vegeta@lemmy.world to Technology@lemmy.worldEnglish · 12 天前Meta grants itself right to scrape content from business customers for model trainingwww.theregister.comexternal-linkmessage-square24linkfedilinkarrow-up1366
arrow-up1366external-linkMeta grants itself right to scrape content from business customers for model trainingwww.theregister.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 12 天前message-square24linkfedilink
minus-squarecpbsy@lemmy.worldlinkfedilinkEnglisharrow-up21·12 天前To be clear, this is not restricted to content posted on Facebook. It’s any content posted on any website owned by the customer.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up18·11 天前And specifically gives Meta the right to create “test credentials” on sites and scrape resultant deep content such as product docs that are only available with an account. This is far more invasive and concerning than traditional site scraping and indexing.(refs: https://www.theregister.com/ai-and-ml/2026/10/16/meta-grants-itself-right-to-scrape-content-from-business-customers-for-model-training/5303658 , https://m.facebook.com/legal/commercial_terms_preview )
minus-squareGormadt@slrpnk.netlinkfedilinkEnglisharrow-up12·11 天前“test credentials” just reads to me as them giving themselves permission to straight up pen test every business with a social media account.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up9·11 天前Very tempting to take a list of IP address ranges such as https://networksdb.io/ip-addresses-of/meta-platforms-inc and add them to our WAF blocklist, since I assume they won’t be honest about their user agent string when scraping.
minus-squarecpbsy@lemmy.worldlinkfedilinkEnglisharrow-up4·11 天前Except there’s no guarantee they’ll be coming from one of their own IP addresses. There’s nothing to stop them from using a residential botnet.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up2·11 天前All too true, unfortunately. No honor among thieves!
To be clear, this is not restricted to content posted on Facebook. It’s any content posted on any website owned by the customer.
And specifically gives Meta the right to create “test credentials” on sites and scrape resultant deep content such as product docs that are only available with an account. This is far more invasive and concerning than traditional site scraping and indexing.(refs: https://www.theregister.com/ai-and-ml/2026/10/16/meta-grants-itself-right-to-scrape-content-from-business-customers-for-model-training/5303658 , https://m.facebook.com/legal/commercial_terms_preview )
“test credentials” just reads to me as them giving themselves permission to straight up pen test every business with a social media account.
Very tempting to take a list of IP address ranges such as https://networksdb.io/ip-addresses-of/meta-platforms-inc and add them to our WAF blocklist, since I assume they won’t be honest about their user agent string when scraping.
Except there’s no guarantee they’ll be coming from one of their own IP addresses. There’s nothing to stop them from using a residential botnet.
All too true, unfortunately. No honor among thieves!