"FB internal Thrift over HTTP" removed my phone – how is this possible? (2022)

<a href="https:&#x2F;&#x2F;www.facebook.com&#x2F;hacked&#x2F;disavow?u=100011623930833&amp;n=xNhwM2wR&amp;l=id_ID&amp;ext=1712891263&amp;hash=AS-5oymRVLTaU8v72t0" rel="nofollow">https:&#x2F;&#x2F;www.facebook.com&#x2F;hacked&#x2F;disavow?u=100011623930833&amp;n=...</a>

My guess:<p>* Some engineer is testing backup&#x2F;restore of account data, and is running it against production and didn&#x27;t realise that restoring certain info has side effects of sending out notifications.

Some batch job (incorrectly?) deactivated certain sessions for whatever reason?<p>Getting &quot;someone ran a one off job or migration that didn&#x27;t do the right thing&quot; vibes.<p>For instance, they could have tried implementing a &quot;deactivate recovery phone numbers if this dataset from cell providers show the owner changed&quot; that went wrong

please help me to restore my hacked account, my account has been hacked by someone whose ID I don&#x27;t know: <a href="https:&#x2F;&#x2F;www.facebook.com&#x2F;bayu.syaputra.92102?mibextid=ZbWKwL" rel="nofollow">https:&#x2F;&#x2F;www.facebook.com&#x2F;bayu.syaputra.92102?mibextid=ZbWKwL</a>

Thread about the issue was created a year ago, with periodic spikes of people seeing it, most recently today.

Does Facebook use Apache Thrift internally? That’s the only thing I can think of

for those wondering wtf this is, it sounds like something got used as a relay to do some account takeovers at FB.

083875789184