Meta: Difference between revisions
→Facebook: Added Local Mess incident (tracking users via tracking scripts in the browser talking to Meta apps on Android via WebRTC) |
m Removed unnecessary links in lead section. |
||
(10 intermediate revisions by 6 users not shown) | |||
Line 7: | Line 7: | ||
| Logo = Meta.webp | | Logo = Meta.webp | ||
}} | }} | ||
[[wikipedia:Meta_Platforms|'''Meta Platforms, Inc.''']], formerly known as Facebook, is a multinational technology conglomerate primarily known for its social media platforms, including | [[wikipedia:Meta_Platforms|'''Meta Platforms, Inc.''']], formerly known as Facebook, is a multinational technology conglomerate primarily known for its social media platforms, including Facebook, [[Instagram]], [[WhatsApp]], and Messenger. Founded in 2004 by [[Mark Zuckerberg]], Facebook quickly grew into one of the largest social networks in the world. Over the years, the company has expanded its business model, incorporating advertising, data collection, and virtual reality products, with a focus on connecting users globally. | ||
In 2021, Facebook rebranded itself as Meta, signaling its shift toward a broader vision focused on the "metaverse" – a virtual-reality, interconnected digital world. Meta has faced ongoing scrutiny over issues related to consumer privacy, data security, content moderation, and its role in spreading misinformation. The company has been involved in several high-profile regulatory and legal challenges, particularly regarding its handling of user data and its impact on user well-being. | In 2021, Facebook rebranded itself as Meta, signaling its shift toward a broader vision focused on the "metaverse" – a virtual-reality, interconnected digital world. Meta has faced ongoing scrutiny over issues related to consumer privacy, data security, content moderation, and its role in spreading misinformation. The company has been involved in several high-profile regulatory and legal challenges, particularly regarding its handling of user data and its impact on user well-being. | ||
Line 15: | Line 15: | ||
===Facebook<!-- Wow, we got a lot to list here... https://en.wikipedia.org/wiki/Facebook#Criticisms_and_controversies -->=== | ===Facebook<!-- Wow, we got a lot to list here... https://en.wikipedia.org/wiki/Facebook#Criticisms_and_controversies -->=== | ||
==== Local Mess (June 2025) ==== | ====Upload of private user photos on phones to the cloud for AI training (June 2025)==== | ||
According to reports, some users have reported popups asking them to opt in to "cloud processing" of their photos when using the Story feature. This would give the app unrestricted access to all photos stored on the user's phone and upload all of them to the cloud on a regular basis, as opposed to just uploading those images explicitly chosen by the user to be posted on the platform. Users are incentivized to agree through the promise of custom collages and recaps.<ref>{{Cite web |last=Nguyen |first=Tina |date=June 28, 2025 |title=Facebook is starting to feed its AI with private, unpublished photos |url=https://www.theverge.com/meta/694685/meta-ai-camera-roll |access-date=June 29, 2025 |website=The Verge}}</ref> | |||
This would allow Meta to perform face recognition, track the past location of the user and their social circle based on the GPS metadata from all photos, train AI models with the photos, and much more. This also has security implications since the data on Meta's servers could be leaked or hacked at any time. | |||
It should be noted that on-device analysis of all photos and their metadata was already possible on older mobile operating systems until Apple and Google added more granular permissions than "access camera roll or not". Whether this was actively exploited by apps like Facebook is unknown. | |||
Users can reduce the amount of data these services can harvest by using the browser version in an incognito tab instead of using dedicated apps. Installing an adblocker is also advisable. However, not all features may be accessible this way. | |||
'''Forced changes in terms of service.''' | |||
[[File:Email sent to Meta users.png|thumb|No options given, you accept.]] | |||
14 Aug 25 Meta sent another of their notorious emails with the text "By continuing to use a Meta account to access our products after '''12 September 2025''', you agree to the revised '''Supplemental Meta Platform Technologies Terms of Service''' and acknowledge that these updates will apply to you." | |||
In other words: the user is bombed with long legalese texts, no information about what is changed for the worse. If the user does not want to accept whatever new stuff they wrote, then throw away/stop using Meta Quest , Meta Ray-Bans and so on. The only option given, is not to use their products and services anymore, or - keep using what you paid for, accept anything. | |||
====Local Mess (June 2025)==== | |||
A study by Dutch researchers revealed that Meta used a local connection from the user's browser to their apps using WebRTC to communicate from the Facebook tracking pixel (a script website providers integrate into their websites) with Meta apps installed on the device to track the user and circumvent measures to prevent the user's data from leaking. This even works when the user is using the browser's incognito mode. Meta used this technique since at least 2024, Yandex used it as far back as 2017. The day the study was published, the corresponding code disappeared from the Facebook tracking pixel.<ref>{{Cite web |last=Girish |first=Aniketh |date=2025-06-03 |title=Disclosure: Covert Web-to-App Tracking via Localhost on Android |url=https://localmess.github.io/ |access-date=2025-06-04 |website=Local Mess (Github)}}</ref><!-- FIXME: The study has more than one author, not sure how to add more than one using the form provided by the Wiki --> | A study by Dutch researchers revealed that Meta used a local connection from the user's browser to their apps using WebRTC to communicate from the Facebook tracking pixel (a script website providers integrate into their websites) with Meta apps installed on the device to track the user and circumvent measures to prevent the user's data from leaking. This even works when the user is using the browser's incognito mode. Meta used this technique since at least 2024, Yandex used it as far back as 2017. The day the study was published, the corresponding code disappeared from the Facebook tracking pixel.<ref>{{Cite web |last=Girish |first=Aniketh |date=2025-06-03 |title=Disclosure: Covert Web-to-App Tracking via Localhost on Android |url=https://localmess.github.io/ |access-date=2025-06-04 |website=Local Mess (Github)}}</ref><!-- FIXME: The study has more than one author, not sure how to add more than one using the form provided by the Wiki --> | ||
Line 26: | Line 41: | ||
====Artificial permission requirements in Android App==== | ====Artificial permission requirements in Android App==== | ||
The Facebook Android App summarily requests a lot of permissions. Most of those can be denied if unwanted. However, when the unlimited permission to access all media files on the user's phone is not granted, it is not possible to share images from the app. This is a | The Facebook Android App summarily requests a lot of permissions. Most of those can be denied if unwanted. However, when the unlimited permission to access all media files on the user's phone is not granted, it is not possible to share images from the app. This is a bogus requirement, as this permission is not needed to share images ''out'' of an app. The app will guide the user into enabling that permission when they [first] try to share an image out of Facebook to a different app, e.g. a messenger. Notably, even granting limited access will trigger the "more permissions required" guidance. | ||
As a crude workaround, one can take screenshots of images in the app instead of using its sharing functionality. Since that yields images in screen resolution, this workaround may not be suitable in all cases. | As a crude workaround, one can take screenshots of images in the app instead of using its sharing functionality. Since that yields images in screen resolution, this workaround may not be suitable in all cases. | ||
====Useless notifications to boost engagement and facilitate tracking====<!-- Maybe this warrants its own explanation, seeing that it has since become a commonly used dark pattern --> | |||
Initially, notifications on the site were used to inform the user of events that warranted their attention, such as a new post to their wall, a direct message or interactions with their posts. Clicking the notification icon would clear its state. However, at some point Facebook started to trigger notifications when the user was inactive for too long in order to get them to engage with the platform more, which would then in turn indirectly increase their ad exposure. It was also no longer possible to fully clear the notifications because new ones would appear instantly. E-Mail notifications with the clear intent of getting the user to go to the platform rather than informing the user of something relevant are also sent on a regular basis. | Initially, notifications on the site were used to inform the user of events that warranted their attention, such as a new post to their wall, a direct message or interactions with their posts. Clicking the notification icon would clear its state. However, at some point Facebook started to trigger notifications when the user was inactive for too long in order to get them to engage with the platform more, which would then in turn indirectly increase their ad exposure. It was also no longer possible to fully clear the notifications because new ones would appear instantly. E-Mail notifications with the clear intent of getting the user to go to the platform rather than informing the user of something relevant are also sent on a regular basis. | ||
Line 41: | Line 56: | ||
====Oculus VR Facebook account requirement==== | ====Oculus VR Facebook account requirement==== | ||
In 2014, Meta acquired Oculus VR for approximately $2 billion, which was known for developing the Oculus Rift and other virtual-reality (VR) products. Before the acquisition, users could create and use Oculus accounts to access their VR content. This allowed users more control over their privacy and data | In 2014, Meta acquired Oculus VR for approximately $2 billion, which was known for developing the Oculus Rift and other virtual-reality (VR) products. Before the acquisition, users could create and use Oculus accounts to access their VR content. This allowed users more control over their privacy and data without needing to use Facebook. | ||
After Oculus VR was purchased by Meta in October 2020, Oculus Quest and Rift S users were required to sign in with a Facebook account in order to continue to use their purchased VR headsets.<ref>{{Cite web |last=Robertson |first=Adi |date=20 Aug 2020 |title=Facebook is making Oculus’ worst feature unavoidable |url=https://www.theverge.com/2020/8/19/21375118/oculus-facebook-account-login-data-privacy-controversy-developers-competition |url-status=live |access-date=26 Apr 2025 |website=The Verge}}</ref> This forced integration of Facebook accounts with Oculus devices created several issues for users, particularly those who preferred to keep their VR experience separate from social media. | After Oculus VR was purchased by Meta in October 2020, Oculus Quest and Rift S users were required to sign in with a Facebook account in order to continue to use their purchased VR headsets.<ref>{{Cite web |last=Robertson |first=Adi |date=20 Aug 2020 |title=Facebook is making Oculus’ worst feature unavoidable |url=https://www.theverge.com/2020/8/19/21375118/oculus-facebook-account-login-data-privacy-controversy-developers-competition |url-status=live |access-date=26 Apr 2025 |website=The Verge}}</ref> This forced integration of Facebook accounts with Oculus devices created several issues for users, particularly those who preferred to keep their VR experience separate from social media. | ||
Line 51: | Line 66: | ||
In August 2022, following public backlash, Meta reversed the policy, allowing users to sign in with a new "Meta account" instead of a Facebook account.<ref>{{Cite web |last=Ridley |first=Jacob |date=24 Aug 2022 |title=Finally, the Quest 2 no longer requires a Facebook login |url=https://www.pcgamer.com/finally-the-quest-2-no-longer-requires-a-facebook-login/ |url-status=live |access-date=26 Apr 2025 |website=PCGamer}}</ref> This, however, did not prevent several original Oculus accounts from being deleted or suspended, with Facebook users being locked out of their headsets for two years. | In August 2022, following public backlash, Meta reversed the policy, allowing users to sign in with a new "Meta account" instead of a Facebook account.<ref>{{Cite web |last=Ridley |first=Jacob |date=24 Aug 2022 |title=Finally, the Quest 2 no longer requires a Facebook login |url=https://www.pcgamer.com/finally-the-quest-2-no-longer-requires-a-facebook-login/ |url-status=live |access-date=26 Apr 2025 |website=PCGamer}}</ref> This, however, did not prevent several original Oculus accounts from being deleted or suspended, with Facebook users being locked out of their headsets for two years. | ||
Furthermore, the headsets are not usable at all without connecting them to the Internet and logging them into a Meta/Facebook account when the owner wants to use it for the first time after purchase. This creates the risk that the headsets will be indefinitely unusable, or at least not to be able to be set up after a reset of the software, if Meta theoretically decides to shutdown the authentication or login servers. | |||
==== | ====Echo VR shutdown and Ready At Dawn==== | ||
''Echo VR'' was a VR e-sports title centered around zero-gravity physics, developed by Ready At Dawn Studios.<ref>[https://www.meta.com/experiences/echo-vr/2215004568539258/ "Echo VR - About Page"] - meta.com</ref> The game released on July 20, 2017, on the Oculus Rift store, before being ported over to the Meta Quest platform (formerly the Oculus Quest platform) on May 5, 2020. | ''Echo VR'' was a VR e-sports title centered around zero-gravity physics, developed by Ready At Dawn Studios.<ref>[https://www.meta.com/experiences/echo-vr/2215004568539258/ "Echo VR - About Page"] - meta.com</ref> The game released on July 20, 2017, on the Oculus Rift store, before being ported over to the Meta Quest platform (formerly the Oculus Quest platform) on May 5, 2020. | ||
Ready At Dawn Studios was a game developer most notably known for creating the original ''God of War'' series and ''Daxter''. They were acquired by Oculus Studios, an umbrella organization of Meta, in June 2020.<ref>{{Cite web |last=Verdu |first=Mike |date=22 Jun 2020 |title=Welcoming Ready At Dawn to Facebook |url=https://www.meta.com/en-gb/blog/welcoming-ready-at-dawn-to-facebook/ |url-status=live |access-date=26 Apr 2025 |website=[[Meta]]}}</ref> | Ready At Dawn Studios was a game developer most notably known for creating the original ''God of War'' series and ''Daxter''. They were acquired by Oculus Studios, an umbrella organization of Meta, in June 2020.<ref>{{Cite web |last=Verdu |first=Mike |date=22 Jun 2020 |title=Welcoming Ready At Dawn to Facebook |url=https://www.meta.com/en-gb/blog/welcoming-ready-at-dawn-to-facebook/ |url-status=live |access-date=26 Apr 2025 |website=[[Meta]]}}</ref> | ||
On January 31, 2023, Ready At Dawn announced that ''Echo VR'' would | On January 31, 2023, Ready At Dawn announced that ''Echo VR'' would shut down on August 1 of that year. They claimed in a blog post that the reason was them "consolidating studio support" to work on their next project, as well as confirming that players who had spent money on in-game currency would not be able to receive a refund.<ref>{{Cite web |last=@EchoGames |date=31 Jan 2023 |title=An Update on the Future of Echo VR |url=https://medium.com/@EchoGames/an-update-on-the-future-of-echo-vr-7f074dca1ed1 |url-status=live |access-date=26 Apr 2025 |website=Medium}}</ref> Meta's CTO, Andrew Bosworth, answered questions regarding the shutdown in an Instagram AMA, explaining that it would be "even less cost effective" to open-source or sell the game.<ref>{{Cite web |last=Baker |first=Harry |date=2 Feb 2023 |title=Meta CTO: John Carmack Would Not Have Shut Down Echo VR |url=https://www.uploadvr.com/meta-cto-john-carmack-echo-vr/ |url-status=live |access-date=26 Apr 2025 |website=www.uploadvr.com}}</ref> | ||
Fans of ''Echo VR'' protested against the game's shutdown, going so far as to fly a banner over Meta's headquarters asking to reverse the decision.<ref>[https://vrscout.com/news/the-vr-esports-community-rallies-to-save-echo-vr/ "The VR Esports Community Rallies To Save Echo VR"] - vrscout.com - 2 Mar 2023</ref> Despite this, the game's servers did shut down on the given date. ''Echo VR'' itself was still able to be downloaded and opened, meaning the contents of the game were still available, but a player would not be able to progress after a shutdown notice pop-up.<ref>{{Cite web |date=2 Aug 2023 |title=Echo VR Has Shut Down |url=https://www.reddit.com/r/OculusQuest/comments/15fisnk/echo_vr_has_shut_down/ |url-status=live |access-date=26 Apr 2025 |website=[[Reddit]]}}</ref> | Fans of ''Echo VR'' protested against the game's shutdown, going so far as to fly a banner over Meta's headquarters asking to reverse the decision.<ref>[https://vrscout.com/news/the-vr-esports-community-rallies-to-save-echo-vr/ "The VR Esports Community Rallies To Save Echo VR"] - vrscout.com - 2 Mar 2023</ref> Despite this, the game's servers did shut down on the given date. ''Echo VR'' itself was still able to be downloaded and opened, meaning the contents of the game were still available, but a player would not be able to progress after a shutdown notice pop-up.<ref>{{Cite web |date=2 Aug 2023 |title=Echo VR Has Shut Down |url=https://www.reddit.com/r/OculusQuest/comments/15fisnk/echo_vr_has_shut_down/ |url-status=live |access-date=26 Apr 2025 |website=[[Reddit]]}}</ref> | ||
Line 64: | Line 79: | ||
Despite Ready At Dawn's claims, there have been no other project released following the shutdown. The studio proceeded to suffer major layoffs and, in August 2024, Meta shut down Ready At Dawn Studios itself, blaming Oculus Studios' budgetary constraints.<ref>{{Cite web |last=Sutrich |first=Nicholas |date=7 Aug 2024 |title=Exclusive: Meta is closing a beloved first-party Quest studio |url=https://www.androidcentral.com/gaming/virtual-reality/ready-at-dawn-studios-closing |url-status=live |access-date=26 Apr 2025 |website=www.androidcentral.com}} </ref> | Despite Ready At Dawn's claims, there have been no other project released following the shutdown. The studio proceeded to suffer major layoffs and, in August 2024, Meta shut down Ready At Dawn Studios itself, blaming Oculus Studios' budgetary constraints.<ref>{{Cite web |last=Sutrich |first=Nicholas |date=7 Aug 2024 |title=Exclusive: Meta is closing a beloved first-party Quest studio |url=https://www.androidcentral.com/gaming/virtual-reality/ready-at-dawn-studios-closing |url-status=live |access-date=26 Apr 2025 |website=www.androidcentral.com}} </ref> | ||
==== | ====Attempts to block other OpenXR runtimes (third party or other brands) from working with games<ref name=":2">"[https://mbucchia.github.io/OpenXR-Toolkit/ovrplugin.html Meta’s OVRPlugin]" - mbucchia.github.io</ref>==== | ||
Both Unity and Unreal Engine allow various OpenXR vendor plugins to be used, one of which is Meta's Oculus XR Plugin internally called the OVRPlugin. The OVRPlugin is a unified plugin that allows developers a single unified implementation for their Quest devices and OpenXR compatible devices for the PC. This sounds like an easy solution to target all current popular high-end VR headsets in one implementation. | Both Unity and Unreal Engine allow various OpenXR vendor plugins to be used, one of which is Meta's Oculus XR Plugin internally called the OVRPlugin. The OVRPlugin is a unified plugin that allows developers a single unified implementation for their Quest devices and OpenXR compatible devices for the PC. This sounds like an easy solution to target all current popular high-end VR headsets in one implementation. | ||
Line 79: | Line 94: | ||
Game developers are advised to avoid the OVRPlugin where possible and rely on generic OpenXR implementations that support the standard correctly. Affected users can try the Meta Plugin Compatibility option in their SteamVR settings. The latest version of Virtual Desktop should also have the workarounds implemented. Players of Unreal Engine games report that launching the game with -hmd=openxr can bypass the plugin. | Game developers are advised to avoid the OVRPlugin where possible and rely on generic OpenXR implementations that support the standard correctly. Affected users can try the Meta Plugin Compatibility option in their SteamVR settings. The latest version of Virtual Desktop should also have the workarounds implemented. Players of Unreal Engine games report that launching the game with -hmd=openxr can bypass the plugin. | ||
====Update on the Oculus Quest 2 /Pro removed a key feature on keyboard tracking'''[https://communityforums.atmeta.com/t5/Talk-VR/Removing-Keyboard-Tracking-on-Quest-2-Pro-What-s-next-on-the/td-p/1284678]'''==== | |||
Meta’s recent decision to discontinue support for physical keyboard tracking on the Quest 2 and Pro, as stated in the V72 release notes, in just two years of lifecycle this showcase an enshittification on their products. Early adopters beware. | |||
====Update on the Oculus Quest 1==== | |||
{{Main|Oculus (Meta) Quest 1 Deprecation}} | |||
The original Quest 1 from 2019 has been deprecated, after entering extended support in 2023. | |||
==Lawsuits<!-- I feel like this should follow the table format that I established with the Valve page -->== | ==Lawsuits<!-- I feel like this should follow the table format that I established with the Valve page -->== |