Facebook admits harvesting 1.5 million people’s email contacts without consent https://t.co/Y5ayayg3wT pic.twitter.com/Em7e45IcBL

— The Verge (@verge) April 18, 2019

Half the comments on this news piece from my editor were just, "This is ludicrous" https://t.co/IHB3LehL5l

— jon.porter (@JonPorty) April 18, 2019

SCOOP: Facebook harvested 1.5 million people’s email contacts without their consent. It says it “unintentionally uploaded” them after asking users for their email passwords. https://t.co/HlqCFQ3smx

— Rob Price (@robaeprice) April 18, 2019

Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent https://t.co/nFaBq6sDn9

— Laurens Cerulus (@laurenscerulus) April 18, 2019

"Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent." https://t.co/5fzpjGApjP pic.twitter.com/kblvLUADp5

— Casey Fiesler, PhD, JD, geekD (@cfiesler) April 18, 2019

Hey twitterverse friends / #crimlaw experts:

Did @Facebook 'exceed[ed] authorized access' under #CFAA by logging in, downloading, and using (for advertising) users' address books without permission? @OrinKerr @normative @paulohm @robaeprice? https://t.co/KlXb4ApVp6 pic.twitter.com/y1NjV5eRpu

— ashkan soltani (@ashk4n) April 18, 2019

Facebook uploaded 1.5 million users' email contacts without permission https://t.co/kI692xIiCs

— Damian Collins (@DamianCollins) April 18, 2019

When ‚oops!‘ is the DNA of your entire business model: https://t.co/OXnOgho9E6

— Wolfgang Blau (@wblau) April 18, 2019

Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent https://t.co/93GEWpKpNz

— Graham Cluley (@gcluley) April 18, 2019

Facebook says before May 2016, it let users voluntarily verify their accounts and upload their contacts at the same time. A change then meant the text informing users about the email harvesting was deleted — but the functionality continued. https://t.co/HlqCFQ3smx

— Rob Price (@robaeprice) April 18, 2019

How exactly do you "accidentally" write software that logs into an email account, pulls down the contact list and stores it in a FB database? #privacy https://t.co/aB9trJ7cGc

— Kyle Rankin (@kylerankin) April 18, 2019

Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent https://t.co/1VBXoAHXXl via Business Insider

— EcommerceBytes (@EcommerceBytes) April 18, 2019

Hard to believe Facebook’s claim that their uploading of 1.5 million users' email contacts without permission was “unintentional”. Wonder how much ad revenue this brought in “by mistake”? ⁦@jason_kint⁩ https://t.co/MBUdLvTBdR

— Angela Mills Wade (@epc_angela) April 18, 2019

"Whoops."

We do not need to ask for consent, because we do not store any information except your encrypted files.

No email, no personal data, 100% control in your hands.

Opacity 1.0 - next month! #nodatabreaches #storage #whoops #Privacy #cloud https://t.co/1IiDrCeGB0

— Opacity Storage (@Opacity_Storage) April 18, 2019

'While 1.5 million people's contact books were directly harvested by Facebook, the total number of people whose contact information was improperly obtained by Facebook may well be in the hundreds of millions.' https://t.co/9fX0Sfjylg ht @brucedkleinman

— Jesse Felder (@jessefelder) April 18, 2019

It is [ 259 ] days since Facebook had a chief security officer.https://t.co/bMcsLLcA2o

— Zack Whittaker (@zackwhittaker) April 18, 2019

Facebook accidentally scraped the email contacts of 1.5 million users https://t.co/NKG58YGNOp pic.twitter.com/d5bkwk2xbB

— Golden Ashby (@goldenashby) April 18, 2019

Facebook accidentally scraped the email contacts of 1.5 million users https://t.co/VffFTBGTZi #tech #news #smallbiz pic.twitter.com/y0LTLeYYXS

— TECH|GEEK|REBEL (@TechGeekRebel) April 18, 2019

Facebook accidentally scraped the email contacts of 1.5 million users https://t.co/hIu3d8YDZw pic.twitter.com/ghdlH50IXr

— John Rampton (@johnrampton) April 18, 2019

« Facebook accidentally scraped the email contacts of 1.5 million users » ⁦@FTC⁩ ⁦@JoeSimonsFTC⁩ #EnforceTheOrder. The credibility of the @FTC as a privacy and consumer protection agency is at stake!! https://t.co/5w4S3pGkxa

— Joel Reidenberg (@jreidenberg) April 18, 2019

Again.. https://t.co/JKNHnNtgXv

— Ferchichi Ahmed (@A_Ferchiw) April 18, 2019

Beyond the security sin of asking 1.5 million people to reveal the passwords to their email accounts, Facebook then used those credentials to secretly suck up all their email contacts: https://t.co/6jW8ltPvfo

— Kashmir Hill (@kashhill) April 18, 2019

Oh for F's sake. https://t.co/rDldWYKqGD

— Rasmus Kleis Nielsen (@rasmus_kleis) April 18, 2019

How do you mistakenly upload and import people's contacts without permission? How is deleting our already stolen info a bug fix?

Your scandals, Facebook, are probably beyond those rivaled by Watergate, Volkswagon, Theranos, and Enron.https://t.co/Jo36msTyJD

— Omar Bham (Crypt0) (@crypt0snews) April 18, 2019

Facebook says it 'unintentionally uploaded' 1.5 million people's email contacts without their consent https://t.co/s0wgVrx13M

— PresidentTrump (@RichardTBurnett) April 18, 2019

It's not an 'accident' if it systematically results in one party (@Facebook) consistently getting access to user data via deceptive means https://t.co/B16sNBWo4f

— ashkan soltani (@ashk4n) April 18, 2019

It's worth noting that while 1.5 million users' contact books were *directly* harvested, the total number of people whose contact details were obtained may well be in the dozens/hundreds of millions, as people often have hundreds of contacts. https://t.co/s9D0GAOZyw

— Rob Price (@robaeprice) April 18, 2019

Just throwing this out there... but I’ve been a programmer since 1998... and I’ve never seen code accidentally harvest user data. It usually locks up and crashes when I make a mistake. Instead of say uploading my address book to Facebook.

Strange. https://t.co/4yRLAFAIuy

— Mark Madsen (@idyll_code) April 18, 2019

I concur that this is one of the most legally actionable behaviors by @facebook to date. I'm confident regulators will be taking a look.

Whether it will be included as part of the pending #cambridgeanalytica settlement or started as a new investigation is the question https://t.co/PhuryyroE3

— ashkan soltani (@ashk4n) April 18, 2019

If true, this is insane. Password harvesting isn’t something you can “unintentionally” do at scale — roadmap, code, code review, deployment, use of the contacts data, and no one stopped this? https://t.co/DtPPq97X04

— Sarah Guo ⚡️ Greylock (@saranormous) April 18, 2019

Someone designed that UI. Someone else approved the wording of the request it was making. Someone else had to *test that the data was successfully translated into their system for their use*. Likely many people at all stages. No part of this can have been “unintentional”. https://t.co/b1FBFKX60V

— Dan Curtis Johnson (@dcurtisj) April 18, 2019

Hang on: How do you unintentionally add code that asks for an email password, unintentionally add code that logs on and scans the user's contacts, unintentionally rolls that up to prod and unintentionally uploads all that data? ? https://t.co/MR430EyoZV

— Mat Velloso (@matvelloso) April 18, 2019

At this point can we even differentiate between instances of this shit? I can’t. It’s all a continuous blur with the vague outline of a pasty face and Elizabeth Holmes eyes https://t.co/3BF29Euouz

— Dobby’s Knobby Gets a Jobbie, Chapter One (@rushmorn) April 18, 2019

NOW: https://t.co/XGBfBm131v

NEXT: Oops, it was more like 15-150 million people. We will do better.

LATER: That Stamos guy: "People just don't understand how hard this stuff is."

— Kontra (@counternotions) April 18, 2019

Dear @ftc: is this unfair and deceptive enough for action? https://t.co/NJn0GNr8AM

— Steven Bellovin (@SteveBellovin) April 18, 2019

It is [ 259 ] days since Facebook had a chief security officer.https://t.co/bMcsLLcA2o

— Zack Whittaker (@zackwhittaker) April 18, 2019

The planned notification scheme here is completely inappropriate. All users whose email hase been uploaded by another user should be notified. https://t.co/AeqYi1T40v

— Paul-Olivier Dehaye (@podehaye) April 18, 2019

SCOOP: Facebook harvested 1.5 million people’s email contacts without their consent. It says it “unintentionally uploaded” them after asking users for their email passwords. https://t.co/HlqCFQ3smx

— Rob Price (@robaeprice) April 18, 2019

How do you unintentionally write & ship code that asks users for their email password, scans their address book then uploads their contacts to your server without asking permission?

For Facebook "unintentional" always means "we got caught? aw shucks". ??‍♂️ https://t.co/Cckgk5jRYM

— Dare Obasanjo (@Carnage4Life) April 18, 2019

Earlier this month, news broke that Facebook was asking users to provide their email passwords when they signed up. Turns out it was then using them to grab users’ contact books — without asking permission first. https://t.co/s9D0GAOZyw

— Rob Price (@robaeprice) April 18, 2019

"unintentionally" is the new "the dog ate my homework" https://t.co/Ya3N0klkQ2

— Miguel de Icaza (@migueldeicaza) April 18, 2019

“Unintentionally uploaded”. These things will keep happening as long as there is no accountability. https://t.co/nGj8Yl3WJI

— zeynep tufekci (@zeynep) April 18, 2019

How do you unintentionally write & ship code that asks users for their email password, scans their address book then uploads their contacts to your server without asking permission?

For Facebook "unintentional" always means "we got caught? aw shucks". ??‍♂️ https://t.co/Cckgk5jRYM

— Dare Obasanjo (@Carnage4Life) April 18, 2019

NOW: https://t.co/XGBfBm131v

NEXT: Oops, it was more like 15-150 million people. We will do better.

LATER: That Stamos guy: "People just don't understand how hard this stuff is."

— Kontra (@counternotions) April 18, 2019

Facebook literally saying they have no idea what they’re doing with personal data.

I honestly don’t know what’s worst here: Facebook lying or telling the truth.

’Oops, we unintentionally uploaded maybe 1.5 million address books.’#designethicshttps://t.co/0aQ8fLpL58

— Per Axbom (@axbom) April 18, 2019

Facebook looks likely to get into trouble with the Irish DPC over this one.
One of the main no-nos here is that FB asked some new account applicants for their (separate) email passwords. That's just a bad way of asking someone to sign up.https://t.co/aa504uhpzt

— Adrian Weckler (@adrianweckler) April 18, 2019

Facebook harvested 1.5 million user email contacts without permission https://t.co/wPzqrfjOCh by @SecurityCharlie

— ZDNet (@ZDNet) April 18, 2019

Shame on u again @facebook u keep invading our #privacy & others have our #data with no #dataprotection #DataPrivacy or respect 4 #databreach implicationshttps://t.co/OtuOzrdiwc#CyberSecurity #cyber #security #infosec #technology #Tech #techhouse #lawsuit #infosecurity

— Bring Your Own Security Radio (@BYOSradio) April 18, 2019

Remember when #Facebook was recently caught asking its users for their emails' account passwords?

Facebook today admitted that it "unintentionally" ?? used access to 1.5 million email accounts and collected contacts without users' knowledge and consenthttps://t.co/DIT4sBKVFH pic.twitter.com/lr2iRCaxqZ

— Mohit Kumar (@unix_root) April 18, 2019

Remember when #Facebook was recently caught asking its users for their emails' account passwords?

Facebook today admitted that it "unintentionally" ?? used access to 1.5 million email accounts and collected contacts without users' knowledge and consenthttps://t.co/DIT4sBKVFH pic.twitter.com/lr2iRCaxqZ

— Mohit Kumar (@unix_root) April 18, 2019

Facebook admits harvesting 1.5 million people’s email contacts without consent https://t.co/Y5ayaxYs8j pic.twitter.com/gy9GMVEtye

— The Verge (@verge) April 19, 2019

Facebook admits harvesting 1.5 million people’s email contacts without consent https://t.co/gLhjVR9DGk pic.twitter.com/im9jzYM6dS

— Pando Group (@ThePandoGroup) April 18, 2019

Remember when we learned Facebook was asking some new users for email passwords for the stated purpose of "verification," then using the passwords to scrape contact info?
It happened for almost 3 years and "unintentionally" vacuumed up 1.5 million contacts.https://t.co/zwhHlOS9Ax

— EFF (@EFF) April 18, 2019

Since May 2016 FB collected the contact lists of 1.5 million users new to the social network.
Your data, even worse your contacts’ data, scraped & sold w/o permission. No such thing as privacy on FB, you & your contacts are a commodity #DeleteFBAccount https://t.co/LKVeKNAtTq

— Cornish Skipper #FBPE #ABTV #FSFA ?? (@CornishSkipper) April 19, 2019

It keeps happening, again and again #Facebook #privacy https://t.co/OJJpZjpQWd

— Elena Sánchez (@Sanchelen) April 19, 2019

“Again I will say what few in the media seem willing to: Facebook is a criminal enterprise.”

—@daringfireballhttps://t.co/lqEqjtqp1Q

— Reginald Braithwaite (@raganwald) April 18, 2019

Facebook "unintentionally uploaded email contacts from up to 1.5 million new users on its servers, without their consent or knowledge, since May 2016." https://t.co/YgNCpku0mQ via @TheHackersNews

— Brett Shavers ? (@Brett_Shavers) April 18, 2019

Remember when #Facebook was recently caught asking its users for their emails' account passwords?

Facebook today admitted that it "unintentionally" ?? used access to 1.5 million email accounts and collected contacts without users' knowledge and consenthttps://t.co/V56Etn4bui pic.twitter.com/FV7x2U9B7w

— Swati Khandelwal (@Swati_THN) April 18, 2019

Facebook Collected Contacts from 1.5 Million Email Accounts Without Users' Permission https://t.co/21Ry3LHvxJ@ChuckDBrooks @BentleyAudrey @gvalan @mclynd @DrJDrooghaag @AlaricAloor @mirko_ross @DoD_CSIAC @clarinette02 @GascuelJ @AlaricAloor @MHcommunicate

— Philippe Vynckier (@PVynckier) April 19, 2019

With irregularities being disclosed one after other, how many users will discontinue their service. . . #gdpr #privacy #awareness #infosec

Facebook Collected Contacts from 1.5 Million Email Accounts Without Users' Permission https://t.co/5PvFAoRBXY via @TheHackersNews

— Aman Chhikara (@aman_raist) April 19, 2019