I've had several 'strange' events regarding facebook (mobile) in the last 3 weeks..
1) I was in a closed door, private meeting with 3 people. A conversation about Bulletin Board Systems (BBS) came up and two of us had a good time talking about our BBS days.. This was the first time in 20 years I have talked about BBS's. Conversation ended, life moved on.. Later when I got HOME, I started getting 'suggestions' for BBS groups on Facebook!! (BIG WTF)
2) A buddy told me he felt facebook was siphoning chat in realtime and wanted to test something. So we both chatted in facebook chat for 60 seconds about "Ford Fusion" cars. Within 3 hours we BOTH started getting recommendations for Ford Fusions, local Ford Fusion sales, etc.
3) A security engineer friend told me he suspects some sort of mass surveillance was turned on through facebook recently, and said he had some evidence of it but was doing more testing.
Then today, a person claiming to be a facebook engineer reached out to me on a secure communication channel and said he felt like I should know how 'they' do it, so maybe people can start looking in the right direction to find how more about what they are going here is what he sent:
There are several ways facebook gets around permissions from the main app. Facebook, the app, is only one part of it. It has other services which have its own permission, but you can't see them and depending on the phone they are system permission level service apps. Play store technically pre-approves the permission for those, otherwise even push notifications wouldn't work and that is the key, burying the surveillance within the pre-approved service apps. This includes access to the microphone API regardless of Google claiming this is more secure. Facebook themselves never get the raw audio, the app/service merely transcodes it into code (think of a tag cloud), and can't be reversed back into raw audio but the transcribed code is compressed and hidden behind service pushes. The primary purpose of it as disclosed internally, is for listening and identifying what is playing on a TV, radio, etc. The assumption is that surveillance is also one of the purposes.
Thoughts?