Live data from Hacker News

Facebook crawls links in PDFs you send in Messenger

twitter.com

71–80 of 165 posts

Re: Facebook crawls links in PDFs you send in Messenger

#71
post #17

A good way to enable delivery tracking for PDFs over messenger, I guess!

It's to protect from malware and phishing. Plenty of other companies do this too and it is reasonable. Someone else here put it really well.. damned if you do and damned if you don't.

Re: Facebook crawls links in PDFs you send in Messenger

#72
post #21

While I don't like FB this is not something related to PDF, they provide quick preview for all links like almost all social networks

This isn't about rendering a preview, it's about following like links inside the pdf. While there may be a case to do this to prevent phishing and malware attacks, they really should ask/tell the user they are doing it!

Re: Facebook crawls links in PDFs you send in Messenger

#73
post #43

This should not be news to anyone. Facebook scans all links posted in Messenger.

This is links INSIDE a pdf. Thats one step further than most people assumed.

PDF is an open format. Scanning PDF for the links is probably the least you could assume.

You gotta assume they will reconstruct generations of your family tree if they can from your chat history.

Re: Facebook crawls links in PDFs you send in Messenger

#74
post #65

Earlier quoted context omitted.

Worth noting WhatsApp also provides link previews now. Although it is supposedly e2e communication, the link previews are likely generated by reaching out to a similar facebook unfurl service. They can then have a single map of phone num -> links rendered between fb and whatsapp.

WhatsApp fetches a link preview on the sender's device before the message is encrypted, and packages it up with the message before sending. Depending on how exactly they implement the fetch, they may or may not know what links you sent.

At least links in PDF over WA didn't get visited from FB servers. I just personally tested it moments ago.

Re: Facebook crawls links in PDFs you send in Messenger

#76
post #59

Earlier quoted context omitted.

Couldn't you sort of test this by enabling E2E, sending a link that was previously blocked, and seeing if it is still blocked? That would at least show some sign if it's all a sham or not.

That would guarantee absolutely nothing.

Yes, totally understood. I am just thinking in line with a different response that this could be an easy way to prove if they’re still snooping - not a guarantee that they aren’t.

Re: Facebook crawls links in PDFs you send in Messenger

#77
post #54
post #40

Earlier quoted context omitted.

What if I create a PDF with this content... https://news.ycombinator.com/item?id=1 https://news.ycombinator.com/item?id=2 https://news.ycombinator.com/item?id=3 and so on, until 10,000,000? Perhaps Facebook starts opening every link using 10,000 parallel threads. Can you really replicate that from your connection at home? Perhaps even the sysadmin of your victim site has whitelisted all Facebook IP addresses so their…

There's a fair chance the service which generates these outbound requests throttles itself, both with respect to how many requests it makes against any one domain/IP, or how many errors it will provoke per time period, or before human review.

Maybe, maybe not

Re: Facebook crawls links in PDFs you send in Messenger

#78
post #40

Earlier quoted context omitted.

The cost of uploading a PDF of links is probably not much less than the cost of following those links on your own. So I don't think you gain much by leveraging Facebook in this case.

What if I create a PDF with this content... https://news.ycombinator.com/item?id=1 https://news.ycombinator.com/item?id=2 https://news.ycombinator.com/item?id=3 and so on, until 10,000,000? Perhaps Facebook starts opening every link using 10,000 parallel threads. Can you really replicate that from your connection at home? Perhaps even the sysadmin of your victim site has whitelisted all Facebook IP addresses so their…

It's this kind of thinking that unearths the bugs

Re: Facebook crawls links in PDFs you send in Messenger

#79

And if they didn't the headline would read: "Facebook fails to stop malicious and illegal content from being shared on their Network! Should they be shut down?!"

I can not imagine this headline really. We are talking about private messages.

Re: Facebook crawls links in PDFs you send in Messenger

#80

And if they didn't the headline would read: "Facebook fails to stop malicious and illegal content from being shared on their Network! Should they be shut down?!"

this sounds like a strawman to be honest because I haven't heard anyone rant about illegal music since probably 15 years, and if anything ever only politicians and not ordinary people.

If we'd be talking really malicious stuff like chid pornography then in the context of filesharing these companies already have systems in place to distinguish content, so blanket banning of torrent files seems blatantly unnecessary.

Post reply on HN