News for hackers. Stuff that matters.
Re:How did Facebook intercept their competitor's encrypted m... by dylan604 on Saturday July 27, 2024 @10:36PM (#41090856)
seriously, how does this not violate wire tapping laws? does agreeing to ToS mean you also agree to being spied on in a way that protects them? you are deliberately circumventing encryption for malicious purposes. if people got in trouble for DeCSS for circumventing encryption, how is this okay?

pithy "because they have all the monies" replies not wanted.

Re:How did Facebook intercept their competitor's encrypted m... by Aurornis on Sunday July 28, 2024 @12:18AM (#41091191)
> seriously, how does this not violate wire tapping laws? does agreeing to ToS mean you also agree to being spied on in a way that protects them?

It’s not really spelled out clearly in the article, but this was a specific program where people had to choose to opt-in in exchange for compensation.

This wasn’t simply Facebook hijacking random people’s traffic because they accepted the ToS or used the Facebook app

Not defending the program, but it’s not what a lot of comments are assuming.

Re:How did Facebook intercept their competitor's encrypted m... by haxrob on Sunday July 28, 2024 @01:39AM (#41091422)
> This wasn’t simply Facebook hijacking random people’s traffic because they accepted the ToS or used the Facebook app

Do you have further insights or references on what was the "trigger condition"? This is a new case, separate to the previous litigation related to the VPN app.

Re:How did Facebook intercept their competitor's encrypted m... by KennyBlanken on Sunday July 28, 2024 @01:36AM (#41091414)
The article details how users were lied to about what was being collected and why.

If you lie to someone to get them to sign an agreement, that agreement is voided in nearly any sane jurisdiction on the planet.

Re:How did Facebook intercept their competitor's encrypted m... by wannacboatmovie on Saturday July 27, 2024 @11:53PM (#41091123)
What is described in the article is not some elaborate scheme or novel work of software engineering. Rather, it's exactly what 99% of corporate networks do (proxy server with SSL inspection using a custom root certificate) "to combat cyber threats".

As coincidence would have it, this is the perfect alibi provided by a snake oil "cybersecurity" app by one of the world's largest companies.

Every tech company that has promulgated the lie that a VPN operated by a third party provides added security is indirectly responsible for this. Funneling all your traffic through a shady intermediary does no such thing, and in fact often does the opposite.

Re:How did Facebook intercept their competitor's encrypted m... by tjoff on Sunday July 28, 2024 @12:52AM (#41091300)
Doesn't change anything, consent and whether you own the device is everything.

The comparison with VPNs doesn't hold either, because for all their faults VPNs do not decrypt traffic going through them.

Re:How did Facebook intercept their competitor's encrypted m... by 620gelato on Sunday July 28, 2024 @01:10AM (#41091364)
99% of corporate networks? That can't be true.

I do know that this is done - in fact worked at a pretty major smartphone manufacturer and never logged in to any personal account on work devices. It was pretty obvious by even just looking at the security info on chrome/firefox that the certificate used was a root signed by the company itself. I used to shout at the top of my lungs to my friends, that hey, _this_ is how your information is vulnerable to the corporate overlords, but I guess they weren't as paranoid as I.

The first thing I checked when moving to my next employer was if they were intercepting SSL traffic like this. (They weren't - they used Falcon)

Re:How did Facebook intercept their competitor's encrypted m... by hypeatei on Saturday July 27, 2024 @10:50PM (#41090913)
Big tech and telecommunications companies are effectively miniature arms of the U.S. government at this point.

As seen by the "Protect America Act" of 2007[0], the government will retroactively cover their own ass and your companies' ass if deemed important enough to the intelligence apparatus. There isn't a chance in hell that Meta would be brought criminal charges for wiretapping.

0: https://en.wikipedia.org/wiki/Protect_America_Act_of_2007

Re:How did Facebook intercept their competitor's encrypted m... by Scoundreller on Saturday July 27, 2024 @11:12PM (#41090988)
Re:How did Facebook intercept their competitor's encrypted m... by dylan604 on Saturday July 27, 2024 @11:21PM (#41091024)
Which is clearly a red flag operation so that whenever someone serious tries to tout this, they'll be rebuffed as it's an article in the Onion. Those clever bastards!
Re:How did Facebook intercept their competitor's encrypted m... by talldayo on Saturday July 27, 2024 @11:54PM (#41091124)
That, or scathing satire has been a mainstay at The Onion longer than political consternation.
Re:How did Facebook intercept their competitor's encrypted m... by nadermx on Saturday July 27, 2024 @11:34PM (#41091062)
I doubt it was thought that far out. Since they know life is stranger than fiction, it would write itself.
Re:How did Facebook intercept their competitor's encrypted m... by giancarlostoro on Sunday July 28, 2024 @12:27AM (#41091221)
I'm assuming they were doing it for the federal government at this point. There's no reason for them to spy on another app, they can hire almost any developer they want.
Re:How did Facebook intercept their competitor's encrypted m... by dylan604 on Sunday July 28, 2024 @12:56AM (#41091319)
Hiring another dev does not give them access to the raw numbers. It's not the same thing at all
Re:How did Facebook intercept their competitor's encrypted m... by _heimdall on Saturday July 27, 2024 @11:21PM (#41091022)
It isn't because they have the money, it's because they have given the government access to whatever data they want. When it comes to three letter agencies it really isn't about money, it's about power and in today's digital world data is power.

To answer your specific question, this isn't okay. Both the government and large corporations have been given way too much power and we really have no hope of making any meaningful change until the people reclaim this power and put those in charge out on their ass.

Re:How did Facebook intercept their competitor's encrypted m... by Terr_ on Saturday July 27, 2024 @11:53PM (#41091119)
> does agreeing to ToS mean you also agree to being spied on in a way that protects them?

This leads to a much bigger problem of courts upholding contracts even when nobody actually believes they represent an informed agreement.

We aren't quite at the Looney-Tunes step of enforcing extra clauses that were hidden in invisibly small print, but things are drifting in that direction.