News for hackers. Stuff that matters.

A comment on Facebook has sent a cease-and-desist letter to researchers. Parent comment

Re:Facebook has sent a cease-and-desist letter to researchers by libeclipse on Tuesday October 27, 2020 @04:59PM (#24911813)
Users have to install a browser extension in order to participate in the study. That's a way higher barrier than the personality quizzes that Cambridge Analytica used.

It also happens at a different layer of abstraction. Cambridge Analytica extracted data through the permissions framework that Facebook itself implemented.

Facebook's interest in its users' data doesn't need further explanation after you see that most of their profits derive from their control over it. The same control that allowed the profitable mass political targeting that these researchers are trying to study.

[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by mFixman on Tuesday October 27, 2020 @05:05PM (#24911879)
The researchers ask people to opt in tracking a restricted amount of data, and then install an extension that has access to their entire Facebook accounts.

There is no way for Facebook or anyone else to prove that the current or a future version of the NYU's extension won't scrape more data than people agreed to.

[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by nemetroid on Tuesday October 27, 2020 @05:59PM (#24912443)
> There is no way for Facebook or anyone else to prove that the current or a future version of the NYU's extension won't scrape more data than people agreed to.

How so? The extension is open source, anyone can audit it.

[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by MAGZine on Tuesday October 27, 2020 @05:42PM (#24912270)
the plugins are just javascript, so verifying that is actually a trivial task. You just open the plugin and read the source. NYU could also provide the code, to make it even easier.
[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by mFixman on Tuesday October 27, 2020 @06:21PM (#24912711)
You cannot verify that the researchers won't change the plugin to malware in the future.
[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by nulbyte on Tuesday October 27, 2020 @07:55PM (#24913444)
You cannot verify that Facebook will not change its product to malware in the future. That it to say, at some point, you trust the software publisher in the same way you trust the service operator.
[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by Shared404 on Wednesday October 28, 2020 @02:53AM (#24916005)
> You cannot verify that Facebook will not change its product to malware in the future.

I apologize for wasting peoples time, but I can't resist taking the low hanging fruit here.

Facebook is malware.

[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by anchpop on Wednesday October 28, 2020 @01:12AM (#24915467)
It's fine for you to trust the software publisher, that doesn't mean facebook should, especially when they're legally liable for data breaches that could result from it
[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by beagle3 on Wednesday October 28, 2020 @05:05AM (#24916730)
Wait a second. How does Facebook trust Firefox? Microsoft Edge? Safari? The other 20 extensions I have installed, three of which save a copy of every single page I visit?

They don’t. They don’t, at the least, care about anyone’s data - they just phrase it that way to sound legitimate because saying “we want no oversight whatsoever” sounds whiny, and it is. (And so does what they ARE claiming to anyone who understands the technical side).

[ Parent | on HN ]
Re:Facebook has sent a cease-and-desist letter to researchers by fredophile on Wednesday October 28, 2020 @02:01AM (#24915727)
If facebook is concerned about data breaches from a browser plug-in why don't they just stop server the data to the browser? If the data is that valuable and easy to get it wouldn't be hard for someone to write malware that collects the data and phones home once in a while.
[ Parent | on HN ]