{"id":775,"date":"2018-12-06T10:01:33","date_gmt":"2018-12-06T15:01:33","guid":{"rendered":"http:\/\/www.dandc.com\/?p=775"},"modified":"2018-12-06T10:01:33","modified_gmt":"2018-12-06T15:01:33","slug":"internal-documents-suggest-facebook-might-have-exploited-android-apis-to-collect-call-and-text-data-without-permission","status":"publish","type":"post","link":"http:\/\/www.dandc.com\/?p=775","title":{"rendered":"Internal documents suggest Facebook might have exploited Android APIs to collect call and text data without permission"},"content":{"rendered":"<p>via <a href=\"https:\/\/www.androidpolice.com\/2018\/12\/05\/internal-documents-suggest-facebook-might-have-exploited-android-apis-to-collect-call-and-text-data-without-permission\/\">Android News, Reviews, Apps, Games, Phones, Tablets, Tips, Mods, Videos, Tutorials &#8211; Android Police<\/a> December 5, 2018 at 03:00PM<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" class=\"alignright size-medium\" src=\"https:\/\/i0.wp.com\/www.androidpolice.com\/wp-content\/uploads\/2018\/11\/nexus2cee_Generic-Facebook-Hero.png?w=250&#038;ssl=1\" ><!DOCTYPE html PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\" \"http:\/\/www.w3.org\/TR\/REC-html40\/loose.dtd\"><br \/>\n<html><body><\/p>\n<div>\n<div>\n<p data-ai=\"WzgsMCwiYXAyX2Fib3ZlX3Bvc3RfYm9keSIsIiJd\">\n<p><ins data-ad-client=\"ca-pub-8776668743582988\" data-ad-slot=\"4825925002\" data-ad-format=\"auto\" data-full-width-responsive=\"false\"\/>\n<\/p>\n<p><a href=\"https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/11\/nexus2cee_Generic-Facebook-Hero.png\"\/><\/p>\n<p>This March news broke that Facebook had been<a href=\"https:\/\/www.androidpolice.com\/2018\/03\/25\/facebook-gathering-call-sms-mms-metadata-years-via-app\/\"> gathering call, SMS, and MMS metadata<\/a> through Android for years with questionable levels of consent. <em><a href=\"https:\/\/arstechnica.com\/information-technology\/2018\/03\/facebook-scraped-call-text-message-data-for-years-from-android-phones\/\" target=\"_blank\" rel=\"noopener nofollow\">Ars Technica<\/a>&#160;<\/em>suggested that Facebook was exploiting a loophole in Android to harvest call and SMS data without requesting the permission from users. Facebook responded that it was only collecting metadata through Facebook Lite and Messenger, both of which ask users for that permission during setup. The platform&#8217;s integrity, however, has now been brought into question once more with revelations from internal emails released by the UK Parliament that show employees explicitly discussing how they might avoid any Android permissions request when requesting SMS and call history.<span id=\"more-531494\"\/><\/p>\n<p>The documents come from Six4Three, a company you might remember as being behind the skeevy app that created a way to search for bikini pictures from your contacts on Facebook. When Facebook closed off access to data in 2014 Six4Three sued the tech giant for effectively shutting down its business. During the discovery phase of its lawsuit, it obtained documents from Facebook regarding privacy gaps in the Facebook partner API. One of the documents it received was a message thread summary sent as an email on February 4th, 2015, in which one Facebook employee wrote that the addition of a read call log permission would be &#8220;pretty high risk from a PR perspective.&#8221;<\/p>\n<blockquote>\n<p><img data-recalc-dims=\"1\" height=\"305\" width=\"668\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-668x305.png?resize=668%2C305&#038;ssl=1\" alt=\"\" srcset=\"https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-668x305.png 668w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-329x150.png 329w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-768x351.png 768w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-161x74.png 161w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-217x99.png 217w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one-728x332.png 728w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-one.png 1347w\" sizes=\"(max-width: 668px) 100vw, 668px\"\/><\/p>\n<\/blockquote>\n<p>Another employee stated later on in the thread that Facebook&#8217;s &#8216;Growth&#8217; department was exploring a way to get call log permission without &#8220;subjecting&#8221; users to an Android permissions dialog at all.<\/p>\n<blockquote>\n<p><a href=\"https:\/\/i0.wp.com\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2.png?ssl=1\"><img data-recalc-dims=\"1\" height=\"187\" width=\"668\" decoding=\"async\" src=\"https:\/\/i0.wp.com\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-668x187.png?resize=668%2C187&#038;ssl=1\" alt=\"\" srcset=\"https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-668x187.png 668w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-329x92.png 329w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-768x215.png 768w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-161x45.png 161w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-217x61.png 217w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2-728x204.png 728w, https:\/\/www.androidpolice.com\/wp-content\/uploads\/2018\/12\/a-facebook-2.png 1315w\" sizes=\"(max-width: 668px) 100vw, 668px\"\/><\/a><\/p>\n<\/blockquote>\n<p>Now, one can&#8217;t say definitively from this exchange whether foul play occurred, but there was already a fair amount of doubt that Facebook&#8217;s excuse held water. After the social media giant issued its &#8220;fact check&#8221; blog post in March, <a href=\"https:\/\/arstechnica.com\/information-technology\/2018\/03\/facebook-scraped-call-text-message-data-for-years-from-android-phones\/\" target=\"_blank\" rel=\"noopener nofollow\"><em>Ars Technica<\/em> <\/a>responded that its statement contradicted the experience of several users who had shared their data with the publication.<\/p>\n<p data-ai=\"WzMsMCwiYXAyX2luX3Bvc3RfYm9keV8xIiwiIl0=\">\n<ins data-ad-client=\"ca-pub-8776668743582988\" data-ad-slot=\"4273329030\" data-ad-format=\"auto\" data-full-width-responsive=\"false\"\/>\n<\/p>\n<p>In fact, the reporter himself, Sean Gallagher, wrote that a review of his Google Play data confirmed that Messenger was never installed on the Android devices he used. Only the Facebook app itself was installed on two different Android devices in 2015, and there was never an explicit message requesting the permissions, yet there was call data from the end of 2015 until late 2016.<\/p>\n<p>Ultimately, it seems pretty clear that Facebook exploited Android APIs for its own gain &#8211; but what was the gain exactly? According to the message thread, Facebook wanted to use this information for things like the People You May Know feature and feed ranking, but suspicions have long run high that the platform sells its users&#8217; data. The company refutes that, and none of the documents from Six4Three directly contradict the claim, but there was some new information revealed about Facebook whitelisting certain large tech companies, including Netflix and Airbnb, when restrictions on user data access were put in place. In other words, some companies got a pass when user data access was nixed for most others. Additionally, the documents show Mark Zuckerberg&#8217;s discussion of letting developers use Facebook&#8217;s login tools or publish to Facebook for free, but charging them for reading data at the price of $0.10 per user per year.<\/p>\n<p>To all of this, Facebook responded in <a href=\"https:\/\/newsroom.fb.com\/news\/2018\/12\/response-to-six4three-documents\/\" rel=\"nofollow\" target=\"_blank\">a press statement:<\/a> &#8220;As we&#8217;ve said many times, Six4Three &#8212; creators of the Pikinis app &#8212; cherrypicked these documents from years ago as part of a lawsuit to force Facebook to share information on friends of the app&#8217;s users. The set of documents, by design, tells only one side of the story and omits important context.&#8221; Facebook CEO Mark Zuckerberg also published his own statement on the platform, shown below.<\/p>\n<p id=\"fb-root\"\/>\n<p\/>\n<div data-href=\"https:\/\/www.facebook.com\/zuck\/posts\/10105559172610321\" data-width=\"668\">\n<blockquote cite=\"https:\/\/www.facebook.com\/zuck\/posts\/10105559172610321\">\n<p>This week a British Parliament committee published some internal Facebook emails, which mostly include internal&#8230;<\/p>\n<p>Posted by <a href=\"https:\/\/www.facebook.com\/zuck\" rel=\"nofollow\" target=\"_blank\">Mark Zuckerberg<\/a> on&#160;<a href=\"https:\/\/www.facebook.com\/zuck\/posts\/10105559172610321\" rel=\"nofollow\" target=\"_blank\">Wednesday, December 5, 2018<\/a><\/p>\n<\/blockquote>\n<\/div>\n<p>These documents close out a year full of <a href=\"https:\/\/www.wired.com\/story\/wired-facebook-cambridge-analytica-coverage\/\" rel=\"nofollow\" target=\"_blank\">astounding<\/a> <a href=\"https:\/\/www.theverge.com\/2018\/7\/31\/17635288\/facebook-russia-influence-us-midterm-election-meddling\" target=\"_blank\" rel=\"noopener nofollow\">revelations <\/a>about Facebook &#8211; each one enough to make the public question its integrity, but taken together a searing indictment of not only the platform itself, but all business models that depend on the harvesting of user information. Here&#8217;s hoping today&#8217;s revelations and the countless other scandals that have erupted this year start us on the path to solutions.<\/p>\n<p\/>\n<\/div>\n<\/div>\n<p><\/body><\/html><\/p>\n","protected":false},"excerpt":{"rendered":"<p>via Android News, Reviews, Apps, Games, Phones, Tablets, Tips, Mods, Videos, Tutorials &#8211; Android Police December 5, 2018 at 03:00PM This March news broke that Facebook had been gathering call, SMS, and MMS metadata through Android for years with questionable levels of consent. Ars Technica&#160;suggested that Facebook was exploiting a loophole in Android to harvest [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[11],"tags":[46,45],"class_list":["post-775","post","type-post","status-publish","format-standard","hentry","category-news","tag-feedly","tag-ifttt","has-post-thumbnail","fallback-thumbnail"],"jetpack_publicize_connections":[],"taxonomy_info":{"category":[{"value":11,"label":"News"}],"post_tag":[{"value":46,"label":"Feedly"},{"value":45,"label":"IFTTT"}]},"featured_image_src_large":false,"author_info":{"display_name":"Darren","author_link":"http:\/\/www.dandc.com\/?author=1"},"comment_info":0,"category_info":[{"term_id":11,"name":"News","slug":"news","term_group":0,"term_taxonomy_id":11,"taxonomy":"category","description":"","parent":0,"count":88,"filter":"raw","cat_ID":11,"category_count":88,"category_description":"","cat_name":"News","category_nicename":"news","category_parent":0}],"tag_info":[{"term_id":46,"name":"Feedly","slug":"feedly","term_group":0,"term_taxonomy_id":46,"taxonomy":"post_tag","description":"","parent":0,"count":68,"filter":"raw"},{"term_id":45,"name":"IFTTT","slug":"ifttt","term_group":0,"term_taxonomy_id":45,"taxonomy":"post_tag","description":"","parent":0,"count":68,"filter":"raw"}],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p7GQ5E-cv","jetpack-related-posts":[{"id":540,"url":"http:\/\/www.dandc.com\/?p=540","url_meta":{"origin":775,"position":0},"title":"Sling TV&#8217;s $5 Cloud DVR arrives on Android and Roku","author":"Darren","date":"April 11, 2017","format":false,"excerpt":"Sling TV's Cloud DVR feature is slowly becoming available for more subscribers. Now folks who use Android and Roku devices to stream live TV can pay $5 extra a month to store 50 hours of video on Sling's servers for anywhere\/anytime viewing -- half a... Source: Sling TV's $5 Cloud\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"http:\/\/www.dandc.com\/?cat=11"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/news.sling.com\/sites\/sling.newshq.businesswire.com\/files\/logo\/image\/SlingIcon.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":119,"url":"http:\/\/www.dandc.com\/?p=119","url_meta":{"origin":775,"position":1},"title":"HTC Bravo heading to Verizon Wireless April 2010","author":"Darren","date":"December 7, 2009","format":false,"excerpt":"From CoolSmartPhone.com ...HTC BravoThe \"Bravo\" looks to be a real blockbuster, with the Qualcomm 8250 1Ghz processor we've seen in the Windows Mobile-powered HD2, a 3.7\" WVGA AMOLED screen and HD720p video capture. We've only got to glance in our inbox to see emails asking, \"When will an Android powered\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"http:\/\/www.dandc.com\/?cat=13"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":197,"url":"http:\/\/www.dandc.com\/?p=197","url_meta":{"origin":775,"position":2},"title":"New WordPress Android App","author":"Darren","date":"December 20, 2011","format":false,"excerpt":"Wordpress released their latest update to their Android app. This new version supports WYSIWYG editing and full tablet support. This is a significant upgrade to the UI of Word Press, like an all new Dashboard and Quick Action Bar, giving users 1-click access to the most used functions in WP.\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"http:\/\/www.dandc.com\/?cat=13"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":236,"url":"http:\/\/www.dandc.com\/?p=236","url_meta":{"origin":775,"position":3},"title":"Moto 360 First Impressions","author":"Darren","date":"September 16, 2014","format":false,"excerpt":"Like many other geeks out there I was totally excited when Google announced Android Wear and the Moto 360 was first seen. I also ordered my Moto 360 as soon as I could and it arrived Monday (yesterday). Except for charging and sleeping, I've spent about 8 hours playing with\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"http:\/\/www.dandc.com\/?cat=13"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/forums.androidcentral.com\/attachments\/moto-360\/135533d1410030060t-anybody-track-one-moto-360-down-store-best-buy-today-5557.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":231,"url":"http:\/\/www.dandc.com\/?p=231","url_meta":{"origin":775,"position":4},"title":"Fall &#8230; When new gadgets come out &#8230;","author":"Darren","date":"September 9, 2014","format":false,"excerpt":"It's that time of the year again - when new gadget goodness is released! IFA, the Samsung announcement, and the Motorola announcement were all last week. Apple announces the new iPhone 6 today and sometime later this month it is expected that Google will announce the Nexus phone(s). I am\u2026","rel":"","context":"In &quot;Technology&quot;","block_context":{"text":"Technology","link":"http:\/\/www.dandc.com\/?cat=13"},"img":{"alt_text":"wpid-note4","src":"https:\/\/i0.wp.com\/www.communitychapelgreenville.com\/dandc.com\/wp-content\/uploads\/2014\/09\/wpid-note4-300x224.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":599,"url":"http:\/\/www.dandc.com\/?p=599","url_meta":{"origin":775,"position":5},"title":"Galaxy Note 8: Top 8 S Pen features!","author":"Darren","date":"October 3, 2017","format":false,"excerpt":"via Android Central - Android Central October 3, 2017 at 09:05AM Iconic smartphone features are few and far between. Yet with the original Galaxy Note back in 2011, Samsung defined an entire category of phones. You can dismiss it as gimmickry, but the S Pen is unique \u2014 no-one has\u2026","rel":"","context":"In &quot;News&quot;","block_context":{"text":"News","link":"http:\/\/www.dandc.com\/?cat=11"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/posts\/775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.dandc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=775"}],"version-history":[{"count":1,"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/posts\/775\/revisions"}],"predecessor-version":[{"id":776,"href":"http:\/\/www.dandc.com\/index.php?rest_route=\/wp\/v2\/posts\/775\/revisions\/776"}],"wp:attachment":[{"href":"http:\/\/www.dandc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.dandc.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=775"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.dandc.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}