Ebele Thanks for that detailed explanation. We really do appreciate when information flows like this. It does eliminate speculation and unnecessary recriminations. Ali Hussein Principal Hussein & Associates +254 0713 601113 Twitter: @AliHKassim Skype: abu-jomo LinkedIn: http://ke.linkedin.com/in/alihkassim "Discovery consists in seeing what everyone else has seen and thinking what no one else has thought". ~ Albert Szent-Györgyi Sent from my iPad

On 12 Oct 2016, at 8:56 PM, Ebele Okobi via kictanet <kictanet@lists.kictanet.or.ke> wrote:

Yes-this is a mess, and this article isn't an accurate report. Basically-this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here http://readwrite.com/2013/09/19/api-defined/ for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously.

Ebele Okobi | Public Policy Director, Africa m. +44 (0) 771 156 1315 10 Brock Street | London | NW1 3FG ebeleokobi@fb.com

On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet <kictanet@lists.kictanet.or.ke> wrote:

...

The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts.

More here: https://www.aclu.org/blog/free-future/facebook-instagram-and-twitter-provide...

-- Ahmed Maawy Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer

swahilibox.co.ke globalshapers.org www.okfn.org startupgrind.com ajplus.net www.everylayer.com _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_FmWozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e=

Unsubscribe or change your options at https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e=

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

---

kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Geofeedia, as it is alleged, was using publicly available user information to sell to law enforcement agents. We would certainly not know if Geofeedia had a commercial agreement with these social media platform to share data, including private data. We can only rely on the communiqué coming from the social media platforms. I would swallow my head if they incriminate themselves. But the kink of the matter is how privacy and data protection has become a big issue in our times. We the users have put ourselves in a position where we share so much online, without considering the consequences. Apart from privacy settings, and encryption, the social media platforms have no control on the PUBLIC data we post on their platforms. Even without Geofeedia, the security agents can still have bots, even human data entry operators scoring publicly accessible data from the forums. We are well advised. ______________________ Mwendwa Kivuva, Nairobi, Kenya twitter.com/lordmwesh On 13 October 2016 at 13:26, Harry Delano via kictanet < kictanet@lists.kictanet.or.ke> wrote:

Hey Ebele,

That sounds like another "sneaky"‎ case of getting caught with hands in the cookie jar. How long did this go on before you could flag it up..? Did it have to await feedback from a third party for Fb to realize this, or are there internal controls and checks to monitor what each of the API's are feeding into or collecting from the huge amount of data available..?

Some clarity would suffice..

Regards, Harry

Sent from my BlackBerry 10 smartphone *From: *Ebele Okobi via kictanet *Sent: *Wednesday, October 12, 2016 20:57 *To: *Harry Delano *Reply To: *KICTAnet ICT Policy Discussions *Cc: *Ebele Okobi *Subject: *Re: [kictanet] Facebook, Twitter and Instagram Share Data with Location-based Social Media Surveillance Startup

Yes-this is a mess, and this article isn't an accurate report. Basically-this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here http://readwrite.com/2013/09/19/api-defined/ for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously.

Ebele Okobi | Public Policy Director, Africa

m. +44 (0) 771 156 1315 <+44%20(0)%20771%20156%201315>

10 Brock Street | London | NW1 3FG

ebeleokobi@fb.com

[image: 6F376569-CC77-422B-BAD3-794055B1E02B]

On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet < kictanet@lists.kictanet.or.ke> wrote:

*The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts.*

More here: https://www.aclu.org/blog/free-future/facebook- instagram-and-twitter-provided-data-access-surveillance-product-marketed <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aclu.org_blog_free-2Dfuture_facebook-2Dinstagram-2Dand-2Dtwitter-2Dprovided-2Ddata-2Daccess-2Dsurveillance-2Dproduct-2Dmarketed&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=G0SoSpLD_f-qRWCjjSMY5s9GRO2y2wlRmg_ch_J_Tms&e=>

-- *Ahmed Maawy* Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer

swahilibox.co.ke <https://urldefense.proofpoint.com/v2/url?u=http-3A__swahilibox.co.ke&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=xgEGgQpfX4YAzWFb01qZ9xpVfsYmcj-Thzm7LwBnOdA&e=> globalshapers.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__globalshapers.org&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=AD4YSyg9ZAPmuqMQ2KT8U-TWAx0oZRabNuXs4OBBXvs&e=> www.okfn.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__okfn.org_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=0mJDrKTlVZmhtNIV_NCX7sDVspc8EvEbJ0yDBisHU8Y&e=> startupgrind.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__startupgrind.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=EBa6-yJCvfxdk_mFmI6H-ZXzXOb0rr17M0mEJpTofqs&e=> ajplus.net <https://urldefense.proofpoint.com/v2/url?u=http-3A__ajplus.net&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=YWO9IHDsdCDx7uytBzeJF-NTjZhVZjk-dOXuBLS9j6w&e=> www.everylayer.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.everylayer.com_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=lNcgAS0-227nMM6fqAu163-v-PyiO5D4CTywdQL_1P8&e=>

_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://urldefense.proofpoint.com/v2/url?u=https-3A__lists. kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c= 5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m= GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_ FmWozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e=

Unsubscribe or change your options at https://urldefense.proofpoint. com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_ options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c= 5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m= GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s= LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e=

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/kivuva%40transworldafrica.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

I think this whole discussion opens up a new dimension to this whole issue: Having a back-door is one thing. But then how sure are we that there are no 3rd parties who (with or without backdoors) are using this data to get it to the 1st party? Geofeedia may be a dot on the map.. On Thu, Oct 13, 2016 at 2:41 PM, Mwendwa Kivuva via kictanet < kictanet@lists.kictanet.or.ke> wrote:

Geofeedia, as it is alleged, was using publicly available user information to sell to law enforcement agents. We would certainly not know if Geofeedia had a commercial agreement with these social media platform to share data, including private data. We can only rely on the communiqué coming from the social media platforms. I would swallow my head if they incriminate themselves.

But the kink of the matter is how privacy and data protection has become a big issue in our times. We the users have put ourselves in a position where we share so much online, without considering the consequences. Apart from privacy settings, and encryption, the social media platforms have no control on the PUBLIC data we post on their platforms. Even without Geofeedia, the security agents can still have bots, even human data entry operators scoring publicly accessible data from the forums.

We are well advised.

______________________ Mwendwa Kivuva, Nairobi, Kenya twitter.com/lordmwesh

On 13 October 2016 at 13:26, Harry Delano via kictanet < kictanet@lists.kictanet.or.ke> wrote:

...

Hey Ebele,

That sounds like another "sneaky"‎ case of getting caught with hands in the cookie jar. How long did this go on before you could flag it up..? Did it have to await feedback from a third party for Fb to realize this, or are there internal controls and checks to monitor what each of the API's are feeding into or collecting from the huge amount of data available..?

Some clarity would suffice..

Regards, Harry

Sent from my BlackBerry 10 smartphone *From: *Ebele Okobi via kictanet *Sent: *Wednesday, October 12, 2016 20:57 *To: *Harry Delano *Reply To: *KICTAnet ICT Policy Discussions *Cc: *Ebele Okobi *Subject: *Re: [kictanet] Facebook, Twitter and Instagram Share Data with Location-based Social Media Surveillance Startup

Yes-this is a mess, and this article isn't an accurate report. Basically-this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here http://readwrite.com/2013/09/19/api-defined/ for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously.

Ebele Okobi | Public Policy Director, Africa

m. +44 (0) 771 156 1315 <+44%20(0)%20771%20156%201315>

10 Brock Street | London | NW1 3FG

ebeleokobi@fb.com

[image: 6F376569-CC77-422B-BAD3-794055B1E02B]

On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet < kictanet@lists.kictanet.or.ke> wrote:

*The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts.*

More here: https://www.aclu.org/blog/free-future/facebook-instagram- and-twitter-provided-data-access-surveillance-product-marketed <https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aclu.org_blog_free-2Dfuture_facebook-2Dinstagram-2Dand-2Dtwitter-2Dprovided-2Ddata-2Daccess-2Dsurveillance-2Dproduct-2Dmarketed&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=G0SoSpLD_f-qRWCjjSMY5s9GRO2y2wlRmg_ch_J_Tms&e=>

-- *Ahmed Maawy* Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer

swahilibox.co.ke <https://urldefense.proofpoint.com/v2/url?u=http-3A__swahilibox.co.ke&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=xgEGgQpfX4YAzWFb01qZ9xpVfsYmcj-Thzm7LwBnOdA&e=> globalshapers.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__globalshapers.org&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=AD4YSyg9ZAPmuqMQ2KT8U-TWAx0oZRabNuXs4OBBXvs&e=> www.okfn.org <https://urldefense.proofpoint.com/v2/url?u=http-3A__okfn.org_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=0mJDrKTlVZmhtNIV_NCX7sDVspc8EvEbJ0yDBisHU8Y&e=> startupgrind.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__startupgrind.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=EBa6-yJCvfxdk_mFmI6H-ZXzXOb0rr17M0mEJpTofqs&e=> ajplus.net <https://urldefense.proofpoint.com/v2/url?u=http-3A__ajplus.net&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=YWO9IHDsdCDx7uytBzeJF-NTjZhVZjk-dOXuBLS9j6w&e=> www.everylayer.com <https://urldefense.proofpoint.com/v2/url?u=http-3A__www.everylayer.com_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=lNcgAS0-227nMM6fqAu163-v-PyiO5D4CTywdQL_1P8&e=>

_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.k ictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNl Th3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE &m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_FmWozK9w ITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e=

Unsubscribe or change your options at https://urldefense.proofpoint. com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_ kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd 41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE &m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk 66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e=

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/m ailman/options/kictanet/kivuva%40transworldafrica.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

_______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke https://lists.kictanet.or.ke/mailman/listinfo/kictanet

Unsubscribe or change your options at https://lists.kictanet.or.ke/ mailman/options/kictanet/ultimateprogramer%40gmail.com

The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development.

KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

-- *Ahmed Maawy* Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer swahilibox.co.ke globalshapers.org www.okfn.org <http://okfn.org/> startupgrind.com ajplus.net www.everylayer.com

I certainly understand the cynicism about corporations in general, and the human rights activist in me is always secretly pleased to have companies held to account, but I'm hard pressed to divine the logic of this. Leaving aside the ethics of this-Facebook is a company whose substantial market capitalization and considerable revenue depend on people trusting us with their data. As many in this group know, some from personal experience, we come under considerable fire globally, up to and including law suits and the arrest of employees, because of our efforts to vigorously combat being compelled to turn over data that is not lawfully requested by law enforcement. So is the charge that we would, despite all of the foregoing, create a scheme to sell user data to this company to pass on to the police? To what end? From a revenue perspective, is it logical that we would refuse to sell data to massive corporations, who would pay multiples of millions of dollars/Ksh to have the data we hold, but we would choose instead to sell to this company, for the express purpose of having them send data to the police? I am curious to learn more about the logic here. Ebele Okobi | Public Policy Director, Africa m. +44 (0) 771 156 1315<tel:+44%20(0)%20771%20156%201315> 10 Brock Street | London<x-apple-data-detectors://0/1> | NW1 3FG ebeleokobi@fb.com<mailto:ebeleokobi@fb.com> [6F376569-CC77-422B-BAD3-794055B1E02B] On Oct 13, 2016, at 1:23 PM, Mwendwa Kivuva via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: Geofeedia, as it is alleged, was using publicly available user information to sell to law enforcement agents. We would certainly not know if Geofeedia had a commercial agreement with these social media platform to share data, including private data. We can only rely on the communiqué coming from the social media platforms. I would swallow my head if they incriminate themselves. But the kink of the matter is how privacy and data protection has become a big issue in our times. We the users have put ourselves in a position where we share so much online, without considering the consequences. Apart from privacy settings, and encryption, the social media platforms have no control on the PUBLIC data we post on their platforms. Even without Geofeedia, the security agents can still have bots, even human data entry operators scoring publicly accessible data from the forums. We are well advised. ______________________ Mwendwa Kivuva, Nairobi, Kenya twitter.com/lordmwesh<https://urldefense.proofpoint.com/v2/url?u=http-3A__twitter.com_lordmwesh&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=7TowURxKyYlD91VP4CRho2nRaK_Iv6bRadTe5YUZxHM&e=> On 13 October 2016 at 13:26, Harry Delano via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: Hey Ebele, That sounds like another "sneaky"‎ case of getting caught with hands in the cookie jar. How long did this go on before you could flag it up..? Did it have to await feedback from a third party for Fb to realize this, or are there internal controls and checks to monitor what each of the API's are feeding into or collecting from the huge amount of data available..? Some clarity would suffice.. Regards, Harry Sent from my BlackBerry 10 smartphone From: Ebele Okobi via kictanet Sent: Wednesday, October 12, 2016 20:57 To: Harry Delano Reply To: KICTAnet ICT Policy Discussions Cc: Ebele Okobi Subject: Re: [kictanet] Facebook, Twitter and Instagram Share Data with Location-based Social Media Surveillance Startup Yes-this is a mess, and this article isn't an accurate report. Basically-this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here http://readwrite.com/2013/09/19/api-defined/<https://urldefense.proofpoint.com/v2/url?u=http-3A__readwrite.com_2013_09_19_api-2Ddefined_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=8fUYx3yHaCiLuX7p14nQkTBHoQJhxgFV4dlm-vmEkbU&e=> for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously. Ebele Okobi | Public Policy Director, Africa m. +44 (0) 771 156 1315<tel:+44%20(0)%20771%20156%201315> 10 Brock Street | London | NW1 3FG ebeleokobi@fb.com<mailto:ebeleokobi@fb.com> [6F376569-CC77-422B-BAD3-794055B1E02B] On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts. More here: https://www.aclu.org/blog/free-future/facebook-instagram-and-twitter-provided-data-access-surveillance-product-marketed<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aclu.org_blog_free-2Dfuture_facebook-2Dinstagram-2Dand-2Dtwitter-2Dprovided-2Ddata-2Daccess-2Dsurveillance-2Dproduct-2Dmarketed&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=G0SoSpLD_f-qRWCjjSMY5s9GRO2y2wlRmg_ch_J_Tms&e=> -- Ahmed Maawy Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer swahilibox.co.ke<https://urldefense.proofpoint.com/v2/url?u=http-3A__swahilibox.co.ke&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=xgEGgQpfX4YAzWFb01qZ9xpVfsYmcj-Thzm7LwBnOdA&e=> globalshapers.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__globalshapers.org&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=AD4YSyg9ZAPmuqMQ2KT8U-TWAx0oZRabNuXs4OBBXvs&e=> www.okfn.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__okfn.org_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=0mJDrKTlVZmhtNIV_NCX7sDVspc8EvEbJ0yDBisHU8Y&e=> startupgrind.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__startupgrind.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=EBa6-yJCvfxdk_mFmI6H-ZXzXOb0rr17M0mEJpTofqs&e=> ajplus.net<https://urldefense.proofpoint.com/v2/url?u=http-3A__ajplus.net&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=YWO9IHDsdCDx7uytBzeJF-NTjZhVZjk-dOXuBLS9j6w&e=> www.everylayer.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.everylayer.com_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=lNcgAS0-227nMM6fqAu163-v-PyiO5D4CTywdQL_1P8&e=> _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_FmWozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e= Unsubscribe or change your options at https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e= The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://lists.kictanet.or.ke/mailman/listinfo/kictanet<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=OH3eL7xf983THUhJTkiK6sjz0oBQYSjlyBKUF2vPKJ8&e=> Unsubscribe or change your options at https://lists.kictanet.or.ke/mailman/options/kictanet/kivuva%40transworldafrica.com<https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_kivuva-2540transworldafrica.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=Cka5yksPmRydbHUQdO030gulfo9rjhNcSfnDNPTyRVA&e=> The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=OH3eL7xf983THUhJTkiK6sjz0oBQYSjlyBKUF2vPKJ8&e= Unsubscribe or change your options at https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=mqf7Qs62RwA5ECp0SG8_B1G7LykNnlkJwTr6gEHU4Jc&s=vUtvuv0QHLZTQzO-nT-PVuLTRb_H_AsZD3HzEc76oVw&e= The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

This is not a legal issue. It's against the rules of Facebook's developer agreement for someone to pose as a commercial developer and then sell information it gathered based upon APIs targeting publicly available information to police. None of this is illegal-it's just really creepy and against our terms. In answer to your last question, absolutely not. Ebele Okobi | Public Policy Director, Africa m. +44 (0) 771 156 1315<tel:+44%20(0)%20771%20156%201315> 10 Brock Street | London<x-apple-data-detectors://0/1> | NW1 3FG ebeleokobi@fb.com<mailto:ebeleokobi@fb.com> [6F376569-CC77-422B-BAD3-794055B1E02B] On Oct 14, 2016, at 3:16 PM, Ngigi Waithaka via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: Ebele, There is something about this that I am not understanding. If the APIs only allows a developer to access *publicly* available information that is in the FB Platform, why would it be illegal for law enforcement / intelligence to even access it? It can *only* be a problem if the API allows accessing *private *information from FB users. Which then brings us to an even *bigger problem*; is FB allowing developers to access our private information and messaging on FB for commercial purposes? Regards Sent from Nylas N1<https://urldefense.proofpoint.com/v2/url?u=https-3A__nylas.com_n1-3Fref-3Dn1&d=DQMGAA&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=ugY2LOWQPr3HVkgrJeaJsIdXO902T0vxQWS5mgsAFco&s=X_3RZcS17RcxE51g4k0hDYC6jHOANKOuvAWvYalu5ak&e=>, the extensible, open source mail client. On Oct 12 2016, at 8:58 pm, Ebele Okobi via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: Yes-this is a mess, and this article isn't an accurate report. Basically-this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here http://readwrite.com/2013/09/19/api-defined/<https://urldefense.proofpoint.com/v2/url?u=http-3A__readwrite.com_2013_09_19_api-2Ddefined_&d=DQMGAA&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=ugY2LOWQPr3HVkgrJeaJsIdXO902T0vxQWS5mgsAFco&s=Mudkp_42mpAW4RqNFznaslWco7xHQOGfnxmHTYDfgbA&e=> for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously. Ebele Okobi | Public Policy Director, Africa m. +44 (0) 771 156 1315<tel:+44%20(0)%20771%20156%201315> 10 Brock Street | London<x-apple-data-detectors://0/1> | NW1 3FG ebeleokobi@fb.com<mailto:ebeleokobi@fb.com> [6F376569-CC77-422B-BAD3-794055B1E02B] On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet <kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke>> wrote: The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts. More here: https://www.aclu.org/blog/free-future/facebook-instagram-and-twitter-provided-data-access-surveillance-product-marketed<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aclu.org_blog_free-2Dfuture_facebook-2Dinstagram-2Dand-2Dtwitter-2Dprovided-2Ddata-2Daccess-2Dsurveillance-2Dproduct-2Dmarketed&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=G0SoSpLD_f-qRWCjjSMY5s9GRO2y2wlRmg_ch_J_Tms&e=> -- Ahmed Maawy Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer swahilibox.co.ke<https://urldefense.proofpoint.com/v2/url?u=http-3A__swahilibox.co.ke&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=xgEGgQpfX4YAzWFb01qZ9xpVfsYmcj-Thzm7LwBnOdA&e=> globalshapers.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__globalshapers.org&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=AD4YSyg9ZAPmuqMQ2KT8U-TWAx0oZRabNuXs4OBBXvs&e=> www.okfn.org<https://urldefense.proofpoint.com/v2/url?u=http-3A__okfn.org_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=0mJDrKTlVZmhtNIV_NCX7sDVspc8EvEbJ0yDBisHU8Y&e=> startupgrind.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__startupgrind.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=EBa6-yJCvfxdk_mFmI6H-ZXzXOb0rr17M0mEJpTofqs&e=> ajplus.net<https://urldefense.proofpoint.com/v2/url?u=http-3A__ajplus.net&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=YWO9IHDsdCDx7uytBzeJF-NTjZhVZjk-dOXuBLS9j6w&e=> www.everylayer.com<https://urldefense.proofpoint.com/v2/url?u=http-3A__www.everylayer.com_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=lNcgAS0-227nMM6fqAu163-v-PyiO5D4CTywdQL_1P8&e=> _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_FmWozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e= Unsubscribe or change your options at https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e= The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications. _______________________________________________ kictanet mailing list kictanet@lists.kictanet.or.ke<mailto:kictanet@lists.kictanet.or.ke> https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=ugY2LOWQPr3HVkgrJeaJsIdXO902T0vxQWS5mgsAFco&s=5KQ0kjo_b_zKYnrfDlbXMxNWBMO4uHnw2HqVcuLCJ8E&e= Unsubscribe or change your options at https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=ugY2LOWQPr3HVkgrJeaJsIdXO902T0vxQWS5mgsAFco&s=X_tF31OCt2QlFIrtrPehmR6XUsvLv9oYXdda5f5vllg&e= The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.

Yes-this is a mess, and this article isn't an accurate report. Basically-

Ebele, There is something about this that I am not understanding. If the APIs only allows a developer to access *publicly* available information that is in the FB Platform, why would it be illegal for law enforcement / intelligence to even access it? It can *only* be a problem if the API allows accessing *private *information from FB users. Which then brings us to an even *bigger problem*; is FB allowing developers to access our private information and messaging on FB for commercial purposes? Regards Sent from [Nylas N1](https://nylas.com/n1?ref=n1), the extensible, open source mail client. On Oct 12 2016, at 8:58 pm, Ebele Okobi via kictanet <kictanet@lists.kictanet.or.ke> wrote: this was a private company that set itself up as a developer-same as, say, Candy Crush makers or those quiz things about your friends on FB. As a developer, it got access to API (see here <http://readwrite.com/2013/09/19 /api-defined/> for definition) that allowed it to build programs into FB. This allowed it to write programs targeting publicly available information on FB platform. That means-no private chats, no private groups, no data that users haven't made publicly available. The point of APIs in this context is SUPPOSED to be so advertisers (from small business to nonprofits to Andela, etc.) can send ads to targeted users. This group completely violated our policies and used their API access to target publicly available info to send to police. FB has kicked them off our platform. As you can imagine, there are many conversations now about this. But key to know that FB did NOT and does not sell user data; that this was a completely unauthorized use of our developer platform, that we rectified this as soon as we were notified, that the access was not to user data, but essentially a program that allowed them to target public info on Facebook. It's still unacceptable, and something we are taking extremely seriously.

Ebele Okobi | Public Policy Director, Africa

m. [+44 (0) 771 156 1315](tel:+44%20\(0\)%20771%20156%201315)

[10 Brock Street | London](x-apple-data-detectors://0/1) | NW1 3FG

[ebeleokobi@fb.com](mailto:ebeleokobi@fb.com)


On Oct 12, 2016, at 5:43 PM, Ahmed Mohamed Maawy via kictanet <[kictanet@lists.kictanet.or.ke](mailto:kictanet@lists.kictanet.or.ke)> wrote:

...

_The ACLU of California has obtained records showing that Twitter, Facebook, and Instagram provided user data access to Geofeedia, a developer of a social media monitoring product that we have seen marketed to law enforcement as a tool to monitor activists and protesters. We are pleased that after we reported our findings to the companies, Instagram cut off Geofeedia’s access to public user posts, and Facebook has cut its access to a topic-based feed of public user posts._

...

...

More here: [ https://www.aclu.org/blog/free-future/facebook-instagram-and- twitter-provided-data-access-surveillance-product- marketed](https://urldefense.proofpoint.com/v2/url?u=https-3A__www.aclu .org_blog_free-2Dfuture_facebook-2Dinstagram-2Dand-2Dtwitter-2Dprovided- 2Ddata-2Daccess-2Dsurveillance-2Dproduct-2Dmarketed&d=DQMFaQ&c=5VD0RTtNlTh3ycd 41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2L CvR_0IBt5-yhOx6fQy7Ss&s=G0SoSpLD_f-qRWCjjSMY5s9GRO2y2wlRmg_ch_J_Tms&e=)

...

...

\--

...

...

**Ahmed Maawy** Executive Director - SwahiliBox / M-Power (CBO) Curator - Global Shapers Mombasa Hub Ambassador - Open Knowledge Director - Startup Grind Mombasa Software Developer - AJ+ / EveryLayer (KE) +254 714 960 627 Skype: ultimateprogramer

[swahilibox.co.ke](https://urldefense.proofpoint.com/v2/url?u=http-3A__swahili box.co.ke&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK 6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s =xgEGgQpfX4YAzWFb01qZ9xpVfsYmcj-Thzm7LwBnOdA&e=) [ globalshapers.org](https://urldefense.proofpoint.com/v2/url?u=http-3A__globa lshapers.org&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLV fmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s =AD4YSyg9ZAPmuqMQ2KT8U-TWAx0oZRabNuXs4OBBXvs&e=) [www.okfn.org](https://urldefense.proofpoint.com/v2/url?u=http-3A__okfn.org_&d =DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE &m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=0mJDrKTlVZmhtNIV_NCX7sDVspc8E vEbJ0yDBisHU8Y&e=) [startupgrind.com](https://urldefense.proofpoint.com/v2/url?u=http-3A__startup grind.com&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK 6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=EBa6 -yJCvfxdk_mFmI6H-ZXzXOb0rr17M0mEJpTofqs&e=) [ajplus.net](https://urldefense.proofpoint.com/v2/url?u=http-3A__ajplus.net&d= DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE& m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=YWO9IHDsdCDx7uytBzeJF- NTjZhVZjk-dOXuBLS9j6w&e=) [www.everylayer.com](https://urldefense.proofpoint.com/v2/url?u=http-3A__www.e verylayer.com_&d=DQMFaQ&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsG LVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=lNcgAS0-227nM M6fqAu163-v-PyiO5D4CTywdQL_1P8&e=)

...

_______________________________________________ kictanet mailing list [kictanet@lists.kictanet.or.ke](mailto:kictanet@lists.kictanet.or.ke) [https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or.ke_ma... lman_listinfo_kictanet&d=DQICAg&c=5VD0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3n b_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_Fm WozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqAYs&e=](https://urldefense.proofpoint.com/v 2/url?u=https-3A__lists.kictanet.or.ke_mailman_listinfo_kictanet&d=DQICAg&c=5V D0RTtNlTh3ycd41b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxD u4EVUb8ylng2LCvR_0IBt5-yhOx6fQy7Ss&s=tY_FmWozK9wITxf0Wi2mSTnAJ3IESBY7WT33HlgqA Ys&e=)

Unsubscribe or change your options at [ https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or .ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd4 1b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LC vR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e=](https:/ /urldefense.proofpoint.com/v2/url?u=https-3A__lists.kictanet.or .ke_mailman_options_kictanet_ebeleokobi-2540fb.com&d=DQICAg&c=5VD0RTtNlTh3ycd4 1b3MUw&r=ArvepG4_wcNu_X9xi3nb_Xa9WsGLVfmK6mwPdVONOTE&m=GhVvdCFxDu4EVUb8ylng2LC vR_0IBt5-yhOx6fQy7Ss&s=LAZLJsuQHbk66IPOo4JjXcmrto5E92ncpWcgmoqMezk&e=) The Kenya ICT Action Network (KICTANet) is a multi-stakeholder platform for people and institutions interested and involved in ICT policy and regulation. The network aims to act as a catalyst for reform in the ICT sector in support of the national aim of ICT enabled growth and development. KICTANetiquette : Adhere to the same standards of acceptable behaviors online that you follow in real life: respect people's times and bandwidth, share knowledge, don't flame or abuse or personalize, respect privacy, do not spam, do not market your wares or qualifications.