Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Endpoint

8/12/2019
04:30 PM
50%
50%

FBI Plans to Monitor Social Media May Spark Privacy Issues

A new initiative to pull data from social media platforms may clash with policies prohibiting the use of information for mass surveillance.

The Federal Bureau of Investigation wants to intensify its monitoring of Facebook, Twitter, and other social media platforms to detect potential threats. But its plans may collide with privacy policies and, potentially, Facebook's ability to comply with its recent $5 billion settlement with the FTC.

FBI officials are soliciting vendor proposals for a contract that would gather "vast quantities" of publicly available data from social media sites including Facebook and Twitter, The Wall Street Journal reports. While vendors would not be able to access direct messages or other private content, they would collect data including names, user IDs, and photos, which could paint an accurate picture of individuals' lives when merged with external data and enable a third party to track them online.

Facebook, which works with law enforcement when issued a warrant or subpoena for user information, also has a ban on the use of its data for surveillance and prohibits law enforcement from analyzing data without users' permission. Similarly, Twitter does not allow use of its data for surveillance purposes. The FBI, under pressure to address waves of violence across the country, believes it can collect data and learn about potential threats without breaching privacy compliance requirements.

These plans may also conflict with Facebook's ability to comply with its privacy settlement with the Federal Trade Commission, which mandates the social media giant maintain a data security program. As part of this, Facebook must stop the misuse of publicly available data, the type of information the FBI wants to scan.

Read more details here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
tdsan
50%
50%
tdsan,
User Rank: Ninja
8/12/2019 | 5:55:15 PM
FBI Software
FBI Facebook App

 

FBI Python Script

 

FBI Search

I think it is too late, they already have software in place, the "English" and "Americans" have been doing this for years (PRISM - US, Tempora - UK), that is what Thomas Drake, William "Bill" Binney" and Edward Snowden were talking about).

 

Be sure to look at the tag that says "Facebook".

Enough said.

T
Microsoft Patches Wormable RCE Vulns in Remote Desktop Services
Kelly Sheridan, Staff Editor, Dark Reading,  8/13/2019
The Mainframe Is Seeing a Resurgence. Is Security Keeping Pace?
Ray Overby, Co-Founder & President at Key Resources, Inc.,  8/15/2019
GitHub Named in Capital One Breach Lawsuit
Dark Reading Staff 8/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15129
PUBLISHED: 2019-08-18
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to access all candidates' files in the photo folder on the website by specifying a "user id" parameter and file name, such as in a recruitment_online/upload/user/[user_id]/photo/[file_n...
CVE-2019-15130
PUBLISHED: 2019-08-18
The Recruitment module in Humanica Humatrix 7 1.0.0.203 and 1.0.0.681 allows an unauthenticated attacker to upload any file type to a candidate's profile picture folder via a crafted recruitment_online/personalData/act_personaltab.cfm multiple-part POST request with a predictable WRC01_USERID parame...
CVE-2019-15135
PUBLISHED: 2019-08-18
The handshake protocol in Object Management Group (OMG) DDS Security 1.1 sends cleartext information about all of the capabilities of a participant (including capabilities inapplicable to the current session), which makes it easier for attackers to discover potentially sensitive reachability informa...
CVE-2019-15136
PUBLISHED: 2019-08-18
The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service (DDS) partition.
CVE-2019-15137
PUBLISHED: 2019-08-18
The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.