top | item 1941374

Facebook Doesn't Own My Friends: Chrome extension exports Facebook contacts

138 points| tobtoh | 15 years ago |code.google.com | reply

66 comments

order
[+] kdeldycke|15 years ago|reply
Looks like the project was just deleted from Google Code. I always get a "403 Forbidden" page each time I try to access the project page.

Fortunately, the binary extension is still downloadable at this URL: fb-exporter.googlecode.com/files/fb-exporter.crx

[+] kdeldycke|15 years ago|reply
Source code has a better value than the binary: I'm sure Facebook will deploy some counter-measures pretty soon, making the binary unusable.

Nobody's got the source code ? I tried to checked it out but I get 403's again...

[+] gst|15 years ago|reply
I just wanted to post exactly the same. I also get a "forbidden" error here.
[+] diogomonica|15 years ago|reply
Not even the binary extension is available anymore. 403!
[+] w1ntermute|15 years ago|reply
I would highly recommend against using this tool, as it is against Facebook's Terms of Service. Robert Scoble was kicked off Facebook in January 2008 for pulling a stunt exactly like this (http://scobleizer.com/2008/01/03/ive-been-kicked-off-of-face...). While his fame and contacts allowed him to get his account reinstated in short order, many of us might not be so fortunate.
[+] A1kmm|15 years ago|reply
I guess the key would be to ensure it is sufficiently slow to avoid triggering the anti-bot mechanism.

Browsing the code I found this: http://code.google.com/p/fb-exporter/source/browse/trunk/fb-... ... idx * 11000 + Math.random() * 1000

So in other words, it downloads the ith friend at time 11*i +/- 1s; an average of one download every 11.5s might just be sufficiently slow to avoid getting banned from Facebook. Obviously, Facebook could look for patterns in their logs that look like the tool (too high a ratio of friend data downloads to other pages, for example, or an unnaturally high goodness of fit to 11s plus uniform variation), but it would probably be quite expensive for them to make such searches too complex, and if an arms race between the autoblockers and the downloaders ensued, the downloaders would have the upper hand because Facebook has the disadvantages of needing to avoid false positives and to deal with the large amount of data they would need to process to do any complex statistical analysis across all access requests.

A few sources cite the median number of Facebook friends at 150 - so even at the relatively slow rate of one friend data download a minute (perhaps with some intervening decoy requests), half of all Facebook users could download all friend data in 2.5 hours. A non-bot user could easily hit Facebook at that rate, and Facebook would get very bad PR if they started banning a significant proportion of their user base due to false positives.

[+] raganwald|15 years ago|reply
I would highly recommend against using this tool, as it is against Facebook's Terms of Service

I would phrase the facts a little differently. I would say that if you use this tool, FB may choose to discontinue your service, while not making a personal recommendation either way.

Quite honestly, if FB chooses to "kick me off" for taking action to reduce my dependency on their service... No great loss. My business will not fail. My kids will still love me in the morning. And my friends will email me as they always have.

Ultimately, I view the threat of kicking me off FB as roughly equivalent to a cable company telling me that if I don't take a particular bundle of services, they won't do business with me any more. Well, ok, you win, let's not do business any more.

[+] joe_the_user|15 years ago|reply
Well,

I'd be curious what would happen if thousand of people used the tool rather a lone researcher.

As we saw with Facebook's censorship and uncensorship of lamebook.com, their "terms" seem to be essentially "we'll do what we can get away with and back-off if enough people push back".

[+] wladimir|15 years ago|reply
Well, if you intend to leave facebook anyway and want a dump of your frendlist to invite them to some other, more open social networking system, it doesn't matter that you get banned does it?
[+] vibragiel|15 years ago|reply
I just exported all of my contacts from Facebook. I'll let you know if it has any ill effects.

As a downside, if it finds a duplicate when exporting to Gmail, it refuses to export the contact instead of merging the information.

[+] davidmat|15 years ago|reply
Or... you can just link up facebook with your old Yahoo mail address.(the one from the 90s you still keep around and check every 6 months or so ;)

This lets you import your facebook contacts in your yahoo address book, so you can export them as csv later.

[+] kacy|15 years ago|reply
^^ What he said. I did this, and it exported my 800+ contacts in less than a minute. Then I imported them to Address Book for Mac and used AddressBookSync (http://danauclair.com/addressbooksync/) to grab the facebook profile pictures and add them to each contact.
[+] blhack|15 years ago|reply
edit: I mis-spoke. You'd need to request the email address from each user individually. Okay, I admit, that is kindof sucky. That said, I completely understand this move. My guess is that this is to prevent "farmville" from dumping a list of all of my friends' emails, and then spamming them.

Isn't this all available via the Open Graph API?

(http://developers.facebook.com/docs/guides/web#personalizati...)

Edit: Yes, it absolutely is:

http://developers.facebook.com/docs/api

About halfway down the page, click the link after the word "friends" for a JSON of your friends and their UIDs. Fetch this and iterate through the IDS for basic info.

Fetch this url: https://graph.facebook.com/$facebook_uid

here is my info: https://graph.facebook.com/ryanseamus

[+] natrius|15 years ago|reply
Email addresses aren't in there. When I look at my own info, I see a @proxymail.facebook.com email address, which is presumably what an app would use to email me. It's not what you'd want for exporting contact info.
[+] mattsidesinger|15 years ago|reply
I thought you could export all of your Facebook friends email addresses using Yahoo Mail or Hotmail I opened a new Yahoo Mail account last week and did this...did they remove it? I thought that there was a big uproar because Gmail users were not able to do this so Google blocked Facebook from exporting Gmail contacts.

Regardless, this sounds like a great extension and you should not have to open a mail account with Yahoo or MS to export your friends. This is an excellent idea!

[+] joe_the_user|15 years ago|reply
Yes but that's only because Yahoo and MS have a deal with Facebook and you don't know how long it will last.

Facebook was explicit in their reply to Google that they feel they can block people exporting their friend's emails. Friend emails are exported by the "export tool" - in fact, you get but a list of names from that.

I would be very interested in looking at the code and noting people's experience with this. One writer was kicked off Facebook for exporting his address two years ago.

[+] maggie|15 years ago|reply
Yup, you can do that!

I had a friend create a pipe where he synced his fB to Yahoo, and then Yahoo to Gmail to put his contacts in Gmail... I was contemplating writing a Firefox (or Chrome) extension where you input your Yahoo / Google / Facebook account info. and the extension goes off and does the piping for you. But! this looks awesome, need to go test (by reactivating my fB account...)

[+] wibblenut|15 years ago|reply
I'm trying to get all of my friends to use .tel domains. That way they own their data and I can discover all of their URIs dynamically (through DNS) from various apps. It doubles up as a web based "business card", which makes it a slightly easier sell.
[+] mjs|15 years ago|reply
How does the privacy features (i.e. restricting access to certain information to certain people) work if the information is embedded in DNS? (Also, how can you use "dig" or similar to extract the information from a *.tel address? Everything I try seems to return the same sort of information I'd get from any other domain.)
[+] JeremyBanks|15 years ago|reply
Why .tel, rather than a more common TLD?
[+] stoney|15 years ago|reply
This looks very handy - hadn't heard of it before. Apparently it can also be used as an OpenID.

Do you know of a list of services that actually make use of these domains?

[+] siculars|15 years ago|reply
This just seems ripe for dns injection tomfoolery.
[+] asmosoinio|15 years ago|reply
I wanted to test this, but never found a way to activate it... How do you activate this?

There is no "how to" text on the project page either (or I didn't find it).

[+] keryor|15 years ago|reply
There should be a red link in the top right corner of your facebook page that says "Export friends!" (right to the left of the "Home" link).

Once you click that, just follow the accompanying instructions and it should work - although be warned it takes a long time, especially if you're doing it for a lot of "Friends".

[+] quadhome|15 years ago|reply
I felt the same way about my Facebook messages. Before they released the archive tool, I wrote this:

http://fb.quadhome.com/

I wonder if, since the Chrome extension is Javascript, it could be injected into a bookmarklet and made to run on anyone's browser...

[+] nikcub|15 years ago|reply
somebody needs to get the facebook mobile apps and reverse engineer them to figure out how their own apps are able to extract all friend contact info (email, phone #s)

mimicking an official client would be a lot better than this extension which relies on facebook leech detection not noticing the requests and banning you

[+] joe_the_user|15 years ago|reply
Finding the official mobile seems like a moving target as Facebook's API is constantly changing.

This is latest QT thing I can find:

http://gitorious.org/qfacebook (supersedes Google's port of an iphone library).

But access might depend more on permissions than the library. Information on this would be GOOD to have.

[+] cvander|15 years ago|reply
Forbidden

Your client does not have permission to get URL /p/fb-exporter/ from this server.

[+] n-named|15 years ago|reply
Why does this need access to my browsing history? :(
[+] Groxx|15 years ago|reply
It's a bit of an alarmist, though accurate, alert: anything which has access to your tabs (ie, anything which can observe / inject into a page) also has access to your "history" as it can see what you're browsing. I'm sure other permissions also trip this, but "tabs" is one of the most common, and I ran across it recently too: http://code.google.com/chrome/extensions/tabs.html

edit: I'd assume "history" also trips the history alert: http://code.google.com/chrome/extensions/history.html

edit again: the extension has "tabs" permission only. Very little to worry about, unless you're paranoid about your browsing history.

[+] pbhjpbhj|15 years ago|reply
Can't you just use the downloader and download all your data?

Edit: go to https://register.facebook.com/editaccount.php and then click the "learn more" link, then download. I think they email you when the download is compiled.

[+] jamesaguilar|15 years ago|reply
Doesn't include email addresses, which is what this whole kerfluffle is about.
[+] cfinke|15 years ago|reply
I wrote a similar tool two years ago:

http://www.chrisfinke.com/2008/01/03/take-your-facebook-data...

If my experience is any indication, the author will be receiving a takedown notice shortly.

[+] A1kmm|15 years ago|reply
They don't, however, seem to mention their names anywhere. If Facebook knows the name of the author, they can threaten to ban them from Facebook if they don't take it down (about the only leverage they have to exploit).

However, to get a real name, they would need to get Google to reveal an IP address, and then the user's ISP to reveal account details - hardly a simple process.

Google isn't going to hand over the IP of the authors, so they would need to file a (probably baseless) lawsuit and try to subpoena the names - something Google is likely to fight since the software is in their interests too.

[+] mick_schroeder|15 years ago|reply
why not add the ability to get phone numbers too?
[+] bbk|15 years ago|reply
There was a article on this on techcrunch. [Techcrunch blocked at work. Cant post the link now].

tl;dr for the TC post:

1.Create a dummy yahoo email id.

2.Import friends from facebook.

3. Export contacts as csv.

4. Import in Gmail.

[+] daniel_iversen|15 years ago|reply
And how much do you want to bet that the developer og this plugin works for Google ;) .... let the mud slinging begin ;)
[+] castis|15 years ago|reply
Has this tool been taken down?