Millions of Unwitting Victims of Facebook's Man-in-the-Middle Attack

[SactoDoug]

Facebook wanted intel on its competitors. They acquired a VPN company called Onavo. Facebook installed fake root certificates through the Onavo app, rerouted traffic to their servers, decrypted it, saved it, then routed the traffic back to its original destination. By doing so they were able to collect user data from YouTube, Snapchat, Amazon and all other user activity. They also used the data to target small apps that were taking off to acquire them cheaply before they realized their full market value.

IMO people should go to jail over this. This is straight up spying on private communications of millions of people. I am sure buried deep in Onavo's EULA is some language that says they get to spy on everything you are doing once you install the app. So Facebook EULA rufied every person that install that app.

https://s3.documentcloud.org/documents/24520332/merged-fb.pdf

https://www.youtube.com/watch?v=yWTtPaBQ3Mg

[nishanh]

Jeez. And the impetus to do so came straight from the top with Zuckerberg himself. What a gigantic douchebag.

[Dan_Eastvale]

Unless it's identity theft info like social security, bank accounts, et al, is any of it really illegal?

So many sites analyze and determine our behavior and interests profiles from our online purchases and searches.