Facebook rescinded Harvard student's internship after he revealed privacy flaw, created Chrome extension to map people's locations when they used Messenger
Harvard student loses Facebook internship after pointing out privacy flaws — Three months ago, Harvard student Aran Khanna …
Context & Ripple Effects
In 2015, Harvard student Aran Khanna built a Chrome extension showing that [[a:none|Messenger]] shared users' precise locations with chat recipients; Facebook pulled his internship offer within days of the tool going public. At the time it read as an isolated HR decision over a student embarrassing the company.
Seen against what came later — Facebook suspending quiz-app firm CubeYou only after a CNBC inquiry, and its crackdown on NYU's Ad Observer browser extension — the Khanna episode looks like the first data point in a durable pattern: the company responding to outside parties who surface its data practices with retaliation rather than remediation.
First-order effects
- Khanna loses the internship immediately, and Facebook gains a working demonstration that its own Messenger product was leaking location data — a flaw its own engineers had not surfaced publicly.
Second-order effects
- The episode establishes the playbook visible in the later CubeYou suspension and the NYU Ad Observer crackdown: researchers and academics who expose platform data practices can expect access revocation or punishment, which deters exactly the independent auditing Facebook otherwise lacks.
Third-order effects
- If the pattern holds, platform data practices get scrutinized mainly by journalists and regulators rather than cooperative academics, pushing oversight from voluntary disclosure toward mandated transparency.
The trend: Major platforms increasingly treat independent researchers who expose their data practices as adversaries, converting public-interest auditing into adversarial investigation.