5 ms·

> So basically, everything I used to be able to get in a phone book. Honestly, at this point all of that information should just be considered public, because i

by gizdan 5y ago

> So basically, everything I used to be able to get in a phone book. Honestly, at this point all of that information should just be considered public, because it obviously is. With a phonebook (at least back in the day), you didn't risk having your account exposed and sold for a few dollars. Nor did that risk someone getting access to thousands, if not more, bank accounts or whatever through automation. In addition, a phonebook is easy to opt out of making things public. Facebook gives you the illusion that you can opt out of this data being public. Edit: opt of -> opt out of

chillee 5y ago
> Facebook gives you the illusion that you can opt of this data being public. What makes you think that that isn't the case here? It sounds like they just scraped all the public profiles they could find. It's not a database "leak" or something like that.
- gizdan 5y ago
  Right, that's what I mean with "Facebook gives you the illusion that you can opt out of this data being public". I recall when I still had Facebook, many people would randomly add you and pretend to be random people, sometimes famous, sometimes they "just want to be friends". I know most people have some settings along the lines of "no one except friends can see all this data". This is an issue, because people will add these "friends" and forget about these permissions. These "friends" can easily be attackers like these that suddenly have access to all your data. Hence the "illusion". With a phonebook on the other hand, when you opt out, you've opted out.
  - skinnymuch 5y ago
    Many people added you like that? Just asked a few people. No one gets many FB rando requests that aren’t super obviously fake. It isn’t that common. I’ve had FB since 2007. Don’t recall there ever being a surge.
    - gizdan 5y ago
      Prior to me becoming more privacy conscious I had 700+ "friends", of which less than 250 I actually ever met or was acquainted with. I recall one very specific interaction with one of those random requests of some person adding me and claiming to be Demi Lovato (I'd no idea who that was at the time) with their name spelled really oddly (I can't remember exactly, but they were trying to spell Demi Lovato but with random word or characters in between to make it look mildly like Demi's name, but not really). This interaction was somewhat of a wake-up call and that's when I realised I shouldn't be accepting random requests. Afterwards my friend's list hovered around 150. These were family, close friends, less close friends, and acquaintances. I also had hundreds on my friend requests lists by the time I deleted my FB around 2015.
kbenson 5y ago
Social engineering did not begin with computers, that's just when we put a fancy name on it. Personal information has been used to impersonate people in person or over the phone for a very long time.
- gizdan 5y ago
  I understand, but social engineering 1.5 billion names in a spreadsheet that can be automated is lots easier than social engineering 1.5 billion people in a phone book with no real automation available. But again, the big difference here is that Facebook gives you the illusion that your data is private. With a phone book, when you opt out, you're opted out.

by gizdan 5y ago

chillee 5y ago

> Facebook gives you the illusion that you can opt of this data being public. What makes you think that that isn't the case here? It sounds like they just scraped all the public profiles they could find. It's not a database "leak" or something like that.

gizdan 5y ago
Right, that's what I mean with "Facebook gives you the illusion that you can opt out of this data being public". I recall when I still had Facebook, many people would randomly add you and pretend to be random people, sometimes famous, sometimes they "just want to be friends". I know most people have some settings along the lines of "no one except friends can see all this data". This is an issue, because people will add these "friends" and forget about these permissions. These "friends" can easily be attackers like these that suddenly have access to all your data. Hence the "illusion". With a phonebook on the other hand, when you opt out, you've opted out.
- skinnymuch 5y ago
  Many people added you like that? Just asked a few people. No one gets many FB rando requests that aren’t super obviously fake. It isn’t that common. I’ve had FB since 2007. Don’t recall there ever being a surge.
  - gizdan 5y ago
    Prior to me becoming more privacy conscious I had 700+ "friends", of which less than 250 I actually ever met or was acquainted with. I recall one very specific interaction with one of those random requests of some person adding me and claiming to be Demi Lovato (I'd no idea who that was at the time) with their name spelled really oddly (I can't remember exactly, but they were trying to spell Demi Lovato but with random word or characters in between to make it look mildly like Demi's name, but not really). This interaction was somewhat of a wake-up call and that's when I realised I shouldn't be accepting random requests. Afterwards my friend's list hovered around 150. These were family, close friends, less close friends, and acquaintances. I also had hundreds on my friend requests lists by the time I deleted my FB around 2015.

kbenson 5y ago

Social engineering did not begin with computers, that's just when we put a fancy name on it. Personal information has been used to impersonate people in person or over the phone for a very long time.

gizdan 5y ago
I understand, but social engineering 1.5 billion names in a spreadsheet that can be automated is lots easier than social engineering 1.5 billion people in a phone book with no real automation available. But again, the big difference here is that Facebook gives you the illusion that your data is private. With a phone book, when you opt out, you're opted out.