Oh there it is, Facebook shrugs as Free Basics private key found to be signing unrelated apps

Walled-garden Android platform security easily copied

Facebook has insisted that losing control of the private key used to sign its Facebook Basics app is no biggie despite totally unrelated apps from other vendors, signed with the same key, popping up in unofficial repositories."