“I don't have a Facebook account and would like to request all personal data...”

Re:“I don't have a Facebook account and would like to reques... by erulabs on Thursday April 12, 2018 @08:14PM (#16826080)

Right - you'd want to use a fingerprinting technique (collecting data) to identify machines for rate limiting (security, read: intrusion detection) purposes.

Almost every API of any consequence does this, and it was done as a defensive tactic to reduce costs/load/outages caused by spammers, ddos attacks, crawlers, etc etc etc.

Not sure at what point access logs with cookie data in them becomes a "shadow profile"

[ Parent | on HN ]

Re:“I don't have a Facebook account and would like to reques... by closeparen on Thursday April 12, 2018 @11:41PM (#16826983)

The “shadow profile” scandal has to do with Facebook’s records of your visits to other pages that embed a Like button.

[ Parent | on HN ]

Re:“I don't have a Facebook account and would like to reques... by erulabs on Sunday April 15, 2018 @08:52PM (#16845945)

Well, right, the embed is hosting on facebook servers, and like I said, they collect access logs... So they are necessarily "collecting information on non-users" if they implement any sort of rate limiting based on fingerprinting for non-users... Which is more or less industry standard...

Not saying any of this is how things _should be_, it's just a little bizarre to make it seem like some sort of stealthy data harvesting scheme.

[ Parent | on HN ]