Facebook has restricted the rate at which users can perform phone number searches on its mobile website in order to block a recently disclosed method of harvesting phone numbers. Facebook: “The ability to search for a person by phone number is intentional behavior and not a bug in Facebook” Security researcher Suriya Prakash publicly disclosed that Facebook’s phone number search feature can be abused to find the name of people who own randomly generated numbers. Without a strict limit on how many searches a user can perform, attackers could generate sets of thousands of sequential phone numbers and use the website’s search feature to discover if any of them are associated with Facebook accounts.”]

