News for hackers. Stuff that matters.
Re:Facebook stock drops more than 20% after revenue forecast... by JumpCrisscross on Thursday July 26, 2018 @06:55AM (#17616450)
> You can’t recast HN’s comment system as a material security weakness just because you learn that people who disagree with you can also read your public comments

This is a false equivalence. Hacker News comments are public. (HN also doesn't sell ads.) Facebook messages and private content usually aren't.

Just because "the API's that were used there were available to the entire world" doesn't mean "everyone knew exactly what they were." Everyone didn't know what they were capable of. A very small section of the technologically literate did, and most of them were profiting off the status quo.

Re:Facebook stock drops more than 20% after revenue forecast... by closeparen on Friday July 27, 2018 @12:27AM (#17623433)
>Facebook messages and private content usually aren't.

Sure, that's not the same as public access, but it's equally blown out of proportion.

Users must be empowered to delegate access to the software of their choosing. Facebook offering read_mailbox as an option on its OAuth consent screen is exactly as evil as Fastmail offering IMAP.