4 ms·
Every single definition I find classifies this as a data breach. > A data breach is a security incident in which sensitive, protected or confidential data is c
by cryptoz 9y ago
Every single definition I find classifies this as a data breach.
> A data breach is a security incident in which sensitive, protected or confidential data is copied, transmitted, viewed, stolen or used by an individual unauthorized to do so.
- sgroppino 9y agoPossibly, but remember it starts with the user authorizing a company (FB) to release his/her data to a third-party. If the user doesn't trust the third-party then it shouldn't authorize the data sharing. The question I guess is that FB then agrees to share the data under certain conditions (that the third party only uses the data for an agreed purpose), and if this agreement between FB and the third party isn't honoured, shouldn't FB then sue for damages on behalf of the user?
- UncleEntity 9y agoYes indeed, we need to redefine "data breach" to include "against terms of service" to make it easier to go after all the future Aaron Swartz's. If you redefine a concept and use it against your political enemies don't be all that surprised when they turn around and use it against your political allies.
- deleted 9y ago[deleted]
- DangerousPie 9y agoBut they were authorized to access the data, weren't they? The problem wasn't that they accessed it, it was that they used it for things they weren't allowed to.
- rhizome 9y agoEverybody with an FB app key is "authorized to access [the] data," but the API TOU says you can't save anything. I'm imagining the crux of the CA issue is that they saved stuff.