upvote
This is legal for most businesses under US law, especially on company devices. And unfortunately not unheard of. Compliance with this data is typically handled in the same way you'd handle any data access situation -- by restricting access to the screencaps to a specific group of people.

Not that I support it -- but typically companies don't do this in spite of security concerns, they do it to address security concerns. But of course, what meta is doing sounds like a different situation. It sounds like they want to make a model that replaces part of their workforce.

reply
I understand the security spyware, though I think it's somewhat questionable there. But this sounds like deliberately putting all of your most sensitive data in a blender and then inevitably letting anyone get a taste of the smoothie.
reply
Just like you'd secure data on a normal internal production system, I'd presume one wouldn't simply let anyone get a taste of the smoothie. But who knows -- move fast and break things, I guess.
reply
This data is going to get leaked in a breach. It will be used against you in a court of law. It will be used for training and (regardless of what anyone says) will be used to fire you once the AI can do your job.

And when all of the above happens Meta will be absolved of any responsibility.

I don't understand how it's legal either. I guess we need laws against it yesterday.

reply
It doesn't have to get leaked. They can sell it and use it as another means to identify Internet users. Meta is pretty infamous for identifying, tracking, and understanding user behavior. We are kind of past the point where these companies care at all. If you think the push to add age verification to operating systems is an unrelated giggle I envy you. Something something Cambridge analytica.
reply
I think it's their employees here that have cause to be concerned, not internet users.

Meta already has literally have billions of people's personal profiles and browsing history.

I don't think screenshots of their SWE's IDEs is going to be useful for identifying internet users.

reply
They could perfect it in house and then roll it out as a product. The way people type and use a mouse are pretty identifying especially when coupled with other things.

I do agree screenshots themselves are less useful for that.

reply
That doesn't make any sense.

1. Why use their employee's data to fingerprint input? They could do that to a billion+ of their users instead.

2. Input fingerprinting is multi-decades old science, there are already production products that do this.

reply
Are there products that do this with all of the other metadata that meta now collects? At the scale that meta collects them? My guess is no.
reply
All psychological experiments that loosely relates to Web became default legal when A/B tests became normalized after Google started it. It is not something that may be covered by blanket waivers. It's something that require participation under free will and independent review boards and such. For every single one of those little tests.

The cat is out of the bag, but that doesn't mean it's a non-issue.

reply
deleted
reply