News for hackers. Stuff that matters.
Re:Facebook is talking to the White House about giving away ... by shkkmo on Thursday October 06, 2016 @05:39PM (#12656342)
I found this line intriguing:

> In the wake of the uproar, Facebook updated its approach to Free Basics. It currently allows any third-party organization to offer its services as part of the program, provided that the organization's developers abide by terms that, for example, prohibit the use of high-definition images or video that could consume a great deal of mobile data.

So I took a look at https://developers.facebook.com/docs/internet-org/participat...

These jump out at me:

>Your site(s) may be proxied to make your content available through Free Basics. You can let us know that you want to pull your site(s) from Free Basics at any time, but because we may need to make product and marketing adjustments, we may require 60 days from receipt of your notice to transition gracefully.

>In order for your content to be proxied as described above, your URLs may be re-written and embedded content (like javascript and content originating from another domain) removed. In addition, secure content is not supported and may not load.

Then looking deeper at the technical guidelines: https://developers.facebook.com/docs/internet-org/platform-t...

>HTTPS support

>We encrypt information for Free Basics wherever possible. When people use the Free Basics Android app, their traffic is encrypted end-to-end unless you specify that your service should be HTTP only. For the Free Basics website in a mobile browser, we use a “dual certificate” model to encrypt traffic between a person's device and our servers in both directions. If your server supports HTTPS, we will also encrypt traffic between our servers and yours. Even if your service doesn't yet support HTTPS, where possible we will encrypt that information between our servers and people's devices unless you ask us to not use dual certificate HTTPS. When people use the Free Basics mobile website, information is temporarily decrypted on our secure servers to ensure proper functionality of the services and to avoid unexpected charges to people.

So anybody using 'Free Basics' is giving Facebook full access to their encrypted data. That seems like significantly more than just the 'not using high-definition images or video' claim the article makes.

Re:Facebook is talking to the White House about giving away ... by shkkmo on Thursday October 06, 2016 @05:44PM (#12656375)
And does:

>Any data (e.g., proxy requests) or reporting we provide is deemed Facebook confidential information and cannot be used by you for any advertising purposes or shared with third parties.

Mean that facebook now owns your request logs and you can't share them with third parties?