vegeta@lemmy.world to Technology@lemmy.worldEnglish · 1 day agoMeta grants itself right to scrape content from business customers for model trainingwww.theregister.comexternal-linkmessage-square24fedilinkarrow-up1351arrow-down11
arrow-up1350arrow-down1external-linkMeta grants itself right to scrape content from business customers for model trainingwww.theregister.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 1 day agomessage-square24fedilink
minus-squarecpbsy@lemmy.worldlinkfedilinkEnglisharrow-up21·1 day agoTo be clear, this is not restricted to content posted on Facebook. It’s any content posted on any website owned by the customer.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up16·1 day agoAnd specifically gives Meta the right to create “test credentials” on sites and scrape resultant deep content such as product docs that are only available with an account. This is far more invasive and concerning than traditional site scraping and indexing.(refs: https://www.theregister.com/ai-and-ml/2026/10/16/meta-grants-itself-right-to-scrape-content-from-business-customers-for-model-training/5303658 , https://m.facebook.com/legal/commercial_terms_preview )
minus-squareGormadt@slrpnk.netlinkfedilinkEnglisharrow-up11·1 day ago“test credentials” just reads to me as them giving themselves permission to straight up pen test every business with a social media account.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up8·1 day agoVery tempting to take a list of IP address ranges such as https://networksdb.io/ip-addresses-of/meta-platforms-inc and add them to our WAF blocklist, since I assume they won’t be honest about their user agent string when scraping.
minus-squarecpbsy@lemmy.worldlinkfedilinkEnglisharrow-up3·1 day agoExcept there’s no guarantee they’ll be coming from one of their own IP addresses. There’s nothing to stop them from using a residential botnet.
minus-squaredparticiple@sh.itjust.workslinkfedilinkEnglisharrow-up2·23 hours agoAll too true, unfortunately. No honor among thieves!
To be clear, this is not restricted to content posted on Facebook. It’s any content posted on any website owned by the customer.
And specifically gives Meta the right to create “test credentials” on sites and scrape resultant deep content such as product docs that are only available with an account. This is far more invasive and concerning than traditional site scraping and indexing.(refs: https://www.theregister.com/ai-and-ml/2026/10/16/meta-grants-itself-right-to-scrape-content-from-business-customers-for-model-training/5303658 , https://m.facebook.com/legal/commercial_terms_preview )
“test credentials” just reads to me as them giving themselves permission to straight up pen test every business with a social media account.
Very tempting to take a list of IP address ranges such as https://networksdb.io/ip-addresses-of/meta-platforms-inc and add them to our WAF blocklist, since I assume they won’t be honest about their user agent string when scraping.
Except there’s no guarantee they’ll be coming from one of their own IP addresses. There’s nothing to stop them from using a residential botnet.
All too true, unfortunately. No honor among thieves!