41–50 of 188 posts
Earlier quoted context omitted.
Would it be less creepy if facebook had a list of libraries they use, and uploaded a list of missing libraries instead of the total collection?
It would be less creepy if they actually asked the user if they want to upload those system files before uploading them.
Earlier quoted context omitted.
They don't upload the library just their filename and hash. Probably for bug troubleshooting, device fingerprinting and feature availability data. It's a bit much, device fingerprinting like this should get you banned from the play store. However there are legitimate uses for this.
They're uploading the actual binary as well: https://twitter.com/wongmjane/status/1167463077748436993
The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt any users are being harmed by this but it’s a violation of the software creator’s rights.
i was looking around to find lore regarding sandboxing android apps, so far i found this interesting: https://www.reddit.com/r/androidapps/comments/5n7ak9/any_app... And this too: https://www.gtricks.com/android/how-to-sandbox-android-apps-...
Isn’t this potentially a copyright violation? Especially on Qualcomm devices (such as the Jolla phone) Qualcomm explicitly forbids you from distributing their OpenGL drivers. So if facebook copies libGLESv2.so off from the device they are potentially performing straight piracy at that point. If I recall the damages demanded by RIAA it was several hundred k per infringement.
I was going to say this isn’t a big deal but copying and uploading the libraries is actually illegal (copyright violation) and users likely can’t even consent to this even if it is in the Facebook ToS as many android phones contain proprietary libraries not licensed for redistribution. The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt an…
I was going to say this isn’t a big deal but copying and uploading the libraries is actually illegal (copyright violation) and users likely can’t even consent to this even if it is in the Facebook ToS as many android phones contain proprietary libraries not licensed for redistribution. The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt an…
I was going to say this isn’t a big deal but copying and uploading the libraries is actually illegal (copyright violation) and users likely can’t even consent to this even if it is in the Facebook ToS as many android phones contain proprietary libraries not licensed for redistribution. The creators of those various libraries should have a valid legal case against Facebook here, if they want to exercise it. I doubt an…
Perhaps, but sadly, I don't actually foresee vendors wanting to exercise that right. From a business perspective, why bother?
Earlier quoted context omitted.
They could download the stock roms from the major manufacturers, only ship the hashes, and match up library versions that way.
I'm not making a moral judgement (FB is a big yikes), just technical. They'd have to: - build lists of every phone, including carrier variant and internal revisions (pretty common!), to make sure they could be sure they had a complete library - rely on the manufacturer to publicly post the ROM (cheaper mfg wont do this) (or somehow retrieve the URL from the update mechanism, said URL not easily accessible from usersp…
I'd expect that they're doing this because they'd like to diagnose crashes or bugs on systems that they don't have the hardware for. It's still somewhat creepy and possibly a fingerprinting mechanism.