Hacker News Reader

There’s no allegation that they actually wanted it or attempted to extract tax data. They have it now, but it seems more like gross negligence rather than some nefarious plot.

View on HN

I feel that that would be a pretty disingenuous claim on their part. "Oh, no-one at Meta noticed that the payload also included 'what deductions that person was eligible for', or noticed and said 'eh, seems fine to me'?"

> no-one at Meta noticed that the payload also included 'what deductions that person was eligible for'

I wouldn't expect anyone at Meta to actually look at unencrypted user pixel payloads. Seems like an easy way to lose your job.

Think about how many requests pixels are sending to meta every day. Probably billions. I guarantee you nobody is looking at the arbitrary form data from millions of unique urls.

Reply on news.ycombinator.com