| >How is this legal in any shape or form? IANAL, but have some experience with this from a business matter, resulting in obtaining advice of counsel. And, yeah this is not a criminal matter, but a civil one, so you're right that the developer isn't likely in civil breach unless they are using FB resources (e.g. API or SDK) that they access under agreement with FB and are violating. The irony is that if the FB standard user agreement prevents users from, say, using software to programmatically access the site, then it's the user of the extension who would be in breach with FB. So, as long as the developer doesn't use the extension on their own FB account, then FB doesn't have much to stand on (and even then the C&D would only be applicable to the developer's use of the extension as a user). On a related side note, if the extension actually did something not related to a specific account (e.g. scraped a public profile while not signed in), then even the user would likely not be in breach, as there is no affirmative assent (i.e. clickwrap) to terms of use required to simply visit the site. |