3 ms·

Re: His first "fix": > First, we will investigate all apps that had access to large amounts of information before we changed our platform to dramatically reduc

Re: His first "fix": > First, we will investigate all apps that had access to large amounts of information before we changed our platform to dramatically reduce data access in 2014, and we will conduct a full audit of any app with suspicious activity. We will ban any developer from our platform that does not agree to a thorough audit. And if we find developers that misused personally identifiable information, we will ban them and tell everyone affected by those apps. That includes people whose data Kogan misused here as well. What happens if they find that 50 different organizations had access to and may have saved as much data as CA? If they admit that, that would be the end of Facebook. This basically precludes Facebook from being open and honest here - even if its only this one bad actor, that the incentives for FB are not to be open would cause any reasonable person to question their efforts.

xkjkls 9y ago
It's almost certain that they do, and almost certain they'll never be able to validate that this data won't go to any actors that you would not like to have access to your information. For anything on your Facebook prior to 2015, the cat has already jumped out of the bag.
jd20 9y ago
If they knew about CA obtaining this data in 2015 and sat on it then, no telling what information they may be sitting on now. Most companies, when they learn of a data breach, they take measures to notify their affected users (whether contacting them directly, or publicizing it). Instead, FB's saying, "Here's a tool at the top of your feed, you can check the safety of our data yourself". (And fat lot of good that'll do people who don't even use FB.) This lets them continue to do business as usual, putting the onus on users to safeguard their privacy, while they can stick their heads in the sand.
lambda_lover 9y ago
> What happens if they find that 50 different organizations had access to and may have saved as much data as CA? Isn't this more than guaranteed? Literally any crappy quiz app or game had access to all of this data when they launch Facebook Platform. And I'm betting Kogan's app was far from the most popular on Facebook at the time -- the potential for hundreds of thousands of data harvesters to have exploited this is way too high. I disagree that it's "the end of Facebook", though... in general, users just don't seem to care that much about this sort of thing. I can say for certain that my parents don't understand what this means or why this is bad (they had trouble understanding what was so bad about the Equifax leak as well), so your lowest common denominator user is never going to budge, even after something like this. I'm just hoping that my more technically-inclined friends start to lean away from Facebook's collection of data aggregators.
- taurath 9y ago
  I just cleaned out my "connected" apps, and found like 4 quiz apps that I don't remember at all with full access to my personal info and friends. Back when they launched login with facebook I used it like a fool (also Spotify at launch ONLY launched with it). I knew this had happened, but its more like now the consequences are coming much more into clarity. > I disagree that it's "the end of Facebook", though If they do what they say and publically shame the apps in a way that people would see, it might. It would be hilarious for them to put up 100 logos of apps on the top and say oh yeah by the way all these apps have been taking your personal information, with lovely trustable names like "e-quiz" and "sofunni"
jayess 9y ago
50? Try thousands? Just see the comments above from folks who created developer accounts just so they could spy on friends...

xkjkls 9y ago

It's almost certain that they do, and almost certain they'll never be able to validate that this data won't go to any actors that you would not like to have access to your information. For anything on your Facebook prior to 2015, the cat has already jumped out of the bag.

jd20 9y ago

If they knew about CA obtaining this data in 2015 and sat on it then, no telling what information they may be sitting on now. Most companies, when they learn of a data breach, they take measures to notify their affected users (whether contacting them directly, or publicizing it). Instead, FB's saying, "Here's a tool at the top of your feed, you can check the safety of our data yourself". (And fat lot of good that'll do people who don't even use FB.) This lets them continue to do business as usual, putting the onus on users to safeguard their privacy, while they can stick their heads in the sand.

lambda_lover 9y ago

> What happens if they find that 50 different organizations had access to and may have saved as much data as CA? Isn't this more than guaranteed? Literally any crappy quiz app or game had access to all of this data when they launch Facebook Platform. And I'm betting Kogan's app was far from the most popular on Facebook at the time -- the potential for hundreds of thousands of data harvesters to have exploited this is way too high. I disagree that it's "the end of Facebook", though... in general, users just don't seem to care that much about this sort of thing. I can say for certain that my parents don't understand what this means or why this is bad (they had trouble understanding what was so bad about the Equifax leak as well), so your lowest common denominator user is never going to budge, even after something like this. I'm just hoping that my more technically-inclined friends start to lean away from Facebook's collection of data aggregators.

taurath 9y ago
I just cleaned out my "connected" apps, and found like 4 quiz apps that I don't remember at all with full access to my personal info and friends. Back when they launched login with facebook I used it like a fool (also Spotify at launch ONLY launched with it). I knew this had happened, but its more like now the consequences are coming much more into clarity. > I disagree that it's "the end of Facebook", though If they do what they say and publically shame the apps in a way that people would see, it might. It would be hilarious for them to put up 100 logos of apps on the top and say oh yeah by the way all these apps have been taking your personal information, with lovely trustable names like "e-quiz" and "sofunni"

jayess 9y ago

50? Try thousands? Just see the comments above from folks who created developer accounts just so they could spy on friends...