…without explanation, the investigator changed the priority level on the escalation from "high" to "low"
Essential read on how FB just does not care about the world, because business goals. Breathtaking irresponsibility. Huge creds to the whistleblower. theguardian.com/technology/202…
FB has control over global debate and social relationships at an unprecedented scale.
It's disastrous that FB only cares if cheap, very visible or otherwise in its self interest. And it's disastrous that FB has this kind of control, without any democratic accountability, at all.
"It’s not for threat intel to investigate fake engagement"
"I don’t think Honduras is big on people’s minds here"
"we prioritize stopping the most urgent and harmful threats globally. Fake likes is not one of them"
"I wish resources were unlimited"
(w $54.86bn in cash on hand)
"Facebook did not employ a dedicated policy staffer or market specialist for Azerbaijan"
"Facebook did not have any full-time or contract operations employees who were known to speak Azeri, leaving staff to use Google Translate to try to understand the nature of the abuse"
"It took Facebook nearly a year to take down the Honduras network, and 14 months to remove the Azerbaijan campaign. In both cases, Facebook subsequently allowed the abuse to return"
"while AfS’s activity was coordinated, it was not inauthentic; it did not violate any of the company’s policies"
We need a much better understanding of 'coordinated' activities that exploit digital ecosystems optimized for clicks+engagement, whether commercially or politically.
Btw. Some studies debunked other studies on 'bots'. While accuracy is crucial, using a narrow definition of 'automated social bots' doesn't lead anywhere.
Much of today's web traffic is somehow inauthentic, and FB is removing billions of accounts a year…
The large number of breaches shouldn't lead to the conclusion that data protection doesn't matter anymore, quite the contrary.
It shows that making the legitimacy to use personal data dependent on the functioning of technical measures or privacy self-management is totally over.
Of course, orgs must care about security, and they must be liable for not doing so. But there will always be shady actors who will use dirty data for shady purposes.
In any case, we need to make sure that legit entities cannot legally use dirty data without risking everything.
Regulating how entities can legally use/process personal data is basically what the EU data protection regime is about. Enforcing it requires bureaucratic procedures from documenting data processing to audits to general deterrence etc.
According to the German Consumer Federation, the EU's #psd2 directive turned bank transaction data into a commodity and created a 'pipeline' for data flows to fintechs and other parties without much oversight.
I missed this comprehensive investigation by @kfranasz from Oct 2020 that found that 502 out of 537 websites by US senators and congressional reps (.house.gov/.senate.gov) transmitted personal data on visitors to Google, 309 to Facebook, 69 to Oracle. Bad. adalytics.io/blog/is-congre…
Actually, no website should send behavioral data to Google, FB or other surveillance marketing companies, including sites by parties and politicians.
Apart from that, formal .gov sites should really not share data with any company that exploits it for commercial purposes at all.
This is even more true for sites by public authorities.
Like the US Customs and Border Protection website that just sent personal data on my visit to FB, Google, Microsoft, The Trade Desk, mdhv.io (?) and other parties during my visit as observed in my browser.
Lobbying spend by 25 companies registered as 'data brokers' in the US, including Oracle, RELX, Experian, Equifax, TransUnion, LiveRamp, Neustar, Venntel, Zeta Global, Aristotle, X-Mode.
Update, FB received personal data on me from 1573 apps and websites over the last 6 months, up more than two-fold from January 2020 when it introduced its 'Off-Facebook Activity' tool.
Methodology: For a part of my daily web activity I use a browser without any tracking protection or ad blocker, which is also logged into FB. Like many others. Annoying and painful, but what has to be done has to be done.
Correction: The new number seems to cover >6 months.
Some sites sent data about my activities to FB hundreds of times. Media websites are among the worst offenders:
- Daily Mail: 297x
- The Independent: 280x
- The Guardian: 203x
- Vice: 158x
- Reuters: 91x
- The Atlantic: 87x
- Forbes: 72x
- The New Yorker: 53x
- Politico: 46x