Facebook bypassed Google Contacts API restrictions
A few days ago, Google made changes to the Terms of Service of the Google Contacts APIs, so now everyone who uses them is obliged to guarantee reciprocity. It was a lunge in the direction of Facebook, to get them to open a social graph and punish for the protectionism in the field of user data. Did not work. Here’s how Facebook today changed the search form for Gmail contacts.
The new form does not use the Google Contacts API, and the user manually exports the contacts to his disk (Download Your Contacts button), and then uploads the resulting file to the Facebook server. Simply put, Facebook programmers showed Google the middle finger.
Google can easily cover this shop. It is enough to put a CSRF stub in order to prohibit deep direct links and query execution from other sites. However, this may interfere with the transmission of CSV files by various other services (maybe importing contacts from Outlook or something else).
')
However, Google will not give up without a fight, because the stakes in the game are too high. Facebook has taken very aggressive measures and will have to pay for it.
The new form does not use the Google Contacts API, and the user manually exports the contacts to his disk (Download Your Contacts button), and then uploads the resulting file to the Facebook server. Simply put, Facebook programmers showed Google the middle finger.
Google can easily cover this shop. It is enough to put a CSRF stub in order to prohibit deep direct links and query execution from other sites. However, this may interfere with the transmission of CSV files by various other services (maybe importing contacts from Outlook or something else).
')
However, Google will not give up without a fight, because the stakes in the game are too high. Facebook has taken very aggressive measures and will have to pay for it.
Source: https://habr.com/ru/post/107779/
All Articles