Facebook Scrambles after Unexpected Privacy Fumble

bart_scriv writes "Facebook is responding to the recent uproar among its users by deploying better privacy protections and control, as well as being more open about future changes. This could be a case study for other social networking sites on how to avoid or deal with similar problems in the future." From the article: "A week before launch, when asked if he was concerned about a privacy backlash, he appeared surprised, saying, 'No, these people share stuff already and they get something out of sharing.' They've shared all right. And Facebook is listening. On Sept. 7, the site is ratcheting up privacy protections--the result of around-the-clock coding. On their privacy settings page, people will be given greater control over what items will or won't be included in news feeds." Relatedly, an anonymous reader writes "A recent Reuters article mentions that Facebook user Igor Hiller, 17, a freshman at University of California, Santa Barbara is organizing a real-world demonstration next Monday at Facebook's downtown Palo Alto headquarters." Read below for Zuckerman's Open Letter to the community. theStorminMormon writes ""We really messed this one up." begins an open letter from Mark Zuckerberg to the Facebook community. The letter goes on to say: "When we launched News Feed and Mini-Feed we were trying to provide you with a stream of information about your social world. Instead, we did a bad job of explaining what the new features were and an even worse job of giving you control of them. I'd like to try to correct those errors now.

When I made Facebook two years ago my goal was to help people understand what was going on in their world a little better. I wanted to create an environment where people could share whatever information they wanted, but also have control over whom they shared that information with. I think a lot of the success we've seen is because of these basic principles.

We made the site so that all of our members are a part of smaller networks like schools, companies or regions, so you can only see the profiles of people who are in your networks and your friends. We did this to make sure you could share information with the people you care about. This is the same reason we have built extensive privacy settings — to give you even more control over who you share your information with.

Somehow we missed this point with Feed and we didn't build in the proper privacy controls right away. This was a big mistake on our part, and I'm sorry for it. But apologizing isn't enough. I wanted to make sure we did something about it, and quickly. So we have been coding nonstop for two days to get you better privacy controls. This new privacy page will allow you to choose which types of stories go into your Mini-Feed and your friends' News Feeds, and it also lists the type of actions Facebook will never let any other person know about. If you have more comments, please send them over.

This may sound silly, but I want to thank all of you who have written in and created groups and protested. Even though I wish I hadn't made so many of you angry, I am glad we got to hear you. And I am also glad that News Feed highlighted all these groups so people could find them and share their opinions with each other as well.

About a week ago I created a group called Free Flow of Information on the Internet, because that's what I believe in — helping people share information with the people they want to share it with. I'd encourage you to check it out to learn more about what guides those of us who make Facebook. Tomorrow at 4pm est, I will be in that group with a bunch of people from Facebook, and we would love to discuss all of this with you. It would be great to see you there.

Thanks for taking the time to read this,

Mark"

Comments

Boo-Hoo

[k_187]

if you don't want this information to be out there, don't put it on facebook. How did the news feed work any differently than the real-world gossip chain? I'm amazed that people are suprised that if I say I like johnny on facebook, other people can find out about it? Eh, maybe this will convince people that they shouldn't put their whole lives on internet.

Re:Boo-Hoo

[BecomingLumberg]

Its not the fact that they can see it, it is the fact that it is *broadcast* that makes it bad. I don't care that people I know find out that I break up with a girl, but I don't want it to be sent RSS style to everyone I know. They will find out in time, but preferably not all the next time they log to facebook. The old way, sure you were posting it on the internet, but there was a certain anonymnity to be found in the data overload of facebook. Now that changes are highlighted, its too easy.

Also, others are allowed to submit content to your page (like to my wall). If they do, I may want time to respond to it before all of my friends read it. Sure, the old way one or two might see it, but that risk is low.

This funtionality, if cut back, would be very useful. A notification of when friends put up new pictures would be great. Some things should be exempt from the feed, or at least have the option to have them never broadcast, so that they can fly 'under the radar'.

Re:Boo-Hoo

[theStorminMormon]

Why is this insightful? It's not. Do we really have to go around this circle again? How information is accessible is sometimes just important as what information is accessible.

No one previously thought that information they posted on Facebook anywhere was private (at least, from their friends). But now it is being aggregated and broadcast to every friend. If you think this is the same thing, then I suppose you also think that Google making the full-text of every book available on line is the same thing, whether they do it (as they are doing it) by allowing you to see only a snippet at time or whether they allow you to download the whole thing as a text file. The information available in either scenario is exactly the same, but based purely on how easy it is to get at that publicly available info one is fair use and the other is not.

It's just a simple fact, even IF information is public accessible, it still matters how accessible. Stop acting as though privacy is a binary proposition: either top-secret or totally-public with no differences in between. Facebook users are not posting info on the Net and getting annoyed that people aggregate it (which would be annoying but fair) they have joined a private networking group and then the rule's of that networking group got changed and it made a lot of them mad. Nothing private was revealed, but information that would have taken hours to aggregate every single day was suddenly available with 0 effort. That is a change, and not everyone has to be happy about it.

I say "them" because I didn't mind the changes. Now that the new privacy features have been changed, there's pretty much nothing left to talk about. The only complaint Facebook users have left is that the Feed disrupts the layout and (apparently) there's no way to turn it off by default so that you never even see it.

But considering how incredibly fast Mark and Facebook were to implement the needed privacy controls, I'm sure that this too will be available soon in the future. If only every company was as agile and quick to respond to its customers demands...

-stormin

Re:Boo-Hoo

[walt-sjc]

as has been pointed out numerous times before, there's a difference between publicly accessible and publicly announced

I really think many people don't really "get" the internet.

There are these things called search engines and spiders out there that scrape information from public places constantly. It matters not what Facebook does or does not have for functionality. They are not the only gatherer and publisher of information on their site.

If it's on the internet and publicly available, it's public. If you don't want something public, to everyone, forever, don't put it on the internet in a publicly available place. It really is that simple. Teens and other young adults frequently post wacky / private crap about themselves or their friends all the time. Do you REALLY want a future potential employer "Googling" you and finding all this stuff? How about a potential boyfriend / girlfriend / husband / wife? Hell, I can still find posts of mine from the late 80's via google - and google didn't even exist when I wrote them! I can also find via the internet archive copies of my web site from 7 years ago.

You can't put something out there, publicly, and then scream when someone you don't want reading it, reads it. That's sheer stupidity. Publishing a blog or having conversations on social networking sites such as myspace / facebook in open forums is no different than publishing it in the New York Times or broadcasting on CNN. You have publicly announced the information. You like to THINK that you have a tight little private group, but that's just an illusion.

Re:Boo-Hoo

[Kevin Stevens]

So if you get divorced because she left you and cheated on you, thats a public record, and you obviously would not mind one bit if on the day of the filing that was on the front page of the NY Times? Or how about you got in a fight with your wife and I could hear it from outside so I recorded and played it back over the PA system at your office the next day?

Or how about how much you paid for your house? You have no problem with me sending a letter to all of your friends, neighbors, coworkers, etc telling them exactly how much you paid for it? That is most likely listed on the deed to your house which is a public record.

I disagree. There is a societal expectation that your private life not be broadcast even though it is "public." This expectation will probably change as tools like this become available. If you break up with someone, you may not care if people know, but just because your coworkers are linked to you on a social networking site doesn't mean you want that information immediately and easily available.

I perfectly understand how tools like this are deemed unacceptable and thats OK. It is how our society functions. If I have the time and effort, I can dig up dirt on anyone, but it will take more time and effort than I really care for. You can make a claim that this all goes out the window because its on the internet, but these sites are trying to mimic online what goes on in the real world, and enable real world friendships. However, making "stalking" like this so easy just deters people from making social connections. Just because I met a girl I kind of like at a bar last weekend and I made her my friend on Myspace does not mean that I want some girl I am seeing to get an immediate update of that fact. You are saying that this is obviously exactly what I want, and that is just not true.

Re:Boo-Hoo

[eraser.cpp]

Why do people keep making this argument? It's completely irrelevant to the actual problem being voiced. This is not an issue of people posting information to facebook and expecting privacy, it's an issue of bad UI design where people are given every small action performed by their friends on the front page. Even worse, people tend to friend everybody they've ever talked to and wind up getting spoon fed more information than they care to know about those people.

You're also wrong on a few counts, have you ever used facebook? The privacy controls severely limit the number of people able to view your profile. Google's crawlers won't be able to index this information unless the folks working for facebook open it up to them. The privacy controls are of course only as trustworthy as the people working for facebook, and also if you're friending everybody under the sun you have removed the ability of the privacy controls to help anyway.

Re:Boo-Hoo

[nova_ostrich]

That's an issue with being able to trust your friends, not with Facebook.

A demonstration?

[Aladrin]

A Demonstration!? Before you start screaming and harrassing a company, maybe, just maybe, you should give them some time to respond. In this case, the company has responded in record time and it still wasn't enough to stop this radical from freaking out. Nothing shouts 'unstable' like organizing protests at the drop of a hat.

Re:A demonstration?

[ResidntGeek]

And another thing: why the hell does it take two days for college students to organize a protest about Facebook making already-public information easier to access (OMGNO!!!), when they don't seem to do shit about secret prisons, torture, and other problems of large-scale government?

Oh FFS

[goldcd]

" Igor Hiller, 17, a freshman at University of California, Santa Barbara is organizing a real-world demonstration next Monday at Facebook's downtown Palo Alto headquarters."

Has he really nothing better to do with his time? If you don't like facebook, just trash your account and leave.
Find something worthwhile to get upset about.

I Still Don't Like It

[stevemm81]

I just wish you could turn the feed off altogether - I miss the old, uncluttered homepage. I'm not that concerned about my privacy; as someone said earlier, if I wanted things to be private from my Facebook friends I wouldn't post them on Facebook.

They've managed to turn one of the more attractive looking pages on the Internet into an ugly mess cluttered with useless information about my friends joining groups I've never heard of, etc. I think they should either eliminate the feeds altogether or put them on a separate page.

Re:Why wasn't news feed disabled?

[QuoteMstr]

"Held accountable?" For what damages, exactly? For god's sake, we're not talking about a bank's website. All we're talking about is a way for people to slightly more easily discover information that was already public. You should be happy they responded as quickly as they did.

"Massive breach of privacy" my ass.

The problem with facebook...

[usacomp2k3]

Is that it puts all your friends on the same level. I don't care about what happened to most of the people that are my 'friends'. If I wanted to know about them specifically, I can look at their page. What would be better would be to have a list of 'close friends' or something like that that you can add to a feed and only get reports from those few people. Also, a 'opt-out' check box in the privacy settings would be nice. Or, as another comment said, it should be an 'opt-in' feature in the first place from a security setting.

I still don't get it...

[Finnegar]

While I like that Facebook has made changes in responce to user demand (the largest protest group reached over 700,000 members, even though I don't think it would have reached that WITHOUT the help of the feeds...*grumble*), I still don't see why there was a demand in the first place.

NOTHING on your feed was something that someone couldn't have seen otherwise. In fact, there are many things that were specificly excluded, such as pokes, messages, things you rejected, and (most importantly) photos you deleted.

While it'd be good to be able to turn the thing off if you really don't like it (and that's what the protesters are still pushing for), I actually like the change. Instead of taking a look at profiles and guessing as to who has changed what, I can see everything in a single place.

I expect that in a few months this will be forgotten or considered overblown. Facebook has made something convenient, not malicious.

Re:Why wasn't news feed disabled?

[theStorminMormon]

Instead, they waited three days to plug this massive breach of privacy.

OK, I get really annoyed at the stupid people who can't tell the difference between making information available and delivering it to you all collated and sorted. Clearly how you present the information matters. But to call the Feeds a "massive breach of privacy" is really silly. Every single thing the Feeds announced was information already available to everyone that got the Feed. How is this a "massive" breach?

Massive breaches are when companies lose millions of social security numbers or credit card numbers. You seriously are crazy if you think just broadcasting to a group of friends whom you have already selected to see the information is really that horrible of a deal.

So for 3 days people had an easier time tracking your wall posts. Was it really so traumatic for you?

-stormin

Re:Sad, really.

[Billosaur]

It's pretty sad that this sort of thing needs to be said, but it still needs to be said to a generation growing up in a world of Livejournals and Myspaces and Facebooks.

In the "good old days," all the people on your street used to know what you were up to. If you did something, the grapevine usually got that information to your folks before you got home. Of course it wasn't a perfect system and if you worked at it, you could hide your deeds from prying eyes (that's what tree forts were for).

Now, people are actually writing down the things they're doing and placing that information where anyone on the planet can see it. It really should come as no shock now. Was Facebook wrong for not doing a better job of protecting privacy? Sure. Are people culpable if they're silly enough to put embarassing and/or potentially damaging information on the Internet? You bet. The fact is, the younger generations don't understand the whole "global neighborhood" concept and it taskes something like this to make them aware that something they think is local is most assuredly not.

Oh, Yeah: The Correlary to #2:

[RobotRunAmok]

Nothing you write about yourself in your blog will seem as clever, funny, and/or meaningful at age 35 as it did at age 22, and it's not because you have lost your sense of humor or appreciation for art and philosophy. And unless you plan a career as a full-time Ren Faire professional, stay away from the "Fan Fiction" completely.

Happy to Help.

A mini-feed program

[JimBobJoe]

The old way, sure you were posting it on the internet, but there was a certain anonymnity to be found in the data overload of facebook.

There was a website at one time that plugged into myspace to deliver a semi-similar feed. It watched the profiles of all your friends (or people you wanted "watched") and if their relationship status flipped to single you'd get an email.

I thought it was a brillant concept. (I believe it was shut down because the way it interacted with myspace violated that site's terms of agreement.)

What would it take for me to design and distribute a program that you can install on your own computer to do the same thing? (I figure if it interacted with facebook or myspace in a low key way, and basically surfed your friend's profiles as if you were doing it from your own computer, it might just pass TOA muster.)

It could do a a semi-regular feed of all your friend's walls. It could collect all the pictures from their profiles and put them into a nifty slideshow. It could surf all the profile's friends ad nauseum and create a neural network of the way people have friended each other which you could probably do something really nifty with.

Re:Push/pull news

[theStorminMormon]

The only point I was making is that going out to news.google.com and searching for the latest news on topic X is not the same as setting up an automatic filter or feed to send the articles to you. Similarly, checking out the latest article from blog Y is not the same thing as subscribing to the RSS feed from blog Y.

Some people may prefer one to the other, but they are not the same thing The information you get, however, is. So this proves my point: that there's more to this question than just what information is available.

This is so manifestly obvious that it's frustrating to believe there are people too stupid to realize this, and thick enough to actually argue that it's not the case.

If only we could make stupidity more painful...
[thanks to whomever I ripped the sig from]

-stormin

Re:Mod parent up.

[Alex P Keaton in da]

But don't put things up for the world to see then get shocked that they really did see them. We know you are not all comp.scientists and stuff, but for Gates' sake this is slashdot!
I agree- however, none of that matters. All that matters is what your users think/perceive. Even if you are 100% right, if your users don't agree, even if your users are 100% wrong, then you will be out of business quick...
If the facebook users dont like the changes, and facebook wants to stay in business, they had better undo the changes...
Sort of like, you can have the right of way as a pedestrian in a crosswalk, but when the car runs you over you are still dead. I mean, you were right, but your still run over...