathan 6y ago``` Facebook account ID First name: P** Last name: N*** Gender Relationship status Location ``` :: squints :: I'll grant you, this is much more problematic for some than me. But for me, this is, roughly, analogous to my actual LinkedIn, Github, or Hacker News profile, which link to my resume (which has my phone number), combined with a squint at my age and a guess. There's a lot worse that could be leaked.
- x3sphere 6y agoFacebook should email those affected... surely they know who was compromised or not. Shouldn't have to use random sites for this. Why has there been no communication from them?
- type0 6y ago> Why has there been no communication from them? It's not like they care even a bit. And they wouldn't win any goodwill from it. If you have been zucked, you've been zucked, that is it.
- barbacoa 6y agoZuck: Yeah so if you ever need info about anyone at Harvard Zuck: Just ask. Zuck: I have over 4,000 emails, pictures, addresses, SNS [Redacted Friend's Name]: What? How'd you manage that one? Zuck: People just submitted it. Zuck: I don't know why. Zuck: They "trust me" Zuck: Dumb f**s.
- echelon 6y agoCulture comes straight from the top. You can certainly tell that with Facebook and Zuckerberg. A good solution to this would be to put a hiring freeze on any ex-Facebooker and claim that if they can overlook Facebook's questionable practices, then they would be a danger for your company and its customers. Hold employees responsible for the actions of their employer. You could institute a "two year freeze" for any FB alum. A public statement by an ex-employee rebuking these practices would be enough to sidestep the hiring moratorium, but make them acknowledge how bad their employer is for privacy and democracy. Especially after what they did with the last US election cycle.
- justapassenger 6y agoWow, you spend really a lot of effort on virtue signaling. Should we also institute public lynching of all employees of companies that had security breaches?
- aiur 6y ago"Currently, we don't know if Facebook has fixed the vulnerability since the company hasn't released any statement regarding the breach." "This is old data that was previously reported on in 2019. We found and fixed this issue in August 2019" - FB
- bryan_w 6y agoIt seems like the creators are heading towards a libel lawsuit if they keep that up on their site.
- okamiueru 6y agoI don't understand libel laws very well. If it's based on that quote, could you explain a bit why that would be?
- emayljames 6y agoThat is a dishonest statement, as a lot of data is recent, and they know that and are almost pretending like it is some kind of feature.
- s279 6y agoThe data might be from an old breach, but the data are also unlikely to change very often, so is more than likely current for a large proportion of those who have been exposed (phone number, date of birth, full name, etc).
- davidcbc 6y agoI'm looking forward to the sequel, "Have I Been 'Have I Been Facebooked'ed" when it turns out this is just a data harvesting operation. If you don't want your phone number leaked don't hand it over to a random website that pinky swears it won't keep it. It's maybe not a scam, but still...
- neogodless 6y agoMy phone number is a 10-digit number, the first 3 of which are an area code. It gets spam calls and texts (though that miraculously decreased on November 4th...) as it is. Now, combined with browser fingerprinting, perhaps this site can tie my specific 10-digit number to some other aspects of who I am, but I'll leave that part as an exercise for a willing volunteer. I'm not terribly concerned about entering my phone number, disconnected from other identifying information, into a random web site. Convince me why I should be!
- omgJustTest 6y agoTFA? If there is ever an exploit on phone codes, it will be massive. I removed my phone number as a TFA from most services within the last few days.
- deeblering4 6y ago2 factor sms authentication
- GormHouj 6y agoThe commenter is leery of entering their phone number into the article link.
- peteretep 6y ago1 factor of 2 factor auth is completely useless without any identity to tie it to
- deeblering4 6y ago
- nottorp 6y agoHmm I haven't given facebook a phone number. How can I check if my account is included in the leak? Haveibeenpwned doesn't include facebook in the leaks with my FB email, but I'm not sure I'm checking in the right place.
- nottorp 6y agoAnswering myself: haveibeenpwned includes the facebook leak in the main page check, so if it doesn't show there, you're not included. No need to give out your phone number if you registered via email.
- ysavir 6y ago> if you registered via email My concern is all the people that may have involuntarily signed up via whatsapp, with no email included but only a phone number.
- nottorp 6y agoOh good point. I didn't know that was possible. Could I have another FB identity attached to the number i use for WhatsApp, you think? I signed up before it was bought. I may have even paid 0.99 or something like that, i forget. I checked my phone # with the above site and it came up clean.
- gruez 6y ago>No need to give out your phone number if you registered via email. AFAIK most of the records in the leak didn't have an email attached.
- oceliker 6y agoWish it supported wildcards. I'm not comfortable putting in my phone number for the exact reasons the author states.
- ghostpepper 6y agoAllowing searches with wildcards is analogous to publishing the entire database. That being said, I think the cat is out of the bag on this one so maybe that wouldn’t be the end of the world.
- gruez 6y ago>Allowing searches with wildcards is analogous to publishing the entire database. What's the harm in publishing a list of phone numbers, without any other info attached? I can generate a list of all phone numbers in north america by iterating through all the digits.
- otterley 6y agoA list of valid phone numbers is more valuable than a list of all possible phone numbers, for the same reason that a list of valid passwords is much more valuable than a list of all possible passwords. It saves miscreants a lot of time and effort.
- gruez 6y agoI'm not sure how it works in other countries, but for the US the numbers are generated by area code, and they're constantly allocating new ones because the old ones have been used up[1]. This is with number recycling. Therefore if you randomly generate a phone number for an "old" area code you probably are going to get a valid number. [1] https://en.wikipedia.org/wiki/List_of_North_American_Numbering_Plan_area_codes https://en.wikipedia.org/wiki/List_of_North_American_Numberi...
- adrianmonk 6y ago
- obiShawnKenobi 6y agoMy number was leaked (checked the dump myself) but I don't show up on this site. Seems like there are some bugs to work out
- gruez 6y agocan confirm.
- igbk 6y ago+1. Found my pal's German number in the dump but not on this website.
- deleted 6y ago[deleted]
- purplecats 6y agowhere can i find the dump, I've wanted to check my data as well
- 6y ago
- rvba 6y agoEvery time I see a site like this I wonder if the site is legit, or does it "match" the phone number with an IP.
- eganist 6y agoSo, a few things. 1) no indication that there's any rate limiting here beyond a 2 second cooldown (thanks for that, grenoire), but I only tested it using burp intruder community edition, and I only tested it on a set of numbers guaranteed to return false. If anyone wants to test a range with a known-leaked number in it, up to you. 2) it's very possible that if there is rate limiting, it acts invisibly. But if there's no rate limiting as I suspect, someone can easily just iterate through this data set and extract every number (well, until cloudflare trips the requests). Alternatively, someone can request a large set of numbers that includes their own in order to fuzz the range their own number is in.
- semiquaver 6y agoWhy would anyone scrape this site when they could just download the leaked dataset?
- tonymet 6y agoanyone know of one of these sites where they don't send your phone number / email to the server? The /search endpoint phone_number param has your number. They should instead hash your number client side and test the hash.
- szundi 6y agoHow does one know a site like this is not just an other data harvesting site?
- atoav 6y agoThere is sourcecode for both front and backend and the creators linked their names. So check the sourcecode and decide whether you trust the people involved that this is actually the code that is running the site
- volta83 6y agoHow do you know that the source code they published is the same code that the site uses?
- bidirectional 6y agoYou don't. Their comment literally says that. You can choose whether or not you trust the authors.
- Arainach 6y agoWhen they identified that my data was part of the link, they included an obfuscated first and last name - first letter plus length of each. If they were harvesting data, they certainly appear to already possess it.
- runeks 6y agoI put up another site for that: https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com https://haveibeenpwnedbyhaveibeenfacebookeddotcom.com Just enter your email and the site will tell you whether your email has been harvested by https://haveibeenfacebooked.com/ https://haveibeenfacebooked.com/
- emayljames 6y agoTry my site, that checks this guys: https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookeddotcom.com/ https://haveibeenpwnedbyhaveibeenpwnedbyhaveibeenfacebookedd...
- tonymet 6y agoCan someone bcrypt all these phone numbers & emails and make that public? Share the salt and then everyone can just test their own phone number without sending it to some rando
- batch12 6y agoWhat's the difference in salting if the salt is shared? Edit: Replying again- sorry. Thinking about this some more-- if the person were to concatenate the number with first last or something they could distribute the list and the person's name would be the salt. So 9195551212JohnDoe becomes $hash and user just has to know all the pieces to test locally.
- tonymet 6y agoHabit. Prob right salt wouldn't be needed.
- batch12 6y agoWell, maybe you were on to something-- your thoughts inspired me to think about this a little more- we just need a unique salt only the user would know.
- tonymet 6y agostill, bcrypt's design means it'll take way too many cycles to brute-force-reverse the dataset, so it should be safe to share. One downside of a record-specific salt is nicknames e.g. john vs johnathan , or misspellings. (false negatives)
- visarga 6y agoJust off the top of my head: you can hash the text with hash-1, and send a query containing a hash id bucket computed with h1%(N/1000), get 1000 responses from the server hashed with h2 function. Then we can search for our h2 inside the 1000 results without the server knowing which one we were looking at. We also can't decode the 1000 responses we got.
- discordance 6y ago“Has my credit card number been leaked”.com
- deleted 6y ago[deleted]
- challengly 6y agoBrought to you by the folks behind HasMyPhoneBeenLeaked.com
- deleted 6y ago[deleted]
- juanani 6y agoweird title, since one without a facebook would assume this service is for them. If you have ever signed up for facebook and are wondering if u have been facebooked... yes you have been facebooked.
- chillwaves 6y agoNo one else wanted to try, but I had a feeling my data is breached (seems to happen every few months?) Anyhow, my phone number had a hit and they showed my first and last initial and corresponding asterisks; seems legit. For people saying "why enter your phone number into random site" -- not sure how much value a phone number provides without the accompanying information.
- neogodless 6y agoI typed my phone number, and it was not found. I'm not too surprised. I never wanted Facebook to have my phone number (and my account is deactivated, though I still use Messenger.) I always ignore prompts for phone numbers on a site/app like that (if at all possible).
- codeecan 6y agoIf you don't want to input your full phone number, you can use this tool: https://codeeverywhere.ca/apps/fb_data https://codeeverywhere.ca/apps/fb_data . Searches use partial data from multiple fields to find matches.
- eythian 6y agoNote: US and Canada only
- villgax 6y agoDo not put your number here FFS
- deleted 6y ago[deleted]
- hmsimha 6y agoBe aware that this (currently) doesn't work for Canadians (at least the one I checked). You'll have to download the dump yourself and grep.
- paul7986 6y agoyeah not going to use any search tool where i need to enter my number ... you could just post the data by area codes..... just create a bland UI that lists all area codes ..let user click into the area code and then on the next page list all the phone numbers in that area code that have been affected. I'd use that but not searching by phone number.
- anonytrary 6y agoI wish there was an "email" input. Last time I had a Facebook account was 10 years ago (probably before phone numbers were de facto identity) and I would be fascinated to learn if my old accounts were in the leak, because Facebook was supposed to fully delete those accounts :)
- maddyboo 6y agoHIBP added the email addresses that were part of the leak: https://haveibeenpwned.com/ https://haveibeenpwned.com/
- anonytrary 6y agoNice, thanks. Lol, I always have a slight concern entering my info into these sites because there's always that small chance that information is shared or leaked itself. Paradox, man. To check or not to check.
- gabegm 6y agoThis site doesn't seem to include the leaked numbers from my country +356 (MT).
- myth_buster 6y agohaveibeenzucked is arguably better name for a site.
- Kiro 6y agoAren't telephone directories a thing anymore? At least in my country you can just search for a person online and see their phone number. Someone's phone number seems like the least sensitive PII.
- ajdlinux 6y agoIn Australia, phone directories don't generally include mobile phone numbers, and with the massive shift from landline phones to mobile phones over the past decade, this means many people are completely gone from the phone directory. I suspect it may be a similar situation in other countries - the phone directory still exists, but is increasingly useless. The view of the sensitivity of phone numbers and home address as PII has changed with this trend too.
- Kiro 6y agoInteresting. In Sweden, mobile phone numbers are listed in the public directories (at least for me and my friends).
- mjhagen 6y agoUsually those phone directories don't include other personal information, like gender.
- MrGilbert 6y agoWell, I can opt-out of a phonebook, at least here in Germany for decades already. I can't do that on this leak.
- shnp 6y agoI deleted my (outdated) phone number from facebook years ago and it's still part of the leak, with my name and gender in it. I did not replace the phone number with another phone number. Really says something about what delete means for fb.
- kome 6y agothat's illegal by European standards i think... i wonder if somebody has the money and the time to bring this to court. It would be necessary.
- disabled 6y agoApparently the Irish Data Protection Commission is going to bust Facebook. Facebook leak: Irish regulator probes 'old' data dump: https://www.bbc.com/news/technology-56639081 https://www.bbc.com/news/technology-56639081 I hope https://NOYB.eu https://NOYB.eu is aware of this breach. Of course Facebook, or even FAANG, for that matter, would keep all of the data that they hoarded from EU citizens, illegally. It goes along well with the Silicon Valley mentality (I am culturally American and I am from the west coast of the US, so I understand what is going on here. I also hold EU citizenship...) The number one rule is "don't get caught". The "move fast and break things" mantra still holds well for Facebook. So, no surprise that they were sloppy with things, and got caught. If you want to check if you were caught up in being Facebooked (data leaked), the download to the data dumps are here: https://archive.is/MZqak https://archive.is/MZqak I am furious at the moment because I found my (fraternal) twin brother's info in the data dump files. :-(
- dkersten 6y ago> Apparently the Irish Data Protection Commission is going to bust Facebook. I doubt it. They spent 7 years on a case against Facebook doing the absolute minimum necessary. NOYB are suing the Irish DPC in an attempt to get them to do their jobs. It’s a mess. Irish DPC apparently only investigated 83 GDPR cases and over 4000 “concluded without inquiry”. They only made 11 data protection decisions last year, compared to 600 by Spain whose data protection branch has a similar budget. https://noyb.eu/en/dpc-cancels-parliamentary-hearing-eu-us-transfers https://noyb.eu/en/dpc-cancels-parliamentary-hearing-eu-us-t... https://noyb.eu/sites/default/files/2021-03/Letter%20Max%20Schrems%20to%20LIBE.pdf https://noyb.eu/sites/default/files/2021-03/Letter%20Max%20S... https://noyb.eu/en/facebooks-gdpr-bypass-reaches-austrian-supreme-court https://noyb.eu/en/facebooks-gdpr-bypass-reaches-austrian-su...
- flixic 6y agoI have made a similar site, but just for Lithuanian numbers: https://fbhack.lekevicius.com https://fbhack.lekevicius.com All the numbers that I know for sure to be in the leak return "not found in the leak" on this site.
- atemerev 6y agoThat's odd. My number is in the leak, but it doesn't check on this website.
- aszantu 6y agoNever handed over my number when I could avoid it. I'm very suspicious about it for some reason
- tngranados 6y agoNot sure what’s going on but it says my number is not part of the leak, but I’ve checked myself and it is actually leaked. Just be aware that it may not be complete.
- sleavey 6y agoSame, for a contact's number (I'm checking on their behalf). It shows up in the raw dump [1] but not this site. [1] https://archive.is/MZqak https://archive.is/MZqak
- Semaphor 6y agoInteresting that Australia seems to be completely missing
- darkfirefly 6y agoYeah, it's almost like it got merged with Austria, given it says "Austriaia"
- Y_Y 6y agoAustralia anschlussed Austria last week as part of some covid restrictions dodge. Surprised you all didn't hear about it.
- 2Gkashmiri 6y agopakistan seems to be missing. Any ideas why?
- 74d-fe6-2c6 6y agomaybe this website isn't even legit and just about harvesting phone numbers. I mean - who knows?
- nvoid 6y agoI checked someone who was part of the leak and the correct initials came up so unless that is by chance, it does seem to be querying the database. You can also read the source code [1] where it does an api call to get the data. We can be pretty sure the results are legit but yes of course it could be running malicious code and stealing phone numbers. Check the raw data if you are worried[2]. [1] https://github.com/Fumaz/haveibeenfacebooked-api https://github.com/Fumaz/haveibeenfacebooked-api [2] https://archive.is/MZqak https://archive.is/MZqak
- a10c 6y agoI'm a little skeptical this is accurate. Supposedly 1/3rd of my country's population is in this leak, yet not one of the 40 people i tried in my contacts list appears on the leak.
- MarcoBuster 6y agoI am a co-author of the site. We are already aware of your concerns about giving out your phone number. The source code is free and reviewable on Github. We know it's not possible to verify what's running on a server but we hope it adds a level of trust. We are currently hashing all phone numbers so we don't have to deal with them anymore. We will keep you updated.
- esamatti 6y agoHash the phone number in the browser before sending it to your server. That way it is at least possible to verify via devtools what is being send. Heck. Allow even prehashed phone number to be entered.
- MarcoBuster 6y agoThat's what we're planning to do. Thank you
- brigandish 6y agoI understand the frustration but they have the data and hence, a rainbow table, sending a pre-hashed phone number is the same as sending an unhashed one, unless the worry is man in the middle, who is just as likely to get the data. The only way to check without giving up personal info is to get the data and look locally, or perhaps search for so many phone numbers that yours is buried in the haystack.
- bra1n 6y agoThat only holds for numbers already part of the dump. If you submit an unknown phone number that is not contained in the leak, hashing it before sending it will increase data privacy.
- social_quotient 6y agoSo a rainbow table of just 2.9 billion numbers covers the USA phone set. So I think searching for a specific number clear or hashed are roughly similar exposures. Maybe the right way to search without disclosure is really to filter. Meaning instead of putting in your full 10 digits. You just put in 7/8 and it returns a list of the rest for you to see. Then you visually scan to find your number out of the returned 9999 results. (Assuming seeing hacked numbers are public already - but I don’t love this either) What’s a secure way of searching without disclosure by either party? (Non troll question)
- deleted 6y ago[deleted]
- eythian 6y agoBe aware that this site doesn't seem to be the whole story, it doesn't match me for example, but this one does: https://jstsch.com/facebook/ https://jstsch.com/facebook/ (NL only) So there's some ambiguity or incompleteness somewhere.
- r00f 6y agoThis is the first time when I see the UAE being called ARE in a country list. I even went and asked Google, and it turns out there is in fact one ISO standard that calls it ARE. All the others, including ITU (we are talking about phone codes, after all) call it as UAE. Really strange choice of naming standard for something phone-related.
- helb 6y agoTroy just added phone number search to Have I Been Pwned as well: https://www.troyhunt.com/the-facebook-phone-numbers-are-now-searchable-in-have-i-been-pwned/ https://www.troyhunt.com/the-facebook-phone-numbers-are-now-... (https://news.ycombinator.com/item?id=26709848 https://news.ycombinator.com/item?id=26709848)
- robthebrew 6y agoI get different results from this and HIBP
- kevingadd 6y agoIf you read the bottom of the post, the complete phone number database has not loaded into HIBP yet. The results will likely change once it's done.
- robthebrew 6y agoTo be clear: I was listed on HIBP but not on this tool
- Robby2023 6y agoSame here, my phone shows in HIBP but not in this tool
- camillomiller 6y agoThis seems to be more reliable. The obfuscated name and other info matched my own number.
- otagekki 6y agoThe website says no, but after downloading the whole dataset and doing a quick search using "grep -rnw" I got my current phone number in addition to that of my grandfather's (also on FB), so even if the site says you're not facebooked, please check the raw data available on pastebin archive (https://archive.is/MZqak https://archive.is/MZqak)
- idownvoted 6y agoAlready getting spammed hourly by text messages pointing me towards URLs I should click. AFAIK there isn't much awareness about this leak amongst most of FB's userbase: Less tech-savvy and 40yrs ++.
- fvv 6y agomy 2c security tips: - i trust my browser and site owner version : text in clear - i barely trust site owners ( if a match is found they still have access the fact that I've verified that number ) : hash each phone address hashed ie using bcrypt and using a composed salt ( ie : site address + email in the account + phone address ) so rainbow table will be impossible to use ( this because phone numbers are low entropy and even without rainbow table IMO are not that very secure ) than ask user for the hashed version in the text field ( also write a linux terminal style command that can be used to hash given salt and hashing , or redirect to a trusted hasher service online (multiple links can be provided ) ) both text fields can be provided to allow the user a choice
- beardbound 6y agoI am annoyed. I haven't updated my Facebook in years so most of the data is out of date and I use a separate phone line for personal correspondence, but I do still have a Facebook account for the occasional friend/family that uses messenger. This might be the final nail in the coffin for me and get me to delete my account. Maybe I can finally get my last couple of friends to switch to Signal.
- CloselyChunky 6y agoFrom what I can see, this site sends your whole number to the backend to search for a number in the dump[0], while haveibeenpwned.com will hash the input, send only a prefix to the server and receive a list of hashes with the same prefix. If your hash is in the list, you've been pwned, but you can check without leaking your data to HIBP. Edit: I just checked, seems like the form on the frontpage of HIBP also submits your complete email/phone number. Pretty sure I read about how you don't have to submit your personal data to validate against HIBP, not to long ago... [0]: https://github.com/Fumaz/haveibeenfacebooked-api/blob/master/src/api/app.py#L21 https://github.com/Fumaz/haveibeenfacebooked-api/blob/master...
- ultrafez 6y agohaveibeenpwned.com does not use the k-anonymity method that you've described when searching for phone numbers: https://www.troyhunt.com/the-facebook-phone-numbers-are-now-searchable-in-have-i-been-pwned/#other-things:~:text=There's%20no%20k%2Danonymity%20implementation%20for%20phone%20numbers%20at%20this%20point%20in%20time https://www.troyhunt.com/the-facebook-phone-numbers-are-now-...
- CloselyChunky 6y agoYeah should have validated that claim first. Seems like the form on hibp.com always submits your input to the server... Still, if I had to chose between hibf.com and hibp.com, I'd lean to hibp.com since Troy is a known name in the industry and has offered this service for a long time without any complaints.
- doodpants 6y ago"Is Facebook still safe to use?" Has Facebook ever been safe to use?
- dandare 6y agoI never shared my phone number with FB, neither for 2FA nor anything else, yet it is in this DB. Could FB get the number via my Android FB app?
- guerrilla 6y agoThis says no but haveibeenpwned says yes. Hash collision on the HIBP site?
- code-express 6y agoThe phone numbers put into this website can be trivially reversed despite of the false sense of security the phone-number disclaimer provides: https://code.express/docs/blogs/facebooked/ https://code.express/docs/blogs/facebooked/
- CobaltFire 6y agoDown as of 06APR 1715 PST. Looks like a legal warning by the Italian Gov?
- kamiya_kimiko 6y agoHTTP 451 - Unavailable For Legal Reasons :(