Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Edit: CANCEL MY KNEE-JERK REACTION TO A KNEE-JERK REACTION! A few tweets down (good [deity] twitter is a terrible way to transmit information, this is why I don't generally bother with it) she does say the full library is sent.

--------------------

> copying and uploading the libraries is actually illegal (copyright violation)

That isn't what is happening here - the headline is misleading.

Further into the tweet (FFS, it is a tweet and people aren't reading it all before reacting!) it clearly says "It periodically uploads metadata of system libraries to the server".

Basically that means they are sending and storing what versions of what things you have, not the code or other data in the libraries themselves. I'm pretty sure there is no reasonably copyright on the name and version number of a library in this context.

If it is being done for fingerprinting purposes then there might be an unreasonable tracking claim by the users, but not the library copyright holders.

The less worrying explanation is that it is being used for problem analysis: if a new version crashes a lot but only on devices with a specific version of a specific library, that makes tracking down the bug and implementing a workaround or fix much quicker. Of course this is facebook so if it is for the issue analysis (which it almost certainly is) but can also be used for fingerprinting as well, you can bet your bottom dollar that it will be used for fingerprinting as well.



Even further into the tweets it says:

"Facebook can upload the entire files of all system libraries to their server through their Android apps"

and

"I found they have already collected metadata of 2233 system libraries from my phone, in which 1162 system libraries are pending to be uploaded"

So they've already uploaded the metadata and are in process of uploading the whole files.


Are you sure it’s not the metadata that is pending to be uploaded?


Or the person misspoke.


What about finishing the thread? https://twitter.com/wongmjane/status/1167463077748436993 seems to imply entire files are uploaded.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: