The judge found a lack of specifics about what Zuckerberg did wrong, and said “control of corporate activity alone is insufficient” to establish liability.