Why You Should Delete Your Old Number from Facebook Now


Why You Should Delete Your Old Number from Facebook Now
  1. Why You Should Delete Your Old Number from Facebook Now
    tomsguide.com
    If you have an old phone number linked to your Facebook account, anyone who comes into possession of that number can log into your…
    Gadgets

If you have an old phone number linked to your Facebook account, delete it. Anyone who comes into possession of that number can log into your account sans password, and you won't get so much as a notification email. The bug's finder says Facebook has no interest in fixing this gaping hole because it is, to paraphrase, someone else's problem.

Credit: maxpro/Shutterstock

James Martindale, an independent programmer, discovered the bug after he started getting Facebook reminders for someone else's account on a new phone number.  He reported his findings to Facebook, and when the company blew him off, took his concerns to Medium instead, where he's had a much warmer reception.

The threat from this is bigger than it seems. Services such as Google Voice and companies like FreedomPop make purchasing new telephone numbers cheap and easy, and even let you choose from a selection of potential new numbers.

Because Facebook lets you search for users via their phone numbers, Martindale said it wouldn't be hard to check each potential new number to see if it was tied to a Facebook account. A budding cybercriminal could then buy the number, hijack the account, sell it on the black market, and repeat the process indefinitely.

MORE: Best Antivirus Software and Apps

Martindale explained that he wanted to purchase a new phone number (a "really photogenic" one), and had to do a little SIM-card juggling to get it on his phone. When the card was up and running, though, he got a text from Facebook, claiming that he hadn't logged in for a while and wanted to fix that.

Martindale used Facebook's search feature to reverse-lookup the phone number and find the account to which it belonged. Out of curiosity, he tried to log into the account, using the phone number as the username, then claimed that he'd forgotten his password. As it turned out, the user's old phone number was still connected to their Facebook account, and Martindale could have chosen, if he'd wanted to, to receive a text message to reset the password.

Better still: Facebook does not actually require a user in these circumstances to reset his or her password, meaning that Martindale could have hijacked this user's account without a single notification reaching the legitimate user by Facebook or email. (Naturally, it would also be trivial to lock a user out of his or her own account by creating a new password.)

There are two extremely simple ways to prevent this from happening to you. The first is to remove old phone numbers from your account, which you can do by accessing Settings, selecting Mobile and then clicking or tapping on Remove next to any defunct number. The second is to activate two-factor authentication on Facebook, which means you'll need to grant or deny permission for any new Facebook login from your phone or tablet. Of course, you'll need to make sure that if you set the second factor to be a texted code, that the receiving number is your current mobile number and not an old one.

Self-interested readers may have (correctly) deduced that this bug, while dangerous, cannot be directed at specific people. After all, if you purchase a new phone number through companies like FreedomPop (for as little as $5 each), you don't get to choose your own number. (Some services do offer "vanity" phone numbers for sale, but these cost hundreds of dollars.)

  1. Comment: The suggestion of a constrained iPhone 8 launch in September seems credible to me

    9to5mac.com - Gadgets
    07.20 / 14:09 9to5mac.com
    We’ve been hearing all kinds of speculation about when the iPhone 8 might go on sale. I think we’ve now had at least one guesstimate for every month from October through to January of next year. But JP Morgan yesterday suggested that the iPhone 8 (or iPhone Pro, as they dub it) will appear on time in September, just in constrained volumes. Specifically, JP Morgan predicts that around 2M units will be available in September. To me, this seems the most credible of all the reports …
  2. Transmit 5 review: File transfer utility expands support for cloud services

    Tech01.us - Apple
    07.20 / 14:08 tech01.us
    File-transfer programs seem like a vestige of the internet that once was. FTP (File Transfer Protocol) is one of the oldest of the internet’s standards, and it’s still in broad use. But our need to shift files around among servers we control or those run by others hasn’t decreased a bit. So many companies offer cloud-based storage and sync that you may be drowning in a multiplicity of options. For […] The post Transmit 5 review: File transfer utility expands support…
  3. Apple Privacy Executives Lobby Australian Government Against New Encryption Law

    Iphonehacks.com - Gadgets
    07.20 / 13:58 iphonehacks.com
    A looming change in Australia’s privacy law has led Apple to send its top privacy executives to the country twice over the last month to lobby the government against such changes. The proposed law would force tech companies to hand over their encryption keys to the Australian government. Continue reading…
  4. iTunes and App Store Carrier Billing Comes to Three More Countries

    Iphonehacks.com - Gadgets
    07.20 / 13:58 iphonehacks.com
    Customers in Denmark, Hong Kong, and Sweden will now be able to pay for iTunes and App Store purchases through their carriers directly without requiring to furnish a debit/credit card or any other payment method. Continue reading …
  5. Become Batman with the KILLSPENCER Utility Belt

    The-gadgeteer.com - Gadgets
    07.20 / 13:56 the-gadgeteer.com
    Why use your pockets when you can hang all your EDC gear from your belt? You know, like Batman. KILLSPENCER lets you live that dream with their new Utility Belt. See, they even used the same name. The KILLSPENCER Utility Belt is a handcrafted, made in the USA (Los Angeles) bull hide leather belt that…
  6. Picture-in-picture mode for video calls coming to WhatsApp on Android O

    Phonearena.com - Gadgets
    07.20 / 13:49 phonearena.com
    WhatsApp is very close to getting a new feature that would allow users to watch YouTube videos directly in the app, but only on iOS devices. We had already reported on the matter a few days ago, but if you don't remember, then you should know the feature is still under development and will work just like picture-in-picture mode.Apparently, the team behind WhatsApp is working on a similar feature for Android devices, which will work on video calls. The bad news is it will only support…
  7. Poll: same price, different beasts – would you buy the LG G6 or OnePlus 5?

    Phonearena.com - Gadgets
    07.20 / 13:49 phonearena.com
    About a month ago, the OnePlus 5 hit the market and, save for a few unfortunate bumps, it has the smartphone fandom pleased. Well, almost pleased, as OnePlus has managed to slither up in the price tiers and its “flagship killer” no longer costs a measly $300. Nope, the OnePlus 5 will set you back either $480 or $540, depending on which storage / RAM variant you go for.All the while, one of the major manufacturers — LG — has sliced the price of its latest flagship in less than half a year of…
  8. Harvey Norman Security Launches Helix Smart Security & Home Automation System Featuring Self-Monitoring from Your Phone

    Mobilecommercepress.com - Gadgets
    07.20 / 13:48 mobilecommercepress.com
    For more mobile technology news Sydney, Australia, July 20, 2017 –(PR.com)– Harvey Norman Security, one of the Australia’s leaders in the security industry, has launched a new home security & home automation product (Helix) featuring Self-Monitoring. It’s a giant leap for Harvey Norman Security to launch a next generation product in Australia enabling you to monitor your home security without […] The post Harvey Norman Security Launches Helix Smart Security & Home Aut…
  9. PSA: Google Calendar added a drag-and-drop gesture for moving events to different times and days

    Androidpolice.com - Gadgets
    07.20 / 13:43 androidpolice.com
    With version 5.7.25 of Google Calendar published on June 15, the app added one feature that we've always wanted and sort of gave up on having: drag-and-drop for events. But it took until Reddit user Racing24 noticed it yesterday for us to go back a few versions and track the change down to that specific release of Calendar. How it works is simple. With your Calendar open on the day view, 3-day view, or week view, you can hold any event and drag it to another time slot. Read MorePSA:…
  10. [Deal Alert] Caseology are having a sale on Amazon, including $4 cases for the Samsung Galaxy S8 and S8+

    Androidpolice.com - Gadgets
    07.20 / 13:43 androidpolice.com
    Caseology is a trusted and well-reviewed case maker, so a sale of its products on Amazon may well be of interest to some of you. Particularly those of you who've so far managed not to break that beautiful screen on you Samsung Galaxy S8 or S8+, as there are cases for those devices starting at $4, as well as many others. Deals are also available for cases that fit Samsung phones such as the Galaxy S7, S7 Edge, S6 Edge, and Note 5. Read More[Deal Alert] Caseology are having a sale on…
  11. Play Protect is starting to roll out to all devices on Google Play Services 11

    Androidpolice.com - Gadgets
    07.20 / 13:43 androidpolice.com
    Back at Google I/O in May, Google announced Play Protect, the consumer-facing evolution of Verify Apps, which is the background app check service that makes sure you don't have any suspicious or malicious software installed on your device. Verify Apps has existed for many years and has grown from an opt-in feature to an opt-out one, then to a background process, and then earlier in February it started displaying the apps it had scanned. Read MorePlay Protect is starting to roll out to all…
  12. Microsoft Smashes Windows 10 Support for These CPUs

    Laptopmag.com -Gadgets
    07.20 / 13:32 www.laptopmag.com
    It's official: Microsoft has ended Windows 10 support for PCs with older Intel Atom Clover Trail CPUs. Specifically, machines with those chips can't upgrade to the Creators Update.“Recognizing that…
  13. Planning to watch a pirated version of Game of Thrones? HBO is coming

    Bgr.in - Gadgets
    07.20 / 13:29 bgr.in
    If you’re a Game of Thrones fan and simply cannot wait till HBO airs each episode, then you have something more than spoilers to worry about. HBO is maintaining constant vigilance online and is tracking every pirated version for the latest season. While the Season 7 premiere episode saw the maximum number of viewers tuning in to watch it, there were even more who streamed the series online through pirated sites or other illegal sources. HBO has now gotten quite serious regarding Game…
  14. Meizu’s latest teaser confirms secondary display on Pro 7: Here’s everything you need to know

    Bgr.in - Gadgets
    07.20 / 13:29 bgr.in
    The Meizu Pro 7 has been a part of rumor mills for quite some time now. The company recently announced that it will be launching the Pro 7 and Pro 7 Plus smartphones in China on July 26. Now, the company has posted a teaser on Twitter hinting at the USP of the phone — the secondary display. While we already knew that the smartphone would come with a secondary display, this is the first time Meizu has officially confirmed the existence of the feature. The tweet reads “A new…
  15. Apple starts Machine Learning blog for AI students, researchers and developers

    Bgr.in - Gadgets
    07.20 / 13:29 bgr.in
    After publishing its first Artificial Intelligence research paper in an academic journal last year, Apple has today announced its Machine Learning blog. The official Apple Machine Learning Journal will allow Apple’s software engineers to share their research and innovations. According to the blog, followers can “read posts written by Apple engineers about their work using machine learning technologies to help build innovative products for millions of people around the…
  16. OnePlus 5 gets support for Snapdragon Music and MusicFX apps

    Bgr.in - Gadgets
    07.20 / 13:29 bgr.in
    OnePlus 5 users can now install the MusicFX app. Courtesy an XDADeveloper member, OnePlus 5 users can now download and install the Snapdragon Music and MusicFX apps over the internet. There are a number of CAF-optimized applications that are made to run well on Snapdragon devices. A popular one is the Snapdragon Camera, and now Snapdragon Music is available too. To download the Snapdragon Music and MusicFX apps, these are the APK files – Snapdragonmusic.apk and MusicFX.apk. Just go…
  17. Intex Aqua Lions 3 with Android Nougat, 4,000mAh battery launched, priced at Rs 6,499: Specifications and features

    Bgr.in - Gadgets
    07.20 / 13:29 bgr.in
    Catering to the growing demand of 4G VoLTE-enabled smartphones, homegrown Intex launched its Aqua Lions 3 today. Priced at Rs 6,499, the Intex Aqua Lions 3 is available in Champagne and Black color choices. One of the key highlights of the affordable smartphone is that it comes with SwiftKey keyboard by Microsoft which makes regional language input easy. The Intex Aqua Lions 3 includes support for 22 Indian languages and is powered by the newest Android operating system. In addition to…
  18. Google Maps brings Street View to the International Space Station

    Siliconrepublic.com - Gadgets
    07.20 / 13:29 siliconrepublic.com
    Google Maps goes out of this world to mark the 48th anniversary of the first manned mission to the moon The post Google Maps brings Street View to the International Space Station appeared first on Silicon…
  19. Tweet success: Twitter says action against trolls is working

    Siliconrepublic.com - Gadgets
    07.20 / 13:29 siliconrepublic.com
    People are now experiencing significantly less abuse, Twitter claims. The post Tweet success: Twitter says action against trolls is working appeared first on Silicon…
  20. Samsung Galaxy S8/S8+ on T-Mobile getting new update

    GSMArena.com - News
    07.20 / 13:28 gsmarena.com
    T-Mobile has started pushing out a new update to Samsung Galaxy S8/S8+ units on its network. Arriving as version G950USQU1AQGA and G955USQU1AQGA, respectively, the update - as per information on the carrier's website - brings several system improvements. As clear from the screenshot below, the update - which weighs in at over 130MB - also includes Android security fixes for July. Reportedly, a UMTS 911-related change is also included. Given that the roll out has just begun, it…