lmfao go back to your bomb shelter, Grandpa.
Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
141–150 of 376 posts
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#142Earlier quoted context omitted.
Don't mind me. I'm just going to come into your house and record what commercials you are watching. I'm not spyware I'm just _merely_ wanting to know about my marketing budget. Analogy may not be perfect but it takes serious mental gymnastics to fail to see this as spyware, in my opinion.
It wouldn't be surprising if some Smart TVs are already doing this.
https://samba.tv/
"We use anonymized data to provide a positive advertising experience, enable ad-supported TV networks to keep their shows free, and partner with TV manufacturers which reduces the price of TVs for you."
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#143Seems to be some suggestions now that apps were continuing to crash even after commenting out the FB implementation because FB is managing to do remote API calls just because the framework is linked. https://github.com/facebook/facebook-ios-sdk/issues/1373#iss... > It does not matter. Their libraries are dynamic, and they abuse +load functions for classes with some business logic calls. So, +load will be called anywa…
The Facebook SDK does make some calls on init.
https://developers.facebook.com/docs/app-events/gdpr-complia...
From them: "The Facebook SDK automatically initializes when the app is opened. When the SDK is initializing, it fetches app settings from Facebook. If you want to block all network requests to Facebook, you can disable automatic initialization." If you want to turn it off, you're supposed to set in your app's plist FacebookAutoInitEnabled.
If people are claiming that the SDK is still fetching despite adding that key, that could be breaking some compliance and consent laws...
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#144From the crash log, it looks like the server response it's getting back is missing a field that the SDK wants. Facebook should be able to fix this on their end? Edit: from the issue it looks like they've done something, but people are still reporting crashes…
The description is definitely weird. Any server change change should never crash an app, which should have proper validation for all data that it receives.
Thereby the mitigation "to update something on the server that takes time to propagate" also sounds wrong more like a rollback/mitigation than a fix of the actual issue.
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#145Earlier quoted context omitted.
Don't mind me. I'm just going to come into your house and record what commercials you are watching. I'm not spyware I'm just _merely_ wanting to know about my marketing budget. Analogy may not be perfect but it takes serious mental gymnastics to fail to see this as spyware, in my opinion.
It wouldn't be surprising if some Smart TVs are already doing this.
Didn't Samsung literally get caught uploading screenshots of content played on their TVs to some server? Maybe it was some other company?
These days, unless you take drastic measures to defend yourself from spyware embedded in consumer technology or forgo it all together, it seems that you'll be subject to this kind of surreptitious abuse as a matter of course.
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#146Earlier quoted context omitted.
Lets skip the hyperbole, appeals to authority and platitudes. This crash is from handwritten API response wrapping code that lacks checks. This is string-based programming. This is utter shit.
Ok, I'm sure you've written perfect code your entire career and have never made a single mistake, however simple, and however early in your career. Right? If you want to criticize something, criticize the testing that let this change through, not the developer who made it. We were all young and inexperienced once, we've all had bad days, and we've all written crap code. This is only unique because it affected a lot o…
> criticize the testing
Criticise the process that let it through.
Why was the testing not sufficient? Was it even tested at all? Maybe a developer just "pushed it straight to master"? Why/how can they do that (hypothetically)
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#147For those wondering why the Facebook SDK is so widely used in popular mobile apps: Facebook Login is actually in the minority of reasons to add the Facebook SDK to your mobile app. The vast majority of apps will add the Facebook SDK because it contains Facebook App Ads; a library that "completes the circle" in terms of finding out how effectively the ads you ran on Facebook were at getting people to download, install…
>Is that "spyware"? Yes, absolutely. It uses energy and bandwidth I paid for to surreptitiously transmit my information for use which will solely benefit Facebook and the software developer.
That is the entire business model of mobile.
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#148I block all Facebook domains with the NextDNS iOS app — didn't seem to be affected by this. Blocking spyware has its perks.
I wish there were an easy way to deploy rpi to people I know much in the same way it's easy to tell them to install uBlock Origin
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#149Earlier quoted context omitted.
>Is that "spyware"? Yes, absolutely. It uses energy and bandwidth I paid for to surreptitiously transmit my information for use which will solely benefit Facebook and the software developer.
Devil's advocate: you could always not run those apps. Although for non-technical users it would be challenging to determine if the apps were transmitting that info, it's possible for technical users to detect it (assuming the info goes to an obviously-facebook url and isn't piped through e.g. spotify) Additionally I don't think there is anything wrong with client-side analytics in general since it's basically the on…
>Devil's advocate: you could always not run those apps. Although for non-technical users it would be challenging to determine if the apps were transmitting that info, it's possible for technical users to detect it (assuming the info goes to an obviously-facebook url and isn't piped through e.g. spotify)
But therein lies the rub: the overwhelming majority of users of software are not like you and me and have no idea what's going on behind the curtains.
>Additionally I don't think there is anything wrong with client-side analytics in general since it's basically the only way to monitor performance/usage in production. And this type of thing is hard to discern from the more benign case
I hear this argument a lot and I empathize with the idea that having such information can aid in the development process. However, the argument asserting that some data may be useful to the developer so the developer is thus entitled to it, doesn't wash.
Regardless of the ubiquity of this behavior in today's software development industry, the fact remains that this process consumes the user's resources without their knowing or say in the matter and it's not OK.
Re: Facebook iOS SDK Remotely Crashing Spotify, TikTok, Pinterest, Winno and More
#150[deleted]