Facebook halts Oculus Quest sales in Germany amid privacy concerns
arstechnica.com
arstechnica.com
Facebook said all oculus devices would need a facebook account. I know this statement is overly broad and not (exactly) true but this is the nightmare scenario oculus users are dreading.
Facebook said there were caveats and exceptions. For example, if you bought it before date x then you don't need to create a facebook account, etc... The german privacy commission isn't convinced facebook would/could separate the purely oculus created facebook accounts from their normal accounts.
Now it becomes a coupling issue. Apparently it's illegal in Germany and I know this is illegal in Belgium. And if I took a guess it would be illegal in most countries in the EU.
I'm not sure it applies to Switzerland. GDPR at least doesn't seem to apply to Swiss companies catering to Swiss residents [1], so I'm not sure it would apply to Facebook/Oculus here. Also, if we're going for completeness EU/EEA is included as far as I know, not just EU.
[1] https://www.pwc.ch/en/insights/tax/gdpr-swiss-based-companie...
As a result, any given EU regulation, especially of the economy, is more likely than not to also apply to Switzerland.
So well it's a bit strange.
Through GDPR applies to any company selling to the EU, the fact that you can easily travel to Switzerland to buy a product due to more or less open borders and import it to the EU can matter in some cases. So to be "safe" I wouldn't be surprised if they would need to put geo-fencing in to be on the safe site.
Due to Facebook repeatedly intentionally breaching or trying to undermine EU (and member states) laws and regulations (because the penalties are lower then their profit) there isn't really much (any?) good-will left with the local and EU law keepers (except in Ireland, because money) .
So there is a good chance law keepers won't give FB any flex when FB is trying to sell a physical product, a think for which there are much more regulations then for FB itself (like health&safety, proper advertisement etc.). For example they will very likely need to put a clear readable "requires internet","requires a FB account" to be used note on their boxes (and internet sale descriptions). Because a large degree of the usability is restricted without a FB account. Which is something I believe FB doesn't like at all ;=)
The UK passed (implemented?) GDPR as a law while it was in the EU, and will retain that law after it leaves the EU. However, its interpretation of GDPR will be allowed to diverge. For one thing, the court case "Schrems II" is from an EU case post-Brexit, so it is not binding on the UK's interpretation of GDPR. This is going to be a pain point for the UK as it attempts to maintain data flows with the EU.
I overstated and got confused about Switzerland's relationship to GDPR. I for some reason thought they signed a treaty with the EU had materially similar terms as GDPR. It seems what's actually in effect is an Adequacy Decision, where the EU recognizes Switzerland's data protection laws as being "good enough" that all data transfers to Switzerland don't need extra protections.
Part of my confusion is that Switzerland also recognizes the US Privacy Shield framework, along with the EU and UK. So there's EU-Privacy Shield (dead), UK-Privacy Shield, Swiss-Privacy Shield, EU-GDPR, and UK-GDPR. I had thought there was also Swiss-GDPR, but there is not.
It's also not the first time that Facebook told (legally binding) the monopoly one thing and then did another thing being like "Uh we give a shit about German and Eu law the penalties are to small".
Then there is GDPR.
So I wouldn't be surprised if it's partially because they have problems with putting up a "user contract" which isn't blown up directly into their face. Which allows them to (try to) wriggle out of constraints.
Honestly while some EU countries still back FB (because profit) in many countries FB has lost all/most patience and goodwill from the law keepers.
Also fun side note as far as I know FB also promised the founder of Oculus that they would not do exactly that (require a FB account for social features). Sure it's not legally binding but just another of a very large pill of anecdotes about how FB can not be trusted at all and given Marks role in it you can pretty much extend that to him to, which IMHO isn't surprising if you look into the (early) history of FB...
EDIT: Formulation/Spelling.
They let you use the device, but you cannot accept friend invites, even from other people "grandfathered" in
A little frustrating to say the least.
Personally I (unfortunately) do use WhatsApp while avoiding all other Facebook products. At least WhatsApp doesn't try to manipulate you and has some form of e2e encryption.
I recently deleted my IG (February) due to censorship issues, but still have a WhatsApp account on a burner device for talking to the few people I haven’t been able to get to switch to Signal.
It isn't the username and password which is the objectionable thing about Facebook.
I also know someone who wanted to change their last name (their current one is already fake) and the system didn't let them without sending an ID.
[0] https://www.facebook.com/help/community/question/?id=1016165...
It was probably two months before my account was flagged for "suspicious activity" and asked that I submit a photo of a government-issued ID, which I never obliged.
However, now the create a new account page says there’s an existing disabled account with this email address, but the account support portal says one doesn’t exist! Top notch engineering. Luckily I have my IG account for Messenger login, but I can’t use it for desktop sign-on’s which is pretty dumb.
We made a Facebook account for Marcelo a few years back as a joke. One day a couple years in, we could no longer log into his account without proving his identity. We probably tripped some internal flags because it was being logged into by several IPs that also had their own Facebook accounts is my guess, that or someone not in on the joke reported Marcelo. Either way, Marcelo can't use Facebook anymore... A small inconvenience in our case, but this is definitely something that can and does happen to fake accounts.
Annoyingly, someone/somebot made a full mirror of my Facebook account one day and sent me a friend request as well as several of my friends and family. I reported it and eventually got back a response that the account was not in violation of any rules. That was years ago and I had forgotten about it until just now. Just checked today and it seems it's actually gone, but it was very creepy at the time.
If you really want to use a throwaway account and have a chance to escape their surveillance engine, use it on a separate machine, VPN'd to a separate network (where none of your real traffic ends up) and do not do anything on that machine that can be correlated to your real activity (no playing with friends for example).
Currently there is no reason to believe that Facebook should be trusted for anything (based on their past actions) or that the current regulatory environment (both US and EU) is effective at discouraging and punishing violations.
Wasn't this part of the settlement with the FTC for about 5 billion dollars? I'll agree with you it evidently is not enough to really deter Facebook but I wouldn'T call it nothing, that was one of the largest fines ever handed out.
Same in Europe, Google has taken significant fines. Those companies are not untouchable any more. And yeah I don't trust facebook that much either but I don't think they'll blatantly ignore the law intentionally.
Also don't forget that there is quite a social factor to VR and they are pretty much going in the "single player only usage without FB account direction".
I was going to get a Quest for Star Wars Squadrons until this came out. I don't care how much more the Vive is or how many features it's behind. Not worth reactivating FB for it.
They legally require you to give them honest/correct personal information.
Practically maybe.
But there is all the pairing with phone etc. requirement.
There are also all the information they likely will collect about usage patters, interactions and your PC. So if you don't also use a isolated throwaway PC/console account and don't use social features you can be sure they will be able to somewhat link your information anyway.
It not just about forcing increased FB marked share.
It's also about an additional source of information they can link and combine.
(Due to GDPR they are quite restrict about what data Oculus can share with the rest of FB.)
The whole reason the Oculus Quest is so popular is because it is a standalone device.
My brother got one and loved it, he raved about how fun VR was. I had considered it for a while, but I wasn't ready to commit $1000-$2000 for a capable gaming rig + however much the VR headset was going to cost just to try it out.
Oculus Quest was the perfect way to try out VR for me, a couple hundred dollars for a pretty good VR headset. No need to have sensors on polls or anything. Super lightweight way to dip a toe into VR and see if the medium was a compelling experience for me.
I remember researching if I had to login with facebook and found that you could just make an Oculus account with an email address. Got it, enjoyed it, still enjoy it.
The decision to couple the Oculus Quest and your facebook account puts a seriously sour taste in my mouth though. I think that when that deadline comes up, I'll probably just sell it and buy something that doesn't have that requirement, it will likely be time for an upgrade anyways.
The Index is more than double the cost for something that requires spending more money for a computer to run the whole setup.
...not that that's for nothing, the results are better than any of Oculus' products graphically. But it's a different product.
Tracking-wise, there isn't a lot of difference. Certainly not enough to warrant giving all your data to Facebook.
The Quest stands out because the tracking is as accurate and consistent as on desktop class VR headsets. The software and user experience is a clear notch above any other standalone headset.
[0] https://www.scribd.com/document/399594551/2015-06-22-MARK-S-...
I think it might already be too late in terms of dominating.
Edit: Upon further research, these are business/enterprise only, so they are not competitors to the Quest which is consumer first.
On Reddit, there has been some coverage of those headsets in the past, eg [4], [5] and [6], but it's easy to miss. I still find headset analysis from VR YouTuber the best.
Also not all tracking is equivalent. Some headsets released by companies are truly atrocious.
[1] https://www.youtube.com/c/ThrillSeekerVR/videos
[2] https://www.youtube.com/c/Tyrielwood/videos
[3] https://www.youtube.com/c/mixedrealityTV/videos
[4] https://www.youtube.com/c/VirtualRealityOasis/videos
[4] https://www.reddit.com/r/Vive/comments/7cs6jc/htc_vive_focus...
[5] https://www.reddit.com/r/oculus/comments/ektig3/first_new_vr...
[6] https://www.reddit.com/r/virtualreality/comments/hjymnn/pico...
On the other hand, I have had some headsets that were "truly atrocious". The Meta 2 was one. Never before or since have I had an AR headset give me simsickness. The PiMax 5K, with its nasty distortion at any view angle beyond the ~100° average of every other headset and its sole raison d'être, plus red image static, plus janky sidecar driver program. The Pico Neo 1, where the facial interface cut painfully into the bridge of my nose (I have it on good authority that the 2 corrects this issue for Western markets).
I was super disappointed when Google canned Daydream. I thought the Lenovo Mirage Solo was way ahead of the market.
The Vive Focus's controllers are a little flaky, but not unusable.
The original HoloLens was way too heavy, way to narrow of FoV, way underpowered, but hand tracking and built-in voice recognition, and MR desktop metaphor was quite something. I have yet to get hands on the 2, so I'm eager to get one. There's a quality of life experience with the software and the development lifecycle that is really, really missing from every other platform.
My point is that we should legitimately ignore the terrible headsets, but try to be a little more forgiving of the flaws of other the "not best-of-the-best" headsets. We absolutely need market competition in headsets. We must not allow Facebook to dominate VR. That is their end-goal, after all, and it would certainly be to the detriment of us all.
In general though, I agree. There needs to be more 6-dof standalone headsets. I'd love to have a standalone WindowsMR headset. Something like HoloLens with lenses and OLED displays instead of the waveguides.
The Quest is pretty good, but it's not all that great to think that Facebook is an unbeatable juggernaut. Hell, all of the standalones (3-dof or 6) are still only running the Snapdragon 835 Mobile (not much more than clones of Qualcomm's first VR headset reference design), where the 855 and 865 have tracking on-chip. The 835 is not actually all that great for VR (it's what's running in my now-ancient Pixel 2), it's just the only SoC that hardware vendors have put the effort into. Hell, Qualcomm has two SoCs specifically for XR that nobody is using.
EDIT: correction, the HoloLens 2 is running on the 850 Compute Platform, which is mostly the same as the 845 mobile.
On a serious note, I see an opening for a new social network.
On certain pertinent internet forums you will find threads regularly where people are connecting with other's made-up accounts.
They're pretty much indistinguishable from real accounts, so unless Facebook starts implementing an ID requirement for all accounts, they'll never be able to stop this.
And even then determined people could be sending in fake IDs.
My recommendation for creating a fake account is, once you have seeded it with a few friends, just add most people facebook recommends you. Plenty of real people (the 900 friends facebook addicts) do this as well.
Walmart and Target also might have "leaked" and confirmed the price of the new base 64GB version to be only $299 which makes things interesting.
And they haven't really only stopped "selling" them in Germany. They are out of stock almost everywhere, Walmart, B&H, abt and more.
Renders of the new "Quest" were also leaked by a twitter account with a great track record when it comes to leaks, the user h0x0d who's account has been closed by twitter :-)
I had almost given up ever using FB last year, perhaps logged in briefly once a month.
The pan I bought an Oculus Quest (best toy ever!) and I started uploading videos to FB so I could watch them on my Quest, started buying Quest VR experiences, etc.
After the purchase, I am logging into FB once a week.
I think it's not wrong to be pre-emptively wary of that (and prepare arguments for it), considering the way F.U.D. about "cookie banners" [1] got many people worked up against a supposedly useless and clueless law that (again, supposedly) "forces" sites to show such banners -- because their desire to track, which is the first link in this causal chain, is being ignored or assumed as given and benign.
[1] banners sites put up because they would prefer to track everyone on the first visit, rather than having an opt-in link somewhere in the footer for example.
As it turns out (or, more accurately: as people with a clue foretold from the beginning), this overestimated the willing ness of car executives to prioritise shareholder value at the expense of all else, the car industry's lobbying power, and Merkel's power in the EU.
Here, I'd similarly predict that Facebook is going to end up with most of the blame. People aren't entirely clueless, GDPR has quite a bit of support, and Facebook is only slightly above soggy bread in popularity.
But, in any case, a few thousand gamers, many of them under 18, in one country, wouldn't be able to get a law change. The EU also doesn't usually make small adjustments by passing new legislation as many other parliaments do. Instead, they do one huge thing like GDPR every decade or so (per sector).
I wish this concept went further, too. Hardware products like this should have to demonstrate a good reason to eschew a no-login option.