Hacker News Reader

> It is not because the apps were nefarious.

The FB app targetted young people and literally installed a VPN profile that routed all internet traffic through Facebook servers.

Essentially full network packet-capture of everyone who installed their app. That's the definition of nefarious.

View on HN

I did not say the app was not nefarious, I said that their enterprise account was not revoked because the app was nefarious.

The enterprise certificates were revoked primarily because they violated the #1 rule of the enterprise account - do not distribute outside of your company.

The user did decide to install the app, it wasn't forced onto them.

As long as user consented, the app should be allowed to do anything.

They were targeting children, who were not capable of giving informed consent. Furthermore, because they were providing financial rewards for installing the app, it was exploitative of the poor.

Reply on news.ycombinator.com