|
@dylanmckaynz | |||||
|
Downloaded my facebook data as a ZIP file
Somehow it has my entire call history with my partner's mum pic.twitter.com/CIRUguf4vD
|
||||||
|
||||||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 21 |
|
a historical record of every single contact on my phone, including ones I no longer have pic.twitter.com/XfiRX6qgHl
|
||
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 21 |
|
metadata about every text message I've ever received or sent
spoiler: I don't use messenger for SMS pic.twitter.com/ehWXhpnrrV
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 21 |
|
and the metadata of every cellular call I've ever made, including time and duration 😬😬 pic.twitter.com/Ykr3o0gZFu
|
||
|
|
||
|
Ben Vidulich
@zl4bv
|
Mar 21 |
|
Which mobile OS would this data have been pulled from?
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 21 |
|
Android 5.1 - I've both Facebook and Messenger installed
|
||
|
|
||
|
Andras Zoltan
@RealLordZoltan
|
Mar 22 |
|
Isn't that what we agree to when Android pops up with a prompt saying 'access to your call history' etc?
I mean, yes: it's scary AF - but are we surprised they *can* do it, or the fact that they *actually* do it after we give them permission?
|
||
|
|
||
|
Ændrew Rininsland
@aendrew
|
Mar 22 |
|
This is interesting — I just did the same and none of that info is in there, and I've been using Facebook on my Android phone for years. I wonder if it's because the UK/EU has different personal data disclosure rules? What section of the zip was that all in?
|
||
|
|
||
|
Carl Brusell
@carlbrusell
|
Mar 22 |
|
Facebook calls?
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
nope, regular cellular calls with the stock 'Phone' android app
I used facebook's integrated SMS+cell call functionality for about a week at one point, but disabled it quickly after and went back to the stock app
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
The 'Contact Info' tab, inside 'html/contact_info.htm'
the only other interesting page I found was the 'Ads' page, which shows all the keywords that are used for you in targeting
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
Inside 'html/account_info.htm'. There's an 'index.htm' that serves as a homepage to all of the photos+ads+messages+videos+pokes pages in that folder too IIRC
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
I'm in New Zealand for what it's worth
privacy.org.nz/the-privacy-ac…
|
||
|
|
||
|
Kamen Naydenov
@pau4o
|
Mar 22 |
|
how big is it?
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
my ZIP file was ~250mb, but if you have more photos and videos it'll be much larger because it has every photo and video across every album and PM
|
||
|
|
||
|
Viljami Kuosmanen
@anttiviljami
|
Mar 22 |
|
Android or iOS user?
|
||
|
|
||
|
Luciano Carvalho
@lscarval
|
Mar 22 |
|
A good example is this app I'm using right now (sic). Why does it need permissions to my Phone records, text messages and contacts? pic.twitter.com/y99uDLj7EL
|
||
|
|
||
|
Pequeño Principe de Bronce
@eldealado_
|
Mar 22 |
|
how do you get this info?? i download the data from the fb page but that info is not there.
|
||
|
|
||
|
Adam Faircloth
@fcloth
|
Mar 22 |
|
It does not need access to SMS to send 2 factor, or access to Phone to handle background tasks
|
||
|
|
||
|
|
Dylan McKay
@dylanmckaynz
|
Mar 22 |
|
I've written a script to dump all cell records in the ZIP file and print statistics
Here is what it shows on my profile, pretty chilling
The Ruby script can be found at gist.github.com/dylanmckay/2b1… pic.twitter.com/jvutJoJ4Lc
|
||
|
|
||