Live data from Hacker News

Facebook will shut down its controversial market research app for iOS

theverge.com

131–140 of 230 posts

Re: Facebook will shut down its controversial market research app for iOS

#131
post #63

What a bullsh*t. People got some money for giving up some privacy. Nobody was forced to do this. And now everybody is freaking about a fairly reasonable trade. What's next? People will start harassing students/researchers that do paid studies?

One of the more important issues here is that after the whole Onavo thing already got them into hot water, Facebook completely flaunted Apple's clear rules re: enterprise certificates, and snuck in AGAIN through the back door. I'm very interested to see what Apple's response is going to be. I'd not be shocked (in fact I'd be delighted) to see them penalize FB in some way, perhaps suspend their App Store account or so…

Aaaand there we are: https://www.theverge.com/2019/1/30/18203551/apple-facebook-b...

Re: Facebook will shut down its controversial market research app for iOS

#132
I've been reading a lot of comments about this, and something that always comes up is the question "why shouldn't people be able to sell their data?"

I have two objections to that. First, they're almost certainly not making that deal from an informed position. Security and privacy are very complicated matters, and most people won't even realize to ask questions about data retention, aggregation, sharing, differential privacy, etc. Instead, they'll substitute in an easier more salient question (https://en.wikipedia.org/wiki/Attribute_substitution), like "Is $20 a month something I want?"

The second issue is that MITMing all network traffic on a phone will necessary scoop up the user's credentials, as well as private messages and metadata from that user's friends and family. It's naive to think about privacy as something an individual can accomplish. When you sell data from your networked social device (i.e., your phone), you're also selling out all your friends and family. Given all that really hot data, what incentives are there for the data collector to act responsibly and protect that data? The reality is pretty much none.

Re: Facebook will shut down its controversial market research app for iOS

#133

Earlier quoted context omitted.

I struggle to realize why we expect Software engineers to be bellwethers of morality and ethics. They are flesh and blood, and like any other profession, if there's money in something, there will be someone to do it

We should expect everybody to care about the morality and ethics of their actions. That's a pretty low fucking bar IMO. In software, this is one way that manifests.

I am not condoning the unethical practices, but every profession has people who are below the bar you talk about. The reasons why they do it are as varied as the peoples of the world.

Re: Facebook will shut down its controversial market research app for iOS

#134
post #71

Earlier quoted context omitted.

You can easily verify using Wireshark on a router, that neither Google, Microsoft or Apple are redirecting ALL INTERNET TRAFFIC through their servers. This is quite a step up from sending home some telemetry data.

Wireshark won't decrypt encrypted traffic.

But it can easily tell you where the traffic is heading.

Re: Facebook will shut down its controversial market research app for iOS

#135

Fb is only "shutting down" it's iOS Spyware due to "bad press" not due to a sudden realisation that spying on children who are incapable of understanding the long-term consequences of the privacy invasion is fundamentally wrong/evil. Fb only stop doing things that are obviously morally reprehensible when they get caught or called out in the media. They never proactively doing the right thing. :-(

It's not even that--they are not stopping the identical Android app, only the iOS one. From the media/public standpoint, the programs are nearly identical, so this is clearly a case of either Apple ordering them to stop and/or they know they are hosed for giving Apple the finger and trying to pull the plug before Apple revokes their entire company's enterprise certificate, which would break any internal apps (the int…

According to articles I saw in the last few hours, their "certificates" have been pulled. So this has likely already happened.

Also, Google updated API certificate behavior to only trust built in roots by default. https://android-developers.googleblog.com/2016/07/changes-to... might explain why "project atlas" is only available for Android devices marshmallow and earlier (they can't snoop encrypted app traffic on later versions)

https://www.betabound.com/referral-instructions-for-project-...

Re: Facebook will shut down its controversial market research app for iOS

#136
post #130

Facebook has had its enterprise certificates revoked by Apple [1] https://seekingalpha.com/news/3427520-apple-banning-facebook... > "Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple," Apple says. "Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which i…

It is still available on Android.

Re: Facebook will shut down its controversial market research app for iOS

#137
post #130

Facebook has had its enterprise certificates revoked by Apple [1] https://seekingalpha.com/news/3427520-apple-banning-facebook... > "Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple," Apple says. "Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which i…

It is still available on Android.

Every day I am happier having switched to iPhone after being an Android fanboy for ages.

Re: Facebook will shut down its controversial market research app for iOS

#138
post #95

I struggle to see how software developers can willingly do work on a project that goes against all values and morales! I have previously worked with developers in start-ups and was amazed to hear some of their backgrounds. One previously worked for a company that bundles spyware with freeware MSI products. Another worked for an airline agency, where they advertise fake a discount on tickets when the price was in fact…

> I struggle to see how software developers can willingly do work on a project that goes against all values and morales! Personally, this doesn't really go against my morals or values. They installed the app. No one forced them to. Not everyone has the same set of morals and values you do. If it's not illegal and no one is harmed. I don't care so much.

[deleted]

Re: Facebook will shut down its controversial market research app for iOS

#139
post #65

Meanwhile... Google, Microsoft and Apple* _receive_ money from their users to harvest the same personal data that Facebook is willing to pay their users for and nobody bats an eyelid. * Apple is probably the least guilty here, however as long as their OS remains closed, we don't actually know how much personal data they are harvesting.

You can easily verify using Wireshark on a router, that neither Google, Microsoft or Apple are redirecting ALL INTERNET TRAFFIC through their servers. This is quite a step up from sending home some telemetry data.

It appears that you edited your comment above to make my "Wireshark won't decrypt encrypted traffic" comment look stupid. Nice try, so let me clarify...

Facebook's market research app isn't "redirecting ALL INTERNET TRAFFIC through their servers" either. If you read the article it states that the app monitors phone and web activity and sends it back to Facebook. This is not really any different from sending home telemetry data. Google, Microsoft and Apple all send home encrypted data, most of which is not verifiable using Wireshark.

I'm no fan of Facebook, far from it in fact, but at least this is an opt-in service and users are being compensated for sacrificing personal data. The same can't be said for the other three companies.

Re: Facebook will shut down its controversial market research app for iOS

#140
post #130

Facebook has had its enterprise certificates revoked by Apple [1] https://seekingalpha.com/news/3427520-apple-banning-facebook... > "Facebook has been using their membership to distribute a data-collecting app to consumers, which is a clear breach of their agreement with Apple," Apple says. "Any developer using their enterprise certificates to distribute apps to consumers will have their certificates revoked, which i…

I find it hard to believe that Apple didn't know. I would expect any device with a in-house app installed to be reporting metadata about said app back to Apple. Comparing the number of installs of a particuler app + the distribution of IP addresses/locations where this app was installed vs that of a normal in-house Facebook app would likely show a discrepency.

Reasons for the contrary (Apple could not have known) my premise is incorrect, the metadata is insufficient, Facebook or in-house apps in general are much more widely use than presumed and often deployed from a public facing servers resulting in a location distribution too similar to the actual US population distribution, etc.

Post reply on HN