davidbgk
/
larlet-fr-david-cache


			
							123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220
							<!doctype html><!-- This is a valid HTML5 document. -->
<!-- Screen readers, SEO, extensions and so on. -->
<html lang="fr">
<!-- Has to be within the first 1024 bytes, hence before the <title>
  See: https://www.w3.org/TR/2012/CR-html5-20121217/document-metadata.html#charset -->
<meta charset="utf-8">
<!-- Why no `X-UA-Compatible` meta: https://stackoverflow.com/a/6771584 -->
<!-- The viewport meta is quite crowded and we are responsible for that.
  See: https://codepen.io/tigt/post/meta-viewport-for-2015 -->
<meta name="viewport" content="width=device-width,initial-scale=1">
<!-- Required to make a valid HTML5 document. -->
<title>Facebook Fired Dozens Over Abusing Access to User Data, New Book Says (archive) — David Larlet</title>
<meta name="description" content="Publication mise en cache pour en conserver une trace.">
<!-- That good ol' feed, subscribe :). -->
<link rel="alternate" type="application/atom+xml" title="Feed" href="/david/log/">
<!-- Generated from https://realfavicongenerator.net/ such a mess. -->
<link rel="apple-touch-icon" sizes="180x180" href="/static/david/icons2/apple-touch-icon.png">
<link rel="icon" type="image/png" sizes="32x32" href="/static/david/icons2/favicon-32x32.png">
<link rel="icon" type="image/png" sizes="16x16" href="/static/david/icons2/favicon-16x16.png">
<link rel="manifest" href="/static/david/icons2/site.webmanifest">
<link rel="mask-icon" href="/static/david/icons2/safari-pinned-tab.svg" color="#07486c">
<link rel="shortcut icon" href="/static/david/icons2/favicon.ico">
<meta name="msapplication-TileColor" content="#f0f0ea">
<meta name="msapplication-config" content="/static/david/icons2/browserconfig.xml">
<meta name="theme-color" content="#f0f0ea">
<!-- Documented, feel free to shoot an email. -->
<link rel="stylesheet" href="/static/david/css/style_2021-01-20.css">
<!-- See https://www.zachleat.com/web/comprehensive-webfonts/ for the trade-off. -->
<link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_regular.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
<link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_bold.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
<link rel="preload" href="/static/david/css/fonts/triplicate_t4_poly_italic.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: light), (prefers-color-scheme: no-preference)" crossorigin>
<link rel="preload" href="/static/david/css/fonts/triplicate_t3_regular.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
<link rel="preload" href="/static/david/css/fonts/triplicate_t3_bold.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
<link rel="preload" href="/static/david/css/fonts/triplicate_t3_italic.woff2" as="font" type="font/woff2" media="(prefers-color-scheme: dark)" crossorigin>
<script>
    function toggleTheme(themeName) {
        document.documentElement.classList.toggle(
            'forced-dark',
            themeName === 'dark'
        )
        document.documentElement.classList.toggle(
            'forced-light',
            themeName === 'light'
        )
    }
    const selectedTheme = localStorage.getItem('theme')
    if (selectedTheme !== 'undefined') {
        toggleTheme(selectedTheme)
    }
</script>

  <meta name="robots" content="noindex, nofollow">
  <meta content="origin-when-cross-origin" name="referrer">
  <!-- Canonical URL for SEO purposes -->
  <link rel="canonical" href="https://www.businessinsider.com/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7">

<body class="remarkdown h1-underline h2-underline h3-underline em-underscore hr-center ul-star pre-tick">

<article>
  <header>
    <h1>Facebook Fired Dozens Over Abusing Access to User Data, New Book Says</h1>
  </header>
  <nav>
    <p class="center">
      <a href="/david/" title="Aller à l’accueil"><svg class="icon icon-home">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-home"></use>
      </svg> Accueil</a> •
      <a href="https://www.businessinsider.com/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" title="Lien vers le contenu original">Source originale</a>
    </p>
  </nav>
  <hr>
  <ul class="summary-list">
<li>Facebook fired 52 people from 2014 to August 2015 over abusing access to user data, a new book says.</li>
<li>One person used data to find a woman he was traveling with who had left him after a fight, the book says.</li>
<li>Changes to retention of such data were "antithetical to Mark's DNA," one employee told the authors.</li>
<li id="recirc"><a href="https://www.businessinsider.com/?hprecirc-bullet" data-analytics-module="summary_bullets">See more stories on Insider's business page</a>.</li>
</ul>

<p data-bi-ad="" id="gpt-post-sai-mobile_in_post_ad-fluid-1" class="ad ad-wrapper fluid in-post only-mobile" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Mobile In Post Ad" data-responsive='[{"browserLimit":[0,0],"slotSize":[[300,600],[300,150],[300,100],[300,50],[300,250],[320,150],[320,100],[320,50],"fluid"]}]' data-tile-order="tile-1" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[300,600],[300,100],[300,50],[300,250],[320,100],[320,50]]"></p>

<p data-bi-ad="" id="gpt-post-sai-desktop_in_post_ad-fluid-1" class="ad ad-wrapper fluid in-post only-desktop" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Desktop In Post Ad" data-responsive='[{"browserLimit":[728,0],"slotSize":[[300,250],"fluid"]},{"browserLimit":[1260,0],"slotSize":[[728,90],[300,250],[800,480],[600,480],"fluid"]}]' data-tile-order="tile-1" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[728,90],[300,250]]" data-not-lazy=""></p>

<p>A Facebook engineer abused employee access to user data to track down a woman who had left him after they fought, a new book said.</p>

<p>Between January 2014 and August 2015, the company fired 52 employees over exploiting user data for personal means, said an advance copy of "<a href="https://www.harpercollins.com/products/an-ugly-truth-sheera-frenkelcecilia-kang?variant=32999376551970" data-analytics-module="body_link">An Ugly Truth: Inside Facebook's Battle for Domination</a>" that Insider obtained.</p>

<p>The engineer, who is unnamed, tapped into the data to "confront" a woman with whom he had been vacationing in Europe after she left the hotel room they had been sharing, the book said. He was able to figure out her location at a different hotel.</p>

<p>Another Facebook engineer used his employee access to dig up information on a woman with whom he had gone on a date after she stopped responding to his messages. In the company's systems, he had access to "years of private conversations with friends over Facebook messenger, events attended, photographs uploaded (including those she had deleted), and posts she had commented or clicked on," the book said. Through the Facebook app the woman had installed on her phone, the book said, the engineer was also able to see her location in real time.</p>

<p data-bi-ad="" id="gpt-post-sai-mobile_in_post_ad-fluid-2" class="ad ad-wrapper fluid in-post only-mobile" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Mobile In Post Ad" data-responsive='[{"browserLimit":[0,0],"slotSize":[[300,600],[300,150],[300,100],[300,50],[300,250],[320,150],[320,100],[320,50],"fluid"]}]' data-tile-order="tile-2" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[300,600],[300,100],[300,50],[300,250],[320,100],[320,50]]"></p>

<p data-bi-ad="" id="gpt-post-sai-desktop_in_post_ad-fluid-2" class="ad ad-wrapper fluid in-post only-desktop" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Desktop In Post Ad" data-responsive='[{"browserLimit":[728,0],"slotSize":[[300,250],"fluid"]},{"browserLimit":[1260,0],"slotSize":[[728,90],[300,250],[800,480],[600,480],"fluid"]}]' data-tile-order="tile-2" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[728,90],[300,250]]"></p>

<p>Facebook employees were granted user data access in order to "cut away the red tape that slowed down engineers," the book said.</p>

<p>"There was nothing but the goodwill of the employees themselves to stop them from abusing their access to users' private information," wrote Sheera Frenkel and Cecilia Kang, the book's authors. They added that most of the employees who abused their employee privileges to access user data only looked up information, although a few didn't stop there.</p>

<p><em><strong>Read more: </strong><a href="https://www.businessinsider.com/ypo-young-presidents-organization-secret-club-for-ceos-2021-4?inline-read-more" data-e2e-name="inline-read-more-link" data-analytics-module="body_link">Inside the secret club that helps prepare young CEOs to take over the world</a></em></p>

<p>Most of the engineers who <a href="https://markets.businessinsider.com/news/stocks/facebook-fires-employee-accused-of-stalking-women-on-tinder-2018-5-1023113775" data-analytics-module="body_link">took advantage</a> of access to user data were "men who looked up the Facebook profiles of women they were interested in," the book said.</p>

<p data-bi-ad="" id="gpt-post-sai-mobile_in_post_ad-fluid-3" class="ad ad-wrapper fluid in-post only-mobile" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Mobile In Post Ad" data-responsive='[{"browserLimit":[0,0],"slotSize":[[300,600],[300,150],[300,100],[300,50],[300,250],[320,150],[320,100],[320,50],"fluid"]}]' data-tile-order="tile-3" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[300,600],[300,100],[300,50],[300,250],[320,100],[320,50]]"></p>

<p data-bi-ad="" id="gpt-post-sai-desktop_in_post_ad-fluid-3" class="ad ad-wrapper fluid in-post only-desktop" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Desktop In Post Ad" data-responsive='[{"browserLimit":[728,0],"slotSize":[[300,250],"fluid"]},{"browserLimit":[1260,0],"slotSize":[[728,90],[300,250],[800,480],[600,480],"fluid"]}]' data-tile-order="tile-3" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[728,90],[300,250]]"></p>

<p>Facebook told Insider it fired employees found to have accessed user data for nonbusiness purposes.<u></u></p>

<p>"We've always had zero tolerance for abuse and have fired every single employee ever found to be improperly accessing data," a spokesperson told Insider in a statement. "Since 2015, we've continued to strengthen our employee training, abuse detection, and prevention protocols. We're also continuing to reduce the need for engineers to access some types of data as they work to build and support our services." <u></u></p>

<h2>A problem that cropped up 'nearly every month'</h2>

<p>Mark Zuckerberg, Facebook's CEO, was first made aware of the problem in September 2015, when Alex Stamos, Facebook's chief security officer at the time, raised the issue with him. In a presentation to Zuckerberg and the company's top executives, Stamos said engineers had abused the access "nearly every month," the book said.</p>

<p>At the time, more than 16,000 employees had <a href="https://www.businessinsider.com/google-engineer-stalked-teens-spied-on-chats-2010-9" data-analytics-module="body_link">access to users' private data</a>, the book said. Stamos suggested tightening access to fewer than 5,000 employees and fewer than 100 for particularly sensitive information such as passwords. He proposed requiring employees to submit formal requests for access to private data but received pushback from executives. Zuckerberg said changes on the matter were "a top priority" and tasked Stamos with finding a solution and giving an update in a year, the book said.</p>

<p data-bi-ad="" id="gpt-post-sai-mobile_in_post_ad-fluid-4" class="ad ad-wrapper fluid in-post only-mobile" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Mobile In Post Ad" data-responsive='[{"browserLimit":[0,0],"slotSize":[[300,600],[300,150],[300,100],[300,50],[300,250],[320,150],[320,100],[320,50],"fluid"]}]' data-tile-order="tile-4" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[300,600],[300,100],[300,50],[300,250],[320,100],[320,50]]"></p>

<p data-bi-ad="" id="gpt-post-sai-desktop_in_post_ad-fluid-4" class="ad ad-wrapper fluid in-post only-desktop" data-force="" data-type="ad" data-adunit="business/tech/post" data-secvert="" data-pagetype="post" data-tag="facebook,personal-data" data-authors="sarah-jackson" data-region="Desktop In Post Ad" data-responsive='[{"browserLimit":[728,0],"slotSize":[[300,250],"fluid"]},{"browserLimit":[1260,0],"slotSize":[[728,90],[300,250],[800,480],[600,480],"fluid"]}]' data-tile-order="tile-4" data-url="/facebook-fired-dozens-abusing-access-user-data-an-ugly-truth-2021-7" data-amazontamsizes="[[728,90],[300,250]]"></p>

<p>But changes that would limit data retention were "antithetical to Mark's DNA," one employee told the book's authors.</p>

<p>The employee added, "At various times in Facebook's history there were paths we could have taken, decisions we could have made, which would have limited, or even cut back on, the user data we were collecting," Frenkel and Kang wrote. "Even before we took those options to him, we knew it wasn't a path he would choose."</p>
</article>


<hr>

<footer>
  <p>
    <a href="/david/" title="Aller à l’accueil"><svg class="icon icon-home">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-home"></use>
      </svg> Accueil</a> •
    <a href="/david/log/" title="Accès au flux RSS"><svg class="icon icon-rss2">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-rss2"></use>
      </svg> RSS</a> •
    <a href="http://larlet.com" title="Go to my English profile" data-instant><svg class="icon icon-user-tie">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-user-tie"></use>
      </svg> Pro</a> •
    <a href="mailto:david%40larlet.fr" title="Envoyer un courriel"><svg class="icon icon-mail">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-mail"></use>
      </svg> Email</a> •
    <abbr class="nowrap" title="Hébergeur : Alwaysdata, 62 rue Tiquetonne 75002 Paris, +33184162340"><svg class="icon icon-hammer2">
        <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-hammer2"></use>
      </svg> Légal</abbr>
  </p>
  <template id="theme-selector">
      <form>
          <fieldset>
              <legend><svg class="icon icon-brightness-contrast">
                <use xlink:href="/static/david/icons2/symbol-defs.svg#icon-brightness-contrast"></use>
              </svg> Thème</legend>
              <label>
                  <input type="radio" value="auto" name="chosen-color-scheme" checked> Auto
              </label>
              <label>
                  <input type="radio" value="dark" name="chosen-color-scheme"> Foncé
              </label>
              <label>
                  <input type="radio" value="light" name="chosen-color-scheme"> Clair
              </label>
          </fieldset>
      </form>
  </template>
</footer>
<script>
    function loadThemeForm(templateName) {
        const themeSelectorTemplate = document.querySelector(templateName)
        const form = themeSelectorTemplate.content.firstElementChild
        themeSelectorTemplate.replaceWith(form)

        form.addEventListener('change', (e) => {
            const chosenColorScheme = e.target.value
            localStorage.setItem('theme', chosenColorScheme)
            toggleTheme(chosenColorScheme)
        })

        const selectedTheme = localStorage.getItem('theme')
        if (selectedTheme && selectedTheme !== 'undefined') {
            form.querySelector(`[value="${selectedTheme}"]`).checked = true
        }
    }

    const prefersColorSchemeDark = '(prefers-color-scheme: dark)'
    window.addEventListener('load', () => {
        let hasDarkRules = false
        for (const styleSheet of Array.from(document.styleSheets)) {
            let mediaRules = []
            for (const cssRule of styleSheet.cssRules) {
                if (cssRule.type !== CSSRule.MEDIA_RULE) {
                    continue
                }
                // WARNING: Safari does not have/supports `conditionText`.
                if (cssRule.conditionText) {
                    if (cssRule.conditionText !== prefersColorSchemeDark) {
                        continue
                    }
                } else {
                    if (cssRule.cssText.startsWith(prefersColorSchemeDark)) {
                        continue
                    }
                }
                mediaRules = mediaRules.concat(Array.from(cssRule.cssRules))
            }

            // WARNING: do not try to insert a Rule to a styleSheet you are
            // currently iterating on, otherwise the browser will be stuck
            // in a infinite loop…
            for (const mediaRule of mediaRules) {
                styleSheet.insertRule(mediaRule.cssText)
                hasDarkRules = true
            }
        }
        if (hasDarkRules) {
            loadThemeForm('#theme-selector')
        }
    })
</script>
</body>
</html>