Facebook says new bug allowed apps access to private photos of up to 6.8M users

Post by CuriousSkeptic » Fri, Dec 14, 2018, 7:37 PM UTC

jammygit wrote: post #86

bluetidepro wrote: post #46

Earlier quoted context omitted.

Yes, I am suggesting that. I don't necessarily think jail time is the right thing, but I do think something like meaningful fines are more than reasonable for major software bugs that cause these kinds of breaches of privacy. It will make larger companies like this be much more careful when money is on the table for them to lose. To me, if we can criminalize something like a major oil spill such as BP/Deepwater Horiz…

Canada recently passed a law that adds fines to data breach incidents iirc. A professor mentioned it and its why I'm researching auth on my winter break. Come to think of it, does anyone know of good auth resources for a mean stack that isn't a copy paste blog? I'm trying the udacity auth course as a starting point (uses oauth2)

Post by fhbdukfrh » Fri, Dec 14, 2018, 7:39 PM UTC

TangoTrotFox wrote: post #129

ritchiea wrote: post #107

Earlier quoted context omitted.

There's a crowd here on HN that hates regulation but this is exactly why regulation exists. Massive, wealthy, powerful industries just aren't held accountable by average consumers or markets. There's no serious competitor that benefits if your data isn't safe at Facebook. And average people not only aren't powerful but have their own lives to look after. Without regulation massive companies are entirely unchecked, th…

As one aside on this, the main issue people have with regulations is not regulations in and of themselves, but the negative effect they have on small businesses and competition/entrepreneurship more generally. I think you'd find extremely few genuine voices against regulations that only start to apply once a company (and all associated entities) grosses in excess of e.g. $100 million annual revenue. By that point com…

Post by pasxizeis » Fri, Dec 14, 2018, 7:42 PM UTC

canttestthis wrote: post #31

bluetidepro wrote: post #5

> "We're sorry this happened." That about sums it up for all these privacy breaches these days. It's getting to the same level of "thoughts and prayers" for tragedies. No actual change or consequences for the problems happening, just empty "sorries" and "promises" that it won't happen again/they'll get it fixed. I don't know if this is a GDPR violation or not (as someone else asked), but if it is, I hope we start act…

> I don't know if this is a GDPR violation or not (as someone else asked), but if it is, I hope we start actually seeing action of these sorts of things. Sounds like you're suggesting that we criminalize software bugs.

Post by WA » Fri, Dec 14, 2018, 7:46 PM UTC

megous wrote: post #11

polskibus wrote: post #3

Does it fall under GDPR violation?

No. Unless they didn't report it to the regulators.

Post by scarface74 » Fri, Dec 14, 2018, 7:48 PM UTC

hazeii wrote: post #146

scarface74 wrote: post #52

Earlier quoted context omitted.

Well anecdotally in your small social group that may be true. But Facebook has 2.27 Billion active users...

...for a certain value of 'active' (do they say how it's defined?) My experience of internet companies has generally been that user figures are somewhat exaggerated (to put it politely).