UPDATE: Feb. 12, 2021, 10:22 a.m. EST Facebook is refuting the findings of the report detailed below, saying it does not store data from links. It's how it displays link previews.
According to Facebook, when links are shared in Messenger and on Instagram, a downscaled version of the image is downloaded in order to generate a preview of the link. The company says it does this to protect users from risks, such as malware. Facebook says it does not store the data.
"We don’t store the data from links shared on Messenger or Instagram and we don’t download the original file," said a Facebook spokesperson in a statement provided to Mashable. "As we explained to the researchers, the behavior described is how we show previews of a link and it allows us to protect people from sharing malware."
Facebook is storing the links you share on Messenger and in Instagram DMs.
No, not just the URL itself, but the entire contents of the page you’re linking to.
In October, app developers Tommy Mysk and Talal Haj Bakry discovered a privacy and security risk on Facebook's private messaging platforms.
Whenever a user shared a link on Facebook Messenger or in a DM on Instagram and a link preview was generated, the data from that link was downloaded to the social media giant’s servers. According to Mysk and Bakry, this occurred even if the linked site contained many gigabytes of data.
“Facebook servers download the content of any link sent through Messenger or Instagram DMs,” write Mysk and Bakry in their report. “This could be bills, contracts, medical records, or anything that may be confidential.”
It's not uncommon for users to share links via private messaging platforms with that include potentially sensitive data. But why does Facebook need to download that data — especially many gigabytes worth of data — from every link shared on Messenger or in an Instagram DM?
Mysk and Bakry originally contacted Facebook in order to report what they discovered, assuming it was an inadvertent outcome.
However, just this week, the two developers discovered an interesting update: Facebook has completely disabled link previews in Facebook Messenger and Instagram...in Europe only.
Why? The company needed to remove them in order to comply with the EU’s robust online privacy laws. Downloading and storing the data within a links that users share is in violation of those laws.
Link previews, in case you're not familiar, are those automatically generated little thumbnails, page titles, and descriptions that show up when a user pastes a link on Facebook’s platforms.
On the left: how links shared in Europe on Messenger look. On the right: how links shared in North America look.Credit: mysk.blog“Stopping this service in Europe strongly hints that Facebook may be using this content for purposes other than generating previews,” says the developers.
In their original report, Mysk and Bakry also looked at how other major online platforms — like Twitter, Slack, and Discord — handled link previews. Facebook and Instagram were the only two to download gigabytes of data from each link. Most of the other platforms downloaded no more than 50MB in order to generate the information needed for the link preview.
As the two developers point out, Facebook announcedin December 2020 that it would be making changes to its platforms due to Europe’s ePrivacy Directive. However, at the time of the announcement, Facebook did not specify exactly what those changes would be.
“We did contact Facebook in September 2020 about what we thought could be a privacy issue (and potentially a serious bug), and they basically dismissed our concerns,” says Mysk and Bakry. Facebook told the two that the feature was “working as intended.”
It’s important to note that Facebook is still generating link previews and downloading all the data from the linked pages everywhere outside the EU.
So, next time you share a link, non-Europeans, remember that Facebook is scooping up what you've dropped and storing the data on its servers.
TopicsCybersecurityFacebookInstagramSocial Media
(责任编辑：知識)
This app is giving streaming TV news a second try
7 video game escapes you desperately need today
Why women in the UK just walked out of work
Oreo candy bars give you a reason to get out of bed todayThese glasses hide a fitness tracker on your faceDid our grandparents have the best beauty advice?
Do our grandparents really know what's best?They're older and wiser, and they have no shortage of ad
...[详细]You will be watched by Donald Trump
America in 2017 will begin to experience life under Big Brother Donald Trump. The president-elect is
...[详细]Escape the echo chamber: How to fix your Facebook News Feed
For all its talk of a more connected world, Facebook has a tendency to silo us—its users&mdash
...[详细]Irish couple live tweets journey to receive legal abortion in England
LONDON -- An Irish couple is live tweeting their journey as the anonymous pair travels across the Ir
...[详细]The U.S. will no longer have the final say on internet domain names
The National Telecommunications Information Admistration (NTIA) announced via。 blog post
。on Tuesday
...[详细]Katy Perry implores fans to donate to Planned Parenthood
In the wake of Donald Trump's election, Katy Perry urged her fans to "turn words into action" by don
...[详细]Green Day chant against the KKK and Trump at the American Music Awards
In case Steve Bannon doesn't make it to the theater to catch a production of American Idiot, Green D
...[详细]I spent my morning at New York's new Taylor Swift Experience
Welcome to New York, now home of the Taylor Swift Experience. The small museum, dedicated entirely t
...[详细]Over 82,000 evacuate as Blue Cut fire rapidly spreads in southern California
A rapidly spreading wildfire in southern California's Cajon Pass has grown in hot, dry weather, thre
...[详细]Some other dude named Mike Pence is owning his @mikepence Twitter handle
Governor Mike Pence, a.k.a. the Vice President-elect of the U.S., doesn't own the @mikepence Twitter
...[详细]Michael Phelps says goodbye to the pool with Olympic gold
Jeremy the snail finally found a snail to have sex with
