cross-posted from: https://lemmy.ml/post/1874605

A 17-year-old from Nebraska and her mother are facing criminal charges including performing an illegal abortion and concealing a dead body after police obtained the pair’s private chat history from Facebook, court documents published by Motherboard show.

  • Flying Squid@lemmy.world
    link
    fedilink
    English
    arrow-up
    70
    arrow-down
    1
    ·
    1 year ago

    For all of those saying Facebook was just complying with the law- there is absolutely no reason for Facebook to have access to its users’ private information. The company I work for can’t do anything with a customer’s account unless they give us the password. We can’t see anything they have saved there. All of the private stuff they have is private and even if a court ordered us to show it to them, we literally couldn’t comply.

    We’re a small company and we can do it. A company the size of Meta can certainly do it.

    • RagingRobot@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 year ago

      Can’t you just look at the data in. The database though? No need to login as the user. Surely not every field is hashed

      • fishpen0@lemmy.world
        link
        fedilink
        English
        arrow-up
        17
        ·
        edit-2
        1 year ago

        Hashing is not reversible so obviously it is not hashed. You hash data you want to compare later to see if it is still the same. For example you may hash user passwords you store in your database. So you don’t know the actual password, but can confirm later that the same password is still being used. You know or can infer someone is storing your passwords in plaintext when they have a maximum length as that indicates they are not correctly hashing.

        It is however possible and even easy in many databases to do row or document level encryption. Many privacy first applications do client side keys and encryption so the database does in fact have no plain text in it.

      • Flying Squid@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        That’s a good point and I don’t know the answer to that (my guess is encryption is involved), but as other people have pointed out, Facebook has an alternate encrypted messaging service, WhatsApp, so Facebook is clearly capable of not being able to access its users’ messages.

      • A_Very_Big_Fan@lemm.ee
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        1 year ago

        We enable them to make profit via ads and data harvesting. Private texts/DMs do not need to be involved in that.

        • kava@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          1 year ago

          To be fair, I’d imagine there’s a wealth of data to plug into their AI models from private chats.

          I’d imagine it’s hard for them to resist the temptation

    • Skyrmir@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      arrow-down
      10
      ·
      1 year ago

      You can do it because you’re a small company. Get enough attention, and the FBI will force you to decrypt on demand. They’ve done it before and the supreme court backed them up. Do it over seas and expect your US traffic to get blocked, if they don’t raid your offices.

      • EricHill78@lemmy.world
        link
        fedilink
        English
        arrow-up
        14
        ·
        1 year ago

        That is untrue. The FBI tried to get Apple to decrypt a shooter’s iPhone in Florida a few years back and they wouldn’t budge.

        • KairuByte@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          1
          ·
          1 year ago

          This isn’t quite right…

          Apple didn’t have the means to decrypt the information, but it was within their ability to do (by writing code to do so.)

          But asking a company for the unencrypted data, and forcing a company to produce a new application, are completely different things.

          • False@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            Apple didn’t have the means to decrypt the information, but it was within their ability to do (by writing code to do so.)

            Happen to have a source for that? That’s nigh impossible for most encryption

      • ikidd@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        ·
        1 year ago

        E2EE is what prevents this, which is why the TLAs hate it and legislators are trying to prohibit it.