7 ms·

The allegations against Facebook are that for a period of several years they turned a blind eye to rampant Developer abuse of their API, allowing Political orga

The allegations against Facebook are that for a period of several years they turned a blind eye to rampant Developer abuse of their API, allowing Political organizations (and others) to download massive amounts of Facebook user data. Facebook also continuously marginalized their Chief Security Officer who routinely complained about the API loopholes, were caught informing employees of a "don't ask don't know therefore no liability" quasi-official policy towards the widespread abuse (don't rock the advertising/business boat), and eventually reduced the CSO's staff from 120 to 3 and role to what appears to be "tweeting pre-approved pro-Facebook messages". The FTC is now investigating if Facebook has violated it's 2011 FTC privacy mandate, something which carries fines in the millions per event range I believe (i.e. trillions of USD in fines for this size of privacy mandate failure)

foota 9y ago
I read the reduction in the CSO's staff as a prelude to his leaving the company, not as a "nerfing" to his role.
- ce4 9y ago
  His team has been reassigned in december already: "By December 2017, Mr. Stamos, who reports to Facebook’s general counsel, proposed that he report directly to higher-ups. Facebook executives rejected that proposal and instead reassigned Mr. Stamos’s team" https://mobile.nytimes.com/2018/03/19/technology/facebook-alex-stamos.html https://mobile.nytimes.com/2018/03/19/technology/facebook-al...
  - jrs235 9y ago
    Damn. This reeks of higher-ups knowing what was going on (or taking advice from malvolent scrupulous people) in order to maintain plausible deniability.
- mtgx 9y ago
  He wanted to leave after he was reassigned - in other words, because he was reassigned. They convinced him to stay because him quitting then would have looked bad for the company. That's what 7 sources told the NYT.
RandomInteger4 9y ago
What I don't understand is, why would they turn a blind eye to abuse of their developer API if they offer their API for free and they sell user data -- which I assume is anonymized? -- to advertisers? Wouldn't that diminish revenue if advertisers could have just used the API to get around this? Please correct any mistaken assumptions I might have about their business model.
- cryptoz 9y ago
  > Please correct any mistaken assumptions I might have about their business model. Facebook's business model is curious. They took $200 million in Russian money (Yuri Milner) and that came with an enthralled messaging from Zuckerberg, about how they (the Russian investors) had a "unique perspective" on monetizing social networks. I'm not sure anyone outside of those circles knows what Facebook's actual business model really is. Citations: https://qz.com/1121238/who-is-yuri-milner-the-russian-billionaire-who-funneled-kremlin-money-into-facebook/ https://qz.com/1121238/who-is-yuri-milner-the-russian-billio... https://www.nytimes.com/2017/11/05/world/yuri-milner-facebook-twitter-russia.html https://www.nytimes.com/2017/11/05/world/yuri-milner-faceboo...
- nemothekid 9y ago
  This is all speculation: 1. While the data is valuable, you still need a medium for your ads. One without the other is way less valuable. If you had user data for 50M users, today, how would you monetize it? Facebook had the News Feed and Instagram giving you a stage to operate on that data. 2. Following 1.), a lot of that "stolen" data was used to buy more effective FB Ads. Cambridge Analytica didn't "steal" the user data to sell to blackhats. They used it to craft messaging on Facebook. All in all, user data is relatively worthless to most advertisers unless its actionable. Even if facebook gave you the data, the fastest way of monetizing it was to buy more facebook ads. It's relatively more difficult to extract user data from FB and then use that data to buy Twitter ads.
  - RandomInteger4 9y ago
    That's a really good point with respect to advertisers. Even on the competitor level, I'm not sure how they would use that data. So worst case scenario is a conflict of interests between user privacy and business revenue. I think if Facebook wants to take effective action to correct this, they'll go beyond simply restricting the API, and give users options to limit which data of theirs they want to let their friends expose to third parties, because even when the API is shut down, someone willing to violate the terms of service can do quite a bit of data harvesting using fake profiles and social engineering to get people to add those profiles if some of the data seems plausible. Granted, this method is slower, but still possible, and I think currently being exploited based on friend requests I've received through friends. I've asked friends if they knew the person, and they said they weren't sure, but they might because the information seemed similar; this is the same concept as a phone call spam technique known as "Neighbor Spoofing".
RugnirViking 9y ago
Wow a trillion dollar fine seems almost unthinkable - there are only around 10 trillion dollars in circulation, and with that shared among apple google facebook and the rest of the entire country its hard to imagine facebook could afford to pay

foota 9y ago

I read the reduction in the CSO's staff as a prelude to his leaving the company, not as a "nerfing" to his role.

ce4 9y ago
His team has been reassigned in december already: "By December 2017, Mr. Stamos, who reports to Facebook’s general counsel, proposed that he report directly to higher-ups. Facebook executives rejected that proposal and instead reassigned Mr. Stamos’s team" https://mobile.nytimes.com/2018/03/19/technology/facebook-alex-stamos.html https://mobile.nytimes.com/2018/03/19/technology/facebook-al...
- jrs235 9y ago
  Damn. This reeks of higher-ups knowing what was going on (or taking advice from malvolent scrupulous people) in order to maintain plausible deniability.
mtgx 9y ago
He wanted to leave after he was reassigned - in other words, because he was reassigned. They convinced him to stay because him quitting then would have looked bad for the company. That's what 7 sources told the NYT.

RandomInteger4 9y ago

What I don't understand is, why would they turn a blind eye to abuse of their developer API if they offer their API for free and they sell user data -- which I assume is anonymized? -- to advertisers? Wouldn't that diminish revenue if advertisers could have just used the API to get around this? Please correct any mistaken assumptions I might have about their business model.

cryptoz 9y ago
> Please correct any mistaken assumptions I might have about their business model. Facebook's business model is curious. They took $200 million in Russian money (Yuri Milner) and that came with an enthralled messaging from Zuckerberg, about how they (the Russian investors) had a "unique perspective" on monetizing social networks. I'm not sure anyone outside of those circles knows what Facebook's actual business model really is. Citations: https://qz.com/1121238/who-is-yuri-milner-the-russian-billionaire-who-funneled-kremlin-money-into-facebook/ https://qz.com/1121238/who-is-yuri-milner-the-russian-billio... https://www.nytimes.com/2017/11/05/world/yuri-milner-facebook-twitter-russia.html https://www.nytimes.com/2017/11/05/world/yuri-milner-faceboo...
nemothekid 9y ago
This is all speculation: 1. While the data is valuable, you still need a medium for your ads. One without the other is way less valuable. If you had user data for 50M users, today, how would you monetize it? Facebook had the News Feed and Instagram giving you a stage to operate on that data. 2. Following 1.), a lot of that "stolen" data was used to buy more effective FB Ads. Cambridge Analytica didn't "steal" the user data to sell to blackhats. They used it to craft messaging on Facebook. All in all, user data is relatively worthless to most advertisers unless its actionable. Even if facebook gave you the data, the fastest way of monetizing it was to buy more facebook ads. It's relatively more difficult to extract user data from FB and then use that data to buy Twitter ads.
- RandomInteger4 9y ago
  That's a really good point with respect to advertisers. Even on the competitor level, I'm not sure how they would use that data. So worst case scenario is a conflict of interests between user privacy and business revenue. I think if Facebook wants to take effective action to correct this, they'll go beyond simply restricting the API, and give users options to limit which data of theirs they want to let their friends expose to third parties, because even when the API is shut down, someone willing to violate the terms of service can do quite a bit of data harvesting using fake profiles and social engineering to get people to add those profiles if some of the data seems plausible. Granted, this method is slower, but still possible, and I think currently being exploited based on friend requests I've received through friends. I've asked friends if they knew the person, and they said they weren't sure, but they might because the information seemed similar; this is the same concept as a phone call spam technique known as "Neighbor Spoofing".

RugnirViking 9y ago

Wow a trillion dollar fine seems almost unthinkable - there are only around 10 trillion dollars in circulation, and with that shared among apple google facebook and the rest of the entire country its hard to imagine facebook could afford to pay