5 ms·

Is there a blog post or outline that summarizes this talk? I care about privacy, but don't have an hour to watch the whole video. The conference does provide a

Is there a blog post or outline that summarizes this talk? I care about privacy, but don't have an hour to watch the whole video. The conference does provide a useful link to a privacy-centric page which catalogs some known facebook abuses: https://privacyinternational.org/types-abuse/facebook https://privacyinternational.org/types-abuse/facebook but there is no outline of this talk which summarizes the methods that facebook uses to spy on their users and the public.

username223 8y ago
Slides here: https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system/event_attachments/attachments/000/003/716/original/How_Facebook_tracks_users_on_Android_%28even_if_they_don't_have_a_Facebook_account%29-3.pdf https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system...
gala8y 8y ago
there is: https://privacyinternational.org/campaigns/investigating-apps-interactions-facebook-android https://privacyinternational.org/campaigns/investigating-app... https://privacyinternational.org/report/2647/how-apps-android-share-data-facebook-report https://privacyinternational.org/report/2647/how-apps-androi... a pdf you can go through: http://privacyinternational.org/sites/default/files/2018-12/How%20Apps%20on%20Android%20Share%20Data%20with%20Facebook%20-%20Privacy%20International%202018.pdf http://privacyinternational.org/sites/default/files/2018-12/...
cube42 8y ago
That's the underlying report: https://privacyinternational.org/report/2647/how-apps-android-share-data-facebook-report https://privacyinternational.org/report/2647/how-apps-androi...
IshKebab 8y ago
TL;DR seems to be that lots of apps include the Facebook SDK and when you initialise the SDK it always sends your device ID back to Facebook. Most negative news about Facebook is nonsense but this does seem to be pretty shady on Facebook's part.
- rock_hard 8y ago
  Just speculating, but they might just need this information to combat bots actually. Think about it, they already know who you are because you are logged in with your account. They don’t need more info than that to run targeted ads.
  - mic47 8y ago
    > Just speculating, but they might just need this information to combat bots actually. That would be actually quite useful for fighting bots, but I doubt that is the reason. My guess would be just gathering telemetry to how how API is used, and what type of android devices are there (you know, like to know what you should support and test on).
    - reaperducer 8y ago
      My guess would be just gathering telemetry to how how API is used, and what type of android devices are there (you know, like to know what you should support and test on). In the video it is shown that the information sent to Facebook is far more intrusive than that.
  - ucarion 8y ago
    Perhaps it has use in bot detection, but: 1. Facebook's "need" to prevent bots ought to be subservient to their need to acquire consent. GDPR requires such consent. 2. It seems quite likely that the persons giving this talk aren't on Facebook.
  - HillaryBriss 8y ago
    > Think about it, they already know who you are because you are logged in with your account. wait. is that how it really works? does the FB SDK these other apps use really require that? I mean: what if I don't have a FB account? what if I don't have the FB app installed?
  - propogandist 8y ago
    Apps are doing this when you first open them (and constantly afterwards), this has nothing to do with bots and account login. Apps are calling out to FB regardless of you having a [FB] account. If you have root, using Xprivacy will annoy you by revealing the amount of data-mining that's happening across all apps. I've seen this happening all the time using NetGuard (firewall which requires no root, made by the same dev behind Xprivacy). Most of the default apps on Samsung phones are constantly trying to call Facebook servers also. If you have Android, you should not be using your phone without NetGuard installed - https://github.com/M66B/NetGuard https://github.com/M66B/NetGuard
riazrizvi 8y ago
Their presentation is only the first 20 minutes, the rest is Q&A. If you watch it on 2X then it’s only 10 minutes of your time.

username223 8y ago

Slides here: https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system/event_attachments/attachments/000/003/716/original/How_Facebook_tracks_users_on_Android_%28even_if_they_don't_have_a_Facebook_account%29-3.pdf https://fahrplan.events.ccc.de/congress/2018/Fahrplan/system...

gala8y 8y ago

there is: https://privacyinternational.org/campaigns/investigating-apps-interactions-facebook-android https://privacyinternational.org/campaigns/investigating-app... https://privacyinternational.org/report/2647/how-apps-android-share-data-facebook-report https://privacyinternational.org/report/2647/how-apps-androi... a pdf you can go through: http://privacyinternational.org/sites/default/files/2018-12/How%20Apps%20on%20Android%20Share%20Data%20with%20Facebook%20-%20Privacy%20International%202018.pdf http://privacyinternational.org/sites/default/files/2018-12/...

cube42 8y ago

That's the underlying report: https://privacyinternational.org/report/2647/how-apps-android-share-data-facebook-report https://privacyinternational.org/report/2647/how-apps-androi...

IshKebab 8y ago

TL;DR seems to be that lots of apps include the Facebook SDK and when you initialise the SDK it always sends your device ID back to Facebook. Most negative news about Facebook is nonsense but this does seem to be pretty shady on Facebook's part.

rock_hard 8y ago
Just speculating, but they might just need this information to combat bots actually. Think about it, they already know who you are because you are logged in with your account. They don’t need more info than that to run targeted ads.
- mic47 8y ago
  > Just speculating, but they might just need this information to combat bots actually. That would be actually quite useful for fighting bots, but I doubt that is the reason. My guess would be just gathering telemetry to how how API is used, and what type of android devices are there (you know, like to know what you should support and test on).
  - reaperducer 8y ago
    My guess would be just gathering telemetry to how how API is used, and what type of android devices are there (you know, like to know what you should support and test on). In the video it is shown that the information sent to Facebook is far more intrusive than that.
- ucarion 8y ago
  Perhaps it has use in bot detection, but: 1. Facebook's "need" to prevent bots ought to be subservient to their need to acquire consent. GDPR requires such consent. 2. It seems quite likely that the persons giving this talk aren't on Facebook.
- HillaryBriss 8y ago
  > Think about it, they already know who you are because you are logged in with your account. wait. is that how it really works? does the FB SDK these other apps use really require that? I mean: what if I don't have a FB account? what if I don't have the FB app installed?
- propogandist 8y ago
  Apps are doing this when you first open them (and constantly afterwards), this has nothing to do with bots and account login. Apps are calling out to FB regardless of you having a [FB] account. If you have root, using Xprivacy will annoy you by revealing the amount of data-mining that's happening across all apps. I've seen this happening all the time using NetGuard (firewall which requires no root, made by the same dev behind Xprivacy). Most of the default apps on Samsung phones are constantly trying to call Facebook servers also. If you have Android, you should not be using your phone without NetGuard installed - https://github.com/M66B/NetGuard https://github.com/M66B/NetGuard

riazrizvi 8y ago

Their presentation is only the first 20 minutes, the rest is Q&A. If you watch it on 2X then it’s only 10 minutes of your time.