News for hackers. Stuff that matters.

A comment on Facebook Expects to Be Fined Up to $5B by FTC Over Privacy Issues. Parent comment

Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by tyingq on Wednesday April 24, 2019 @05:13PM (#19742639)
LinkedIn was caught harvesting people's contacts with dark patterns. They settled a class action suit for $13M.
[ Parent | on HN ]
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by therein on Wednesday April 24, 2019 @05:37PM (#19742836)
They weren't using the cleartext password to scrape contacts, though, were they?
[ Parent | on HN ]
Re:Facebook Expects to Be Fined Up to $5B by FTC Over Privac... by javagram on Wednesday April 24, 2019 @06:12PM (#19743085)
LinkedIn did in fact have that as an explicit feature where users would insert their email password on LinkedIn’s website.

https://www.linkedin.com/help/linkedin/answer/5204/email-pas...

> If your email provider doesn't support OAuth, you'll need to enter your email password before clicking Continue. LinkedIn will use your password only for a moment to authenticate your account. We don't store or save your email password during this process.

Facebook’s feature was similar I believe. Where they stumbled was connecting an email verification feature to the code written almost a decade ago for contact import.

[ Parent | on HN ]