{"id":20072,"date":"2022-09-12T16:10:41","date_gmt":"2022-09-13T00:10:41","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/09\/12\/news-13805\/"},"modified":"2022-09-12T16:10:41","modified_gmt":"2022-09-13T00:10:41","slug":"news-13805","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/09\/12\/news-13805\/","title":{"rendered":"Facebook engineers aren&#8217;t sure where all user data is kept"},"content":{"rendered":"<p>If it takes a village to raise a child, apparently it takes Facebook a team to tell you what data the company keeps about you and where they keep it.<\/p>\n<p>In the&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/storage.courtlistener.com\/recap\/gov.uscourts.cand.327471\/gov.uscourts.cand.327471.982.0_1.pdf\" target=\"_blank\">recently unsealed transcript<\/a>&nbsp;of a hearing led by &#8220;Discovery Special Master&#8221; Daniel Garrie, an expert appointed by the court, two Facebook engineers were grilled regarding what user data the company keeps about its users and where they are. To everyone&#8217;s frustration, their response was, essentially, &#8220;We don&#8217;t know.&#8221;<\/p>\n<p>The hearing is part of an ongoing lawsuit concerning the&nbsp;<a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2018\/03\/what-facebooks-cambridge-analytica-problem-means-for-your-data\">Facebook-Cambridge Analytica scandal<\/a>.<\/p>\n<p>Garrie has attempted to get Facebook to reveal where personal data is stored in its 55 subsystems, but two veteran Facebook engineers&mdash;Eugene Zarashaw and Steven Elia&mdash;who were present at the hearing, couldn&#8217;t give satisfying answers.<\/p>\n<p>&#8220;I don&#8217;t believe there&#8217;s a single person that exists who could answer that question,&#8221; Zarashaw said, according to the transcript. &#8220;It would take a significant team effort to even be able to answer that question.&#8221;<\/p>\n<p><em>The Intercept<\/em>, which&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/theintercept.com\/2022\/09\/07\/facebook-personal-data-no-accountability\/\" target=\"_blank\">first reported<\/a>&nbsp;this story, has noted Garrie&#8217;s seeming disbelief over simple questions left unanswered. However, the engineers&#8217; inability to give solid answers as to where Facebook user data is kept doesn&#8217;t surprise Dina El-Kassaby, a spokesperson from Meta. In a statement, she said, &#8220;Our systems are sophisticated and it shouldn&#8217;t be a surprise that no single company engineer can answer every question about where each piece of user information is stored.&#8221;<\/p>\n<p>&#8220;We&#8217;ve built one of the most comprehensive privacy programs to oversee data use across our operations and to carefully manage and protect people&#8217;s data. We have made&mdash;and continue making&mdash;significant investments to meet our privacy commitments and obligations, including extensive data controls.&#8221;<\/p>\n<p>The engineers not knowing where user data is kept also lends credence to an internal document leaked in April 2022, claiming Facebook can&#8217;t tell where all the data it gathers comes from or is stored.<\/p>\n<p>This internal document was written in 2021 by Facebook privacy engineers on the Ad and Business Product team, the group tasked to build and maintain the social network&#8217;s ads system.<\/p>\n<p>&#8220;We do not have an adequate level of control and explainability over how our systems use data, and thus we can&#8217;t confidently make controlled policy changes or external commitments such as &#8216;we will not use X data for Y purpose.&#8217; And, yet, this is exactly what regulators expect us to do, increasing our risk of mistakes and misrepresentation,&#8221;&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.documentcloud.org\/documents\/21716382-facebook-data-lineage-internal-document\" target=\"_blank\">the document read<\/a>.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2022\/09\/facebook-engineers-arent-sure-where-all-user-data-is-kept\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<table cellpadding='10'>\n<tr>\n<td valign='top' align='left'>\n<p>Categories: <a href='https:\/\/www.malwarebytes.com\/blog\/category\/news' rel='category tag'>News<\/a><\/p>\n<p>In a recently unsealed transcript of the hearing regarding the Cambridge Analytica scandal in 2018, it was revealed that Facebook engineers didn&#8217;t know where user data was stored.<\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/www.malwarebytes.com\/blog\/news\/2022\/09\/facebook-engineers-arent-sure-where-all-user-data-is-kept' title='Facebook engineers aren't sure where all user data is kept'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel='nofollow' href='https:\/\/www.malwarebytes.com\/blog\/news\/2022\/09\/facebook-engineers-arent-sure-where-all-user-data-is-kept'>Facebook engineers aren&#8217;t sure where all user data is kept<\/a> appeared first on <a rel='nofollow' href='https:\/\/www.malwarebytes.com'>Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[32],"class_list":["post-20072","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-news"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/20072","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=20072"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/20072\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=20072"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=20072"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=20072"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}