For anyone interested in Facebook's SDK behaviour on Android, there's a good video[1] from 35C3 covering this topic, and a related HN discussion thread[2].
[1] - https://media.ccc.de/v/35c3-9941-how_facebook_tracks_you_on_...
Zoom’s Use of Facebook’s SDK in iOS Client
171–180 of 272 posts
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#172Earlier quoted context omitted.
> the Facebook SDK was collecting device information unnecessary for us to provide our services. Sorry state of Apple App security and privacy - all your apps are swarms of data collection and privacy abuses. Apple built this world - and Apple is to blame. Zoom is to blame too. And finally individual app developers should also alert everyone on what's truly happening in their apps.
While I have zero love for any given hyper capitalistic business like Apple, Android is not any better on the whole in this space, and in some ways measurably worse (especially when you take into account what devices actually hold the largest market share)
This is true, but Apple touts how much better they are about Privacy, and charges a premium for it. Google is more up front that they make little money on the initial sale, and are dependent on advertising to make money.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#173I really don’t appreciate the downvoting mobs by certain companies.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#174Earlier quoted context omitted.
> Blaming Apple? Why, when Zoom is on the Play Store as well? Blame Apple because they constantly tout the iPhone as being "privacy respecting" and "what happens on your iPhone stays on your iPhone"[0], while they A. Apple doesn't default to "limit tracking", or at least make "limit tracking" an option on setup/iOS upgrade B. Apple doesn't penalize developers for using Facebook's SDK with auto data collection (ie. pu…
> the Facebook SDK was collecting device information unnecessary for us to provide our services. Sorry state of Apple App security and privacy - all your apps are swarms of data collection and privacy abuses. Apple built this world - and Apple is to blame. Zoom is to blame too. And finally individual app developers should also alert everyone on what's truly happening in their apps.
I once had to integrate a third party tracking framework to an Android app. The PM wanted to track everything, even the apps that were installed on the device. Google immediately took our app down because of that.
And preventing this from happening with SSL pinning is not a barrier for Google or Apple because they can easily bypass that.
Since they have the means to inspect the traffic at scale then they should be able to filter out apps that are violating your privacy.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#175Earlier quoted context omitted.
I don't want to live in a world where my parents and grandparents are expected to pull up Wireshark to figure out if the app they're using will record their front camera without consent. Blaming Zoom and FB is entirely acceptable here, it is their responsibility to keep my data private. Blaming Apple? Why, when Zoom is on the Play Store as well? https://play.google.com/store/apps/details?id=us.zoom.videom... >As long…
Just to take you up on possible FOSS solutions: If anyone is looking for a private and open source video chat platform self-hosting NextCloud [0] might be worth a try. [0]: https://nextcloud.com/talk/
Jitsi.org was discussed here recently as well.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#176Earlier quoted context omitted.
> Blaming Apple? Why, when Zoom is on the Play Store as well? Blame Apple because they constantly tout the iPhone as being "privacy respecting" and "what happens on your iPhone stays on your iPhone"[0], while they A. Apple doesn't default to "limit tracking", or at least make "limit tracking" an option on setup/iOS upgrade B. Apple doesn't penalize developers for using Facebook's SDK with auto data collection (ie. pu…
Not just that Apple has actually started to sell users' data to Goldman Sachs as well. The worst part is, this is opt-in. Not opt out. And opt out is incredibly so backward that you need to email some address instead of just clicking a button. So I don't see how they're a "privacy respecting company" either. It's just marketing BS. https://techcrunch.com/2020/03/24/apple-card-gets-updated-pr...
I'm not sure you read the article you linked to properly:
> Apple is changing the privacy policy for Apple Card with iOS to share a richer, but still anonymized set of data with Goldman Sachs in order to allow the creation of a new credit assignment model, which could expand the group of users that may be able to secure credit. > There is also a beefed up fallback method in the works that will allow users to share more personal data on an opt-in basis with Goldman Sachs if you do not at first get approved
So anonymised by default.
Opt-in, IF you want to share more personal data.
Do you also understand it's Goldman Sachs that run the credit cards, accounts, etc, they're not just randomly sharing data with Goldman Sachs?
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#177So it sounds like Zoom was using the Facebook SDK, and now they're not. I've been and iOS developer for a long time. I can tell you from experience that everyone does this. I have never worked for anyone who didn't ask for their app to include some combination of Facebook, Google, Flurry, AppCenter, Segment, Intercom, Parse, or whatever other random analytics framework the PM happens to be infatuated with. Getting ma…
I don't want to live in a world where my parents and grandparents are expected to pull up Wireshark to figure out if the app they're using will record their front camera without consent. Blaming Zoom and FB is entirely acceptable here, it is their responsibility to keep my data private. Blaming Apple? Why, when Zoom is on the Play Store as well? https://play.google.com/store/apps/details?id=us.zoom.videom... >As long…
Why not blame Facebook for being the most data hungry and privacy disrespecting for-profit entity ever known to man? (Google is tied for that spot, Microsoft close third)
It‘s a little bit like blaming the person making the deal with the devil. Of course on some level they deserve blame for engaging with evil but evil presenting itself in a slick interface should also get its fair share.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#178What if mobile platforms (iOS, Android... ) changed the security/privacy policy so that apps had to request the “network access” permission, either whitelisting domains they want to talk to, or askingfor wildcard access? Most apps shouldn’t need wildcard access, and the mobile device could include a warning when an app does this teaching users that they should be careful with the app. This way at least when you insta…
Most apps are extremely chatty and prompts like these may not end up being useful.
It worked for location access on iOS, and that was just adding a flashing blue icon. Many apps stopped using the location all the time, and now there's a popup every few days telling you how often the app requested your location in the background.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#179So it sounds like Zoom was using the Facebook SDK, and now they're not. I've been and iOS developer for a long time. I can tell you from experience that everyone does this. I have never worked for anyone who didn't ask for their app to include some combination of Facebook, Google, Flurry, AppCenter, Segment, Intercom, Parse, or whatever other random analytics framework the PM happens to be infatuated with. Getting ma…
I don't want to live in a world where my parents and grandparents are expected to pull up Wireshark to figure out if the app they're using will record their front camera without consent. Blaming Zoom and FB is entirely acceptable here, it is their responsibility to keep my data private. Blaming Apple? Why, when Zoom is on the Play Store as well? https://play.google.com/store/apps/details?id=us.zoom.videom... >As long…
Little Snitch seems to have solved it fairly well on macOS.
Apple doesn’t allow software like that on iOS.
Re: Zoom’s Use of Facebook’s SDK in iOS Client
#180So it sounds like Zoom was using the Facebook SDK, and now they're not. I've been and iOS developer for a long time. I can tell you from experience that everyone does this. I have never worked for anyone who didn't ask for their app to include some combination of Facebook, Google, Flurry, AppCenter, Segment, Intercom, Parse, or whatever other random analytics framework the PM happens to be infatuated with. Getting ma…
I don't want to live in a world where my parents and grandparents are expected to pull up Wireshark to figure out if the app they're using will record their front camera without consent. Blaming Zoom and FB is entirely acceptable here, it is their responsibility to keep my data private. Blaming Apple? Why, when Zoom is on the Play Store as well? https://play.google.com/store/apps/details?id=us.zoom.videom... >As long…
Also, collecting income is and always has been possible without selling/leaking private user data. This is a red herring.