3 ms·
This is still an ACL issue - that Facebook allowed CA to pull data they weren’t authorized for doesn’t mean making API access is a bad idea. It increases the
by r00fus 7y ago
This is still an ACL issue - that Facebook allowed CA to pull data they weren’t authorized for doesn’t mean making API access is a bad idea.
It increases the attack surface but publicly to everyone.
- Thorrez 7y agoIf I share some information with a friend of a friend, should that information be viewable by an app that the friend of a friend activated? For Cambridge Analytica, the answer was "yes", so Cambridge Analytica was able to scrape a bunch of stuff. If we make the answer "no", then it won't be possible to build alternate UIs, because the Facebook UI will be able to show my friend of a friend my information, but an alternate UI won't be able to do so.