Slashdot Mirror


Twitter Sued For Scanning Direct Messages

JustAnotherOldGuy writes: Twittter is facing a new possible class action suit that accuses the company of violating user privacy. The lawsuit states that the company has been "systematically intercepting, reading, and altering" direct messages, most likely a reference to Twitter's long-standing practice of automatically shortening and redirecting any in-message links. The practice could be used to monitor or redirect any URLs included in a direct message, although it's generally seen as a benign extension of the company's broader link-shortening systems. In a statement to USA Today, Twitter, to nobody's surprise, insisted that the allegations are "meritless."

80 comments

  1. The allegations are meritless by rmdingler · · Score: 1
    Honestly, is this something you would ever say to anyone,

    if you had nothing to hide?

    These accusations are preposterpous!

    --
    Happiness in intelligent people is the rarest thing I know.

    Ernest Hemingway

    1. Re:The allegations are meritless by Anonymous Coward · · Score: 0

      I accuse you of being secretly responsible for the death of Socrates.
      Are these accusations preposterous, or do You have something to hide?

    2. Re:The allegations are meritless by Falos · · Score: 1

      It's the 21st century, accusation slinging is probably your national sport. +20 points if you get someone fired before conviction, +50 before investigation, rape claims is -10 for using a handicap. Any campaign finished without greasing the palms of LEOs/lawyers/judges gets your final score a 3x difficulty modifier.

    3. Re:The allegations are meritless by Anonymous Coward · · Score: 0

      It's particularly ironic for Twiltter to call the allegations meritless, since Twitter itself is also meritless.

  2. Facebook too by Anonymous Coward · · Score: 5, Interesting

    Facebook is being sued over the same practice, as well as for taking it a step further. If you mention a business's Facebook link (and possibly their independent website URL) in a private message, that mention gets counted as a "like" on the business's Facebook page. So not only were they scanning PMs, they were representing endorsements that didn't exist.

    This kind of shit is what you get when you use a huge advertising platform as your "private" communication hub.

    1. Re:Facebook too by Anonymous Coward · · Score: 0

      Facebook is being sued over the same practice, as well as for taking it a step further. If you mention a business's Facebook link (and possibly their independent website URL) in a private message, that mention gets counted as a "like" on the business's Facebook page. So not only were they scanning PMs, they were representing endorsements that didn't exist.

      This kind of shit is what you get when you use a huge advertising platform as your "private" communication hub.

      Mark Zuckerburg should be skinned alive and roasted over a pit of red hot embers.

    2. Re:Facebook too by Anonymous Coward · · Score: 1

      Or, you could just not use Facebook. I think that's probably an option that would be better for you as it wouldn't get you put in prison for the rest of your life for murder.

    3. Re:Facebook too by Anonymous Coward · · Score: 0

      True, all the data transferred via the "free" services is monetized as much as possible. You, as a user are the product they sell. What becomes next in line of publicity are likely the non-free cloud email/office systems such as Google Docs or Office365. I truly do not understand the companies who think their corporate data is less valuable than the few bucks that they save by pushing it to a service provider which sells it to anyone who is willing to pay.

    4. Re:Facebook too by Anonymous Coward · · Score: 0

      Well, that doesn't help the hundreds of my family, friends, and acquaintances left behind using it, and it doesn't help me that I'd be throwing out the baby with the bathwater. Sometimes, you take the good with the bad.

    5. Re: Facebook too by Anonymous Coward · · Score: 0

      If this can be considered invasion of privacy when done entirely by a computer, imagine the lawsuit I could have against Google for their handling of my personal e-mail!
      Let's see...
      They scan the recipient for sorting.
      They scan the sender address (not technically part of the message) and and query the domain to verify authenticity.
      They scan the received-by headers and check where it has been.
      They scan the subject and the message body trying to detect words, phrases, or URLs that indicate something spammy.
      They process pieces of info like tracking numbers to show a tracking link.
      They scan perfectly good base64 and turn it into binary data to be displayed as an attachment.

      For better or worse our messages are constantly being processed for one reason or another. Every mail system does it to some extent, some due to definition of the protocols involved and others due to features that people want like spam blocking. If this case goes anywhere at all, it could spell pretty big problems for every mail service out there...

    6. Re: Facebook too by Anonymous Coward · · Score: 0

      Spoken like a true addict!

    7. Re: Facebook too by Anonymous Coward · · Score: 0

      In the Facebook case, they were sued among other things for unlawful wiretapping by intercepting private messages. Facebook argued that they weren't wiretapping, the messages had to go through their service as a matter of course. The Court agreed in principle (yes, the messages do have to go through your service) but denied that defense because Facebook was doing more than simply storing the message for the recipient to retrieve. They were acting on the contents of those messages, sometimes even acting on behalf of the user, without the user knowing or consenting.

      A "reasonable person" would know and understand that Gmail scans the contents of your private emails in order to filter spam and display relevant advertising. This is no secret, it isn't being done in an underhanded manner, this has always been the bargain of Gmail from day one; they host your email in exchange for parsing it and showing ads. Facebook on the other hand did not disclose that it was scanning your private messages, auto-liking companies and products on your behalf just because you talked about them, etc. And Google doesn't post a four-star Google Places review from your account just because you send an email to a business.

      A lot of this will boil down to the difference between active and passive. The Facebook case is ongoing. The Twitter suit is new enough that I haven't found or read the complaint yet.

  3. Workaround by jdavidb · · Score: 4, Insightful

    I haven't used twitter in five years and in that time they haven't intercepted, read, or altered any of my messages.

    1. Re:Workaround by Anonymous Coward · · Score: 0

      That's what you think.

    2. Re:Workaround by Anonymous Coward · · Score: 0

      On Twitter you mean.

      Is Twitter "scanning" just small separate potatoes from Facebook tracking/profiling literally everything they possibly can , and Windows 10 being actual global spyware included by default on PC purchases? The push to download and install Windows 10 even if you don't want it.. is this just some isolated con?

      Or do the dots connect at a given level.

      see: http://tech.slashdot.org/comments.pl?sid=8000075&cid=50511399
      chase the other comments too as they are all modded to basically hidden and not Google searchable. (You have to move the Slashdot sliders to see)

      Ghostery blocks Facebook and Twitter buttons by the way.

      http://www.networkworld.com/article/2956574/microsoft-subnet/windows-10-privacy-spyware-settings-user-agreement.html

    3. Re:Workaround by N1AK · · Score: 1

      I haven't lived in the US for the last 5 years, so all Americans should stop complaining about anything bad their government does to them. Great logic... not.

    4. Re:Workaround by MobileTatsu-NJG · · Score: 1

      +4 Insightful for saying he doesn't use a popular service. Apparently there are acceptable levels of elitism.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    5. Re: Workaround by Anonymous Coward · · Score: 0

      Invalid comparison: emigrating from one's home country vs. simply ceasing to use a non-essential service.

    6. Re:Workaround by jdavidb · · Score: 1

      I don't think of myself as elite; more of a dinosaur. But my point was nobody forces you to use twitter; it's a voluntary relationship. Unlike my government which is forced on me by my neighbors because of their blind religious faith.

  4. User privacy? by Anonymous Coward · · Score: 5, Funny

    Is that, like, still a thing?

    1. Re:User privacy? by Anonymous Coward · · Score: 0

      Is that, like, still a thing?

      The policy, yes. Actual privacy for users, no. Facebook keeps blocking the account of one of my real-life, in-person friends because she posts pictures of herself wearing latex catsuits.

    2. Re:User privacy? by Anonymous Coward · · Score: 0

      Pics or it didnt happen.

  5. Duh? by Anonymous Coward · · Score: 1

    So basically, twitter is being sued for processing people's direct messages while they process people's direct messages? How do they think direct messages work? Are they transmitted with via unicorns and pixie dust?

    1. Re:Duh? by Anonymous Coward · · Score: 0

      Way back in the day of dialup modems, I ran a MUD.

      You know what happened to private messages between players? They were run through a function that replaced shit in the string with other shit. In this case, to insert ANSI color codes because bitches love them some ANSI16.

      I see no difference between that, and this shortening of URLs. 'course, like a good Slashderper, I haven't RTFA, so for all I know, Twitter is handing all your tweet bullshit over to the NSA. Which would be terribly wrong, but expected.

    2. Re:Duh? by _merlin · · Score: 1

      Colourising a message is not the same as replacing a link with one that redirects through a service you control so you can count clicks.

    3. Re: Duh? by Anonymous Coward · · Score: 0

      So... string manipulation is wrong.

    4. Re: Duh? by _merlin · · Score: 2

      No, string manipulation is not inherently wrong. It's manipulating content, e.g. making it so you can track their clicks and obscuring their links, that people are unhappy about.

  6. Yoohoo? They owe you *nothing* by Anonymous Coward · · Score: 0

    I find it funny people act like Twitter, Facebook, Google, Instagram, ... owe them something, like privacy, data retention, right to be forgotten or whatever. Wake up! Don't just be a pawn that grows those companies' networks and ensures the babies born today will never be able to communicate via internet except through private-sector-provided sandboxes. If one generation can resist that slippery slope, it's ours -- get off those "convenient" silos and push the other way while there's still time. You really want the future generations to live their whole lives under advertising agencies and government's microscopes?

    1. Re:Yoohoo? They owe you *nothing* by Anonymous Coward · · Score: 0

      You really want the future generations to live their whole lives under advertising agencies and government's microscopes?

      Yes.

    2. Re:Yoohoo? They owe you *nothing* by penguinoid · · Score: 2

      Fortunately for us, human instinct is that "we" the people are owed common decency. This occasionally comes back to bite the psychopaths who forget that detail.

      --
      Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
    3. Re:Yoohoo? They owe you *nothing* by MyAlternateID · · Score: 1

      Fortunately for us, human instinct is that "we" the people are owed common decency. This occasionally comes back to bite the psychopaths who forget that detail.

      Far too occasionallly. Fix that, and you patch a major bug in society.

  7. How did they think it was going to be sent? by Anonymous Coward · · Score: 1

    Twitter "Intercepted" the messages they were sending via Twitter? I don't think that word means what they think it means.
    Incidentally - every SMTP server on the planet "Intercepts, reads and alters" messages.

    What I don't understand though, is what damage these people have actually suffered? Or is this just a case of some lawyers noticing what looks to them to be a technical violation of a law, and seeing dollar signs?

  8. s/shortening/elongating/ by ConstantineM · · Score: 1

    s/shortening/elongating/

    There, fixed it for you!

    In what world
    http://t.co/qLxImbQYvn
    http://t.co/VnQBo6VP6g
    is shorter than
    http://bxr.su/
    http://cnst.su/
    ?

    1. Re:s/shortening/elongating/ by citizenr · · Score: 3, Informative

      the correct term is tracking engagement

      --
      Who logs in to gdm? Not I, said the duck.
    2. Re:s/shortening/elongating/ by Anonymous Coward · · Score: 0

      They could do that using invisible redirects like what Google does for search results. They actually alter the tweet to replace whatever link you used with their own t.co thing. Their stated reason is to allow them to block links to malware sites. For whatever that's worth.

  9. What is the basis of the suit? by BitterOak · · Score: 2

    Twitter is a free service that users voluntarily sign up to use. I don't remember ever being promised that Twitter would not read direct messages. Where is the expectation of privacy here? Just because other users can't normally see DMs is no implied promise that Twitter isn't going to look at them. If you want private messaging, use a paid service that states so in their terms of service, or better yet, use a messaging application with end-to-end encryption.

    --
    If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
    1. Re:What is the basis of the suit? by Flentil · · Score: 1

      I don't see why you put more faith in a paid service over one that's free. The TOS is what matters, not the cost.

    2. Re:What is the basis of the suit? by Dutch+Gun · · Score: 1

      The basis of the suit is "I like free money." For the lawyers, it's "vacation home."

      --
      Irony: Agile development has too much intertia to be abandoned now.
    3. Re:What is the basis of the suit? by David_Hart · · Score: 1

      If you're a lawyer, you launch law suits.... it's what you do....

    4. Re:What is the basis of the suit? by CrimsonAvenger · · Score: 2

      I don't see why you put more faith in a paid service over one that's free. The TOS is what matters, not the cost.

      Which is probably why OP used the phrase "that states so in their terms of service" when mentioning paid services....

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    5. Re:What is the basis of the suit? by MyAlternateID · · Score: 1

      If you're a lawyer, you launch law suits.... it's what you do....

      Plenty of lawyers are not trial lawyers. Look it up -- before you speak as though you know. It's better for everyone that way.

    6. Re:What is the basis of the suit? by allo · · Score: 1

      Private messages of any kind have always the expectation of privacy.

    7. Re:What is the basis of the suit? by Anonymous Coward · · Score: 0

      Private messages of any kind have always the expectation of privacy.

      Maybe that's why it's called Direct Messages and not Private Messages.

  10. Tip of the Iceberg by Anonymous Coward · · Score: 0

    I've noticed that certain tweets, especially if they are politically sensitive, get less impressions. Also, some retweets mysteriously vanish.

    Seems like a censorship system is in operation.

    1. Re:Tip of the Iceberg by Anonymous Coward · · Score: 0

      I've noticed that certain tweets, especially if they are politically sensitive, get less impressions. Also, some retweets mysteriously vanish.

      Seems like a censorship system is in operation.

      Evidence?

    2. Re:Tip of the Iceberg by Pieroxy · · Score: 1

      I've noticed that certain tweets, especially if they are politically sensitive, get less impressions. Also, some retweets mysteriously vanish.

      Seems like a censorship system is in operation.

      Evidence?

      How can you get evidence on a mysterious vanishing?

    3. Re:Tip of the Iceberg by MyAlternateID · · Score: 1

      I've noticed that certain tweets, especially if they are politically sensitive, get less impressions. Also, some retweets mysteriously vanish.

      Seems like a censorship system is in operation.

      Evidence?

      How can you get evidence on a mysterious vanishing?

      Well, by collecting it. And by finding conditions that reliably reproduce it. These are done with the intent of making it less mysterious. If you can't demonstrate that it's one thing (yet), you can at least rule out a few things that it isn't.

  11. Twitter download private links? by ConstantineM · · Score: 1

    If Twitter's behaviour for elongating the URLs in the public Tweets is any indication, their own bots actually download the contents of the links, allegedly trying to scan it for malware or whatnot.

    I, personally, suffer because I never experience any URLs being shortened, they instead only get elongated by the service, reducing already constrained character space.

    I mean, you don't have to go far to find a URL shorter than http://t.co/qLxImbQYvn. Even if you have a newly registered .com, it's still likely they'll only elongate it if you ever post a link to it.

    And Twitter should really change the name of their subservice disservice to be more technically accurate.

    The CEO of Sonic.net is especially annoyed (and rightly so) -- he can't even refer to his company without getting an elongation!

    1. Re: Twitter download private links? by therealkevinkretz · · Score: 1

      Ironically, many of the messages are *about* "elongation"

    2. Re:Twitter download private links? by _merlin · · Score: 1

      It's not to protect you from malware. It's so they can count clicks that go through the redirection service and obscure the original URLs.

  12. Re:Back To The Fusion: They Travel via Light! by Anonymous Coward · · Score: 0

    You really dropped the ball by not connecting light to Lucifer, the lightbringer.

  13. Wrong word... by Anonymous Coward · · Score: 0

    Twitter sued for scanning PRIVATE messages.

  14. For "shortening and redirecting links"? by therealkevinkretz · · Score: 1

    What if they deduped attachments and replaced the "original" with a link to a copy? Is that bad too?

    1. Re:For "shortening and redirecting links"? by MyAlternateID · · Score: 1

      What if they deduped attachments and replaced the "original" with a link to a copy? Is that bad too?

      That depends on what they do with the copy, for how long they retain it, how secure those copies are, how many backups there are, and with whom they share it. If that involves the government then they may not have a choice but to share. This can be done in huge volumes, without notice, facilitating mass surveillance.

      It also depends on whether every user involved is aware of, understands, and has consciously (and unambiguously) consented to it. Whenever practical, I'm all for letting consenting adults do more or less whatever they want. But it's really hard to consent to something you aren't aware of and don't understand, especially if it's not actively disclosed to you up-front. How well does the average user understand information security in general, how easily information can become compromised, and exactly what the implications could be?

      The US government (among others) has abandoned any concept of limiting this behavior and, worse, they're often the ones seeking this kind of user data from social media. For your protection, to fight terrorism, to be tough on crime, whatever you like to hear. Perhaps suing the companies who play Satan's Little Helper is easier than getting the political support it would take to change the kind of people who run governments. I hope Twitter gets nailed, hard, and I hope it sets a precedent that makes other companies hesitant to alter user data in any way, shape, or form without plainly and obviously declaring the full details and implications up-front.

  15. You forgot about the Twitter buttons... by Anonymous Coward · · Score: 0

    ... on almost every other webpage you visited so Twitter now knows you are a frequent visitor of slashdot.org and p***tube.com.
    This information is sold to advertising partners of Twitter which use it to target you on behalf of tons of advertisers.
    So Twitter does not even need your messages to collect a ton of information about you.

    1. Re:You forgot about the Twitter buttons... by _merlin · · Score: 1

      Maybe you, but we all use Ghostery to block those damn buttons.

  16. This Only Proves That... by Anonymous Coward · · Score: 0

    Twitter is gaining traction and becoming more popular than FaceTurd. They should take it as a compliment that they are on right track for a $250bn valuation.

  17. No way! by The+MAZZTer · · Score: 1

    You mean, if I send a message through Twitter, Twitter is going to see it? Say it ain't so!

    1. Re:No way! by N1AK · · Score: 1

      That's why no one should complain about phone companies keeping records of calls (and even transcripts) or the government filling the streets with cameras right?

  18. Users are suckers by Anonymous Coward · · Score: 0

    Facebook and Google are raking in Bilions with "free" services. Enough said.

    At face value, the twitter suit does seem meritless. But since they are having a hard to monetize and are under huge pressure, something ugly is going to happen.

  19. Lemme double check ... by Taco+Cowboy · · Score: 1

    This kind of shit is what you get when you use a huge advertising platform as your "private" communication hub

    The last time I logged out of my facebook account ... 2004

    The last time I logged out of my tweeter account ... 2006

    --
    Muchas Gracias, Señor Edward Snowden !
    1. Re:Lemme double check ... by Dog-Cow · · Score: 1

      Your post demonstrates that you are a snobbish twat, but in no way does it tell us whether you use FB or Twitter.

      Hint: when was the last time you logged in?

    2. Re:Lemme double check ... by nedlohs · · Score: 1

      Jesus. You've been continually logged in to facebook for over a decade?!?

      Get some help.

    3. Re:Lemme double check ... by JazzLad · · Score: 1

      Did you have to log in to check? ;)

      --
      "If you have nothing to hide, you have nothing to fear." - Every fascist, ever
    4. Re:Lemme double check ... by Anonymous Coward · · Score: 0

      Hint: when was the last time you logged in?

      For me? Never logged in on either Facebook or Twitter. I use Ghostery and suchlike (earlier, I used a different script-blocker) to block their crazy buttons on other web sites.

  20. Yes by Etherwalk · · Score: 1

    Honestly, is this something you would ever say to anyone,

    if you had nothing to hide?

    These accusations are preposterpous!

    Absolutely.

    This is part of the structure of most lawsuits. They file a complaint, you file a motion to dismiss the complaint for failure to state a claim on which relief can be granted (i.e. they said it wrong), you file an answer, you get cross-motions for summary judgment (both sides argue that even taking all of the facts as favoring the other party, they still win), and finally in one in a thousand cases you go to trial.

    Calling a claim "without merit" can generally mean one of two things--it doesn't really matter, or it's BS. Then you explain why it doesn't matter or why it's BS. "The facts show X, here's evidence" or "Even if the facts were what they say they are, they'd still lose."

  21. Slashdot by nospam007 · · Score: 1

    "...most likely a reference to Twitter's long-standing practice of automatically shortening and redirecting any in-message links."

    Slashdot does the dirty deed too.

    Hey Shashies, just send the damages money to my PayPal account.

    1. Re:Slashdot by MyAlternateID · · Score: 1

      "...most likely a reference to Twitter's long-standing practice of automatically shortening and redirecting any in-message links."

      Slashdot does the dirty deed too.

      Hey Shashies, just send the damages money to my PayPal account.

      I don't get this. The Slashdot default doesn't shorten URLs. The default really lengthens them because the links is followed by the [domain.name] in brackets. The link plus this additional information is longer than the link itself. Unless you're defining "links" as something other than a string like: <a href=http://stupidshit.com/">Your argument is bullshit</a>. But then you're no longer talking about Slashdot.

  22. What? people are crazy! by Anonymous Coward · · Score: 0

    Sometimes I just think people do not understand how these sites make money for themselves. Twitter obviously provides the user with a free account but in return you have to give up some privacy in order for Twitter to make money. Its really no different then a Facebook or Gmail or any other free service. Somehow that service is being paid for. Sometimes people are just to stupid for their own good. The real problem is that people never take the time when they sign up to read any of the EULA they agree too. Of course these sites count on this and unless things get really out of hand with privacy most users have no problem signing up for a social site and losing some privacy. I mean what does anyone post on Twitter they don't want Twitter to see but many strangers could see? Really? Lawyers of course eat up these paranoid privacy nuts because they can typically come to some agreement out of court and reap the rewards while the complainant get's very little besides ridicule and I guess the potential of some satisfaction if they win. Of course many times thy loose and end up facing the reality that privacy is in your control. You can sign up for Twitter or not, its your choice nobody is forcing you to accept a loss of your privacy. Your not paying for Twitter so either accept their terms or not. Actually for me I would rather lose some privacy about what I search for and post and get better ads targeted at me. Then receive random BS ads that I have no interest in the product or services. Its why sites like Twitter scan messages and so it goes in the world of the internet. Privacy freaks need not partake.

  23. Where is the expectation of privacy? by WD · · Score: 1

    This is Twitter we're talking about. A DM means that it's not broadcast to the world. If people are surprised that Twitter has control of their Twitter messages, I don't even know where to begin.

    1. Re:Where is the expectation of privacy? by allo · · Score: 1

      the law says, the service provider should not snoop on private messages. no tos can change this.

    2. Re:Where is the expectation of privacy? by Anonymous Coward · · Score: 0

      I wouldn't call it snooping, I'd call it an automatic feature of the software in which no human eyes ever look.

      Thus the word automatically. Otherwise under such a loos definition microsoft word is intercepting your text and changing it when it autocorrects.

    3. Re:Where is the expectation of privacy? by allo · · Score: 1

      When the law is strict regarding access and alteration, then it's no question about human/pc or automatic features.

      The analogy with word is wrong. It autocorrects while editing. When someone sends you a document and your mailbox autocorrects the typos, thats the problem. Your mailprogramm / word on the other hand can change it again, because it's your choice to view the text with a program, which changes stuff.

      That's the reason, why you can almost everywhere disable spamfilters or at least that they modify your mail with "[spam]" subjects. If you didn't request them to do, they are not allowed to do so and it's your right to deny this access.

  24. Twitters TOS.. by Anonymous Coward · · Score: 0

    "Any information that you or other users provide to Twitter is subject to our Privacy Policy, which governs our collection and use of your information.
    You understand that through your use of the Services you consent to the collection and use (as set forth in the Privacy Policy) of this information, including the transfer of this information to the United States, Ireland, and/or other countries for storage, processing and use by Twitter."

    Hum, Collection and use by Twitter. Seems pretty clear to me.

  25. Gmail Does this by Anonymous Coward · · Score: 0

    Unless I'm misunderstanding the complaint, GMail does the same URL manipulation. And they certainly scan for advertising, though they've never hidden that fact. Is Google being sued, too?

  26. Twitter... by MagickalMyst · · Score: 1

    Twits.

    --
    Political correctness is really just herd psychology pushed by insecure people who desperately seek social conformity.
  27. Shitter by Anonymous Coward · · Score: 0

    The fact that you use this shit is a crime