News for hackers. Stuff that matters.
Re:Facebook ordered to delete illegally collected data by Be... by cromwellian on Friday February 16, 2018 @11:07AM (#16393280)
How can Facebook not know your interests, isn’t that the whole point of the Like button? How do you propose having a social network that lets you Like and Reshare stuff and not let them know?
Re:Facebook ordered to delete illegally collected data by Be... by klez on Friday February 16, 2018 @11:11AM (#16393319)
If Facebook tracks me outside of Facebook's website because that other website has tracking code or a like button (which I didn't click) and I don't have an account on Facebook, I'm not ok with that.

I think that's what GP is referring to.

Re:Facebook ordered to delete illegally collected data by Be... by ashooner on Friday February 16, 2018 @12:25PM (#16393939)
I'm not crazy about the current state of internet privacy, but I think it's a missed opportunity if we don't teach the general public just how much control they have over it. Most tracking being done can be prevented by a few modifications to web browser configuration. At the end of the day, we are sending Facebook our ID to be tracked. This is avoidable for a user with some knowledge and agency.
Re:Facebook ordered to delete illegally collected data by Be... by paublyrne on Friday February 16, 2018 @12:33PM (#16394016)
I don't think the answer is to put the onus on users to be tech savvy. We should be structurally preventing the behaviour.
Re:Facebook ordered to delete illegally collected data by Be... by CaptSpify on Friday February 16, 2018 @01:45PM (#16394717)
Why not both?

We can remind people that the internet is still a dangerous place, while also trying to discourage bad behaviour

Re:Facebook ordered to delete illegally collected data by Be... by ashooner on Friday February 16, 2018 @04:46PM (#16396717)
By structural, you mean regulatory. I agree that data stewardship should be much better-regulated than it is now.

But right now I can install any number of tools on Google's own browser that mitigate most common tracking/privacy concerns. I don't necessarily agree that we need to increase government regulation to address a concern that a Chrome extension is already serving.

Re:Facebook ordered to delete illegally collected data by Be... by Barrin92 on Friday February 16, 2018 @12:55PM (#16394225)
the answer to privacy violations cannot just be technological solutions on the consumer end. It's like having people break into your house every week and someone tells you to buy a good pair of boxing gloves.

This warrants a political solution and I'm glad that the EU is moving into the right direction.

Re:Facebook ordered to delete illegally collected data by Be... by s73v3r_ on Friday February 16, 2018 @12:53PM (#16394203)
While that should be taught, it should also be taught to companies that they should respect people's right to privacy.
Re:Facebook ordered to delete illegally collected data by Be... by wtfstatists on Friday February 16, 2018 @03:14PM (#16395672)
If Facebook tracks me outside of Facebook's website because that other website has tracking code or a like button (which I didn't click) and I don't have an account on Facebook, I'm not ok with that.

Then your beef is not with FB but the website which _chose_ to embed FB like button. You should stop using that website if you are not ok.

Re:Facebook ordered to delete illegally collected data by Be... by monocasa on Friday February 16, 2018 @04:00PM (#16396185)
Yeah, that's like 40% of the internet, including almost all news.

The argument "just don't participate in society if you don't want people tracking every news report you read" doesn't really sit well with me.

Re:Facebook ordered to delete illegally collected data by Be... by TomMarius on Friday February 16, 2018 @04:36PM (#16396618)
Well these are the terms of using the site. You are not entitled to anything.
Re:Facebook ordered to delete illegally collected data by Be... by monocasa on Friday February 16, 2018 @04:38PM (#16396642)
Can you practically view those terms without loading one of these buttons beforehand?
Re:Facebook ordered to delete illegally collected data by Be... by TomMarius on Friday February 16, 2018 @04:50PM (#16396762)
That's an issue, I agree.
Re:Facebook ordered to delete illegally collected data by Be... by ttoinou on Friday February 16, 2018 @08:52PM (#16398373)
I think you can already block thoses connections, so yes
Re:Facebook ordered to delete illegally collected data by Be... by monocasa on Friday February 16, 2018 @11:06PM (#16398930)
What if blocking is against the terms of service?
Re:Facebook ordered to delete illegally collected data by Be... by ttoinou on Saturday February 17, 2018 @10:42AM (#16401126)
You were not aware before reading thoses terms
Re:Facebook ordered to delete illegally collected data by Be... by cromwellian on Friday February 16, 2018 @11:26AM (#16393439)
Aren’t the Like buttons distributed around the Web and used on purpose by publishers? If your reading the New York Times, there’s a like button on the story, if you click it, aren’t you explicitly telling Facebook your interested?

Perhaps you object to the page impression being tracked even if you don’t like it? This seems unavoidable unless you mandate publishers host their own copy of the code behind these buttons and use a public API only to record the likes.

Re:Facebook ordered to delete illegally collected data by Be... by mtgx on Friday February 16, 2018 @11:47AM (#16393619)
Facebook was tracking users even if they didn't click the Like button. This has nothing to do with page view tracking.

And they were tracking even non-Facebook users this way. There's zero consent here no matter how you cut it.

Worse yet, Facebook did this for years, and in the first years it swore it doesn't do that, and when they were caught doing it they said it was "just a bug"...twice.

Facebook has 0% credibility at this point. Just look how they're ruining people's trust in 2FA security, too, now (although if they end-up ruining the trust in SMS 2FA, that wouldn't be too bad of an outcome actually...).

This is a good article (although not complete, and only until 2014) on Facebook's awful, no-good, history of lying and tracking users without their consent:

https://www.propublica.org/article/its-complicated-facebooks...

Re:Facebook ordered to delete illegally collected data by Be... by wtfstatists on Friday February 16, 2018 @03:20PM (#16395729)
There's zero consent here no matter how you cut it.

Thats not true. You implicity consent to usage policy of that website which then gave permission to FB. Ofcourse GDPR makes it illegel but until May 25 its not.

Re:Facebook ordered to delete illegally collected data by Be... by monocasa on Friday February 16, 2018 @04:01PM (#16396207)
Is it possible to even view the usage policy on one of these sites without hitting a page that loads one of these like buttons first?
Re:Facebook ordered to delete illegally collected data by Be... by netgusto on Friday February 16, 2018 @02:44PM (#16395367)
2FA notif scam was the last straw for me. Just deleted my account. So long and thanks for all the fish!
Re:Facebook ordered to delete illegally collected data by Be... by hueving on Friday February 16, 2018 @12:04PM (#16393751)
Loading the like button is enough for facebook to track you and infer your interests. You never have to click it.
Re:Facebook ordered to delete illegally collected data by Be... by emiliobumachar on Friday February 16, 2018 @11:36AM (#16393519)
As far as I know, Like buttons are partially served by Facebook, which then knows I've accessed the site (the NYT in your example). This happens even if I do not click the button, do not hover over it, and do not have a Facebook account.
Re:Facebook ordered to delete illegally collected data by Be... by merreborn on Friday February 16, 2018 @02:22PM (#16395132)
> Like buttons are partially served by Facebook

Yes, the default configuration has your page include javascript from facebook.net which the browser will request on every page view

https://developers.facebook.com/docs/plugins/like-button

In the case of this the theguardian.com page it looks like they've got a webbug as the last element of the body, which results in a request to https://www.facebook.com/tr?

Having facebook count views of your like button is probably considered a feature to publishers.

Re:Facebook ordered to delete illegally collected data by Be... by xg15 on Friday February 16, 2018 @12:27PM (#16393961)
> This seems unavoidable unless you mandate publishers host their own copy of the code behind these buttons and use a public API only to record the likes.

If Facebook means no harm, they could make this the encouraged way to include the like button.

Re:Facebook ordered to delete illegally collected data by Be... by detaro on Friday February 16, 2018 @11:29AM (#16393467)
> This seems unavoidable unless you mandate publishers host their own copy of the code behind these buttons and use a public API only to record the likes.

Yes, that's the consequence (well, it does't really have to be an API triggered from the server, it can send the user there). Or a pattern where a user has to click a locally hosted link/button which then loads the Facebook one, and/or records permission to load it with further page visits.

It's not really that much difference from an integration perspective if you include code in your page that loads a facebook iframe, or code that only does that after user interaction.

Re:Facebook ordered to delete illegally collected data by Be... by pbalau on Friday February 16, 2018 @11:48AM (#16393624)
Why not blame the other website that added the fb button on their page?
Re:Facebook ordered to delete illegally collected data by Be... by klez on Friday February 16, 2018 @12:21PM (#16393895)
I blame both. I never said I only blame Facebook.
Re:Facebook ordered to delete illegally collected data by Be... by simion314 on Friday February 16, 2018 @11:32AM (#16393494)
The problem is that you are tracked by FB and Google on other websites, they know what you are reading and canalizing it, say they know what politics site you visit, what technology site you are reading, any other pages and then they put you in a bucket for advertising(say rich dude likes expensive tech, car videos, prefers dark color sites, not that smart, prefers this party, has X opinions on y)

Google analytics should not be allowed without me getting a prompt to allow it or not, FB button should be a simple static image without tracking unless I click on it. Also they track users that are not logged in or do not have accounts.

Re:Facebook ordered to delete illegally collected data by Be... by visarga on Friday February 16, 2018 @12:52PM (#16394197)
> Google analytics should not be allowed without me getting a prompt to allow it or not

One way to go about it could be to force all these data collectors to show what they know about us, how much they shared and with whom, and allow us to delete that data on request. I'd really like to know everything FB tracks on those like buttons, it's probably an obscene amount of personal data.

Once people see how much data they retain, there would be a righteous outrage. These datasets have been provably used to manipulate elections, subvert democracy and target us with fake news. I'd like a report of what fake news and politically motivated ads I've been served by their recommenders. Maybe if they are forced to come out in the clear about what they do with our personal info, they would change their tactics. We need reverse surveillance on FB and the other tech giants and ad companies.

Re:Facebook ordered to delete illegally collected data by Be... by merreborn on Friday February 16, 2018 @02:28PM (#16395190)
> I'd really like to know everything FB tracks on those like buttons, it's probably an obscene amount of personal data.

When you request a page like this guardian article, all they'd have access to would be:

  * The url you requested, along with time and IP            
  * Any facebook.com/facebook.net cookies you have stored      
  * Any other headers your browser sends       
  * Metadata about the page itself that the publisher publishes via "og:" tags
Said og: tags look like this: <meta property="og:title" content="Facebook ordered to stop collecting user data by Belgian court"/>

How does that compare with what you meant by "obscene amount of personal data"?

Re:Facebook ordered to delete illegally collected data by Be... by simion314 on Saturday February 17, 2018 @05:26AM (#16400047)
Knowing who you are and what pages you visited in last years it is a lot of data that they mine and tag you and sell it to the advertisers. I think they can do a good profile of you by knowing all the obscure links you visit and how much time you spend there.

The users should have a choice, "Do you want this site to share your data with Fb,Google ?" If you do not accept you can't use it, but it is your choice not to use the website, the users will get informed because now I am sure most of the people don't even know about the tracking.

Re:Facebook ordered to delete illegally collected data by Be... by lmartel on Friday February 16, 2018 @04:16PM (#16396400)
So at minimum they've got your identity and much of your browser history.

Seems reasonable to call that obscene.

Re:Facebook ordered to delete illegally collected data by Be... by icebraining on Friday February 16, 2018 @01:54PM (#16394806)
If you're not in the US or Canada, you can ask for all the data FB is storing about you: http://europe-v-facebook.org/EN/Get_your_Data_/get_your_data...
Re:Facebook ordered to delete illegally collected data by Be... by jacquesm on Friday February 16, 2018 @11:08AM (#16393289)
You don't need to save each and every action for ever to build up a profile, you can just use it for the moment and then forget it.

Just like on HN there is no page with 'favorite articles'.

Oh wait ;)

Re:Facebook ordered to delete illegally collected data by Be... by klez on Friday February 16, 2018 @11:13AM (#16393347)
The fact that the favorites list is public is known and explicit. If you want to keep it private you can upvote what interests you.