Re:Facebook suspends another data analytics firm
by chalkandpaste on Sunday April 08, 2018 @04:29PM
(#16788166)
> Facebook, however, disputed the implication that it can't exercise proper oversight over these types of apps, telling CNBC that it can't control information that companies mislabel.
What does that mean? That’s utter nonsense. I work in an industry where data is just as, if not more, sensitive (health and finance data) and they somehow manage to do this correctly (well, at least not have an embarrassing mistake that makes the Zuck look like the irresponsible unmatured kid he still is). But what they don’t do is willy nilly let people, without human oversight, access data. Who is that dumb? This is criminal negligence in not even guarding against the possibility of misuse.
Re:Facebook suspends another data analytics firm
by IAmEveryone on Sunday April 08, 2018 @04:17PM
(#16788108)
Facebook (probably) has logs of data access, i. e. the API calls third parties have made.
But, unless there are any security bugs in Facebook's code being exploited, each and every API call is legitimate, prima facie.
The issue with Cambridge Analytica, for example, was with unauthorised retention and sharing of data, as well as its use for purposes not covered by the API access agreement. These circumstances cannot be detected from the logged data alone.
Re:Facebook suspends another data analytics firm
by awakeasleep on Sunday April 08, 2018 @09:27PM
(#16789621)
Mechanistically, the media discovered it because this newsroom was working more effectively than the team at Facebook auditing the corp to find similar breaches.
If you want another take on the “why,” consider the incentives of the two parties. One organization gains face by finding more breaches, one loses it.
Re:Facebook suspends another data analytics firm
by sytelus on Sunday April 08, 2018 @10:53PM
(#16789965)
It’s trivial to create another shell company and continue doing the same thing. What is the point of suspension? Also, I don’t understand why just mere suspension. Shouldn’t FB go after them with lawsuit for damages and violating TOS?
What does that mean? That’s utter nonsense. I work in an industry where data is just as, if not more, sensitive (health and finance data) and they somehow manage to do this correctly (well, at least not have an embarrassing mistake that makes the Zuck look like the irresponsible unmatured kid he still is). But what they don’t do is willy nilly let people, without human oversight, access data. Who is that dumb? This is criminal negligence in not even guarding against the possibility of misuse.
But, unless there are any security bugs in Facebook's code being exploited, each and every API call is legitimate, prima facie.
The issue with Cambridge Analytica, for example, was with unauthorised retention and sharing of data, as well as its use for purposes not covered by the API access agreement. These circumstances cannot be detected from the logged data alone.
If you want another take on the “why,” consider the incentives of the two parties. One organization gains face by finding more breaches, one loses it.