all 4 comments

sorted by: hot top controversial new old
[–] 13 points 11 months ago*

“Well, scientists now know a lot of phone numbers,” the responsible parties might have thought, “So what?” (...) a surprising amount can be read from the data, and for some users, it can be life-threatening. (...)
And then there are several classes of data that can be uncomfortable to life-threatening for users

From further down in the article:

Approximately 30 percent of users have entered something in the “Info” field of their profile, and some reveal a lot: political views, sexual or religious orientation, confessions of drug abuse are found there, as are drug dealers who advertise their product range in this very field.

The easy accessibility of the photos would therefore have allowed the compilation of a database that, through facial recognition, often leads to the phone number and vice versa.

That isn't dystopic at all

Meta classifies the researchers' approach as "scraping" (...) We had already been working on industry-leading anti-scraping systems

Oh, the irony

  • source
  • [–] 4 points 11 months ago

    That’s horrible but also wtf is up with that websites toxic popup. I thought you are supposed to be able to reject all within 2 click.

  • source
  • [–] 7 points 11 months ago
    [–] 3 points 11 months ago

    I do agree that, to a certain point, this shouldn't be possible in this volume, but also, when you add a phone number as a contact, it would show up on WhatsApp as long as the profile has public data. Anyone that saves every possible phone number would have the same result (although this could take ages, thus the issue with the scraping)

  • source
  • 4 comments in c/cybersecurity@infosec.pub view that post
    [–] 15 points 11 months ago* (1 child)

    We have found no evidence of malicious actors abusing this vector"

    "We see no evidence of that which we do not monitor."

    These press releases/responses seem to never include "we track x and y and see no evidence". Or "we would be able to identify them but do not see evidence". I can only assume the worst.

  • source
  • hideshow 1 child comment
  • [–] 2 points 11 months ago

    announcing security measures is generally seen as a security risk in itself.

    And while that's true, it does provide very annoying and convenient cover for untrustworthy sources.

  • source
  • parent
  • [–] 3 points 11 months ago

    Glad I deleted my account. Stop supporting those assholes.

  • source
  • [–] 3 points 11 months ago