facebook-users’-phone-numbers-are-for-sale-through-a-telegram-bot

Facebook users’ phone numbers are for sale through a Telegram bot

Someone has gotten their hands on a database full of Facebook users’ phone numbers, and is now selling that data using a Telegram bot, according to a report by Motherboard. The security researcher who found this vulnerability, Alon Gal, says that the person who runs the bot claims to have the information of 533 million users, which came from a Facebook vulnerability that was patched in 2019.

With many databases, some amount of technical skill is required to find any useful data. And there often has to be an interaction between the person with the database and the person trying to get information out of it, as the database’s “owner” isn’t going to just give someone else all that valuable data. Making a Telegram bot, however, solves both of these issues.

Few days ago a user created a Telegram bot allowing users to query the database for a low fee, enabling people to find the phone numbers linked to a very large portion of Facebook accounts.

This obviously has a huge impact on privacy. pic.twitter.com/lM1omndDET

— Alon Gal (Under the Breach) (@UnderTheBreach) January 14, 2021

The bot allows someone to do two things: if they have a person’s Facebook user ID, they can find that person’s phone number, and if they have a person’s phone number they can find their Facebook user ID. Though, of course, actually getting access to the information you’re looking for costs money — unlocking a piece of information, like a phone number or Facebook ID, costs one credit, which the person behind the bot is selling for $20. There’s also bulk pricing available, with 10,000 credits selling for $5,000, according to the Motherboard report.

The bot has been running since at least January 12, 2021, according to screenshots posted by Gal, but the data it provides access to is from 2019. That’s relatively old, but people don’t change phone numbers that often. It’s especially embarrassing for Facebook as it historically collected phone numbers from people including users who were turning on two-factor authentication.

At the moment it’s unknown if Motherboard or security researchers have contacted Telegram to try to get the bot taken down, but hopefully it’s something that can be clamped down on soon. That’s not to paint too rosy a picture, though — the data is still out there on the web, and it’s resurfaced a couple of times since it was initially scraped in 2019. I’m just hoping that the easy access will be cut off.

asus’s-first-case-fan-is-the-120mm-rog-strix-xf120

Asus’s First Case Fan Is the 120mm ROG Strix XF120

(Image credit: YouTube)

When you think of Asus, generally, you only think of its as a motherboard, graphics card, and laptop manufacturer. But the company has expanded its influence over the past few years to include PC peripherals, PC cases, and AIO liquid coolers. So it should come as no surprise that Asus is entering the case fan market with its own ROG Strix XF120 120mm chassis fan. 

The XF120 features high-end specs. Similar to the ML120s from Corsair, the XF120 comes with a MagLev bearing, reinforced fiberglass material, grooved fan blades with rounded edges, and anti-vibration pads.

The operating range for the XF 120 is quite good, with its minimum RPM targeted at just 250RPM and a maximum RPM of 1800RPM. This is perfect for a case fan, as generally, case fans don’t need to run at the same RPM levels as CPU cooler fans.

(Image credit: YouTube)

XF120 Specs:

Acoustics:


22.5dba

Cooling Stats:


62.5CFM/3.7mmH20

Longevity:


400,000 hours

For Asus’ first chassis fan, the specs for the XF120 are quite good; compared to big case fan brands like the Silent Wings 3 from Be Quiet! or the Fractal Design Venturi, the XF120 brings similar performance with better acoustics.

But compared to Asus’ biggest competitor, the Corsair ML120, that fan has better cooling performance specs-wise. But that fan also has a much higher RPM range and is optimized towards airflow and static pressure, whereas Asus’ XF120 is optimized purely for airflow, not static pressure.

The Asus XF120 looks promising, but we still don’t know what it will cost – all we know is a release target for April. Hopefully, we can get a few of these XF120s in our lab to test in the future.