Live data from Hacker News

Facebook denies it collects call and SMS data from phones without permission

techcrunch.com

71–80 of 370 posts

Re: Facebook denies it collects call and SMS data from phones without permission

#71
The problem is not collecting its connecting the data with users who did not give permission.

The social graph should be one way not two-way and unrelated data should be discarded.

Like in the post we had a few days ago where someone exported his Facebook data and got call histories from his mother in his data.

Re: Facebook denies it collects call and SMS data from phones without permission

#72
post #59
post #6

I notice the Facebook response is all written in present tense - technically not specifying whether they were abusing the laxness of android v16 up until Oct 2017... And I trust everything Facebook say precisely as much a Zuckerberg told us all we should with his much-quoted quip "They trust me. Dumb fucks."

I feel like if you should quote a very inflammatory and controversial "quip" you should at least provide a source. Maybe I'm the only one on HN that hasn't heard about it, but even so, sources shouldn't be omitted.

[deleted]

Re: Facebook denies it collects call and SMS data from phones without permission

#73
post #38
post #36

Earlier quoted context omitted.

> nobody wants to waste time reading them How about a law that requires the party presenting legal paperwork to show that the recipient could have read the document. Use an algorithmic method to estimate the reading time, take off ~33% to account for variance in reading ability, and declare that the minimum time that must be spent with the document. If you cannot show that e.g. someone clicked "I Agree" at lest 5 min…

No thank you. How about present your TOS in a form that is understandable by the average user in a span of 2 minutes? Without being a lawyer...(and I doubt you have 2 minutes at all)

The OP point was that the app creator will be forced to consider how many lines of text will he put in the EULA, if adding such a law with a force timeout and your EULA means the user has to wait 10 minutes you have to think about removing some crap.

Don't do creepy things should be a different law

Re: Facebook denies it collects call and SMS data from phones without permission

#74

Earlier quoted context omitted.

That is worrying. The iOS security model would have served you better; Facebook could never accidentally forget you’d said no.

> That is worrying. Indeed. :\ > The iOS security model would have served you better; Facebook could never accidentally forget you’d said no. Interesting, so you mean this is the case even if I uninstall and reinstall the app? What if I wipe the OS and reinstall (as "cleanly" as is possible)?

In the iOS security model there's no fixed grab-bag of permissions you accept when an app is installed. Instead the app must explicitly ask for access to each credential on an as-needed basis while the app is running. The request must happen when you request to use that particular feature. And the app is expected to continue working if you say no; just with the corresponding features disabled. So for example, on iOS whatsapp only requests camera access when you try to take a photo in the app.

If you say no, facebook can't access the data. Facebook can't conveniently forget that you said no and access the data anyway - if you say no at the system prompt, the OS won't give the app access to that data in the first place.

The system isn't perfect - it turns out my mum wasn't getting chat notifications on her iphone because she doesn't know what notifications are and she's been saying no to the prompts. But I find it somewhat refreshing to see beginner users erring on the side of saying no, rather than always saying yes to every random prompt the computer spits out. Fail-private is better than fail-public.

Re: Facebook denies it collects call and SMS data from phones without permission

#75
post #14

Earlier quoted context omitted.

> Much of this blame goes on Android and some on iOS/Apple. Which part of the blame goes on Apple?

Apple had zero permission management on the contact book, it was wide open. Especially FB and LinkedIn exploited that heavily and partly do to this day.

Oh really? I didn't know that. Can you link me up with something about that? Thanks.

Re: Facebook denies it collects call and SMS data from phones without permission

#76
post #5

The Facebook blog post includes this screenshot [0]. That's definitely an opt-in, although I could imagine a non-technical person clicking through it without reading the grey text. Better than nothing. [0]: https://fbnewsroomus.files.wordpress.com/2018/03/opt-in_scre...

It is not "better than nothing," it is the minimum that is technically and legally required. The UI is intentionally deceptive. The text is deceptive. The big text says "Text anyone in your phone," which sounds great, but doesn't actually say anything about data sharing. The small low contrast text, describes what they're doing. They know that by putting it small and grey, most people wont read it. The buttons are de…

it appears to be a result of extensive A/B/C ... XY testing. In a way, the users themselves have chosen it.

Re: Facebook denies it collects call and SMS data from phones without permission

#77
post #6

I notice the Facebook response is all written in present tense - technically not specifying whether they were abusing the laxness of android v16 up until Oct 2017... And I trust everything Facebook say precisely as much a Zuckerberg told us all we should with his much-quoted quip "They trust me. Dumb fucks."

this quip is mentioned here: https://en.wikiquote.org/wiki/Mark_Zuckerberg

Re: Facebook denies it collects call and SMS data from phones without permission

#78
post #74

Earlier quoted context omitted.

> That is worrying. Indeed. :\ > The iOS security model would have served you better; Facebook could never accidentally forget you’d said no. Interesting, so you mean this is the case even if I uninstall and reinstall the app? What if I wipe the OS and reinstall (as "cleanly" as is possible)?

In the iOS security model there's no fixed grab-bag of permissions you accept when an app is installed. Instead the app must explicitly ask for access to each credential on an as-needed basis while the app is running. The request must happen when you request to use that particular feature. And the app is expected to continue working if you say no; just with the corresponding features disabled. So for example, on iOS…

I don't think Facebook ever "forgot" what I said, rather it was that I was reinstalling the app for whatever reason, so it really didn't have that information. That's why I asked what would happen if something similar happened on iOS.

Also note that Android's new security model (version 6+?) is pretty similar to what you described, but yes, I do believe this incident occurred on an older version.

Re: Facebook denies it collects call and SMS data from phones without permission

#79

So, this happened and we have confirmed about the dark patterns whether consented or not. What are good alternatives in this "Network effect" age? Facebook - I hardly use anymore. It exists undeleted because it serves as a kind of Social ID. I don't have the App installed anywhere, neither do I access it from my regular browser. The thing I'm struggling to get alternative for is WhatsApp. How could I talk to all my c…

Also: Facebook works on every platform, while at Signal they have a strange cellphone fetish.

I would love to use Signal, but I have to use Telegram. The Telegram desktop app is awesome, and it doesn't need a cellphone.

Re: Facebook denies it collects call and SMS data from phones without permission

#80

So, this happened and we have confirmed about the dark patterns whether consented or not. What are good alternatives in this "Network effect" age? Facebook - I hardly use anymore. It exists undeleted because it serves as a kind of Social ID. I don't have the App installed anywhere, neither do I access it from my regular browser. The thing I'm struggling to get alternative for is WhatsApp. How could I talk to all my c…

I don’t believe Signal will be sold. Moxie (thanks to Brian Acton) just launched the Signal Foundation [1]

[1] https://signal.org/blog/signal-foundation/

Post reply on HN