3 ms·
You’re quote doesn’t really prove that it was just giving access to amazon devices. Could go either way, no?
by b_tterc_p 8y ago
You’re quote doesn’t really prove that it was just giving access to amazon devices. Could go either way, no?
- SpicyLemonZest 8y agoEvery other time the issue has come up, it's turned out that "access to user data" meant that the third party was allowed to ask the user for access to their data. In principle this could be the first time Facebook actually just tossed database dumps at Amazon, and in principle Amazon might have abused the access to steal user data for themselves. But neither of those possibilities seem likely or are supported by the described evidence.
- basch 8y agoThe only real one I can remember off the top of my head, where facebook giving access to data didnt turn out to be userbase hands over data on themselves and friend, was the Netflix and some others getting access to private messages. And even there, it wasnt nefarious, it was facebook trying to extend people features, like being able to send their friends spotify songs. https://www.theverge.com/2018/12/18/18147616/facebook-user-data-giveaway-nyt-apple-amazon-spotify-netflix https://www.theverge.com/2018/12/18/18147616/facebook-user-d...
- mancerayder 8y agoEvery other time the issue has come up, it's turned out that "access to user data" meant that the third party was allowed to ask the user for access to their data. Allowed to ask the user? Can you unwrap that for us?
- SpicyLemonZest 8y agoTo use most user-data-serving Facebook APIs, you need both authorization from the user whose data you’re reading and approval from Facebook itself for your app. Facebook has been accused of bad behavior when approving and denying apps, but they haven’t (as far has been reported) released any APIs to get user data without first asking the user.
- ForHackernews 8y agoThis is true, but I doubt most users understood exactly what they handed over when they clicked "log in with Facebook".
- alex_57_dieck 8y agoat least there's always a tldr (you know what exactly you are handing over in a few bullet points), especially when you think of all the contracts/fine prints/ToS you accept in life..