PORTLAND, Ore. — Open the Facebook app on your phone and you’ll likely be prompted to enter your mobile phone number.
Facebook encourages users to add your phone number to your account so you can reset your password and find friends. But the feature has a flaw that could allow strangers to take over your Facebook account.
“I feel very uncomfortable,” said Heber Thurston. The Portland man found himself in control of a stranger’s Facebook profile.
“What if he’s a business owner and I’ve got certain documents that no one should have?” asked Thurston.
The trouble started after Thurston bought a brand new cell phone. Thurston tried to change his Facebook password by using his new number.
“Bang, this guy’s Facebook shows up!” said Thurston. “I got all his stuff from days and days.”
The previous owner had his Facebook account linked to a phone number and never changed it. Thurston was reassigned the number. It allowed him to access another man’s Facebook profile.
“We regret the inconvenience and encourage people to keep their contact information up to date, including deleting old phone numbers from their account,” said a Facebook spokesperson.
A lot of people forget.
“If you signed up for Facebook in 2005- we don’t really correlate that your phone number is still on there,” said Travis Smith of Tripwire.
Smith says there could be problems with any social media that is tied a phone number. If a user forgets about the account and changes phone numbers, someone else could eventually take it over.
“It’s the same thing as when you are changing addresses and you have your bank statements and credit card statements going to your address,” explained Smith. “You want to change your address before you move.”
Smith suggests users avoid entering your phone number when prompted.
“If they don’t absolutely need it, don’t put it in there.”
No comments:
Post a Comment