Facebook Accused of Misusing the Phone Numbers

Facebook Accused of Misusing Phone Numbers

Facebook users have found that a phone number they added to their account for the sole purpose of two-factor authentication can be used to look up their account by advertisers and strangers.

Two-factor authentication is becoming more common with the accounts that we use every day, especially our social media accounts. This two-factor authentication is supposed to be used to ensure the security and privacy of your data, but what if that phone number was being used to find you?

That's exactly what Jeremy Burge, founder of Emojipedia, tweeted on Friday. His tweets shoulder that people can find your Facebook profile using the phone number users input for two-factor authentication. The worst part, Burge said, is that you can't opt out.

This comes almost a year after Facebook said it stopped allowing people to search for profiles by phone numbers, and about five months after Gizmodo found that the phone number being used for two-factor authentication was also being provided to advertisers for targeted posts.

The tying of users' phone numbers with targeted advertising and searches puts security and privacy at odds, according to CNET, potentially driving people away from an important feature that protects user accounts from takeovers.

In a tweet from Alex Stamos, Facebook's former chief information officer, Stamos explained that Facebook "can't credibly require 2FA for high-risk accounts without segmenting that from search & ads." 

The company acknowledged the issue, but declined to say whether it planned on keeping two-factor authentication phone numbers and search separated. 

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities