Meta has banned the personal Facebook accounts for everyone on our team

Re:Meta has banned the personal Facebook accounts for everyo... by stonogo on Thursday September 29, 2022 @12:41AM (#33016442)

Why are first parties serving unauthorized API requests? If the API request is unauthorized, surely the proper response is "401 Unauthorized" and not "all the data you asked for, but then I'll find the people who helped you and get mad at them"?

The problem here is that Meta wants to plug things into the internet and then control who gets to ask for those things. This is not how the internet works, at all. If you don't want third parties accessing your APIs, lock them down.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by Matheus28 on Thursday September 29, 2022 @12:43AM (#33016459)

I'm willing to bet the instagram app already signs their api requests to make sure they're coming from the app. Third party apps are reverse engineering that. If you try to send a request without those headers, it'll very likely give you a 4xx code.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by mrguyorama on Thursday September 29, 2022 @12:21PM (#33022835)

The DMCA already has provisions that say reverse engineering for interoperability is fair game.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by Matheus28 on Thursday September 29, 2022 @01:29PM (#33024201)

You can reverse engineer it all you want, the issue is when you publish something that interacts with a remote resource in a way that the owner of that resource did not allow you to.

[ Parent | on HN ]

Re:Meta has banned the personal Facebook accounts for everyo... by sshine on Thursday September 29, 2022 @02:46AM (#33017258)

This.

> unauthorized api requests

The word "unauthorized" has two meanings here:

One is authorized by the user, another is authorized by the vendor.

[ Parent | on HN ]