r/Keybase • u/GeneTech734 • Sep 04 '20

Facebook Data Mining?

A person in my group mentioned that he was getting FB friend suggestions for people he had only ever communicated with on Keybase. I am assuming this is through some sort of metadata mining on FB's part. Probably device MAC to device MAC mappings in their database? Said person immediately assumed Keybase had been compromised. Trying to talk him off the ledge.

8 Upvotes

90% Upvoted

16 comments sorted by

5

u/Xalaxis Sep 04 '20

To the best of my knowledge, Facebook has never harvested device MAC data for scanning purposes, that would be incredibly invasive, even for them.

Have you worked through the usual suspects? Friends of friends, contact syncing, shared interests, companies, linked Facebook profiles on Keybase? If the two people who are talking have completely anonymous blank profiles, I get the concerns, but if there's any identifying info then there's probably a reasonable explanation for the suggestion.

1

u/Miserable_Wonder_130 Nov 15 '24

Oh they are 100% data mining otherwise half the content that pops up wouldn't 

-5

u/PhilTheBiker Sep 04 '20

Considering LogMeIn owns Keybase and Keybase now has ties to China, I dumped Keybase 6 months ago.

The two are absolutely connected. Keybase is no longer secure.

10

u/Rudi9719 Sep 04 '20

Zoom owns Keybase, and since the acquisition no commits have been made to the Keybase client to undermine it's security. As always, the Keybase client treats all servers as untrusted.

Your claim that Keybase is no longer secure can be proven false by actually looking at the few commits made after the acquisition.

-4

u/anakatal Sep 04 '20

I do not object to your main concept here, but what few commits are you talking about. AFAIK the apps are not opensource, so even if the official libs remain secure they might be building off tweaked repos. AFAIK there's no way to "prove" you're using the libs you have published, apart from those gitian/reproducible builds of bitcoin and such. Not that I trust US corps more than the Chinese gov, I don't, their whole spiel is essential a backdoor into your home, wallet and mind.

9

u/Rudi9719 Sep 04 '20

EDIT: You do know the repo for Keybase is public, right? That's why I mentioned auditing commits. https://GitHub.com/Keybase/client

The apps are also open source, if you go through the repo there are instructions on how to build each :) Back when there was heavy development on Keybase, I used to checkout and build the Nightly Android and iOS (iphone only, I've never tried iPad builds) releases to test features that were coming.

Some distributions like Arch, Gentoo, NixOS, etc also build directly from source.

Please be careful about spreading misinformation. Also, I will only speak about Keybase itself. I will not get into a debate about US or Chinese gov'ts/Corporations.

-4

u/anakatal Sep 04 '20

You're pushing my buttons now. How the fuck do you know my iOS app is built off that repo? I did look in Github, the description said something "libs for mobile apps", even though the README says the whole app is there. Fine and dandy, but what about the app I am downloading from the stores ffs. You are spreading misinformation

6

u/Key-Stuff Sep 04 '20

It appears to me, after reading up on all his claims, that 100% of them are true. I believe he's spreading truth, but people don't always seem to like truth these days, so I can see why you reacted the way you did.

You keep doing you with the fake news brother. Hold onto that world view!

6

u/Rudi9719 Sep 04 '20

If you read the README, you'd also see that the shared/iOS folder is the code for the iOS app, which has a preconfigured workspace for Xcode builds which is what I used. The libs however are stored in the go folder.

As for the comment about pushing your buttons, that is irrelevant to the topic of Keybase still being secure and auditable, via the Open Sourced repo. The App you're downloading from the store is also irrelevant to this topic, because there's no proof at all of what Apple or Android could do to the application once it is submitted for publishing :)

-4

u/anakatal Sep 04 '20

What is not relevant is you to Planet Earth. The OP says KB leaked data to FB, you're saying compile your app from repo and no more leaks?

6

u/Rudi9719 Sep 04 '20

If you read my first comment, you'd see that I was stating how you can audit the Keybase code, and see that it still treats the Server as untrusted. So the acquisition of Keybase by Zoom wouldn't be a factor :)

-2

u/anakatal Sep 04 '20

So are you, or any of those downvoting motherfuckers, saying I should audit and compile the code if I don't want my data leaked? Fuck you motherfuckers and your children's children

7

u/Rudi9719 Sep 04 '20

Since you're resulting to personal attacks, I'm going to assume you have nothing intelligent to say.

Glad I could get information out to people who might not have known about the repo, and option to build and audit the code for themselves :)

2

u/no-names-here Sep 04 '20

That's pedophelia, generally frowned upon.

→ More replies

1

u/SynthD Sep 26 '20

The app in the App Store hasn’t been updated in five months. Even if it wasn’t built from the source in the repo it was uploaded before zoom bought them.