Facebook's phone search can be abused to find people's numbers, researchers say
Attackers can abuse Facebook's phone search feature to find valid phone numbers and the name of their owners, according to security researchers.
The attack is possible because Facebook doesn't limit the number of phone number searches that can be performed by a user via the mobile version of its website, Suriya Prakash, an independent security researcher said in a recent blog post.
Facebook allows users to associate their phone numbers with their accounts. If fact, a mobile phone number is required to verify any new Facebook account and unlock features like video uploading or timeline URL personalization.
When adding phone numbers in the "Contact info" section of their respective Facebook profile pages, users can choose if they want to make this information visible to the general public, only to their friends or if they want to keep it to themselves, which is a good privacy option.
Keep reading...
http://www.techhive.com/article/2011396/facebooks-phone-search-can-be-abused-to-find-peoples-numbers-researchers-say.html
