, 10 tweets, 4 min read
My Authors
Read all threads
Hi @BBCNews.

1 - I'd like to clarify this headline. Our team of security researchers revealed group privacy flaws to Facebook in May 2018. We submitted via white hat portal.

Facebook denied there was a problem. bbc.com/news/technolog…
@BBCNews 2 - We submitted an Open Letter to FB from group admins July 2018. Less than a week later FB changed privacy settings in July 2018 (a partial fix), but denied it related to #SICGRL vuln we reported.

Facebook did not honor their own responsible disclosure policy.
3 - After months of inaction, we submitted a complaint to the FTC December 2018, expanding on our original research. missingconsent.org/downloads/SicG…
4 - We made the vulnerability and FTC Public in December 2018. missingconsent.org/facebook-patie…
5 - There was a Congressional Inquiry on this matter. But the details of this meeting with House E&C Committee were not made public. energycommerce.house.gov/sites/democrat…
6 - The FTC Announces $5 Billion Settlement with Facebook in July 2019. This settlement offers no protections for vulnerable closed groups. statnews.com/2019/07/31/fac…
7 - All required reading on FB FTC Settlement is here:
8 - So... Facebook denied there was a problem for over a year, failed to fix #SICGRL, and did not honor their own responsible / coordinated disclosure policy.
Imagine our surprise to see that them 'reveal' the massive flaws in their group privacy architecture.
9 - This announcement comes after Facebook their new launch into healthcare last week. Without having fixed #SICGRL first. statnews.com/2019/10/28/fac…
10 - Glad they took a step towards telling the partial truth. We hope that they tell the whole truth by sharing details on which developers retained data, explaining how groups were impacted, and by provide resources for groups to deal with the fallout.

Missing some Tweet in this thread? You can try to force a refresh.

Enjoying this thread?

Keep Current with Brave Bosom

Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!