[motoboi]

Bear in mind that they don’t applied this to everyone, which would be practically impossible.

They hired Snapchat users (via a testing services provider ) to let meta observe their usage of Snapchat.

Something akin to paying someone to let a meta researcher sit by your side and observe while you use the app.

This happens all the time (hiring the testing services to recruit users to use your own app and analyze the patterns with screen recordings and such).

The news here is paying for someone to “test” a competitors’ app.

I hope that the testers knew they had Snapchat analyzed and not that they were told they were testing only Onavo.

[vitus]

> They hired Snapchat users (via a testing services provider ) to let meta observe their usage of Snapchat.

> Something akin to paying someone to let a meta researcher sit by your side and observe while you use the app.

Onavo Extend and Onavo Protect positioned themselves as providing consumer-oriented benefits (bandwidth reduction and security, respectively).

> The news here is paying for someone to “test” a competitors’ app.

Facebook acquired Onavo in 2013, so this was 100% a first-party effort to turn their first-party products into spyware.

[motoboi]

yeah, you should read the doc in the link, they explain why they couldn't use Onavo to simple man-in-the-middle snapchat users, hence the project to use the testing service provider to hire test subjects which would install a MITM solution to unencrypt snapchat (and later youtube and amazon).

Normal Onavo users were not subject to the decryption (although they were providing Meta information about overall snapchat's marketshare).

[vitus]

Which doc and which link are you referring to? This isn't anywhere in the class action discovery documents as far as I can tell.

TC reported back in 2019 on Facebook using various third-party testing services to distribute their first-party Facebook Research app, so I'm not even convinced that point is new (or that they paid the third parties to do any actual research).

https://techcrunch.com/2019/01/29/facebook-project-atlas/

Facebook would probably have run up against app store policies by trying to install their root cert on existing apps, which seems to be the most likely justification for installing this additional app through third-party channels. It's also a lot easier to avoid suspicion when it's part of a bunch of click-through screens as part of app setup (especially when you're dangling money in front of users, even just $20/month).

[motoboi]

This is in the second page of the document that started this hacker news entry.