4 ms·

So apparently right now a company that is not contractually bound to Facebook has 50M full profiles from Facebook's API. From Facebook's perspective, what happ

by toufka 9y ago

So apparently right now a company that is not contractually bound to Facebook has 50M full profiles from Facebook's API. From Facebook's perspective, what happens when if csv file gets released publicly. Or a government official or law-enforcement officer sees it. It apparently has >50M real-names connected with political affiliation, gender, sexuality, home town, etc. It is an email attachment away from getting released by a whistle-blower... So even if the data was taken with scraped without unauthorized privileges, what happens when that data becomes public. Has there (yet) been a public leak of millions of private facebook-like or gmail-like profiles? Sure emails, sure PII, but ever 50M people's admitted sexuality linked to their real name leaked to The Pirate Bay?

cinquemb 9y ago
I remember when I could make unauthenticated api calls to public posts useds made for their phone numbers… I'm wondering if I should start a seed of the ~300-500 million useds info in JSON files (I was only interested in name, sex, profile photo) I was able to get from facebook via the thousands of credentials people check in on public repos that everyone else can still do today (beyond the name, sex and profile photos)… but I've been hording it to start up in Indonesia the project I shut down in the US (seeding profiles used to crowd source fur thing information about people like geoip location graphs of people interested in them, pseudo anonymous messaging if you have their email [acting as an email forwarder], and other personality information, and having it publicly accessible by default and/with an api). I'd be willing to give it away to any who ask though as long as they build something with it. In the past me and my friend monetized with adsense, but now were going to mine monero while people engage with the site and give up information about their friends/enemies/lovers. We half joked about being an "open source" NSA/BND/[insert ones favorite SIGINT acronym] or what it would be like if everyone had access to the data to leverage for their own ends instead of the privileged few do today. Thank you "open graph", oauth and the weakest link, other developers and the apathy of most people. Either way, this genie is not going back into the bottle unless you can convince billions of useds of platforms like facebook to exercise some discretion over things they, for the most part, don't care about nor choose to understand on a technical level.

by toufka 9y ago

cinquemb 9y ago

I remember when I could make unauthenticated api calls to public posts useds made for their phone numbers… I'm wondering if I should start a seed of the ~300-500 million useds info in JSON files (I was only interested in name, sex, profile photo) I was able to get from facebook via the thousands of credentials people check in on public repos that everyone else can still do today (beyond the name, sex and profile photos)… but I've been hording it to start up in Indonesia the project I shut down in the US (seeding profiles used to crowd source fur thing information about people like geoip location graphs of people interested in them, pseudo anonymous messaging if you have their email [acting as an email forwarder], and other personality information, and having it publicly accessible by default and/with an api). I'd be willing to give it away to any who ask though as long as they build something with it. In the past me and my friend monetized with adsense, but now were going to mine monero while people engage with the site and give up information about their friends/enemies/lovers. We half joked about being an "open source" NSA/BND/[insert ones favorite SIGINT acronym] or what it would be like if everyone had access to the data to leverage for their own ends instead of the privileged few do today. Thank you "open graph", oauth and the weakest link, other developers and the apathy of most people. Either way, this genie is not going back into the bottle unless you can convince billions of useds of platforms like facebook to exercise some discretion over things they, for the most part, don't care about nor choose to understand on a technical level.