4 ms·

"Giving Spotify, Netflix, and the Royal Bank of Canada the ability to read users’ private Facebook messages." Its RBC that is the interesting one here. Did any

"Giving Spotify, Netflix, and the Royal Bank of Canada the ability to read users’ private Facebook messages." Its RBC that is the interesting one here. Did anyone think we would live in a world where your bank has the ability to read your private messages between your friends? EDIT: Puer mentions below that this might just be a permissions issue and it doesnt mean that they actually read your private messages.

agglomerative 8y ago
And what, pray tell, were they checking up on? My gut is telling me it wasn't just about prospective credit worthiness analysis or placing advertising for retail products and services. Maybe debt collection and finding new ways to hunt down delinquent loan recipients? What else?
- sevensor 8y ago
  Surely credit-worthiness is a scary enough thing for them to concentrate their private message data-mining on?
- Puer 8y ago
  They needed those permissions to allow for sending/receiving of payments over Messenger. NYT is being intentionally misleading with what "permissions" mean here.
  - bunderbunder 8y ago
    Well, "needed" is a strong word. They wouldn't have needed the ability to read arbitrary private messages, just the ability to find out when PMs contain whatever signal is used to send a payment. If they got any more than that, it wasn't because of need, it was because someone at Facebook was being lazy and insufficiently respectful of user privacy.
  - IfOnlyYouKnew 8y ago
    They had access to those messages. That is what they wrote, and it is entirely correct. Nowhere does the article say they used that access in improper ways. The accusation isn’t that your neighbor stole money from your bank account. It’s that your roommate gave them your card and pin, without your consent or even knowledge. If you draw conclusions the journalists consciously did not make, that’s your error in reasoning, not theirs. To then claim insights into the thought process of an action that did not happen, I. e. your accusation of intent, just heightens the absurdity.
    - aNoob7000 8y ago
      If Facebook were open about what exact information it shares and who it shares it with, then this vague crap wouldn't be going on.
    - Puer 8y ago
      News organizations as established as NYT understand the weight of their words because every single one is scrutinized by a board of editors. "Facebook also allowed Spotify, Netflix and the Royal Bank of Canada to read, write and delete users’ private messages, and to see all participants on a thread — privileges that appeared to go beyond what the companies needed to integrate Facebook into their systems, the records show." I find it highly unlikely that these companies actually had the power to delete individual's users private messages. There's a distinct difference between needing general read/write permissions so that Spotify can insert a song into your message and Spotify actually having the power to delete your individual messages, read them, or write them on your behalf to their fullest wishes. I claim "intent" because how an article will be interpreted, especially for a story of this scale, is no accident. Hacker News has a much more tech literate population than the NYT's general readership, and yet even here there are people misunderstanding what permissions Spotify, Netflix, RBC actually had because NYT framed the information to be interpreted that way.
      - ryanmonroe 8y ago
        So it sounds like your complaint is not that they are being misleading, but that they made factually incorrect statements. Do you have any reason to believe that statement is incorrect other than "I find it highly unlikely"?
  - dvfjsdhgfv 8y ago
    > They needed those permissions to allow for sending/receiving of payments over Messenger. But then something is inherently flawed, isn't it? As if there was no way to solve this without giving them access to all private communication.
  - acct1771 8y ago
    Not what they mean by "hunting down" at all.
- news_hacker 8y ago
  Although the implications are pretty damn scary and I'm disappointed in Facebook, it helps to remember Hanlon's Razor: "Never attribute to malice that which is adequately explained by stupidity." This could possibly be a "build fast and break things" security oversight rather than a full-on Big Brother grant to external parties. We'd need more closure and proof from Facebook if this was the case.
  - Xylakant 8y ago
    This is very likely a “move fast and break things” related problem. However, if you handle millions peoples private data, move fast and break things is no longer a responsible approach, especially if you’ve broken quite a few things in the past.

agglomerative 8y ago

And what, pray tell, were they checking up on? My gut is telling me it wasn't just about prospective credit worthiness analysis or placing advertising for retail products and services. Maybe debt collection and finding new ways to hunt down delinquent loan recipients? What else?

sevensor 8y ago
Surely credit-worthiness is a scary enough thing for them to concentrate their private message data-mining on?
Puer 8y ago
They needed those permissions to allow for sending/receiving of payments over Messenger. NYT is being intentionally misleading with what "permissions" mean here.
- bunderbunder 8y ago
  Well, "needed" is a strong word. They wouldn't have needed the ability to read arbitrary private messages, just the ability to find out when PMs contain whatever signal is used to send a payment. If they got any more than that, it wasn't because of need, it was because someone at Facebook was being lazy and insufficiently respectful of user privacy.
- IfOnlyYouKnew 8y ago
  They had access to those messages. That is what they wrote, and it is entirely correct. Nowhere does the article say they used that access in improper ways. The accusation isn’t that your neighbor stole money from your bank account. It’s that your roommate gave them your card and pin, without your consent or even knowledge. If you draw conclusions the journalists consciously did not make, that’s your error in reasoning, not theirs. To then claim insights into the thought process of an action that did not happen, I. e. your accusation of intent, just heightens the absurdity.
  - aNoob7000 8y ago
    If Facebook were open about what exact information it shares and who it shares it with, then this vague crap wouldn't be going on.
  - Puer 8y ago
    News organizations as established as NYT understand the weight of their words because every single one is scrutinized by a board of editors. "Facebook also allowed Spotify, Netflix and the Royal Bank of Canada to read, write and delete users’ private messages, and to see all participants on a thread — privileges that appeared to go beyond what the companies needed to integrate Facebook into their systems, the records show." I find it highly unlikely that these companies actually had the power to delete individual's users private messages. There's a distinct difference between needing general read/write permissions so that Spotify can insert a song into your message and Spotify actually having the power to delete your individual messages, read them, or write them on your behalf to their fullest wishes. I claim "intent" because how an article will be interpreted, especially for a story of this scale, is no accident. Hacker News has a much more tech literate population than the NYT's general readership, and yet even here there are people misunderstanding what permissions Spotify, Netflix, RBC actually had because NYT framed the information to be interpreted that way.
    - ryanmonroe 8y ago
      So it sounds like your complaint is not that they are being misleading, but that they made factually incorrect statements. Do you have any reason to believe that statement is incorrect other than "I find it highly unlikely"?
- dvfjsdhgfv 8y ago
  > They needed those permissions to allow for sending/receiving of payments over Messenger. But then something is inherently flawed, isn't it? As if there was no way to solve this without giving them access to all private communication.
- acct1771 8y ago
  Not what they mean by "hunting down" at all.
news_hacker 8y ago
Although the implications are pretty damn scary and I'm disappointed in Facebook, it helps to remember Hanlon's Razor: "Never attribute to malice that which is adequately explained by stupidity." This could possibly be a "build fast and break things" security oversight rather than a full-on Big Brother grant to external parties. We'd need more closure and proof from Facebook if this was the case.
- Xylakant 8y ago
  This is very likely a “move fast and break things” related problem. However, if you handle millions peoples private data, move fast and break things is no longer a responsible approach, especially if you’ve broken quite a few things in the past.