It's hard to tell from the article whether Facebook was an agent of the FBI or not in delivering the exploit, which has legal implications for this case.<p>What Facebook could have done to avoid that issue is to enforce their ToS to get his IP address, then contact and hand those logs to LEO. (A company can follow its own processes as far as possible before contacting LEO, but once they start working together, they become an agent and the process is changed into something with less independence.)<p>The idea of creating a new OS to trap an end-user is one of the weirdest things I've ever heard of, on several levels, frankly.<p>Source: previously the LEO contact at a large Silicon Valley company. Typically you meet with them quarterly or as necessary, but you don't casually "work together" on cases to avoid the appearance of being their agent instead of a company representative.