Facebook mobile security loophole lets anyone look up your profile

Facebook is facing a new wave of criticism for two-factor authentication shenanigans

As TechCrunch reports, a tweet by Jeremy Burge on Friday raised alarm bells as it revealed Facebook won't allow users to opt-out of having their phone number used to look them up.

As pointed out by the folks over at TechCrunch, Facebook has now associated the phone numbers entered by users to secure their account with two-factor authentication with their profiles, essentially allowing anyone to look them up using their phone numbers.

A reporter with The Telegraph was alarmed when her profile could be searched using her phone number which she had never given to Facebook.

But, it was not previously clear that this also includes numbers provided to the site only for security reasons.

The good news is that while you can't opt out, you can control who can look up your profile using your phone number.

Even if you have your phone number or email address hidden from your profile, these can be used to look you up. The default setting is "everyone", but you can change that to "friends of friends" or just "friends".

Facebook also apparently shares numbers used for 2FA with its other services.

Facebook has been accused of abusing a security feature in order to weaken user privacy, after the social network was found using phone numbers initially handed over for account safety for other purposes.

More news: Schiff: There is 'direct evidence' of Trump collusion

Users are only given three options: Everyone, Friends of friends, and Friends.

Dailymail.com has reached out to Facebook for comment. As of May a year ago, Facebook began providing support for 2FA without a phone number via authenticator apps.

'Now it can be searched and there's no way to disable that'. And, you can't opt-out. The fraction of users that have [two-factor authentication] enabled must be small, so the usage gain is minimal, while the PR risk is huge.

The news comes from Jeremy Burge, the man behind Emojipedia.

The issue is with Facebook's two-factor authentication tool which allows users to login securely by verifying their identity using a code sent to their smartphone. Third-party systems, like Google Authenticator and Duo Security can also be used to add an additional layer of protection onto your account. Before then, a phone number was the only mandatory option.

All of this is taking place as Facebook pushes ahead with a plan to consolidate its user data across Facebook, Instagram and WhatsApp, in an effort to blunt the impact of Europe's GDPR privacy regime. Zeynep Tufecki, a leading security expert states "Using security to further weaken privacy is a lousy move - especially since phone numbers can be hijacked to weaken security".

'Phone number is such a private, important security link. Facebook says it's done so to make sure you find people you know but aren't yet friends with.

'Messing with 2FA is the anti-vaccination misinformation of security.

Related News:

  • How To Enable Dark Mode for Messenger on Android and iOS

    How To Enable Dark Mode for Messenger on Android and iOS

    Once you do this, the other person (or people) in the chat will be sent a text letting them know that a message was removed. While a large number of big-names have added dark modes , there are still plenty that need to jump on the bandwagon.
    Lavrov condemns 'flagrant interference' by US in Venezuela

    Lavrov condemns 'flagrant interference' by US in Venezuela

    Guaido has since been recognised by most Western nations as the rightful leader of Venezuela. "Maduro is at permanent risk". The EU said that any measure against his freedom or safety would represent "a major escalation of tensions".
    Islamic State faces final territorial defeat in eastern Syria battle

    Islamic State faces final territorial defeat in eastern Syria battle

    The final push comes a day after US President Donald Trump again jumped the gun on declaring victory over the jihadists. Trump announced in December that he would withdraw us troops with the imminent fall of the extremist group.
  • UN warns of 'complacency' as measles cases soar worldwide

    UN warns of 'complacency' as measles cases soar worldwide

    Many of those live in close-knit communities where they share the same religious beliefs or ethnic backgrounds as their neighbors. Mitch Greenlick, the Portland Democrat behind a proposal making it more hard for families to opt out of vaccine requirements.
    Pakistan says it shot down two Indian air force jets, captured pilot

    Pakistan says it shot down two Indian air force jets, captured pilot

    Hundreds of villagers fled border towns in both India and Pakistan. "This was not a retaliation to continued Indian belligerence". The aircraft was brought down in Jhangar area of Jammu and Kashmir's Rajouri sector, officials in the Indian Army said.
    Jordyn Woods breaks her silence on Khloe Kardashian, Tristan Thompson cheating scandal

    Jordyn Woods breaks her silence on Khloe Kardashian, Tristan Thompson cheating scandal

    However, Jordyn said she'd assume "full responsibility" for the current mess, as she said she shouldn't have been at that party. Replying to a user on Twitter who called Tristan, Jordyn and Khloe "trash", the makeup mogul wrote , "Amen".
  • Missing young California sisters found after spending 44 hours in the forest

    Missing young California sisters found after spending 44 hours in the forest

    HCSO reports they are looking at all contingencies in this situation, to locate Caroline and Leia in a timely manner. A massive search is underway in Humboldt county for two young sisters who wandered away from their home.
    Senate has votes to block Trump's emergency declaration: McConnell

    Senate has votes to block Trump's emergency declaration: McConnell

    Senate Majority Leader Mitch McConnell , R-Ky., told reporters on Tuesday that he expects the Senate will vote before March 18. While a veto by Trump would be on track to be sustained, the legality of Trump's action will also be fought out in the courts.

    Self-Care Is a Self-Celebration for Trump at CPAC

    University of California, Berkeley police arrested a suspect, Zachary Greenberg, on Friday. "Here is the good news", Trump said. President Trump spoke Saturday at CPAC and blasted the Green New Deal , a comprehensive environmentalist plan forwarded by Rep.
  • More than 10 dead after tornadoes hit Lee County, AL

    More than 10 dead after tornadoes hit Lee County, AL

    A number of tornado warnings are in place across the region as the severe weather also caused havoc in Georgia, Florida and SC . The weather service said damaging wind gusts will be the main concern, but tornadoes and hail will also be possible today.
    Meng Wanzhou: Huawei chief executive can be extradited, Canada says

    Meng Wanzhou: Huawei chief executive can be extradited, Canada says

    The chief financial officer is alleged to have circumvented US -based sanctions on Iran while using a subsidiary called Skycom. A Chinese court also sentenced a Canadian to death in a sudden retrial, overturning a 15-year prison term handed down earlier.
    Arsenal vs. AFC Bournemouth - Football Match Report

    Arsenal vs. AFC Bournemouth - Football Match Report

    Mesut Ozil marked his Premier League recall with a goal and an assist as Arsenal cruised to a crushing 5-1 home victory over an out of sorts Bournemouth .


Most liked

Video captures avalanche in Colorado roaring onto highway, covering cars with snow
Colorado's Avalanche Information Center recorded 807 avalanches in February, 444 of which were triggered naturally. The Colorado Department of Transportation said not enough snow made it onto I-70 to impact drivers.

The Shocking Revelations of HBO's Michael Jackson Documentary 'Leaving Neverland'
Allegations of sexual abuse by Jackson first arose in the 1990s and followed him for several decades. Robson and Safechuck testified as adults in court that they were not abused by Jackson.

Trump's sons, Kushner, Manafort targeted in corruption probe
Cummings (D-Md.) made note of media reports that Trump has sought to hide the details of his communications with Putin . Two months after Democrats took control of the House, the Judiciary Committee is getting down to business.

'No agreement was reached' at Trump, Kim summit - White House
The US leader said he thought the summit would be "very successful" and denied he was "walking back" on denuclearisation. Trump and Kim met last June , after which Trump said Kim appeared ready and willing to give up his nuclear program.

SpaceX Successfully Makes Historic Launch And Landing
SpaceX's new crew capsule has arrived at the International Space Station , completing its second milestone in just over a day. EST (1051 GMT), approximately 27 hours after it lifted off from NASA's Kennedy Space Center on a SpaceX Falcon 9 rocket.

Janice Freeman Of ‘The Voice’ Dies At 33
She revealed on Twitter past year that the pop star had helped her family cover some bills until they found permanent housing. Freeman, who competed on season 13 of the hit show, was a fan favorite thanks to her powerful voice and upbeat personality.

House Judiciary to request documents from Trump Jr., dozens more
While the Mueller investigation is focused on specific crimes, Congress' probes will cast a wider net, Nadler said. A spokesman for the Judiciary Committee declined to comment.

Russian cargo ship CRASHES into road bridge in South Korea
It said the ship's Russian captain, whose identity is being withheld, had a blood alcohol content of 0.086 percent. In this representational image, locals view the stricken Muzma Minin in Falmouth, England, Dec. 18, 2018.

Kate Middleton, Meghan Markle ‘Confrontation’ Is True, Royal Expert Confirmed
Speaking to the Sun , he said: " Meghan is likely to buck all traditions when it comes to having the baby, just watch where it is born".

China urges India, Pakistan against 'expansion' of tensions
Kashmir is a mountainous region on the border between the two nations, both of which have claimed ownership of it for decades. Pakistan's prime minister Imran Khan is now proposing to reach to a consensus through talks.

Priyanka Chopra stars in the new Jonas Brothers music video
There's shots of Joe tied up with red rope while Sophie sits on her throne admiring the view. You can get to the back of a very long line, hun.

U.S. conducted first cyber-operation against Russian Federation
Cyber Command strike targeted the Internet Research Agency in the Russian port city of St. Since those indictments, the breadth of the troll farm's activities have come to light.

Tensions ease as Indian pilot released
Varthaman was captured by Pakistan after his Mig-21 Bison was shot down by a Pakistani jet during a fierce dogfight on Wednesday. The facility at Balakot was headed by Yousuf Azhar, the brother-in-law of the JeM chief.

House Intelligence Committee plans to call Trump Organization's Allen Weisselberg to testify
Cohen brought copies of the reimbursement checks and Trump financial statements to bolster his account. Jim Jordan , R-Ohio, that Cohen misrepresented his past in an effort to clean up his public image.

Spurs boss Pochettino apologises for improper conduct
The Spurs boss did admit he "crossed the line" and might apologise to Dean . In the same time I need to apologise to Mike Dean .