# Facebook Facebook is a social-networking platform and software company; it matters here through application identifiers and uncertain inherited component names. ## Historical and Technical Context This is best reconstructed as an **application-and-driver identity sheet**. A bundle identifier such as `com.facebook.Katana` names an app at the package level even when its visible title changes; `com.alfredapp.Alfred` similarly points to the macOS productivity launcher. The Atebits/Tweetie reference invokes the lineage of the Tweetie Twitter client, acquired by Twitter and transformed into an official client. [[Mac Catalyst|Mac Catalyst]] lets an iPad application be built for macOS from a shared UIKit codebase, making package ancestry and cross-platform identity especially salient. [S02] The QLogic lines descend below user applications into storage transport: Fibre Channel over Ethernet encapsulates Fibre Channel frames over Ethernet, while a storage miniport is a Windows kernel driver component. The page is therefore traversing from visible apps to **persistent identifiers and low-level storage interfaces**. ## Role in Scanned_20260730-1802 The primary identifying evidence appears on PDF page 3. A densely written lined page. Terms are arranged as a vertical inventory, with punctuation, commas, bundle-like identifiers, application names, and storage-driver phrases. There are no explanatory sentences. The handwriting grows more compressed toward the bottom, suggesting rapid copying from system metadata or a software inventory. Within that page, Facebook helps the notebook move from a visible name or artifact toward the underlying identity, protocol, ownership, or control structure. ## Notebook Evidence - `Scanned_20260730-1802.pdf`, PDF page 3: "com.facebook.archon" - `Scanned_20260730-1802.pdf`, PDF page 3: "Com.facebook.Katana" **Evidentiary status:** Visible evidence: package-like strings and driver names. Verified fact: Mac Catalyst ports iPad apps to macOS. Strong inference: the author was reading an application inventory, installation manifest, crash report, or forensic extraction rather than assembling a casual software wish list. The canonical name **Facebook** is normalized outside the quotations. The quoted lines preserve the completed reconstruction's spelling, capitalization, and uncertainty markers. ## Relationships On PDF page 3, Facebook appears in the same evidentiary cluster as [[Mac Catalyst|Mac Catalyst]], [[Atebits|Atebits]], [[Tweetie|Tweetie]], [[Bundle Identifier|Bundle Identifier]], [[WhatsApp|WhatsApp]], [[Alfred|Alfred]], [[QLogic|QLogic]], [[Fibre Channel over Ethernet|Fibre Channel over Ethernet]], [[Fibre Channel|Fibre Channel]]. These links record page-level proximity and the reconstruction's systems map; they do not by themselves prove corporate ownership or a direct technical dependency. ## Cross-Notebook Significance The same analytic move recurs on pages 4 and 6, where user-facing Apple cloud concepts are reduced to Core Data entity names, and on page 26, where an AirPort Utility constant and BlueZ object path become evidence-bearing identifiers. ## Scanned_20260730-1706 Overlay **Source overlay:** [[Scanned_20260730-1706|Scanned_20260730-1706]] (specific PDF page references follow). `Scanned_20260730-1706.pdf`, PDF page 32 records a Facebook password-reset event as part of an account/device chronology. This differs from `Scanned_20260730-1802.pdf`, page 3, where Facebook appears through bundle identifiers and application identity. Together they show two persistent identifiers around the same platform: package identity on the device and recovery identity at the account boundary. ## Missed Signals and Open Leads Confirm `com.wiheads.paste`, `desktop.WhatsApp`, `com.facebook.archon`, and `bdb.static` against the originating machine image or log. Determine whether “Tweetie2” was observed as a Catalyst bundle, a legacy preference domain, or an inherited component identifier. ## Sources - [[Scanned_20260730-1802|Scanned_20260730-1802]], especially PDF page 3. - `Scanned_20260730-1802.pdf`, cited as a plain archival filename; the PDF is not stored in `wiki-notes`. - **[S02]** Apple Developer, “Mac Catalyst”. https://developer.apple.com/documentation/uikit/mac-catalyst ## Scanned_20260730-1719 overlay **Source evidence:** [[Scanned_20260730-1719#PDF page 13 — Lost-access inventory|page 13]]. [[Mint Mobile|Mint Mobile]], [[MagicJack|MagicJack]], [[Google Fi|Google Fi]], [[Twitter|Twitter]], [[Pinterest|Pinterest]], [[Mailchimp|Mailchimp]], [[Buffer|Buffer]], [[GitHub|GitHub]], [[Facebook|Facebook]], and [[Catima|Catima]] span telephony, identity, publishing, code hosting, social media, and digital-card storage. **Relationship overlay:** [[Buffer|Buffer]] · [[Catima|Catima]] · [[GitHub|GitHub]] · [[Google Fi|Google Fi]] · [[MagicJack|MagicJack]] · [[Mailchimp|Mailchimp]] · [[Mint Mobile|Mint Mobile]] · [[Pinterest|Pinterest]] · [[Scanned_20260730-1706|Scanned_20260730-1706]] · [[Twitter|Twitter]]. This occurrence connects the existing note to [[Federated Continuity Computer|Federated Continuity Computer]], [[Vendor-Agnostic Recovery|vendor-agnostic recovery]], and [[Scanned_20260730-1706|Scanned_20260730-1706]] without replacing the earlier evidence. ## Scanned_20260730-2016 overlay PDF pages 37 and 41 of [[Scanned_20260730-2016]] document Facebook-centered recovery after what the notebook calls an old hacked “large account.” The record maps legacy Apple aliases, telephone numbers, passwords, Novi, Webull, WhatsApp, ID.me, LinkedIn, Tumblr, Namecheap, and a Pixel 6 around the Facebook identity. This is evidence of recovery work and perceived prior compromise, not independent proof of the compromise's mechanism, date, actor, or current access. All credentials and telephone numbers remain redacted.