Live data from Hacker News

Don’t Fix Facebook, Replace It

nytimes.com

231–240 of 281 posts

Re: Don’t Fix Facebook, Replace It

#232
post #107

Earlier quoted context omitted.

Man I remember the enthusiasm behind Diaspora like it was yesterday. I can still see in my minds eye that NYTimes article photo of the creators sitting around like they just invented cold fusion or something.

Allaire ColdFusion wasn't that big either ;)

Still crankin' w' Lucee today, dude.

Re: Don’t Fix Facebook, Replace It

#233
post #49

Earlier quoted context omitted.

> It's like a smoking addiction It's awesome to watch massive shifts in values and priorities. Smoking used to be seen as cool, sexy, even healthy. Now it's widely seen as unhealthy and disgusting. Same thing with high-fructose carbonated beverages. I remember people using terms like "retarded" and "gyp" without hesitation. Today even people who hate political correctness don't talk like that in public. It wasn't lon…

What does "gyp" mean? I googled it but I feel like I'm missing something.

Have you ever heard someone say something like "I got gypped out of X" or "what a gyp!". It's slang for something like a scam or getting ripped off. It originally comes from the word "gypsy", which is an actual ethnicity of people in Europe, who have a negative stereotype of theft/dishonesty.

Re: Don’t Fix Facebook, Replace It

#234
post #206

Earlier quoted context omitted.

Reddit is a perfect example of a tech-focused product for a minority of young, white, tech-oriented men (and a minority of others) that while it influences the outside world, is mainly invisible to it. If you want to build a reddit, you'll never end up with a facebook, that's just reality, the target demo is completely different.

If that was the case, I wouldn't expect to see so much objectively false information treated as fact and massively upvoted in subs such as /r/technology. Reddit's user base might enjoy the belief that it is technically skilled and knowledgeable, but that isn't at all the reality of the situation in my experiences.

They ARE technically knowledgeable for the 16-21 year old average demographic.

Go compare a reddit technology thread to a youtube comment section. Big difference in writing quality, avg length of post, use of source and data, etc.

You probably outgrew their age demo and realized that smart 18 year olds are still dumbasses.

Re: Don’t Fix Facebook, Replace It

#235

Earlier quoted context omitted.

Reddit is a perfect example of a tech-focused product for a minority of young, white, tech-oriented men (and a minority of others) that while it influences the outside world, is mainly invisible to it. If you want to build a reddit, you'll never end up with a facebook, that's just reality, the target demo is completely different.

I don't think that's true. I don't think I know anyone who doesn't at least occasionally use Reddit; my aunt told us a story at the family get-together that started "I saw this on AskReddit...". Certainly anecdotal evidence, and I'm inclined to believe the largest user base may still match your description, but personally I feel like you're describing 4chan, not Reddit.

Sure let's use your anecdote:

Ask your Aunt if she has a reddit account. Ask your aunt if she knows ANYONE AT ALL her age that has a reddit account.

I'd love to explore your anecdote further because while I know that many non-redditors get linked to AskReddits and AMA's through blogs and webpages, I also know that the 90-9-1 rule of the internet means that it's highly, highly, highly unlikely she is a member of reddit or contributes at all.

On the other hand, ALL LURKERS ON FACEBOOK HAVE AN ACCOUNT.

Biiiiiiiiiiiig difference.

Re: Don’t Fix Facebook, Replace It

#236
"In 2013, Brandon Copley, the CEO of Giftnix, was threatened with legal action after using the technique to demonstrate how personal information could be easily gathered at scale.

"Multiple Facebook profiles were extremely easy to scrape," he explains. In a series of conversations with Facebook security developers Copley explained the issue and was told there was "no security vuln here, even though it does seem like one on first glance."

The method of scraping can work in multiple ways but largely relies on feeding Facebook's API a list of phone numbers or email addresses that have been automatically generated. These could also have been obtained from data breaches or leaks of information online.

"Just query Facebook as often as possible until they ban your IP for querying too fast, and at that point you just slow down until the queries stop," Copley explained in an email. "I was doing my work purely for research and exposing the vulnerability for Facebook".

...

The issue was again raised by researchers in 2015.

Reza Moaiandin, who founded cybersecurity company CyberScanner, published a blogpost about the "loophole". he said he was able to gather thousands of users personal information by guessing their mobile numbers. Within this information were details of names, locations, and profile pictures.

In response Facebook told him it didn't "consider it a security vulnerability" but had controls in place to stop it being abused. Zuckerberg's most recent statement goes against this, admitting Facebook's efforts to stop malicious actors hadn't worked."

Source:

http://www.wired.co.uk/article/facebook-news-data-scraping-m...

"A few months ago, I discovered a security loophole in Facebook that allows hackers to decrypt and sniff out Facebook user IDs using one of Facebook's APIs in bulk - therefore allowing them to gather millions of users' personal data (name, telephone number, location, images, and more). This post is an attempt to catch Facebook's attention to get this issue fixed.

By using a script, an entire country's (I tested with the US, the UK and Canada) possible number combinations can be run through these URLs, and if a number is associated with a Facebook account, it can then be associated with a name and further details (images, and so on).

...

For those of you who are wondering why I haven't notified Facebook about the issue, the truth is that I have - back in April (2015).

Although I did receive a reply, initially the engineer I was in contact with was unable to reproduce the issue himself, and therefore failed to understand the technical details of how it should be fixed.

...

After a couple of months of waiting, I initially thought someone else will look into it and fix it but I heard nothing, so I raised the flag with them again. They finally came back to me and told me that this is not a big issue - they have set limits and I should not worry about this problem. But frankly, I am very worried.

...

Comment from reader:

Great blog post. I reported an almost identical issue (albeit a different API) to Facebook in January 2014 but faced similar difficulties getting them to recognise the scope for abuse. I was able to lookup contiguous blocks of mobile numbers (in blocks of 5,000 at a time) with no discernible rate-limiting - I could pull them down as fast as my connection could handle (maybe ~50k numbers/min).

If you make any headway with Facebook let us know and I will try pinging them again. It was especially worrisome as the number range I tried (NYC) had a hit-rate of about 20%."

Source:

https://salt.agency/blog/facebook-security-loophole/

Re: Don’t Fix Facebook, Replace It

#237
post #39

I tried explaining my 20 year old cousin about FB. Her constant argument was "I don't share anything private on FB". She checks in on FB everywhere she goes. Posts her pics all the time. I could not instill any sense of concern for privacy. What I could conclude is that the appeal of social is too great to have any caution. Call me a pessimist, but I don't think FB is going anywhere. People will keep using it inspite…

> It's like a smoking addiction. It's bad but very difficult to give up.

Social media is socializing now, whether you like it or not, and whether you're along for the ride or not.

In that light, it's strange when people say it's "addicting," like that's a bad thing. It's supposed to be - we're social creatures.

Sharing things about your life with friends and family is not some horrible drug we need to curb.

Re: Don’t Fix Facebook, Replace It

#238

Earlier quoted context omitted.

>If she's happy with this level of privacy though, what's the problem? The problem is that it's not just her privacy she's violating, but the privacy of everyone else, including OP, whose photos get shared by said cousin. When I got back from a trip I took abroad with my family earlier this year, my friends mentioned that they'd seen the photos that "I" had posted to Facebook. Except... I hadn't posted any photos to…

"When I got back from a trip I took abroad with my family earlier this year, my friends mentioned that they'd seen the photos that "I" had posted to Facebook. Except... I hadn't posted any photos to Facebook. I have a Facebook account, but I deliberately have a very minimal presence on it. What my friends were seeing was the photos that my mother had posted, and which I had been tagged in. My privacy was violated by…

So you have to join Facebook in order to not be tagged on Facebook?

Re: Don’t Fix Facebook, Replace It

#239
"Poll: Do you trust Facebook?

...

THIS MORNING, IT emerged that nearly 45,000 Irish Facebook profiles may have been affected by the giant data breach involving as many as 87 million accounts harvested by UK data intelligence firm Cambridge Analytica.

Those 45,000 accounts could have been breached due to just 15 Irish people accessing a questionnaire app, thisisyourdigitallife, which included in its permissions the granting of access to all an individual's friends' profiles."

Source:

http://www.thejournal.ie/poll-do-you-trust-facebook-3941194-...

Re: Don’t Fix Facebook, Replace It

#240

Earlier quoted context omitted.

Diaspora is actually worse for privacy, because of its distributed nature. Diaspora is about distributed ownership. If you value privacy in a social network, check out https://github.com/ssbc/patchwork

IPV6 is really needed to create social media distribution with customized privacy. Example, use a smart phone as the actually distributing and access control system. This way a person can instantly block and know who is accessing their content too. End to end encryption communication with content distribution. Of course this is more into the future when Cellular ISP are better with less strict data caps and better up…

Please do not downvote this comment. It may not make technical sense for you but there is nothing wrong with the comment otherwise. The author has some vision and shared it with us.
Post reply on HN