3 ms·
The data was from people’s public profiles, it’s not unintentionally public. the issue was making it scrapable.
by throwaway1777 6y ago
The data was from people’s public profiles, it’s not unintentionally public. the issue was making it scrapable.
- kristofferR 6y agoNo, the phone numbers and emails weren't publicly posted (globe icon), they were just meant to discover contacts.
- MertsA 6y agoYou can choose to make your email on your profile public. Take a look at the number of emails exposed vs. the number of phone numbers exposed, there's a reason why it's a small portion, most people don't make that public. This was just an attacker abusing "Who can look you up using the phone number you provided?" for users where this was set to the default of "Everyone" and then scraping the public details for the profile that popped up.
- quantumsequoia 6y agoThis is incorrect. Private phone numbers not publicly shown on your profile via the UI are included. Mark Zuckerberg's own phone number was included, and you can bet he would never intentionally release that nor is he likely to misconfigure his privacy settings and leak it due to user error