Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Zuckerberg Gaslights Congress Before The Hearings Even Start [The Fix is in]
www.thedailybeast.com ^ | 04.10.18 5:02 AM ET | Kevin Poulsen

Posted on 04/10/2018 9:34:05 AM PDT by Red Badger

Mark Zuckerberg swears he found out just two weeks ago that bad actors were harvesting users’ private info by the millions. But the company was alerted long, long before that.

Facebook was warned five years ago that the “reverse-lookup” feature in its search engine could be used to harvest names, profiles, and phone numbers for virtually all its users. But the company ignored the red flags until last week, after it happened.

In prepared testimony to Congress released Monday, Mark Zuckerberg acknowledged that malefactors had used the reverse-lookup “to link people’s public Facebook information to a phone number,” he wrote (PDF). “When we found out about the abuse, we shut this feature down.” He said that Facebook only discovered the incidents two weeks ago.

Zuckerberg is set to testify at a joint hearing before the Senate’s Judiciary and Commerce committees on Tuesday, and then return to Capitol Hill on Wednesday to appear before the House Energy and Commerce Committee. This will be the first time Facebook’s billionaire founder and CEO has ever appeared before Congress. Last fall the company’s vice president and general counsel Colin Stretch appeared at the hearings probing Russia’s election interference campaign.

“You could use this technique to build up a database of phone numbers and associated accounts without targeting any specific phone number or account.” — Security researcher Bennett Haselton in 2013

The hearings are a response to last month’s revelations that Cambridge Analytica, a U.K.-based consulting firm that worked for the Trump campaign, harvested data on as many as 87 million Facebook users without their knowledge.

Facebook revealed the separate reverse-lookup data spill while responding to the Cambridge Analytica controversy.

The issue was that Facebook allowed users to find anyone on the site by entering either their phone number or email address. In 2010, computer science researchers in Greece showed how spammers could use that feature to validate address lists and “craft personalized phishing emails that are far more efficient than traditional techniques by using personal information publicly available in social networks” (PDF).

But Zuckerberg’s written testimony reveals for the first time that it was phone number lookups that were used in the large scale scraping. That’s a more potent weapon for bulk harvesting, because a data miner can programatically cycle through every possible phone number to get a complete corpus. With some exceptions—custom privacy settings or accounts with no phone number attached—sequential mining would yield every Facebook profile.

Facebook didn’t respond to inquiries for this story.

Though Facebook is professing surprise at the data spill, in 2013 security researcher Bennett Haselton warned Facebook publicly and privately of this exact scenario.

“You could use this technique to build up a database of phone numbers and associated accounts without targeting any specific phone number or account,” Haselton wrote in a prescient post to the technology website Slashdot. “Not only would you know the names associated with each of the numbers, you could associate the phone number with anything else that was discoverable from the person’s Facebook profile—which usually includes their location, their interests, and the names of their other friends.

“It would only have to be done once to put the users’ data permanently in the hands of the attackers, with Facebook unable to put the cat back into the bag,” he added.

Facebook’s primary countermeasure against bulk profile harvesting was rate-limiting, i.e., blocking rapid-fire search queries originating from the same Internet Protocol, or IP, address. The unidentified perpetrators bypassed that protection by cycling “through many thousands, or hundreds of thousands, of IP addresses to evade rate limiting,” Zuckerberg said last week. “Facebook’s response to bad news has been more spin than win. When the company found hundreds of Russian fake accounts, it... published statistics that seemed hand-picked to minimize the Kremlin’s reach.”

In an interview with The Daily Beast, Haselton said Facebook never responded to his reports. He says removing the reverse-lookup search was the right move, even if it came five years late. “This is not functionality they had to leave in.”

Facebook removed the email and phone search capabilities entirely last Wednesday. “Given the scale and sophistication of the activity we’ve seen, we believe most people on Facebook could have had their public profile scraped in this way,” wrote Facebook chief technology officer Mike Schroepfer in a blog post.

Overall, Facebook’s response to bad news has been more spin than win. Zuckerberg initially scoffed at the notion that Facebook played a significant role in Russia’s campaigning. When the company finally found hundreds of fake accounts created by Russia’s troll farm it refused to publicly identify them, instead publishing statistics that seemed hand-picked to minimize the Kremlin’s reach—just $100,000 in ad spending, a mere 470 fake accounts. One oft-heard talking point noted “the majority of the Russian ad spend happened AFTER the election,” a stat that wouldn’t have worked if Facebook had cut off the Kremlin seven months after the election instead of 10. Eventually, last October, Facebook reluctantly revealed the number that mattered: the number of Americans reached by the Kremlin’s Facebook campaign—126 million.

There are signs the company is taking a more forthright approach now—when it booted another batch of Russian troll accounts last month, it identified some of them by name, and even showed screenshots of some content. The most promising indicator is Zuckerberg’s voluntarily appearance on Capitol Hill, under oath, where spin has a legal limit.


TOPICS: Business/Economy; Culture/Society; Government; Politics/Elections
KEYWORDS: 115th; congress; facebook; facebookscandal; fb; hearings; zuckerberg; zuckerberghearing
Navigation: use the links below to view more comments.
first 1-2021-37 next last

1 posted on 04/10/2018 9:34:06 AM PDT by Red Badger
[ Post Reply | Private Reply | View Replies]

To: Red Badger
Zuckerberg is the 'bad actor'!
2 posted on 04/10/2018 9:36:12 AM PDT by BenLurkin (The above is not a statement of fact. It is either satire or opinion. Or both.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

Gee, like we didn’t know this. This is exactly what facefart does and how this zuckerfraud scoundrel has sold personal information for a decade. Google does the same damn operation.


3 posted on 04/10/2018 9:37:02 AM PDT by Neoliberalnot (MSM is our greatest threat. Disney, Comcast, Google Hollywood, NYTimes, WaPo, CNN, NBC, CBS, ABC ...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

All irrelevant. What IS relevant is the agreement Facebook signed with the Federal Trade Commission back in 2011. If they violated it they get fined $20,000 per user. Start multiplying. It will bankrupt the company. If you have an account save your stuff now.


4 posted on 04/10/2018 9:37:31 AM PDT by Snowybear
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger
Facebook was warned five years ago that the “reverse-lookup” feature in its search engine could be used to harvest names, profiles, and phone numbers for virtually all its users. But the company ignored the red flags until last week, after it happened.

I've used this function to find someone in the last couple of months.

5 posted on 04/10/2018 9:37:45 AM PDT by unixfox (Abolish Slavery, Repeal the 16th Amendment)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

On Hildabeast’s next speech, will she blame Zuckerberg for her losing the election?


6 posted on 04/10/2018 9:38:49 AM PDT by Slyfox (Not my circus, not my monkeys)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger
Testify, my derriere...

Facebook’s Mark Zuckerberg Will Not Be Under Oath Before Senate Committee, But Compelled by Statute to Tell The Truth

7 posted on 04/10/2018 9:40:03 AM PDT by mewzilla (Has the FBI been spying on members of Congress?)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Snowybear

It would help if the FTC gave half the fine back to the individual users.

Then some regular folks would have some skin in this game!


8 posted on 04/10/2018 9:41:30 AM PDT by cgbg (Hidden behind the social justice warrior mask is corruption and sexual deviance.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: Red Badger

people actually gave their phone number to facebook /facepalm

so so so trusting


9 posted on 04/10/2018 9:43:08 AM PDT by z3n
[ Post Reply | Private Reply | To 1 | View Replies]

To: Slyfox

Hillary blame Zuck? ... too late.

https://www.conservativebookclub.com/26555/featured-article/6-hillary-blame/7


10 posted on 04/10/2018 9:43:12 AM PDT by glock rocks (... so much win!)
[ Post Reply | Private Reply | To 6 | View Replies]

To: Red Badger

Gaslighted? Bull squat! He’s bought them and brought his checkbook for some more.


11 posted on 04/10/2018 9:43:31 AM PDT by pgkdan (The Silent Majority STILL Stands With TRUMP!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: BenLurkin

Quite amazing this little snot nosed ‘player’ Zuckerberg says he’s sorry......a typical Dem response when caught. .....equally as much gets them off the hook every time....

Zuckerberg owns the little guys and politicians...and they know it. Power and wealth = control.


12 posted on 04/10/2018 9:44:15 AM PDT by caww
[ Post Reply | Private Reply | To 2 | View Replies]

To: Red Badger

In other news, regular guy Zuckerberg, in his regular guy t-shirt, was seen loading suitcases full of cash into his car, as parting gifts for officials.


13 posted on 04/10/2018 9:46:14 AM PDT by robel
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

Hearings are a complete fraud and a waste of time. All they want is campaign money from Zuck so they’re go through the motions of asking him a few questions and then let him off the hook.

Its just more useless political theater brought to you by Swamp Productions, Inc.


14 posted on 04/10/2018 9:56:42 AM PDT by Starboard
[ Post Reply | Private Reply | To 1 | View Replies]

To: Snowybear

Facebook signed with the Federal Trade Commission back in 2011. If they violated it they get fined $20,000 per user. Start multiplying. It will bankrupt the company.

*************

Nothings going to happen to Facebook. They will just buy off whoever they need to on Capitol Hill. You gotta pay to play. That in essence is what the Swamp is all about.


15 posted on 04/10/2018 9:59:23 AM PDT by Starboard
[ Post Reply | Private Reply | To 4 | View Replies]

To: Red Badger

What does “Gaslight” mean?????????


16 posted on 04/10/2018 9:59:48 AM PDT by CapnJack
[ Post Reply | Private Reply | To 1 | View Replies]

To: Slyfox

She might as well, she’s already blamed everyone under the sun................


17 posted on 04/10/2018 10:04:35 AM PDT by Red Badger (The people who call Trump a tyrant are the same people who want the president to confiscate weapons.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: CapnJack

Wikipedia:
Gaslighting is a form of manipulation that seeks to sow seeds of doubt in a targeted individual or in members of a targeted group, hoping to make them question their own memory, perception, and sanity. Using persistent denial, misdirection, contradiction, and lying, it attempts to destabilize the target and delegitimize the target’s belief.


18 posted on 04/10/2018 10:04:39 AM PDT by ClearCase_guy
[ Post Reply | Private Reply | To 16 | View Replies]

To: CapnJack

https://en.wikipedia.org/wiki/Gaslight_(1944_film)


19 posted on 04/10/2018 10:05:28 AM PDT by Red Badger (The people who call Trump a tyrant are the same people who want the president to confiscate weapons.)
[ Post Reply | Private Reply | To 16 | View Replies]

To: Neoliberalnot

Exactly!
The ‘Tell’ is now you can have your privacy for a price.
TNSTAAFL


20 posted on 04/10/2018 10:05:54 AM PDT by griswold3 (Just another unlicensed nonconformist in am dangerous Liberal world.)
[ Post Reply | Private Reply | To 3 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-37 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson