Earlier quoted context omitted.
I don’t think there was any exploit. My understanding is that a third-party app asked for access, and people gave consent, and CA mined data. I’m the last person you’d see defending FB, but this just seems like the same thing everyone has been doing on FB as a platform since FarmVille launched years ago?
I believe that's correct. People gave concent to X but Y used the data. Perhaps that's a violation of FB's ToS for apps? That said, (personal) data gets brokered all the time. And, btw, sometimes the buyers are gov agencies. Who needs surveillance when people willing hand it all over, often in public. Perhaps not the public will finally begin to understand why the phone meta data "intrusion" was so bad.
Also, i wonder if this violates any political campaign laws aswell?