Skip to content
by
  • Products
  • Free Tools
  • Search
  • Free Sophos Home
XG Firewall
Next-Gen Firewall
Intercept X
Next-Gen Endpoint
  • Sophos Cloud Optix
  • Sophos Central
  • Sophos Mobile
  • Intercept X for Server
  • Secure Wi-Fi
  • Phish Threat
  • SafeGuard Encryption
  • Secure Email
  • SG UTM
  • Secure Web Gateway
For Home Users

Sophos Home protects every Mac and PC in your home

Learn More
Free Security Tools
Free Trials
Product Demos
Have you listened to our podcast? Listen now

Those Facebook videos you thought were deleted were not deleted

04 Apr 2018 5 Facebook, Privacy

Post navigation

Previous: Panera Bread customer records exposed via leaky database – dough!
Next: Grindr was sharing HIV status of users, but now it’s not
by Lisa Vaas

Hang onto your hats for this data-retention non-shocker: Facebook’s retained user data it shouldn’t have.

In this most recent case, the content in question is users’ supposedly deleted videos. Facebook’s blaming a bug for the fact that those videos hung around…

…which users found out when many of them downloaded their Facebook data archive (an advisable step to take on the road to nuking your account) in the wake of the Cambridge Analytica (CA) data-strophe.)

The ZIP file Facebook pulls together contains all the data it has on you: your status updates, your friend list, your messages, plus what New York Magazine’s Madison Malone Kircher last week reported to be “every video you ever filmed on the platform – including videos you never published.”

Kircher and the many other Facebook users around the world who discovered the undead videos aren’t the only ones to have come across surprising things in their data archives.

Also last week, many were shocked to discover, when they peeked into their archives, that Facebook had been logging call and text data since they downloaded the Facebook app for Android.

(They shouldn’t have surprised, given that it was done with their permission. But it’s one thing to tick off “Yes do that” and quite another to suddenly come face to face with logs of your every call and your every text.)

Kircher said that last week that her sister Bailey downloaded her archive. Bailey found what you’d expect: contact lists, relationship statuses. What she didn’t expect: multiple videos of herself, playing a scale on her wooden flute, taken as she tried to get a good version to post on a friend’s page.

She filmed quite a few videos, apparently. Here’s one clip New York Magazine posted to YouTube. In it, Bailey, perhaps exaggerating but most definitely exasperated as she sighed and reached for the stop recording button, said it was “Take 13.”

It wasn’t just Bailey: Kircher found clips that looked like they’d never been posted but which Facebook saved anyway. She says the difference is obvious, given the lack of comments on draft videos.

One of her co-workers found over 100 videos in her archive, only a third of which she says she ever publicly posted. Others? They include videos “of me just checking my teeth,” said Kircher’s colleague, Brittany Stephanis. Bailey found videos that she had taken with Facebook’s desktop camera, of musical rehearsals and cheerleading, which she reviewed and then, as far as she knew, erased.

OTHERS STOP AT NOTIFICATION. WE TAKE ACTION
Get 24/7 managed threat hunting, detection, and response delivered by Sophos experts
Learn more

Facebook looked into the issue following NY Mag’s report. On Monday, the publication printed a follow-up with a statement from Facebook saying that it eventually found a bug that kept the draft videos from being deleted. It’s in the process of deleting them now:

We investigated a report that some people were seeing their old draft videos when they accessed their information from our Download Your Information tool. We discovered a bug that prevented draft videos from being deleted. We are deleting them and apologize for the inconvenience. We appreciate New York Magazine for bringing the issue to our attention.

Wait. Is Facebook really deleting the videos this time around, or is it “deleting” the videos, only to have them rise from the grave somewhere down the line?

Kircher asked. She was still waiting for a reply as of Monday:

[NY Mag] has asked Facebook if there is any way for users to confirm that the platform has actually deleted their old videos and will update this post if we hear back.

According to the Daily Dot, Facebook swears that none of the videos were ever shared with the public. OK. But were the videos used for other purposes? Say, targeted advertising or other marketing?

“It’s still unclear,” the Daily Dot reports.

What’s not unclear: how to download your own Facebook data archive to search for whatever surprises might lie within… and to then delete your account if the spirit moves you. Here’s how!


  • Follow @NakedSecurity on Twitter for the latest computer security news.

  • Follow @NakedSecurity on Instagram for exclusive pics, gifs, vids and LOLs!

Free tools

Sophos Firewall Home Edition

Boost your home network security.

Sophos Scan & Clean

Free second-opinion scanner for PCs.

Sophos Cloud Optix

Monitor 25 cloud assets for free.

Post navigation

Previous: Panera Bread customer records exposed via leaky database – dough!
Next: Grindr was sharing HIV status of users, but now it’s not

5 comments on “Those Facebook videos you thought were deleted were not deleted”

  1. Mahhn says:
    April 4, 2018 at 2:07 pm

    Time for a new Facbook type company that does not give up any PII, lets people earn revenue from content, has a rating and category system that works for both the posters and audience.
    Myspace and Facebook were good starts, but haven’t matured well. Looking forward to the BBD.

    Reply
    • Tracy says:
      April 4, 2018 at 8:56 pm

      Forgive me for seeming to step on your dream of an honest Facebook type company Mahhn but in truth it will never happen in the real world. To survive Facebook had to make money somehow. Ad revenue was not enough and when Facebook entered the Stock Market the pressure to make Facebook more profitable and please the Stock Holders caused the company to consider their options to put it nicely. Money is what this hold sad affair is about. I can see many positive uses for social media but when money is involved, you will find that it takes precedence over anything else. Again, forgive me for being so blunt. 🙂

      Reply
      • Mahhn says:
        April 5, 2018 at 2:02 pm

        Tracy you are correct that there needs to be money to support such a company. However there are alternatives to selling people’s pie out from under them. It likely would be, but nothing says it has to be, publicly traded or make millions in revenue. It can be similar to a nonprofit, it could be private. The company can charge a small monthly fee for advanced services similar to Netflix and other electronic businesses. It can have a local market like craigslist, but charge 1% for transactions. Not all companies have to make people into billionaires. But there certainly will be more and newer social media platforms emerging. Hopefully they will learn from the mistakes made before them and not repeat them.

        Reply
        • Tracy says:
          April 5, 2018 at 10:50 pm

          I respect your hopes and views Mahhn. I don’t mean to imply it is not possible but I’m an old business man and cynic and I have had a view of both sides of that argument. When a business becomes big enough it becomes hard to sustain it without following the money. I agree that these companies should make better choices but the fight for the money tends to put blinders on them. I stayed a small business because I didn’t want to lose control of it. I was fortunate enough to remember that my customer’s trust in me was what made my business successful. 🙂

          Reply
  2. s31064 says:
    April 4, 2018 at 4:04 pm

    The whole point of what Facebook has become is beyond me, as is Twitter. I really don’t care what you had for breakfast or what your cat looks like when she’s playing with her tail. And yes, I do have both a Facebook and a Twitter account. I got the Twitter account because I needed it for something once, I don’t even remember what it was, and I got the Facebook account to try to track down a friend that borrowed something years ago and I lost their contact info. In the five or six months I’ve had it, I’ve logged in maybe three times. (When I “friended” my daughter, her first response was “Did hell freeze over?”, and then she called me to make sure it was really me.) People turn their entire lives over to the world with these “services”.

    Several years ago, I read about a cop that was scanning teens’ Facebook accounts on his own time, (sometimes he had to friend them), and then show up at their door with a dossier he compiled from their shared photos, posts, etc. to warn them and their parents about what they were opening themselves up to. He claimed photos were the most informative, pictures of school uniforms, sports uniforms with the team, number and sometimes name, cars with license plates showing, etc.

    Maybe I’m just old fashioned, but I just don’t need social media to validate my own existence.

    Reply

Leave a Reply to s31064 Cancel reply

Recommended reads

Jun23
by Paul Ducklin
2

S3 Ep88: Phone scammers, hacking bust, and data breach fines [Podcast + Transcript]

Jul27
by Paul Ducklin
0

Mild monthly security update from Firefox – but update anyway

May25
by Paul Ducklin
4

Poisoned Python and PHP packages purloin passwords for AWS access

  • About Naked Security
  • About Sophos
  • Send us a tip
  • Cookies
  • Privacy
  • Legal
  • Intercept X
  • Intercept X for Server
  • Intercept X for Mobile
  • XG Firewall
  • Sophos Email
  • Sophos Wireless
  • Managed Threat Response
  • Cloud Optix
  • Phish Threat
© 1997 - 2022 Sophos Ltd. All rights reserved. Powered by WordPress VIP