Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I'm siding with Facebook on this.

You can already get Facebook UIDs, which can be used to reconstruct the graph edges. You don't want to store Facebook UIDs? Build your own social graph.

And Facebook is right. I own MY info on Facebook. I can prove it. I'll just delete my account with my email address. If you were my friend let's see if you still have acces to that info. If they start letting my friends export my email to third parties then I'm getting off Facebook.

EDIT: Think about it. Most sites these days require an email. It's not exactly optional info to use Facebook. Are we seriously considering that it's acceptable that we let friends EXPORT people's email addresses for third parties just because they "friended" on Facebook? Maybe if there was a new "Share my email" feature this would be acceptable but "friending" != "here you can give my email to third parties and here's an easy API for you to do that"



I already built my own social graph. It's fine that Facebook claims co-ownership, as they did facilitate its construction, but it's equally mine.

If you don't want me to have your email address I'm not your friend.


Actually Facebook doesn't need to co-own it. If the user uploads a Facebook dump with UIDs then that relationship info is only useful if someone with a corresponding UID provides more data. But once it leaves Facebook it's free and owned by the user. What I meant is that if you don't like Facebook's UID system then you should build your own social network from scratch, otherwise these pre-built relationship data is still really valuable.

Also the UID is the relationship data. You do get that. No need to go out and dump emails which you didn't build. If you do get that info facebook would have to GIVE that to you.

> If you don't want me to have your email address I'm not your friend.

That actually depends on how Facebook designs the application to work. I could very well design an application that lets people store their social security numbers and share that in certain ways. There's no universal law that says an arbitrary indication of relation such as "friend" means that I must have access to your social security number now. Clearly Facebook has not chosen to make that the default and let users easy export emails just by friending. If they did, then yes, I would unfriend people that I don't to give this power to.


User choice is the problem here - I should be able to choose whether or not apps that my friends use can access my contact information, not Facebook.

And in fact, there already is an extremely fine grained control panel managing what kind of information the apps my friends use can access (18 different toggles), from my bio to my location to the content of my status updates.

The one thing that I'm not allowed to expose to those apps? My contact information.

For my protection my ass. I just can't believe that's about protecting my privacy, considering they encourage me at every step to pass every other piece of my Facebook presence around like the village bicycle.


You can expose your contact info to third parties: just connect with the app. The only thing you can't do is expose your friends contact info to third party apps.


Every other piece of information that Facebook has on me is allowed to be exposed to my friends' apps without me personally connecting with the app.

The motivation here is crystal clear: e-mail addresses function as (essentially) UIDs on the web as a whole, and someone like Google has billions of these e-mail addresses laying around. But since people started managing parts of their social graphs on Facebook instead of through (say) Gmail, Google's edge graph is starting to get stale. Facebook is terrified of the idea that Google could connect all the Gmail-to-Gmail edges without finding every one of those users.

In order for Google to refresh that graph without e-mail addresses, they'd need every involved user to export their Facebook UID out of Facebook - if I didn't do this myself, then despite the fact that (say) 30 of my Facebook friends are on Gmail, even if every one of them exported from Facebook to Google, Google could never match my Facebook UID to my Google account.

If they were able to match e-mail addresses, they could probably reconstruct a very healthy proportion of the edges (almost every edge that has a Gmail user at both vertices) even if only a small proportion of initial users seeded the graph by exporting their own data; further, when Google got an edge (suppose my friend exported his data, and my Gmail address matched), they could follow up with that edge, knowing that they are also Facebook users, and suggest that they export their data as well, which would lead to blisteringly fast filling out of that tree.

To anyone that doesn't already have a huge userbase, this is not a big deal, but to anyone that does, it's the difference between having effectively zero access to the social graph and being able to reconstruct your users intersection with it with almost perfect resolution.


> Every other piece of information that Facebook has on me is allowed to be exposed to my friends' apps without me personally connecting with the app.

Really? Because I'd love to grab that information for my app. Are you talking about the publicly available information?

> The motivation here is crystal clear: e-mail addresses function as (essentially) UIDs on the web as a whole, and someone like Google has billions of these e-mail addresses laying around. But since people started managing parts of their social graphs on Facebook instead of through (say) Gmail, Google's edge graph is starting to get stale. Facebook is terrified of the idea that Google could connect all the Gmail-to-Gmail edges without finding every one of those users.

Sure Facebook probably wouldn't want to do that even if there wasn't a privacy issue with letting friends export friends' email addresses. But I don't care about that, I just don't want them to let my friends export my email, and I don't think they have to create that feature. That feature would help google and other sites ride on Facebook's success at the expense of user privacy. I don't care about the former and I would be on Google's side if it were just the former issue but it is not.

> In order for Google to refresh that graph without e-mail addresses, they'd need every involved user to export their Facebook UID out of Facebook - if I didn't do this myself, then despite the fact that (say) 30 of my Facebook friends are on Gmail, even if every one of them exported from Facebook to Google, Google could never match my Facebook UID to my Google account.

> To anyone that doesn't already have a huge userbase, this is not a big deal, but to anyone that does, it's the difference between having effectively zero access to the social graph and being able to reconstruct your users intersection with it with almost perfect resolution.

Last time I checked (may have changed) Facebook let's you query email hashes to find the person's friends based on the email hash. Also YOU created those networks on Facebook. Why would you expect Google to magically know that? Sure google is trustworthy, but more importantly why would you want malicious third party site to know your email address?

I would love for Facebook make it really easy for sites to use their graph data as easily as possible but Facebook already does this. The people complaining probably haven't even seen the Facebook APIs or even used Facebook. They're just complaining because bashing Facebook for controlling its data is the popular thing to do right now.


Your friends might not but Facebook sure will still have access to your email address.


I'm assuming they actually delete the info when I tell them to delete it. But in any case my friends won't have access to that info therefore it's not their right to export that info to others unless I give them permission to (which I won't).


Last I checked, fb does not delete your data when you deactivate your account, they just hide it all. Moreover if you want it all gone, you have to go to all of your friends' pages and manually remove each piece of content you've contributed.


That's only if you deactivate your account. There's also a way to delete your account, and then your content will be deleted. However, they will still maintain the social graph (so if you'll create a new account with the same email, they know who you were connected too).


So you are saying that it's ok to export email addresses from gmail but not email addresses from facebook? Can you explain?


Because Gmail contacts list is a list >> I << compiled and maintain. If my friends deleted their gmail email accounts or yahoo or whatever I still have the list.

Contrast this to Facebook: I sign up on Facebook and friended a person based on their name, photo, and certain other details but not necessarily email. Does this mean I want them to be able to automatically pull my profile because they friended me based on my public info? Sure they can always compile their own non-Facebook database of info based on what they scrape manually but Facebook should not, and is not obligated to make it easy for people to grab their friends' data.


Good point. I'm convinced.


Not to speak for GP, but that is a perfectly reasonable position to take, and one that I would take. They're different services; GMail does not have third-party apps in the same sense. Facebook's app ecosystem has some quite disreputable parties in it; an API that lets these parties have access to friends' email addresses would place a lot of Facebook users' emails in the hands of companies that they have no direct relationship with or knowledge of.





Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: