Note to all: EVERY APP (particularly those from the "big" companies) that you install on a device CAN READ EVERYTHING on your device and send data back to its maker. All it takes is for the user to click OK since there is no way to accept only part of the Terms and Conditions. The spying is always a technical possibility, but it was also legal and even when not, it is often unsanctioned. The example below again proves why we need GDPR and why the GDPR enforcement still needs to be up to the legislator's intent. Even if some operating systems are better than others in creating guardrails, ONCE THE USER EMPOWERS THE APP, IT'S DONE. #ghostbusters #0trust
This controversial email from Mark Zuckerberg to Facebook execs just got leaked. Here's everything you need to know: Facebook established a secret internal operation with the aim of understanding how its users were interacting with its competitors. Named "Project Ghostbusters", with reference to Snapchat’s ghost-like logo, Facebook wanted to figure out a way to analyse encrypted app traffic from users of Snapchat. Facebook installed so-called 'kits' (using Onavo, a VPN-like service that Facebook acquired in 2013) on its users iOS and Android devices, which allowed Facebook to read network traffic before it got encrypted and sent to Snapchat's servers. Facebook expanded the tactic, commonly called a "man-in-the-middle attack", to Amazon and YouTube. Not all execs agreed that "Project Ghostbusters" was a good idea. In another leaked email exchange, Pedro Canahuati, then-head of security engineering said: "I can’t think of a good argument for why this is okay. No security person is ever comfortable with this, no matter what consent we get from the general public. The general public just doesn’t know how this stuff works.” Wild! 👀