Feel like GPDR could have used an upper limit of open investigations before algorithmic disgorgement automatically kicks in. Lost count of the open probes into Facebook Ireland a while ago. A failsafe for this colossus scenario.
Congratulations to FACEBOOK for accruing 15 separate GDPR probes. No other company even comes close.
Ireland offers Facebook tax advantages, attracting its EU headquartering, and an underfunded regulatory apparatus. Double lucky for them. But at least the EU grants its residents #datarights worth enforcing. Can’t say the same for the USA.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Why the Facebook contact uploader vulnerability and subsequent hackbreachleak matters. Phone numbers are the ideal attack surface to force multiply other vulnerabilities. Facebook exposed non-public information and needs to answer for it.
As I learned from today’s Spaces call:
—FB’s contact sync was vulnerable to a malicious attacker who could enumerate phone numbers to harvest FB IDs. This revealed non-public information
—attacker then scraped accounts by FB ID
—API limits woefully inadequate/trivial to cheat
—botnets would enable easy circumvention of throttling of lookups per user per session
—Facebook silently changing user prefs made it confounding to know how your phone number was used; default settings put risks on users
—expect probe of who knew what when as FB deflects & spins
Wow. @ashk4n reveals that his 2FA phone number which was different from the phone number he associated to his account was leaked in the contact sync vulnerability. Private information was most certainly breached. Facebook must be pushed on its subterfuge, when it knew what when.
Wow. @intdc explains how Facebook silently changing its confusing privacy settings set the stage for this catastrophic leak by making it too difficult to realize the difference between the visibility of your phone number vs. lookup by phone number. Cambridge Analytica déjà vu.
You can now check @haveibeenpwned to see if your Facebook account data is among the half-billion leaked and circulating. You know that breach that Facebook insists has no responsibility for because it’s an “old” breach. haveibeenpwned.com
FWIW I deactivated my Facebook in 2018 so it was protected from the breach. The only safe account is an inert or deleted account.
CAVEAT: @haveibeenpwned only checks if your email is in leaked data. Most of the Facebook records are uniquely identifiable by phone number, not emails. So unless someone else builds a phone query tool or Facebook notifies folks… ¯\_(ツ)_/¯
Proactively managing one’s own health data strikes me as an act of personal interest and liberty. Likewise, private interests are at liberty to impose requirements upon customers as terms and conditions of service. The problem is we don’t enjoy fundamental #DataRights in the USA.
In other words, we might find a digital vaccine record more acceptable if all data collecting entities were legally bound to disclose our data, its processing, sharing, and provide unobstructed revocation of consent. Exists in the EU. Not in the USA. #DataRights
So until the USA establishes fundamental #DataRights similar to the EU, CA, VA, etc., paper vaccine records could minimize digital monetization at least, and help maintain the minimal protections afforded by HIPAA. Without any safeguards tho, concerns of eventual abuse are real.
an NFT of a blueprint by a famous architect becoming more valuable than the real estate it planned, still standing today, preserved and insured by its owners, a magical beautifully designed house that you can actually live in
the next occupy wall st will be a revolt on NFTs that have caused a collapse having too many blueprints refinancialized into NFT default swaps and corresponding collateralized debt obligations re-mark to marketed into new tokens with ever more exotic gas fees
you could maybe finance your next house on the inevitable NFT blueprint market and so then you can obviously afford to import tulips for your requisite landscaping it would be so perfect and poetic
Softblocking is the most important twitter skill no one ever taught you.
Block and then undo the block in the few seconds you’re offered. You’ve just managed to make the offender unfollow you and they have to be very smart and conscientious to notice they have unfollowed you. Most will never realize they lost you as a trigger for their snowflakery.
I don’t block unless you’re an obvious fascist or ultra nationalist and then you should eat a bag of dicks and no you cannot enjoy my tweets for free you scum