Live data from Hacker News

If you care about user privacy, don’t use Facebook JavaScript SDK

simplelogin.io

41–50 of 105 posts

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#41
post #11
post #7

Why would any developer or engineer who has even an iota of consideration for privacy, web standards, and, indeed, humanity want to work for such a repugnant company as Facebook?

Because a lot of people aren't privileged enough to be able to quit their job on the spot.

Pretty sure working for facebook is proof or that you are in the upper 1% worldwide.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#42

Earlier quoted context omitted.

If you think deferring ethics to the customer clears your conscience, you need some self examination.

Ethics? The problem is practical; do your users want the features or do they care about privacy? Let them make the choice, and don't hide it from them. That's the ethical behavior. It's unethical to assume everyone values everything the same, including privacy. Some people don't care about it as much as you do, nor should they.

Okay, should I assume you dont value yours? Privacy is a human right. There is no ethical argument for depriving humans of their rights.

If you want to argue that privacy is not a right, we can start there.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#43

Earlier quoted context omitted.

Ethics? The problem is practical; do your users want the features or do they care about privacy? Let them make the choice, and don't hide it from them. That's the ethical behavior. It's unethical to assume everyone values everything the same, including privacy. Some people don't care about it as much as you do, nor should they.

Okay, should I assume you dont value yours? Privacy is a human right. There is no ethical argument for depriving humans of their rights. If you want to argue that privacy is not a right, we can start there.

There's no ethical argument for depriving someone of food but people fast all the time. Further, the war crimes my gym trainer is guilty of know no bounds!

You can give up your "human rights" for convenience/pleasure as long as you can reassert them down the line.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#44
post #30

Earlier quoted context omitted.

This is a bad piece of advice. Two things I don’t ever want to take responsibility for when starting a project are user authentication and payment processing. I think I know best practices for each, but so does everyone who has gotten hacked.

I don't disagree with you, but the state of affairs is basically a protection racket. If you sell out your users to Facebook, they'll keep you safe from all the other attackers.

Most frameworks come with their own authentication module. I still wouldn’t write my own.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#45
post #20
post #17

Earlier quoted context omitted.

I don't think that storing creds is suitable for newbies either. All authentication is complex and just using HTTPOnly and DB backend is not a solution at all.

Depends on what the project is and also doesn't change the fact that this doesn't happen. Most solo bootstrapped projects are not popular enough initially for someone to spend money / effort to hack them. When they do become somewhat popular though (very small minority of course), I suspect most founders bring experts on board, as they absolutely should. > just using HTTPOnly and DB backend is not a solution at all M…

>Most solo bootstrapped projects are not popular enough initially for someone to spend money / effort to hack them.

Strong contender for Most Horrifying Thing I've Read This Morning.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#46
The moral of the story is that any time your page requests resources or javascript from a third-party source, you are handing over some information about your users to that third-party.

Did you get your user's consent to do that? Probably not.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#47

> If you care about user privacy, don’t use Facebook. Fixed that for you...

I was going to say the same thing, only in the form of "Duh". Also in the news today, the sky is blue, grass is green, and fire is hot. How in 2019 would any developer believe that any social platform cares about privacy is beyond me. If a social platform is offering anything (the platform itself, SDKs, APIs, etc) for free, then they are going to make money from you some other way. What ever they are offering cost th…

Every internet company ever since 2010.

2010s: "We take your security very seriously."

2020s: "We value your privacy."

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#48

Earlier quoted context omitted.

Okay, should I assume you dont value yours? Privacy is a human right. There is no ethical argument for depriving humans of their rights. If you want to argue that privacy is not a right, we can start there.

There's no ethical argument for depriving someone of food but people fast all the time. Further, the war crimes my gym trainer is guilty of know no bounds! You can give up your "human rights" for convenience/pleasure as long as you can reassert them down the line.

Fasting and training are both conscious deliberate choices - how will you frame the loss of privacy in such a manner that it can be agreed to with the same degree of intention? Most people have no idea and don't understand - if you wanna go with the "opt in" solution, you're going to have to make a compelling argument that the people making the decisions are educated enough to make them.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#49

Earlier quoted context omitted.

No. Really. You do have a choice. Exercising unpopular choices frequently requires a spine.

Individually, you have a choice. But not using e.g. WhatsApp needs to be a collective decision or it won't work because everybody else is still stuck in there.

On the other hand, you could be the first among your family/friends to not use FB's products, and slowly others will follow.

Re: If you care about user privacy, don’t use Facebook JavaScript SDK

#50

> If you care about user privacy, don’t use Facebook. Fixed that for you...

Except for the shadow profiles that they make of the 'non-users.'

Whether you like it or not, Facebook et al are tracking you regardless if you have an account.

Post reply on HN