Users warned to keep Facebook details safe

Next Story

“Learning” robots know how to evolve

Identity theft is a major concern for internet companies and users alike. The dangers are even greater for social networks such as Facebook because of the amount of personal data that users tend to put online.

After a software engineer found a way to mine personal data through mobile phone numbers, members of the biggest social network are being urged to check their privacy settings.

Search function to blame

Reza Moaiandin, the software engineer responsible for flagging the new exploit, explained that he was able to find the names, locations, and profile pictures of users simply by entering their phone number into the network’s search function.

The setting has a default of “Everyone”, which means that any Facebook user can find another one even if their phone number isn’t publicly visible on their own public profile.

Fortunately, this setting can be changed manually to protect security.

Guess the number

The problem is even more dangerous because the phone number doesn’t need to be known in advance.

By using a simple algorithm that generates thousands of possible mobile numbers, Moaiandin ran the results through a widely available Facebook application programming interface (API) to discover which ones made “hits” to user accounts.

“This could be a huge phishing problem if no limit is created, and the loophole is discovered by the wrong person,” Moaiandin explained on his blog.

Personal choice

Although Moaiandin reported the issue to Facebook twice so far this year, the company said it did not think the matter constituted a security vulnerability.

“Everyone who uses Facebook has control of the information they share,” a spokesperson for the company commented, adding that developers can only access information that “people have chosen to make public.”


Johnson Controls Penn Solid State M80J proportional motor actuator picture
Johnson Controls Penn Solid State M80J proportional motor actuator
NEW JOHNSON CONTROLS DAMPER ACTUATOR D-3000-1045 1153 36-18978 8-13 PSI  picture
NEW JOHNSON CONTROLS DAMPER ACTUATOR D-3000-1045 1153 36-18978 8-13 PSI
NEW Johnson Controls V11HAA-100 3 Way Solenoid Air Valve 120 volt picture
NEW Johnson Controls V11HAA-100 3 Way Solenoid Air Valve 120 volt
Johnson Controls G-2010-23 Gauge picture
Johnson Controls G-2010-23 Gauge
Johnson Controls G-2010-11 Gauge picture
Johnson Controls G-2010-11 Gauge