> Once permission was granted, the campaign had access to millions of names and faces they could match against their lists of persuadable voters, potential donors, unregistered voters and so on. “It would take us 5 to 10 seconds to get a friends list and match it against the voter list,” St. Clair said. They found matches about 50 percent of the time, he said. But the campaign’s ultimate goal was to deputize the closest Obama-supporting friends of voters who were wavering in their affections for the president. “We would grab the top 50 you were most active with and then crawl their wall”
In the next paragraph, FB said it was "satisfied" that this met their data and privacy standards. Which is a bit curious because IIRC, it was not kosher to cache data scraped from FB for any reason beyond having a reasonable cache (to prevent unneeded API requests), nevermind for independent data collation and analysis. I would bet that the users who did knowingly sign up for the Obama app did not think the app would be scraping the walls and photo albums of their friends and attempting to do friendship-strength analyses.
CA still has an extra level of subterfuge, but I agree, what the Obama campaign is reported to have done is definitely not as innocent as the Obama campaign staffer claims in the aforementioned tweet.
You don’t see “Sign up for this quiz to find out your true personality” as different than “sign up to support change and spread the word about Barack Obama”?
Facebook is a cesspool, but shady onboarding tactics makes a far more dangerous cesspool.
Rephrased: Both campaigns spammed non-signees, and it looks like the CA people spammed signees as well.
[0] https://www.gsb.stanford.edu/sites/gsb/files/conf-presentati...
But isn't the bigger problem sucking up the entire social graph from a small seed of users, not how those users signed up in the first place? If I'm getting spammed via a friends-of-friends connection, I'm not particularly worried about the pretense that initial vector signed up with.