Facebook Doubles Down on Misusing Your Phone Number

[thisisit]

Discussed earlier:

https://news.ycombinator.com/item?id=19298692

[burtonator]

The other day I logged out of Instagram on my phone, created a totally new account (for our dog), cleared all the cache and it STILL found my coworkers.

I didn't want my coworkers to see my dog account because I act silly and want to be professional.

I'm CERTAIN they just sent data I didn't agree to send (phone number, etc).

They didn't re-prompt to access my contacts so I assume they think that since the APP has permission every account I create ALSO has permission to access my contacts.

Fuck facebook!

[temp1928384]

Might be the wifi network if you logged in while at work...

[bitxbitxbitcoin]

So the only way to keep your number from being searchable on FB is by not having 2fa?

[markovbot]

Or by not having a facebook, obviously. If you have one, you're part of the problem :)

[untog]

Or use non-SMS 2FA, which is a good idea anyway (not that I'm defending FB for a second here)

[sanxiyn]

You can use OTP 2FA with Facebook.

[Ozzie_osman]

Which do you prefer: privacy or security? Because you can't get both.

EDIT: you can do 2fa without SMS: https://thenextweb.com/facebook/2019/03/04/psa-dont-give-out...

[locust101]

Is there any other authentication method like google authenticator for 2fa to use facebook?

[pxeboot]

Facebook supports U2F security keys for 2 factor auth [1].

[1] https://m.facebook.com/notes/facebook-security/security-key-...

[EquallyJust]

https://www.facebook.com/help/www/358336074294704

[sanxiyn]

Yes, you can use Google Authenticator for Facebook 2FA.

[philliphaydon]

People are still beating the rigged election dead horse?

[grecy]

People say things like "what do you want, privacy or security?, you can't have both".

But something I always think about, we're talking about Facebook here. It's a social media platform with pretty pictures and comments. What's the big deal?

It's not like we're talking about your online backing or medical records. Why does the "security" of something as unimportant as Facebook really matter enough to require 2FA?

To boogy-man "Security" has escalated so much it's like everyone wants it everywhere, no matter the cost.

[echlebek]

Facebook is one of the main identity providers on the internet, next to Google and Apple. Access to facebook can imply access to a wealth of other apps.