Facebook Data Collected by Quiz App Included Private Messages • Hacker News Board

Re: Facebook Data Collected by Quiz App Included Private Messages

#21

Post by dranov » Tue, Apr 10, 2018, 10:01 PM UTC

malvosenior wrote: post #4

How was this possible? I don't recall ever having access to private messages in the FB API. Was this ever available to developers?

Apparently, v1.0 of the Facebook Graph API could access users' private messages via the 'read_mailbox' API request [1]. This was deprecated when v2.0 launched.

"Version 1.0 of the Graph API launched on April 21, 2010. It was deprecated in April 2014 and closed completely to legacy apps (ie, existing apps that used the API before April 2014) on April 30, 2015."

[1] https://medium.com/tow-center/the-graph-api-key-points-in-th...

Re: Facebook Data Collected by Quiz App Included Private Messages

#22

Post by commandlinefan » Tue, Apr 10, 2018, 10:02 PM UTC

gressquel wrote: post #3

yet Zuckerberg is testifying as I write, denying, dodging the responsibility and questions. I can't believe it, instead of laying down and confessing, he is trying to justify and blame everyone but Facebook.

I guess it depends on how you define "responsibility". On the one hand, he was the CEO, so he's responsible for everything. On the other hand, it doesn't look like any of this was deliberate - more like negligent. The question is whether or not the lack of attention to privacy crosses the line into _gross_ negligence or not.

Re: Facebook Data Collected by Quiz App Included Private Messages

#23

Post by 734786710934 » Tue, Apr 10, 2018, 10:03 PM UTC

paulie_a wrote: post #17

Facebook has already updated the numbers from from 47 million to 80 something million. This is going going to go bigger than Yahoo scale: "all accounts and all data" pretty quickly

The data accessed here was from a smaller unrelated research study. The only thing it has in common with the larger CA leak is that it was done by the same researcher.

Re: Facebook Data Collected by Quiz App Included Private Messages

#24

Post by b212 » Tue, Apr 10, 2018, 10:05 PM UTC

dranov wrote: post #21

malvosenior wrote: post #4

How was this possible? I don't recall ever having access to private messages in the FB API. Was this ever available to developers?

Apparently, v1.0 of the Facebook Graph API could access users' private messages via the 'read_mailbox' API request [1]. This was deprecated when v2.0 launched. " Version 1.0 of the Graph API launched on April 21, 2010. It was deprecated in April 2014 and closed completely to legacy apps (ie, existing apps that used the API before April 2014) on April 30, 2015. " [1] https://medium.com/tow-center/the-graph-api-key-poi…

But why? Why would anyone set up an API access to PRIVATE messages. That's crazy :o

Re: Facebook Data Collected by Quiz App Included Private Messages

#25

Post by thinkingemote » Tue, Apr 10, 2018, 10:07 PM UTC

b212 wrote: post #24

dranov wrote: post #21

Earlier quoted context omitted.

Apparently, v1.0 of the Facebook Graph API could access users' private messages via the 'read_mailbox' API request [1]. This was deprecated when v2.0 launched. " Version 1.0 of the Graph API launched on April 21, 2010. It was deprecated in April 2014 and closed completely to legacy apps (ie, existing apps that used the API before April 2014) on April 30, 2015. " [1] https://medium.com/tow-center/the-graph-api-key-poi…

But why? Why would anyone set up an API access to PRIVATE messages. That's crazy :o

A third party messaging client would need it

Re: Facebook Data Collected by Quiz App Included Private Messages

#26

Post by joering2 » Tue, Apr 10, 2018, 10:08 PM UTC

nhebb wrote: post #13

vowelless wrote: post #8

It's amazing that FB is up 4.5 percent.

He's not under oath, [from what I've read] the majority of the committee members have received campaign donations from FB, and some committee members own FB stock. In other words, the market knows that this is a charade.

Watching pretty much every hearing for last 8 years, it was shocking to me how nice, friendly and understanding they were. Other than Cruz, they all turned from daily wolves to sheep.

Either it is campaign contribution or perhaps without understanding technology, most are afraid what Mark can learn about them running queries on their personal messengers.

Never ever seen them so nice, including questions if he wants a break now to which crowd laughed; they treated him like he is 8 years old. Incredible! No wonder he shook his head smiling for more questions!

Re: Facebook Data Collected by Quiz App Included Private Messages

#27

Post by downandout » Tue, Apr 10, 2018, 10:08 PM UTC

Why is it surprising or even remotely controversial that an app that people explicitly authorized to access their messages (informed consent) then proceeded to access their messages? The app didn't have access to friends' messages, so I don't see what the issue is here, other than yet another clickbait headline.

Re: Facebook Data Collected by Quiz App Included Private Messages

#28

Post by liquidise » Tue, Apr 10, 2018, 10:08 PM UTC

b212 wrote: post #24

dranov wrote: post #21

Earlier quoted context omitted.

Apparently, v1.0 of the Facebook Graph API could access users' private messages via the 'read_mailbox' API request [1]. This was deprecated when v2.0 launched. " Version 1.0 of the Graph API launched on April 21, 2010. It was deprecated in April 2014 and closed completely to legacy apps (ie, existing apps that used the API before April 2014) on April 30, 2015. " [1] https://medium.com/tow-center/the-graph-api-key-poi…

But why? Why would anyone set up an API access to PRIVATE messages. That's crazy :o

If Adium, Pigeon, or another collective chat application needed that permission at the time to combine my facebook and AIM lists into a single application, i would have certainly understood it.

Re: Facebook Data Collected by Quiz App Included Private Messages

#29

Post by paulie_a » Tue, Apr 10, 2018, 10:09 PM UTC

734786710934 wrote: post #23

paulie_a wrote: post #17

Facebook has already updated the numbers from from 47 million to 80 something million. This is going going to go bigger than Yahoo scale: "all accounts and all data" pretty quickly

The data accessed here was from a smaller unrelated research study. The only thing it has in common with the larger CA leak is that it was done by the same researcher.

That's a pretty significant aspect. I'm sure he stole plenty more data in other unrelated studies

Re: Facebook Data Collected by Quiz App Included Private Messages

#30

Post by osrec » Tue, Apr 10, 2018, 10:09 PM UTC

simonswords82 wrote: post #20

Cynical me feels that it's a hell of a coincidence Facebook is acknowledging this data leak just over a month before the GDPR legislation (and fines) drops on 25th May.

I think you may be on to something. I've often heard guys like Goldman would be just on the right side of certain thresholds for penalties, just as new financial legislation is announced. Certainly makes me suspicious that they get fed information early and react to minimise their financial burden.