Slashdot Mirror


How Much VR User Data Is Oculus Giving To Facebook? (theverge.com)

Facebook owns many other apps and services, including the Oculus virtual-reality platform, which collects incredibly detailed information about where users are looking and how they're moving. Since most of the discussion about how Facebook handles user information is focused on the social network itself, The Verge's Adi Robertson looks into the link between Facebook and Oculus: A VR platform like Oculus offers lots of data points that could be turned into a detailed user profile. Facebook already records a "heatmap" of viewer data for 360-degree videos, for instance, flagging which parts of a video people find most interesting. If it decided to track VR users at a more detailed level, it could do something like track overall movement patterns with hand controllers, then guess whether someone is sick or tired on a particular day. Oculus imagines people using its headsets the way they use phones and computers today, which would let it track all kinds of private communications. The Oculus privacy policy has a blanket clause that lets it share and receive information from Facebook and Facebook-owned services. So far, the company claims that it exercises this option in very limited ways, and none of them involve giving data to Facebook advertisers. "Oculus does not share people's data with Facebook for third-party advertising," a spokesperson tells The Verge.

Oculus says there are some types of data it either doesn't share or doesn't retain at all. The platform collects physical information like height to calibrate VR experiences, but apparently, it doesn't share any of it with Facebook. It stores posts that are made on the Oculus forums, but not voice communications between users in VR, although it may retain records of connections between them. The company also offers a few examples of when it would share data with Facebook or vice versa. Most obviously, if you're using a Facebook-created VR app like Spaces, Facebook gets information about what you're doing there, much in the same way that any third-party app developer would. You can optionally link your Facebook account to your Oculus ID, in which case, Oculus will use your Facebook interests to suggest specific apps or games. If you've linked the accounts, any friend you add on Facebook will also become your friend on Oculus, if they're on the platform.
Oculus does, however, share data between the two services to fight certain kinds of banned activity. "If we find someone using their account to send spam on one service, we can disable all of their accounts," an Oculus spokesperson says. "Similarly, if there's 'strange activity' on a specific Oculus account, they can share the IP address it's coming from with Facebook," writes Robertson. "The biggest problem is that there's nothing stopping Facebook and Oculus from choosing to share more data in the future."

60 comments

  1. Shows subliminal pictures of the Kremlin by Anonymous Coward · · Score: 0

    Why?

  2. I am using HTC Vive by Anonymous Coward · · Score: 2, Insightful

    When I was making the purchasing decision I looked at both from HTC and from Oculus. I chose HTC because it isn't owned by Facebook

    Looks like I did make a wise choice

    1. Re:I am using HTC Vive by Anonymous Coward · · Score: 0

      The Vive leaks data to HTC servers in China. Valve was made aware of this but so far ignored the bug report on github.

      Overall Valve doesn't give a shit about security or privacy.

    2. Re: I am using HTC Vive by Type44Q · · Score: 1, Insightful

      Don't Facebook shills have more important things to do right now? Your ship is sinking, bitch.

    3. Re:I am using HTC Vive by yuriklastalov · · Score: 1

      Leaking data like this to China is bad in the sense of geopolitical strategy, but leaking it to FaceBook is a clear and present danger to the users themselves. Given the way Facebook is being shown to abuse their data collection for any number of shady practices it makes more sense for the individual user to avoid the Facebook collection.

      What are the Chinese going to do with your VR porn records? Maybe they could get lucky and find some bad behavior on someone important enough to blackmail, but your average neckbearded incel jacking off VR hentai? Facebook could put that on your Timeline, China just gets a good laugh at how decadent and degenerate the white man has become and how easy it's going to be to dominate European societies in the future.

      At the rate we're going the US military is going to be 50%+ female, filled with as many gays, trannies and other leftist riff raff as possible and will be utterly incapable of responding to even the smallest of threats, let alone Russia or China. In other words, fill the military with the very kinds of people who would ordinarily be out protesting everything the military does. Fucking genius.

  3. Careful of the PR speak by Anonymous Coward · · Score: 0

    "Oculus does not share people's data with Facebook for third-party advertising,"

    Let's count the ways this sentence can be technically true:
    a) Oculus does not share people's data (unlikely)
    b) Oculus shares people's data but not with Facebook (violates their privacy policy)
    c) Oculus shares data with Facebook but not for advertising
    d) Oculus shares data with Facebook for advertising but it is not used with third-parties
    e) Oculus does not share data with Facebook for advertising with third-parties (as stated)

    1. Re:Careful of the PR speak by Anonymous Coward · · Score: 0

      "Oculus does not share people's data with Facebook for third-party advertising,"

      Let's count the ways this sentence can be technically true: a) Oculus does not share people's data (unlikely) b) Oculus shares people's data but not with Facebook (violates their privacy policy) c) Oculus shares data with Facebook but not for advertising d) Oculus shares data with Facebook for advertising but it is not used with third-parties e) Oculus does not share data with Facebook for advertising with third-parties (as stated)

      PR speak? More like legalese. Your post might as well have been a script for a law firm commercial. Show this to anyone who still questions the need for a lawyer when entering a courtroom.

    2. Re: Careful of the PR speak by Anonymous Coward · · Score: 0

      To be honest, given how indescribably poor Facebook's marketing to me has been, and given how bad my experience advertising on Facebook has been, I think this whole narrative favors Facebook too much.

      Advertising to me, apparently Facebook thinks I need my criminal record expunged and a simple way to beat wrinkles. Who knew? I didn't have either, as far as I knew.

      As an advertiser, I got thousands of allegedly targeted clicks that were clearly worthless. In one case I was advertising a diner. If that many people visited the website, there would have been a clear effect -- there wasn't. Facebook did a great job of taking money, but didn't really benefit the business. In the meantime, they are really scummy to their advertisers. Your Facebook page won't even show up in searches until you've got a huge number of views unaided by Facebook, or you've got an absolutely massive ad spend.

      They might have all this data, but don't mistake that for being able to competently use it for anything. That's just marketing want they're using to bamboozle advertisers into thinking they're a good choice for ad dollars.

  4. Really trying hard now by inking · · Score: 2

    You can really stop reading a privacy article when it lists "stor[ing] posts that are made on the Oculus forums". Better get off /. until it goes full P2P. Everything listed here sounds like anonymous metrics used for product development or spam prevention. A complete non-story.

    1. Re:Really trying hard now by JaredOfEuropa · · Score: 4, Informative

      The article is mostly about what data could be shared. The main point is that the privacy policy allows them to collect and share pretty much everything. Now, given the recent stories about Facebook, where do you think they sit on a scale of 0: no data collected or everything aggregated, to 100: everything stored on an individual level, tagged with your ID and cross-referenced with other data they already have? And what do you think the original backers of Oculus were scared of and pissed off about when Oculus sold out to FB?

      The best privacy policy is the one where no data is collected other than what is strictly required to run the service the data is collected from. And if they do like to collect and aggregate anonymous data “to improve the service”, at least stick to the 3 Os: Open (transparency about what is collected and how it is used), Optional, and Off-by-default. A VR headset has no business collecting any of this crap without explicit consent.

      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    2. Re:Really trying hard now by inking · · Score: 1

      Now you are just waving hands and grandstanding with some rules the customer base most likely does not care an inch for. If the consensus of the customers was that they value your 3 Os over a usable product, they are more than welcome to not buy the Oculus and back some unusable /.-sanctioned product that is in line with everything the EFF and FSF dream of at night. Much in the same vein, you are more than welcome to run your own mail server and avoid Google's indexing, while dealing with viagra adverts and Nigerian princesses day in day out. Oddly enough, both Gmail and Facebook are considerably more popular than something like ProtonMail.

      The backers of the original Oculus got screwed over on multiple front; that's just the nature of pre-paying and something we are wiser about now than when Kickstarter first became a thing. It is very unfortunate that you would exploit the misfortune of an entire customer base to make ideological points they may not endorse.

    3. Re: Really trying hard now by Type44Q · · Score: 0

      Can anyone spot the Facebook shill? Hint: he smells bad.

    4. Re:Really trying hard now by GuB-42 · · Score: 1

      A VR headset has no business collecting any of this crap without explicit consent.

      Ok for the "without explicit consent" part but, a lot of valuable can be collected from VR headsets in order to improve VR.
      Tracking movement patterns in order to know if you are sick could be very useful. Motion sickness is a major problem for VR. There are mitigations but they tend to impact gameplay. This is something that depends a lot on the individual and more data for research purposes is a good thing.
      And there are more technical aspects: people have different setups and positional tracking data may help improve quality. Things like head motion can help understand how people interact with the virtual world.
      VR is just becoming mainstream, and there are a lot of questions to answer and technical problems to solve, much more than web page design.

    5. Re:Really trying hard now by Anonymous Coward · · Score: 0

      >are more than welcome to not buy the Oculus

      Exactly what I did and I'm pretty much the target audience for VR stuff.

    6. Re:Really trying hard now by HiThere · · Score: 1

      The thing is, if you "collect the data to improve the VR" what happens to the data after you've used it to improve the VR? How much do you trust the company that scarfed up your data? Why?

      In the case of Facebook, my answer is pretty much "I don't trust them at all.", and I'd be dubious about their promises even if I thought they could legally be held to them.

      In the case of Occulus, they're owned by Facebook. They'll do what Facebook tells them to do.

      And with respect to TOS, more than once I've read a TOS that allowed them to change the terms by altering a web page, and made it my duty to know about any changes.

      So let them have someone else's data. Because I can't stop all the fools.

      --

      I think we've pushed this "anyone can grow up to be president" thing too far.
    7. Re:Really trying hard now by Anonymous Coward · · Score: 0

      The point of the article is that they do put in their TOS that they can share whatever they want. Just because they say they don't doesn't mean anything given Facebook's history of saying the same thing and then giving free reign access to private and public data without any measures to stop it. Oh, I guess they did a "pinky swear" and promised to only use it for research... *cough* BS *cough*

  5. Eye Tracking Analytics by mentil · · Score: 4, Interesting

    There's at least one VR experience that records heatmaps of what parts of the environment you look at and for how long, and sends those to the developer (although they're upfront about this, for the app I know of). Soon, VR headsets will have eye-tracking tech built in that tracks not just what is visible in your entire field of view, or even the center of this field of view, but what your eyes are pointing at. There are various benefits to this tech, but also latent worry that it can be abused for marketing reasons. Marketers have already used eye-tracking with normal 2d screens to tell what parts of their advertisements that viewers look at, or to find out how many notice product placement. It gets worse when you consider that marketers (or anyone else who you might not want passing judgement on you) find out what your gaze tends to linger on, and assume that means you like/want that thing. Who wants to get marked as gay in a database because their female friend played a VR game with your headset/PC, and was staring at the guys in it? Or worse, if you ARE gay but still in the closet. Word seems to be that VR eye tracking will remain confidential information for reasons like this, but it'll be difficult to control in VR social apps where gaze is sent over the internet to be seen by others (since the possibility of eye contact is arguably a benefit of the tech).

    --
    Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
    1. Re:Eye Tracking Analytics by PolygamousRanchKid+ · · Score: 1

      There's at least one VR experience that records heatmaps of what parts of the environment you look at and for how long, and sends those to the developer (although they're upfront about this, for the app I know of).

      I tend to look at women's posteriors, not their breasts.

      I'm hoping this technology can confirm this inclination in other males, and influence the R&D budgets of women's underwear manufacturers.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    2. Re:Eye Tracking Analytics by Anonymous Coward · · Score: 0

      Millions of years og evolution suggest you do not. There's a reason women undress in public and call it "metoo" when someone misunderstand the communication (unfair advantage). Your gaze will find all the most important points for a few milliseconds, and then your conscious thought will take over and make you all feel safe again. But it'll get recorded, transmitted and abused.

    3. Re:Eye Tracking Analytics by Anonymous Coward · · Score: 0

      becuz your gay real men want dem tittays

  6. All apps and videos by Anonymous Coward · · Score: 0

    Oculus records all apps run (so Facebook knows if you're running "Honey Select"). It may also record the names of all video files. This is why I've never looked at anything sexy on Oculus. It's really really wrong of them to record that stuff

    1. Re:All apps and videos by Anonymous Coward · · Score: 0

      Imagine, if they record your dikkkiii.....the shame, LOL

    2. Re:All apps and videos by Anonymous Coward · · Score: 0

      No, but they will record your eye movement looking at dicks.

  7. How much? All of it... by fustakrakich · · Score: 1

    Same with Whatsapp and everything else they own.

    The question may as well be rhetorical.

    --
    “He’s not deformed, he’s just drunk!”
    1. Re:How much? All of it... by geekmux · · Score: 1

      Same with Whatsapp and everything else they own.

      The question may as well be rhetorical.

      Exactly.

      And there are ZERO fucks given for the idiot Facebook users suddenly crying about privacy and yet continue to use their services.

    2. Re:How much? All of it... by Dracos · · Score: 1

      Precisely. Facebook is Oculus' patent entity, therefore not considered a third party. Every other data-grubbing place that facebook shares data with are third parties.

      I still think Zuckerberg knew the "users are the product" social media business model, at least the free-wheeling ere of it, was doomed and that's why he diversified into VR. I don't think he's enough of a visionary to see VR as a next step in social media.

    3. Re:How much? All of it... by Dracos · · Score: 1

      * Parent entity, not patent.

    4. Re:How much? All of it... by jareth-0205 · · Score: 1

      Same with Whatsapp and everything else they own.

      The question may as well be rhetorical.

      Exactly.

      And there are ZERO fucks given for the idiot Facebook users suddenly crying about privacy and yet continue to use their services.

      Yeah - throw that expensive headset in the bin now that Facebook bought the company!

      This is going to go waaaay beyond a single social network that you personally can avoid, it's gonna need regulating. We're gonna have to start thinking about personal data in a different way than we currently do, as property almost. It's not even clear that you can avoid it by not using the site, if enough of your friends are on there, plus photos they've uploaded plus facial recognition plus graph analysis, you can still be identified.

  8. Simple by viperidaenz · · Score: 3, Insightful

    All of it.

    1. Re:Simple by Anonymous Coward · · Score: 0

      All of it.

      I agree... anyone who does not think that Oculus and Facebook tracks and shares everything are deluding themselves... Oculus was doomed the second they got aquired by Facebook. I shudder to think about how betrayed the original supporters must have felt when Oculus was sold to Facebook.

    2. Re:Simple by Zocalo · · Score: 2

      My first thought was that was some kind of rhetorical headline that would lead into an analysis of what kinds of data Oculus was gathering and how they were funneling all of it to Facebook (and a long, long, list of other "partners"), but apparently there are still some naive people out there who really do think that companies with a business model of monetizing your personal data might protect some arbitrary fraction of it rather than profit of it. I can only assume they have spent the last decade or two living under a rock, in a cave, on a remote island, and have had no other contact with humanity apart from the occassional message in a bottle that washes up on the shore. Frankly, it's almost to the point of being a Betteridge type thing, isn't it? Any headline that asks "How much of your data is a company sharing?" can be answered "All of it - including a whole bunch of stuff you had no idea they even had."

      --
      UNIX? They're not even circumcised! Savages!
    3. Re:Simple by coofercat · · Score: 1

      all of it - and anything else they can get their hands on.

      If they're not keeping copies of all the video yet, you can bet they will do in a future model or software update. They'll then be using that video to capture any last detail they can about you, down the type of paint you have on the walls.

    4. Re: Simple by Type44Q · · Score: 1

      apparently there are still some naive people out there who really do think

      They only think they're doing that.

    5. Re:Simple by Anonymous Coward · · Score: 0

      All your data are belong to them

  9. Maybe he should eat his shorts by Anonymous Coward · · Score: 0

    on facebook?

    https://slashdot.org/comments....

    (How do you "PM" someone on Slashdot?) Why are nerds so naively enthusiastic about nonsense, BTW?

    1. Re: Maybe he should eat his shorts by Anonymous Coward · · Score: 0

      Still 1 and a half year left to go until his 5 years frame expires. 1M being solder per quater at the moment. 100 probably not going to be reached, but 20M or an additional year later 100M seems plausible.

  10. 100% by Anonymous Coward · · Score: 0

    You should assume everything collectable is being collected. And as you say, at any point in the future the company could start sharing it with anyone, they could get hacked, or they could get bought out by anyone who will then control the information (like Microsoft buying LinkedIn and Skype). If any of that concerns you then you shouldn't use their services.

    For something like AR, you should assume they are tracking everything in your house. Any product it can see. Even the floor plans. VR is tracking all that too if it's recording your surroundings to determine how you move your head.

  11. All of it by Opportunist · · Score: 1

    Duh.

    Next question?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  12. How much? by Anonymous Coward · · Score: 0

    All of it and then some. Next question?

  13. Eye Tracking IS abused for marketing by Anonymous Coward · · Score: 0
  14. One billion in VR goal? by Anonymous Coward · · Score: 0

    They think that Oculus GO will make more than one billion people join the VR society, and they think they are going to make money on games and apps. I am going to buy Oculus GO ONLY for porn.
    No money from me for apps and games.

    I dont think that I am alone in this.

  15. we knew it was gonna turn to shit with facefuck by Anonymous Coward · · Score: 0

    doh which fuckwits didn't understand that facebook buying oclueless was going to turn it to shit, all because lucky was a greedy fuck.

    any product sold by facefuck will be fucking data raping you, who the fuck doesn't understand this, are you all fucking asleep at the wheel.

    1. Re:we knew it was gonna turn to shit with facefuck by Anonymous Coward · · Score: 0

      sold that shit when faceplant got hold of Oculus - fuck you facebook

  16. All or none depending on word semantics by Anonymous Coward · · Score: 0

    All: because occulus is part of fb so what occulus has fb has

    None: because occulus is part of fb, thus fb already has it. Since you can not give to yourself what you already have, occulus can/is not/ GIVING anything to fb.
     

  17. All of it! by aglider · · Score: 1

    Why not, when the users are the merchandise?

    --
    Sent as ripples into the electromagnetic field. No single photon has been harmed in the process.
  18. Fuck that by Anonymous Coward · · Score: 0

    If I bought a piece of hardware, why would I need an account?

    That applies to software too.

  19. how is this data useful? by Anonymous Coward · · Score: 0

    User looked up 2x, down 2x, left 2x, right 2x, point A, point B.

    What do you do with that? Advertise unlock codes?

  20. Mind Reading and Thought Control by complexanimal · · Score: 2

    Given Facebook's horrible track record when it comes to privacy, surveillance, and the public good, we should all be very alarmed by the prospect of an unregulated Facebook with VR technology penetrating our homes. They already have a team of psychologists, behavior experts, and academics helping to refine their products to be as addictive and lucrative as possible. What happens when they start getting unfettered access to our biodata? We betray our thoughts and feelings with a variety of subconscious or semi-conscious movements: pupil dilation, hand gestures, slight changes in posture, imperceptible changes in respiration, etc. When Facebook starts getting this data and combines it with the extensive dataset they already have on all of us, they will effectively be able to read our thoughts and exploit it for profit by selling this information to the highest bidders.

    Oculus says there are some types of data it either doesn’t share or doesn’t retain at all. The platform collects physical information like height to calibrate VR experiences, but apparently, it doesn’t share any of it with Facebook.

    Really? And how long will that last? TFA already says there's nothing stopping them from sharing all this information. All it takes is a majority vote of one to change this policy.

    As intimate as VR surveillance seems, it’s still (as far as we know) not nearly as invasive or all-encompassing as Facebook’s app and web surveillance.

    But it will become much worse.

  21. That doesn't work by Okian+Warrior · · Score: 1

    if you ARE gay but still in the closet. Word seems to be that VR eye tracking will remain confidential information for reasons like this, but it'll be difficult to control in VR social apps where gaze is sent over the internet to be seen by others (since the possibility of eye contact is arguably a benefit of the tech).

    I was working for a company that did eye tracking computer input for disabled persons when this question came up: is it possible to tell if a person is gay by analyzing their eye movements?

    The theory was that the pupil dilates when a man views a naked woman, would the same happen when a gay man views a naked man?

    A literature search turned up an experiment (that I can't find at the moment) where this theory was tested on prison inmates who were definitively categorized as gay or straight based on their behaviour outside of prison, using eye tracking equipment available at the time.

    This was back in the years when gay was illegal. People were looking for a way to test for sexual orientation. (1950s or 60's maybe?)

    The study conclusion was that this does NOT work at all. IIRC, the results were so close to random that one couldn't even say that the results were inconclusive.

    I looked through the experimental procedure and couldn't find any obvious bias or flaw, so I expect this is a strong and reproducible [non] result.

    Apparently the pupil dilates for all sorts of reasons, including when you see any kind of threat. A naked man is seen as a threat by a non-gay person, and other confounding factors come into play such as general interest, noticing some aspect of the image that is strange or unusual to the individual.

    There are privacy aspects to eye tracking, but being outed as gay is probably not one of them.

  22. If you lay down with dogs... by neo-mkrey · · Score: 1

    ...you'll get fleas.

  23. Fakebook by p51d007 · · Score: 1

    I find it interesting (well, not really) how Zuck was all about how bad they were, or how terrible it was that all of that data was "used" in the 2016 election, but SAID NOTHING about willingly giving it to the Obama campaign for their use. Hypocrite.

  24. Fuck the Zuck! by Anonymous Coward · · Score: 0

    Fuck the Zuck! Zuck the suck! Fuck the Zuck! Zuck sucks ducks!

  25. No Offline Mode by Anonymous Coward · · Score: 0

    Occulus VR has no offline mode, which means there is absolutely no way to opt-out from their massive data collection tools. Once again, you are the product. Everything you do will be sent to Facebook, and they will sell it and make money.

  26. Great... by Locke2005 · · Score: 1

    Mark Zuckerberg now knows what VR porn I watch! Come to think of it, Zuckerberg must have an awesome porn collection himself!

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  27. VR + Facebook = Profit by Anonymous Coward · · Score: 0

    Since Occulus is run by Facebook, they could tie your VR account to your Facebook account, and exploit your personal data even more. All of the this would be behind the scenes, so you wouldn't know what they were doing with it.