Slashdot Mirror


Facebook Sharing Too Much Personal Data With Application Developers

An anonymous reader writes "Remember the Facebook News Feed privacy uproar? What about the Beacon scandal from late last year? Privacy activists are rallying around yet another major issue at Facebook, in which the company is secretly sharing user data with third parties. Researchers from the University of Virginia recently announced that in a study of the top 150 Facebook applications, more than 90% were given access to information that was not needed to function correctly. That Scrabble or Superpoke application you really like? Its developers get access to your religion, sexuality and home town. Facebook's position was summed up by Georgetown Law Professor Dan Solove, 'They seem to be going on the assumption that if someone uses Facebook, they really have no privacy concerns.' Do Facebook users deserve privacy? "

165 comments

  1. Sharing by Anonymous Coward · · Score: 0, Flamebait

    is for suckers!

    1. Re:Sharing by 2.7182 · · Score: 1

      Definitely true when it comes to food.

  2. Net by Rinisari · · Score: 4, Insightful

    If you post it on the 'net, it's public information, no matter how secure or private the application is. One must treat his or her information on social networks this way, no exceptions.

    1. Re:Net by CastrTroy · · Score: 4, Insightful

      Exactly. Just look at what happened with the "private" myspace pictures. If you don't want the information getting out, don't post it on the internet.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    2. Re:Net by Altari · · Score: 3, Informative

      If you post it on the 'net, it's public information, no matter how secure or private the application is. One must treat his or her information on social networks this way, no exceptions.

      Well put. We must run under the assumptions that whatever information we provide to websites will not remain confidential, privileged, private or otherwise secure. Sites have privacy policies for a reason, yet some users seem to get upset when something clearly outlined in the policy comes to light. I, on my part, read the FaceBook applications privacy policy and never had any hopes that my information would be secure.

      http://developers.facebook.com/user_terms.php

      (i) any information provided by you and visible to you on the Facebook Site, excluding any of your Contact Information, and

      (ii) the user ID associated with your Facebook Site profile.

      If you're concerned about how your information will be shared, read the policies and simply don't sign up for sites that don't meet your criteria.
    3. Re:Net by Anonymous Coward · · Score: 0

      By that logic any computer connected to the internet is fair game and corporations shouldn't put any private information on these kinds of machines. I know that this comparison is a little bit of a stretch but just because you post information online shouldn't mean every Application gets to use it. Anyway I am not worried as long as they don't share the information marked "Only Friends".

    4. Re:Net by Pendersempai · · Score: 2, Insightful

      So you don't do use a bank or credit card that has an optional web interface or send any email or say anything in an instant message or skype conversation that you'd prefer to keep private?

      Your advice is wildly overreaching. It's like telling MADD, "if you don't want to get killed by drunk drivers, don't leave your house."

    5. Re:Net by heinzkunz · · Score: 4, Insightful

      I use online banking, and I damn well expect my account to not be publicly available. Why can't I expect a social networking site to respect my privacy the same way my bank does?

      I agree with you that information posted to social networks can't be considered private, but that's because they are broken, and their users have the right to complain about it.

    6. Re:Net by Panayotis · · Score: 1

      This is a tricky "truth" in my opinion ... the fact that we should be aware of this important fact doesn't mean that so popular web-sites, attracting millions naive users, shouldn't be forced somehow to educate their users and give them enough options for them to protect themselves.

    7. Re:Net by Anusien · · Score: 2, Informative

      It's not that simple. If your friends on Facebook add an application, that application's developer gets access to all your information.

    8. Re:Net by 0100010001010011 · · Score: 1, Informative

      No they don't. You get a 'your friend has added X, JOIN NOW' and THEN you can decide if you want to join an application you can check the box "share my data with application X"

    9. Re:Net by cubic+pd · · Score: 1

      It's like telling MADD, "if you don't want to get killed by drunk drivers, don't leave your house." You might want to reconsider what you tell MADD, what with the amount of drunks driving through the sides of houses and all.
    10. Re:Net by Otter+Escaping+North · · Score: 4, Informative

      No they don't. You get a 'your friend has added X, JOIN NOW' and THEN you can decide if you want to join an application you can check the box "share my data with application X"

      Yes. They do.

      Read the article, and if you're on Facebook, go to "privacy" -> "Applications" -> "Other Applications" and read what it says under "What Other Users Can See via the Facebook Platform" very, very carefully.

      --
      Running Windows^H^H^H^H^H^H^H OSX and Linux in the home. (I don't have time for Solitaire any more.)
    11. Re:Net by TTURabble · · Score: 1

      You are comparing apples to oranges here. Saying that any computer connected to the internet is fair game for snooping is akin to saying that it is ok to enter any house with a door. Rather with a Social Networking website (or any website for that matter), you give your information to a third party, once that happens then the information you gave is no longer under your direct control. So to give an example, it would be like filling out a survey that asks you for some personal information, once you give them the data it is theirs to give away as they see fit. The moral of the story is that if you don't want the world to know, don't post it on the internet, and ask your friends to do the same.

    12. Re:Net by Saxerman · · Score: 1

      If you post it on the 'net, it's public information, no matter how secure or private the application is. One must treat his or her information on social networks this way, no exceptions.

      So what restrictions, if any, does this mean those who handle our information on the 'net are under to keep our information private? Does this free pass to treat our information as public only apply to 'social networking sites' and what then qualifies as a social networking site? If I do my taxes online, does that become public information? If someone digs in my trash, finds some interesting documents and posts them on a social networking site, do they become public? What about my online bill payments or banking?

      Or does your assertion only apply to information to a 'public' site on the 'net? Or is the act of 'posting' the information online what makes it public? And if that is the case, what qualifies as a 'public' site? If you need a username and password to see my posted information, is it still public? If a username and password aren't enough protection, what would be required to place something online that isn't public? Is it still public if it's on a website which requires an RSA smart card which is kept at the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of Leopard'?

      --

      A steaming cup of soykaf would be real wiz right now.

    13. Re:Net by crabpeople · · Score: 1

      I was going to say a similar thing, but the difference is that I dont allow anyone else to see my banking information. Its pretty much just used by and for me. Facebook is designed to network whatever you put on there, unlike a bank. I dont think you should have any expectation of privacy on a social networking site. Then again, I really dont understand the need to be in the spotlight or see the usefulness of knowing what some person I went to highschool with is having for dinner.

      If you want to broadcast your inane and pointless life to the world, I would think you would be happy to get the stalkers and various other social "benefits" that come with that. Where im from, (the 80s) you dont use your real name online... EVER. That sort of conditioning is whats missing from todays myfaces and reality tubes.

      --
      I'll just use my special getting high powers one more time...
    14. Re:Net by groschke · · Score: 1

      I don't buy it. You send emails out to the net, VOIP calls, etc... And those aren't "public." At least not in this sense.

    15. Re:Net by pistolhip2 · · Score: 1

      i agree. some are better than others. http://www.pxspot.com/ does an ok job of this.

    16. Re:Net by kellyb9 · · Score: 2, Insightful

      I disagree.. mostly. Facebook users aren't really looking for privacy when they post information, but when someone no longer wants the service they should sure AS HELL be able to delete their personal information. Facebook won't delete accounts, they'll only deactivate your account. I've seen no evidence that my account is actually deactivated since I still recieve friend requests. These third party services that Facebook offered has actually made the overall product much more irritating, if thats even possible.

      I think anyone, including users of Facebook, deserve as much privacy as they've set their accounts up for - no more, no less.

    17. Re:Net by Tim+Browse · · Score: 2, Insightful

      Why can't I expect a social networking site to respect my privacy the same way my bank does?

      If you gave the social networking site as much money as you do your bank, maybe you could.

    18. Re:Net by philg8 · · Score: 1

      If your bank account information gets out, your bank could lose money (via fraudulent charges). If your Facebook account information gets out, Facebook doesn't even cry. And if they DID cry, they'd wipe up their tears with advertiser dollars.

    19. Re:Net by IamTheRealMike · · Score: 4, Insightful

      Well that's what I thought. But it appears that's actually not the case. If you RTFA and click through, you find a page that explicitly says that friends applications can view my data. Which presumably they can then do more or less anything with, seeing as how keeping that data is only "enforced" by the terms of service. The defaults are set such that my friends apps, any by implication anybody who can code, can view everything except my sexual preferences, basically.

      That's pretty surprising, and I'm glad Ms Felt has called this out. It means that anybody who writes a moderately successful app can build a giant database of things that I never intended to be in any database other than Facebooks. Part of the reason Facebook has been successful is that it does actually have privacy controls, and people feel they can share their data with only their friends (and facebook inc, of course, but that's only one company). The fact that it's not true is a pretty gaping oversight.

      What I find especially funny is the big bold sign at the top saying "Facebook does not sell your personal data". No, they give it away for free instead. Great.

    20. Re:Net by Anonymous Coward · · Score: 0

      Funny you should mention that... I use Wachovia for banking, and at the bottom of their online billing website's HTML (http://www.wachovia.com), there's no less than 11 tracking images that are being utilized. Maybe I'm exaggerating this, but isn't this already sharing more information than I want shared?

    21. Re:Net by Anonymous Coward · · Score: 0

      Great so what am I supposed to do when a close friend of mine posts pictures of me? Make new friends? That takes time, and it means that I can't do anything legal, yet that an employer wouldn't like, while I'm making new friends.

      Facebook sharing data with applications, I understand. Facebook sharing my sexuality with the makers of Petrolhead is probably not a good idea.

      Just wondering... has the RIAA sued a pirate in the Ninjas vs. Pirates Application yet?

    22. Re:Net by rtb61 · · Score: 1
      The reality is that the majority of facebook users only wont to share their information with potential friends and not with corporations, a bunch of strangers who have no interest in then other than ways by which they can be exploited. While that is rather naive of them, the majority of /. must remember that they are, in IQ terms sub 120s, and more often than not sub 100s, and often don't really understand the ramifications of what they are giving away and how it can be used against them.

      The greatest problem with these sites is that they do target children as they are the best and most gullible marketing targets, as minors they should be protected from the ramifications of making their private lives permanently public.

      I am really starting to get the feel that the social networking sites like facebook and myspace and trying to squeeze as much out of the public and those sites whilst they can, as both companies know that an inevitably crack down is coming and they will find the exploitative revenue source cut off.

      --
      Chaos - everything, everywhere, everywhen
    23. Re:Net by Death1985 · · Score: 1

      I have to agree with Kelly, you post the information on the basis that others will see it. Obviously Facebook is going to sell the information available on the website as well as post, I am assuming here, user data driven ads. They are a corporation out to make money, Facebook isn't in the business of helping people find friends. However, they are definitely not the first company to do this, have to love that Air Miles card, so there should not be that big of an uproar when APIs allow developers access to all your information. Hopefully they follow their own privacy scheme and restricted content is restricted to the APIs as well when you consider the potential for misuse. Knowledge is power and with all these contests trying to advocate people to join, i.e. most Facebook users from a city, I can't see why people haven't already caught on to what is trying to be done. Anyways, I just wonder, if Facebook does actually not delete a person's information when requested, as per Canadian law, are there any legal actions one can take?

    24. Re:Net by Jakael · · Score: 1

      Even more to the point, as with anything out there, people really have to read the fine print. The below is a direct excerpt from Facebooks user agreement.

      "When you post User Content to the Site, you authorize and direct us to make such copies thereof as we deem necessary in order to facilitate the posting and storage of the User Content on the Site. By posting User Content to any part of the Site, you automatically grant, and you represent and warrant that you have the right to grant, to the Company an irrevocable, perpetual, non-exclusive, transferable, fully paid, worldwide license (with the right to sublicense) to use, copy, publicly perform, publicly display, reformat, translate, excerpt (in whole or in part) and distribute such User Content for any purpose, commercial, advertising, or otherwise, on or in connection with the Site or the promotion thereof, to prepare derivative works of, or incorporate into other works, such User Content, and to grant and authorize sublicenses of the foregoing. You may remove your User Content from the Site at any time. If you choose to remove your User Content, the license granted above will automatically expire, however you acknowledge that the Company may retain archived copies of your User Content. Facebook does not assert any ownership over your User Content; rather, as between us and you, subject to the rights granted to us in these Terms, you retain full ownership of all of your User Content and any intellectual property rights or other proprietary rights associated with your User Content."

      Yup, thats right. By signing up, you have given them full legal right to do whatever they want with the content you post. Think about that.

    25. Re:Net by Kpt+Kill · · Score: 1

      It shouldn't be a requirement to "allow this application to access my personal information". Why a Tetris application REQUIRES such access is the reason i have a boring, application-less profile. That said, Facebook does make it VERY clear what you are doing... Just because people don't read, care, or think about what they click on (cough cough EULAs) is another argument entirely.

    26. Re:Net by mdwh2 · · Score: 1

      Facebook is designed to network whatever you put on there, unlike a bank. I dont think you should have any expectation of privacy on a social networking site.

      Except some networking sites (including Facebook) allow you to restrict who can see it - so if it turns out they're letting other people have access to it, then that's a security flaw.

      The OP claimed that anything on the Internet is public information, even secure or private applications.

      Then again, I really dont understand the need to be in the spotlight or see the usefulness of knowing what some person I went to highschool with is having for dinner.

      Some people have these things called "friends", not just people you went to highschool with.

      Where im from, (the 80s) you dont use your real name online... EVER. That sort of conditioning is whats missing from todays myfaces and reality tubes.

      That's a problem specific to Facebook, not MySpace or anywhere else. And I don't think it's an age thing - on the contrary, younger people are growing up in a world where using pseudonyms/screennames is common, whilst older people automatically use their real full name.

    27. Re:Net by mdwh2 · · Score: 1

      If you gave the social networking site as much money as you do your bank, maybe you could.

      Actually, I've given more money to my social networking site, than I have to my credit card company (since I always pay before getting charged interest). In no way would that justify my credit card company leaking out personal details.

    28. Re:Net by Tim+Browse · · Score: 1

      It shouldn't be a requirement to "allow this application to access my personal information". Why a Tetris application REQUIRES such access is the reason i have a boring, application-less profile.

      Unfortunately, those applications are developed by people who want your personal information. There's very little chance of them allowing you to use the app without you giving them access to that info. It's what they want. It's why they're doing it. They just want to advertise to you, and targetted advertising is even better.

      Have a look at the facebook dev boards. It's full of people asking how many users they can get, how to get more users, how they can get around the restrictions FB keep adding, moaning about those restrictions (What? I can't spam 500 friends when someone installs an app? Waaahh!), how much they will be able to charge someone else to buy their app when it has X number of users, blah blah.

      They're not doing it to be nice. Private info and advertising is all they get out of it. It's not like Facebook hosts their apps for free, either.

    29. Re:Net by Anonymous Coward · · Score: 0

      yeah " oh no the application developers can have access to my personal info? you mean the checkbox I checked when I installed this app that says 'share my personal info' actually means it???" and even if you don't share it, they could go to your cfacebook page and see this info, if you don't want anyone to know your hometown or your religion, leave it blank DUH!

  3. The assumption is that we tell Facebook the truth by WillAffleckUW · · Score: 4, Funny

    Do you really think I'm a Pastafarian?

    Now, true, half my friends post pics of their drunken parties (yo! Aislinn and Katelyn! love the pics!), but so far I'm not in any of the pics, and I happen to know some of my friends are not the people they say they are ...

    Nobody trusts the man, man. We all realize you're all pervs.

    --
    -- Tigger warning: This post may contain tiggers! --
  4. It's called Facebook not Maskbook by Jynx77 · · Score: 1

    In a word, no.

    --
    It's turtles all the way down!
  5. Deserve Privacy? by FuzzyDaddy · · Score: 2, Insightful
    Do Facebook users deserve privacy?

    At this point, I'd say no.

    Personally, given their abysmal track record so far, I'd say that anyone using them at this point should assume they have no privacy at all. To some extent facebook is guilty of false advertising, by seeming to allow you to restrict other users from seeing some of your information. But why anyone who put anything on Facebook would expect any privacy at all, is a mystery to me.

    --
    It's not wasting time, I'm educating myself.
    1. Re:Deserve Privacy? by geekoid · · Score: 2, Insightful

      of course the deserve privacy, everybody does.

      Perhaps they shouldn't expect it, but that's different.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:Deserve Privacy? by vanyel · · Score: 1

      The whole point of facebook is to share information; if you want it to be private, don't put it online.

    3. Re:Deserve Privacy? by Vectronic · · Score: 1

      "At this point, I'd say no."

      I agree, however, I'd agree even more if you remove the first 3 words.

      The only time I can think of where Facebook users (which includes me) is if the people/company behind Facebook decide to jump ship at some point, then I would expect all the user data on their servers to be properly 'destroyed'.

      But perhaps thats what you meant by insinuating that at some time they may deserve it.

    4. Re:Deserve Privacy? by FuzzyDaddy · · Score: 1
      I'd agree even more if you remove the first 3 words.

      I was just being cranky... damn this cold.

      Yes, we all deserve privacy, and facebook ought to be respecting that. Part of my crankiness, no doubt, is that I don't "get" facebook. I don't know why people would want to put all those personal details online. That's perhaps because I do value my privacy, quite a bit, and wouldn't put information online for the sole purpose of having people I've never met look at it.

      Our privacy is being taken away in leaps and bounds, and the "expectation of privacy" standard is partly to blame. I'd be more encouraged if people left facebook en masse in response to these privacy issues. If we don't make a statement that we value privacy in those rare circumstances where we do have a choice about what we share, it only going to get worse as that expectation of privacy is further eroded.

      --
      It's not wasting time, I'm educating myself.
    5. Re:Deserve Privacy? by xaxa · · Score: 1

      The whole point of Facebook was to share information with people at your school/college/university.

      I was not impressed to find out one day that what was previously available only to people with an email address belonging to my university was suddenly available to anyone claiming to be from London (i.e. in the London 'network').

      Now, it seems the whole point of Facebook is to make as much money as possible through advertising. It's time for the next networking site.

    6. Re:Deserve Privacy? by aj50 · · Score: 1

      Yes, but only if you're also in the London network.

      --
      I wish to remain anomalous
    7. Re:Deserve Privacy? by Poseiden · · Score: 0
      No matter how many times someone signs up for a website with no privacy measures, that user still deserves an online social networking website with measures of privacy.

      As for the currently popular argument on /. that the user should 'expect' this to happen... These people on mysapce and facebook aren't /.'ers!!! They are regular people that believe ToS's. Whoda thunk?

      Saying these people don't deserve privacy on Faceboko because they started on Mysapce a few years back is like saying someone neverdeserves good credit because of that late utility bill 4 years ago.

    8. Re:Deserve Privacy? by quantaman · · Score: 1

      Just like security privacy isn't a binary state. Do I want everyone in the world to know my relationship status? Maybe not. If someone is really interested, pokes around, and finds out, do I really care? Maybe, though if it was non-private enough to let some people know than that nosey 3rd person probably had a bunch of other ways to find out anyway.

      --
      I stole this Sig
    9. Re:Deserve Privacy? by undertherock · · Score: 1

      To be honest, Facebook was never meant to be private. It gave people access to more of your details than MySpace or similar sites did because the purpose of it was going to be connecting you with people you knew in real life - initially, anyway. It asked you about your college or company and your full name at registration, and those were details you knew were going to be displayed. You filled in more, more was made public. It was the users' choice to post this information on the internet. Referring to internet banking, mentioned earlier - internet banking is a different kettle of fish entirely to social networking sites. You don't have to provide information if you don't want to, hell, nobody's forcing you to join the damn thing! I won't go into security problems with Internet banking here, but yes - you send out information, it doesn't just disappear into space. It is MEANT to safely land where it's destined to - and we can only hope this is what happens with online banking - but social networking sites were never big on security. After all, you're sharing a lot just by joining. Of course I don't want all my info to be publicly available - hence I don't post it.

      Yes, it sucks.

      But it hasn't surprised me in the least.

  6. Wow by sjbe · · Score: 4, Interesting

    I haven't seen a company this determined to shoot themselves in the foot with bad policy since Real Networks. You'd think they would think Facebook might have realized at least some people actually do care about balancing utility with privacy.

    1. Re:Wow by xstonedogx · · Score: 1

      As someone who uses Facebook and cares about privacy I find your assertion ludicrous.

      With the exception of the beacon debacle, the Facebook 'privacy' issues have really had more to do with the perception of privacy and bandwagon hysteria. Take the news feed for instance. People were up in arms about information being made available that they had already made available. A close analogy would be accusing Google of privacy violations for indexing your public web page.

      This application issue is a non-starter. Facebook makes it clear what information applications can access and does not allow applications to access that information without explicit permission from users. Certainly finer grain controls are more desirable; but from a privacy standpoint, it really is irrelevant whether flixter needs to know my religion if: 1. I want to use their movie rating service. 2. I know that by using the service they can access my religion. 3. I opt to provide them with the information.

    2. Re:Wow by sjbe · · Score: 1

      the Facebook 'privacy' issues have really had more to do with the perception of privacy Right. That's why the CEO publicly apologized for the news feed and beacon and there has been widespread discussion about a host of other issues and concerns. Companies that are responsible with privacy issues pretty much don't typically get this much bad press. It's not just once or twice.

      People can make public whatever information about themselves they choose and I support that. But if a company is going to make money from potentially sensitive information then they have a responsibility to be careful with their policies and technology. I don't get the warm fuzzies about Facebook being especially responsible (hence I'm not a user) and I'm clearly not the only one. Perhaps it's overblown but I'm not about to take chances with a company with a poor track record or even just a perception of a poor track record with my personal information. If you don't care, you'll hear no argument from me.
    3. Re:Wow by realthing02 · · Score: 1

      Now I'm not naive enough to think facebook is doing a great job about privacy, but you're contributing to the problem when you excuse people for putting "sensitive information" on the website, expecting some moral code from facebook.

      While i agree with you in theory, the fact is, facebook is a business, and it's exchanging a service (omg frinds) for a fee, it's just not a monetary fee. If privacy was such a giant concern, we'd see people shelling out 5 bucks a month to use facebook without all the ads, evil sharing of data, etc.

      Note, I'm not saying privacy shouldn't be a giant concern, but we need to deal with it in a proactive way, much like violence on TV or the idiots who open emails with viral attachments: through education (and parenting)- not clamping down on the providers.

    4. Re:Wow by xstonedogx · · Score: 1

      Right. That's why the CEO publicly apologized for the news feed and beacon...

      I believe your intelligence is sufficiently adequate to imagine situations where an apology might be issued even if one is not technically or actually at fault. So, I find this particular argument disingenuous rather than compelling. ...and there has been widespread discussion about a host of other issues and concerns.

      Again, with the caveat of beacon, the linked issues are:

      1. Concerns about the privacy policy itself. Since Facebook is an opt-in service this issue is largely irrelevant. Anyone not agreeing with the policy can choose not to opt-in. (As you noted.)
      2. Easily dealt with through Facebook's privacy controls.
      3. Not related to privacy at all.
      4. Meaningless speculation.

      If you have a specific point you wish to argue by all means raise it, but I am finding it difficult to respond to a link to a content-poor Wikipedia section.

      Companies that are responsible with privacy issues pretty much don't typically get this much bad press. It's not just once or twice.

      Bad press is not strictly a function of the facts, but of perception, popularity, and ratings. Most people cannot name 5 companies that have actually lost personal information of arguably greater importance. Facebook, despite having never lost information or acted outside its privacy policies has been raked cross the coals over privacy issues countless times for issues as small as opt-in applications being able to read information on a user's religion when the user has been informed that this is the case.

    5. Re:Wow by Crazyswedishguy · · Score: 1

      Mark Zuckerberg is definitely not stupid, and Facebook is a cash cow. Its purpose is to generate money through advertising by providing a "free" (ad-supported) social network service to users. If I remember correctly, when only 5 or 6 schools had access to Facebook there were already ads being sold (it was, depending on the school size and Facebook's popularity, around $15 a day for an ad). It seems to me that generating ad revenue is Facebook's goal, and honestly, for all that's being said about profitable corporations being evil and what not, that's what most companies do. Facebook has always been a corporate sellout, whether that's a bad thing is up to you to decide. Being able to pay skilled engineers to support the product has its advantages.

      My point here is that what Facebook does -- even if it gets a little bit of bad publicity here for its privacy policies -- is overall generating more revenue. News feeds caused an uproar due to lots of FUD, but in the end I think the majority of users loved it (I like it, now that I can control what information is published in the feeds). It's obvious that in general, people aren't educated enough to have privacy concerns (or else they are educated but choose to ignore it anyway). When using 3rd party apps on Facebook, it is VERY CLEAR that you are giving away your information ("by clicking, you agree to allow Superpoke to access your information", etc).

      I believe that Facebook forces its 3rd party application to abide to a certain privacy policy, although I'm not sure about the details. If you care about your privacy but still want to use Facebook, make sure to manage your privacy settings, and don't use any 3rd party apps!

      If you really really care about your privacy... well, you're fighting a losing battle anyway. First, I'd suggest ripping out the Ethernet cable.

      --
      This space up for sale.
    6. Re:Wow by The+Cydonian · · Score: 1

      Easily dealt with through Facebook's privacy controls.

      Serious question, but could you tell me how I can stop sharing, say, my demographic with, say, Scrabulous? I clicked on 'Edit Settings' at the application, and got the following stuff:-

      Left Menu: Show this in my left-hand menu.
      News Feed: Publish stories about this in my News Feed.
      Mini-Feed: Publish stories about this in my Mini-Feed.
      Profile Links: Add a link below the profile picture to any profile.
      Email: Allow this application to contact me via email.

      Let's do this again. How do I stop Facebook from sharing demographic information about me with applications? Where does it say what information is being shared? Why does Facebook have to be so secretive about this all?

    7. Re:Wow by xstonedogx · · Score: 1

      Serious question, but could you tell me how I can stop sharing, say, my demographic with, say, Scrabulous?

      Don't install it. If you want to use an application you have to provide access to your information. On the other hand, the application is not allowed to store the information. (AFAICT, basically the application uses your information to run and/or to serve targeted ads.)

      If you haven't installed the application go to the "Other Applications" area of the applications privacy area and you can choose what information applications that you haven't used can access (via your friends). It's not clear to me that those applications can actually access the information directly. It seems as though it uses the API and the information only appears on your friend's page, but don't quote me on that part.

      You can also add applications as "Blocked Applications" on the same page, which I believe is for applications which you've removed and/or don't trust. I've never had a need for it so I'm not entirely certain why you'd want/need it.

      Anyway, the links below have more information than I can spout off the top of my head. :)

      Where does it say what information is being shared?


      http://developers.facebook.com/user_terms.php
      http://www.facebook.com/help.php?page=9
      http://www.facebook.com/help.php?page=57
      http://www.facebook.com/help.php?page=25
      http://www.facebook.com/policy.php
      http://www.facebook.com/terms.php
    8. Re:Wow by BabaYama · · Score: 1

      > A close analogy would be accusing Google of privacy violations for indexing your public web page.

      Yeah they do that too.

      --
      Sucks
  7. Information sharing is optional by verbalcontract · · Score: 2, Insightful

    When you add an application, it asks you quite clearly:

    [ ] Know who I am and access my information.

    It's the first checkbox.

    Or, even better: you don't need to use applications! Hell, you don't even need to use Facebook! There are services like Hushmail for people who want privacy in their communications.

    1. Re:Information sharing is optional by phantomcircuit · · Score: 4, Informative

      Yeah and if you un-check that box ZERO of the applications will work.

    2. Re:Information sharing is optional by B3ryllium · · Score: 1

      Privacy has always been achieved at the expense of convenience.

      Just like security.

    3. Re:Information sharing is optional by Freeside1 · · Score: 1

      and ZERO of the applications are worth it, even if they didn't need personal info.

    4. Re:Information sharing is optional by dlim · · Score: 1

      Sure, sharing information is optional; but it would be wise for Facebook to present more detail when installing 3rd party applications. Facebook's data service should require that an application specifies the information (on a field basis) that it wants to use before it can access the data. Facebook could then easily report to the user what information the application wants to use. This would give Facebook users a reasonable idea of whether the application appears trustworthy or not. It should also require a privacy policy from the application developer and at least link to it during install.

      Actually, this goes for OpenSocial and any other Social Networking APIs as well.

    5. Re:Information sharing is optional by krotkruton · · Score: 1

      Would you just rather it be a form that says "You understand that your information will be shared with the application" with "I understand" and "I do not want to share my information" boxes? If a user installs a photo-sharing application, where does he/she think the application gets it's photos from? What's your point?

    6. Re:Information sharing is optional by LunarCrisis · · Score: 1

      When you add an application, it asks you quite clearly:

      [ ] Know who I am and access my information.

      It's the first checkbox.

      Or, even better: you don't need to use applications! Hell, you don't even need to use Facebook! There are services like Hushmail for people who want privacy in their communications.

      Your friends' applications can see your personal information as well. Check Privacy->Applications->Other Applications to see for yourself.

      --
      Mr. Period: Nine is the one that's right by ten!
      Nine: One day I will kill him. Then, I will be Ten.
    7. Re:Information sharing is optional by novakyu · · Score: 1

      There are services like Hushmail for people who want privacy in their communications. Because that has a proven record of working so well?

      No, if you really want privacy in your communication, you encrypt the plaintext on your own computer and never transmit on the net anything that is not encrypted. You trust no one. Especially people who say that they will keep your stuff private. It's not paranoia when there are people out to get you.

      Having said that, I don't care about my (several) Facebook profiles (and privacy of those profiles) either, because it's all filled with lies, damned lies, and forgeries. My true friends will always be able to filter out what's not true and what is, and let the fools think that they know much about me, when they don't.
    8. Re:Information sharing is optional by novakyu · · Score: 1

      If a user installs a photo-sharing application, where does he/she think the application gets it's photos from? What's your point? On the other hand, what business does a flash game have to do with any of anybody's personal data? Or, for that matter, why should the photo-sharing application be able to see which groups you are in, who your friends are (well, just *maybe* this has some use, such as privacy control of pictures, but even this ought to be centralized in Facebook itself, not in a third-party app), or what notes you have written?

      This kind of thing is not difficult to implement and has been done since the days of Titanic (if there's a leak, there's leak on only one section, not all; not that it worked well first time). This is clearly the case of either the Facebook developers being incompetent (as usual, I might add), or simply not caring.

      Having said that, I myself don't care so much about their privacy policy and what they do with what I have on my Facebook profile---it's all lies and forgeries.
  8. conclusion: by circletimessquare · · Score: 1, Interesting

    facebooks should just adopt openid

    it's getting to the point where you really don't have to think anymore to solve problems in information technology

    just read slashdot headlines. problems, and solutions, present themselves. often in temporal order. right next to each other

    (scratches head)

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  9. and... by owlnation · · Score: 1

    ...cue mass Facebook protest in 5, 4, 3, ...

  10. Don't supply it in the first place! by garcia · · Score: 5, Interesting

    I work in Higher Education and we're just starting to get on the ball with recruiting via Social Networking (we're always years behind the curve -- I'm surprised we're this current actually) and just as with anything that you provide to a third party, you should really think about what that group needs to have from you in order for you to get what you need in return.

    Higher Education is still generally based on paper marketing. Yes, we have a mass of information available on the web but it's not enough honestly and from some Noell-Levitz studies it has been found that the majority of students still want to be communicated by traditional mail marketing in addition to everything else. In fact, in the focus groups I have conducted on the topic, 89% of those that responded (pool of ~350) wanted no communication other than direct mail -- that was shocking to me, especially because they were traditional aged students (18 - 24). I have found that most students will give you their name and address (which is more than I normally will give anyone until I actually apply to the college) and not much else (no birthdate, prior education, and especially no phone number or e-mail address).

    So, why are these people giving it to Facebook? Why would they trust that site more than an institution of higher education that is actually mandated by law to protect the privacy of those it deals with? I can't turn around and release any part of a student database to any third party unless its cleansed and has no identifiable information.

    Personally, while Facebook is the "new big thing" in Higher Education, it's not worth it for our institution to spend all that much time recruiting by it. Our traditional data works just fine to increase enrollment through the traditional mail, phone and e-communication programs I have developed and redeveloped. That said, I really do believe that people should be very careful about what they put out on any social networking site. Contrary to the belief that there are no automated programs allowed to scour the site, they do and the data that comes back is some really interesting stuff to wade through.

    1. Re:Don't supply it in the first place! by veganboyjosh · · Score: 1

      89% of those that responded (pool of ~350) wanted no communication other than direct mail -- that was shocking to me, especially because they were traditional aged students (18 - 24). I have found that most students will give you their name and address (which is more than I normally will give anyone until I actually apply to the college) and not much else (no birthdate, prior education, and especially no phone number or e-mail address).

      I'm 31, and much more likely to give out my home address than an email address, for something like a school or job, for the simple reason that if you have something you're going to send me that's of value, then you'll send it via snail mail. Think about the costs associated with mailing 5,000 to 5 million pieces of snail mail, versus the same number of items via email. Which are you going to think about and more carefully consider before sending to me?

    2. Re:Don't supply it in the first place! by garcia · · Score: 1

      Which are you going to think about and more carefully consider before sending to me?

      Actually, we send out far more snail mail than we do e-mail and being that *I* am the determiner of what and how much gets sent, I do my best to limit it to a single communication at the start and less than 5 (currently) for the rest of the year.

      The cost of the snail mail isn't so bad and it's not like we're not used to the volume. In our case we don't recruit quite like other schools do as our budget is smaller but we still do send out many tens of thousands of dollars worth of mail. I do take my time with e-mail and make sure that the communications are important and not "spammish" (even though they opted into communicating with us that way) so we don't have to deal with ISP bans, etc.

    3. Re:Don't supply it in the first place! by chis101 · · Score: 1

      I have found that most students will give you their name and address (which is more than I normally will give anyone until I actually apply to the college) and not much else (no birthdate, prior education, and especially no phone number or e-mail address).
       
      Probably because the thing they are most worried about is junk mail, and in my opinion unsolicited phone calls and unsolicited email are much more annoying then junk snail mail. Snail mail annoys me once a day, email and phone are more often.
       
      As far as why they don't want to give you, an institute of higher education that information, in my own experience as a college student I get much more crap email from my university and others than I do from other sources.
    4. Re:Don't supply it in the first place! by syousef · · Score: 1

      Why would they trust that site more than an institution of higher education that is actually mandated by law to protect the privacy of those it deals with?

      Experience with the institution, lake of experience with the site.

      --
      These posts express my own personal views, not those of my employer
  11. hubris by seheart · · Score: 1

    hubris. outrageous, but expected. facebook is becoming too corporate and moving away from its roots. maybe the reason i barely go there anymore.

  12. Hmm by moogied · · Score: 1

    Privacy Violation Concerns.. TRIPLE WORD POINTS!

    --
    So basically, -1 troll/offtopic is really slashdots way of saying "I hate that you thought of something before me."
  13. Automaticly install applications? by zbend · · Score: 4, Insightful

    Wait, last time I checked Facebook doesn't automaticly install apps you have to do it and confirm you are allowing this app to acccess some of your information. They don't give third parties your info, you do.

    1. Re:Automaticly install applications? by EtoilePB · · Score: 1

      Ding ding! That's absolutely correct.

      I have a Facebook account, because as someone in that nebulous realm between college and her 30s, it's the best way to keep loose track of the people I knew in high school, college, grad school, back home, etc. But I consider it sort of a fancy Rolodex -- I've shot down every single application invitation any friend has ever sent me. They don't see why, but then again they're the ones with drunken-party-pictures on their profiles, too.

      Saying, "the average user should be intelligent enough to..." is always frought with difficulty, but aside from the Beacon business last year, Facebook is pretty transparent about how it works. Don't want to give the application access? Don't check the little box. Do you REALLY need a ninja score?

    2. Re:Automaticly install applications? by Mitreya · · Score: 4, Informative
      Wait, last time I checked Facebook doesn't automaticly install apps you have to do it and confirm you are allowing this app to acccess some of your information. They don't give third parties your info, you do.

      RTFA (and I quote:)

      To restate things--if you set your profile to private, and one of your friends adds an application, most of your profile information that is visible to your friend is also available to the application developer--even if you yourself have not installed the application.

      It seems that they do give my info to third parties - third parties being all the stupid applications that my friends installed. I keep very minimal info on my facebook account and don't install any apps because they require full access to my profile, but I still went and turned this sharing off just now. WTF, why did I just learn that every application that any of the 60 of my networked friends has installed could have been happily roaming through my account without my knowledge?

  14. So what's the Facebook Privacy Policy? by wiredog · · Score: 1

    If it is, essentially, "You have zero privacy anyway, Get over it" then the users shouldn't expect anything more.

    1. Re:So what's the Facebook Privacy Policy? by thelamecamel · · Score: 1

      It is "Facebook will not sell your data" in bold letters. They also have fine grained controls for how much of your profile your friends/your 'friends' and your fellow network members can see. As people outside your networks can not see your profile at all, there is an illusion of privacy. What you have little control over (and the control is fairly well hidden) is the data that your FRIENDS' applications can see on your account. I think there is a clause in the developer code of conduct that apps aren't allowed to store profile data, but that doesn't sound too enforceable.

      Basically you have privacy from other end users, but not from applications. You only experience facebook as an end user, so you might expect to have privacy in general. But this is not the case.

  15. Deserve or expect privacy? by gravyface · · Score: 4, Insightful

    Deserve? Yes, everyone deserves the right to keep their personal lives private. Should they expect privacy? Not likely. There's no free lunch in life, online or offline: why would Facebook spend many millions of dollars maintaining a social network without milking every last bit of profit out of their user base? They're going to do whatever they can get away with, period. I don't know why people find this so hard to grasp: it's like when I try to explain to people that those "free emoticons" they so fondly install are filling up somebody's offshore server with their personal information and filling their monitor with pop-up advertisements.

    --
    body massage!
    1. Re:Deserve or expect privacy? by owlnation · · Score: 1

      They're going to do whatever they can get away with, period.
      Absolutely. Tom is not really your friend, nor are Facebook.

      As with all things fashionable and yet ultimately empty, Facebook seems to have matured. It's not the next big thing any more. It's so last year.
    2. Re:Deserve or expect privacy? by ShatteredArm · · Score: 1

      That's exactly the way I look at it. Is it morally reprehensible and possibly illegal for Facebook to be sharing that information? Of course. Does that mean you should assume they're not going to do it? Nope. I don't put anything on there that I wouldn't want potential future employers to know about me.

  16. Prof Solove NOT at Georgetown by Anonymous Coward · · Score: 0

    Actually, he's at George Washington Law (one of those other "George" schools):

    http://www.law.gwu.edu/facweb/dsolove/

    also, has a blog at:

    http://www.concurringopinions.com/

  17. So why is this news again...? by NeoSkandranon · · Score: 5, Insightful

    Maybe I'm just that suspicious, but the first time I went to look at one of those "applications" on facebook, the first checkbox in a list of a half dozen you can select before you hit "go" was a riff on "Allow this application to access my personal info" ---I automatically assumed that meant ALL my info, and promptly cancelled whatever it was.

    Did anyone ever really have the assumption that that information was needed to make the app function, and not just a way of tricking users into giving up demographic info to third parties?

    Personally I'm not sure Facebook is in the wrong on this one. It's up in big letters that you're giving whatever application it is access to your personal info--and all those things are OPTIONAL to place in your profile. I don't know that it should their fault that users don't think it through and then become surprised/outraged when they find out what it really means.

    --
    If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
    1. Re:So why is this news again...? by thebonafortuna · · Score: 1

      I'm with you on this. Personally, other than my name, class, and home town, I never put anything up on Facebook which can comprimise me. I won't even give them my DOB, real or fake (they have come up with some pretty annoying ways of getting me to input this information, however). I barely use Facebook anymore, for the same reason I never signed up on MySpace -- I feel like I get assaulted every time I look at somebody's profile.

      I've never had any interest in adding applications to my account, and the one time I did click on one to have a look, I saw the disclaimer about personal information and promptly closed the window. Haven't bothered looking at one again. Those who do choose to install these applications also choose to post their personal information...if they don't read the disclaimer, that's their problem. Facebook is a company, not some benevolent fun time social network paid for with smiles and ice cream. They're in this to make money, and while I understand privacy concerns, this outcry may indicate a serious lack of realism amongst Facebook's user base.

      Facebook is a free service users opt-in to. They choose to input whatever information shows up on their profile. And they choose to install applications. If they don't like it, they can cancel their account and go elsewhere -- maybe even outside. If they install apps despite being warned about information being shared, and then get upset about it...well, good luck when you get out of college.

      *Beacon is the one exception I can think of here. Facebook should have been held accountable in some respect for the way they implemented that program, and opted everyone in without their knowledge.

    2. Re:So why is this news again...? by kninja · · Score: 1

      Totally. No one is forcing users to put their info into facebook. It's possible to register with just an email address these days. No Picture, just a name and an email.

    3. Re:So why is this news again...? by Anonymous Coward · · Score: 0

      What really surprised me was that typing random ids in the urls didn't show much about users due to their privacy settings, but fetching the same data using their ids with fql did in fact show more then I was allowed to, even though they didn't add or used my app.

    4. Re:So why is this news again...? by smithtuna33 · · Score: 1

      Mod parent up. This is not news, this is fud. Every user who adds an application on facebook receives a prompt with a checkbox, and it says "Allow this application to... [checkbox] Know who I am and access my information ....[more options]" If you uncheck the box, Facebook says: "Granting access to information is required to add applications. If you are not willing to grant access to your information, do not add this application." If at this point you check it anyway, you should damn well know that this application has all your personal info. The summary is extremely misleading - there is nothing "secret" about this system.

    5. Re:So why is this news again...? by Web+Goddess · · Score: 1

      i've really given up on any mod-up here at /. it's such a clannish place; nevertheless, I want to share on this topic. Humans are as predictable as lab rats in some respects. today we have such subtle marketers that the marketing can capitalize on our instincts.

      Just because our instincts are being exploited, does not mean we deserve invasions into our privacy. People use their own "best guess" when it comes to privacy, and CORPORATIONS pay other people to make sure the MOST customers are fooled.

      No. Just because FaceBook / clients FOOL people, does not mean those people deserve to lose privacy.

      Irate goddess at OORT (.com)

    6. Re:So why is this news again...? by NeoSkandranon · · Score: 1

      Who's being fooled though? It's stated clearly when you get those applications on your facebook profile that your info is being shared, and there's a link right there that explains in very plain language what is open to being shared with the application devs.

      While you are dead right in saying that humans are predictable (in this case following the crowds in installing these things just because "all my friends have it") but I fail to see how anything is going on here save for users failing to examine what they're doing.

      --
      If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
  18. WTF by mc+moss · · Score: 1

    Although I understand that if you post something on the internet, info or pics may be viewed by people that you don't want viewing them (ex: a friend of yours on facebook finds a pic you uploaded really funny and posts it somewhere else), this does not mean that facebook should start giving away info to whoever requests it. I currently have a facebook account and only my closest friends are facebook friends with me. Everything else is private and nobody can even search for me or know I exist on facebook. I haven't installed any apps and have beacon turned off. I try the best to protect my privacy and facebook should not being going around giving info away like this.

  19. Secretly? by starwed · · Score: 1

    I'm not so sure that it can be considered secret, given that when you install an application, it states up front that you are giving it access to your profile information.

  20. Translated Quote... by Spasemunki · · Score: 2, Insightful

    Facebook's position was summed up by Georgetown Law Professor Dan Solove, 'They seem to be going on the assumption that if someone
    uses Facebook, they really have no privacy concerns.'


    "They seem to assume that people who post their name, address, sexual orientation and gender on giant roadside billboards don't care if strangers know their name, address, sexual orientation and gender! It's like they think that people who go out into the crowded streets don't care who knows what shirt they're wearing!"

    1. Re:Translated Quote... by roggg · · Score: 1

      "They seem to assume that people who post their name, address, sexual orientation and gender on giant roadside billboards don't care if strangers know their name, address, sexual orientation and gender! It's like they think that people who go out into the crowded streets don't care who knows what shirt they're wearing!"
      The problem is, you have the ability to restrict who sees your name, address, sexual orientation and gender. In other words there is at least a facade of concern for privacy issues, however you cant restrict what applications see. You are clearly asked if this is okay when you install the application, so facebook is not doing anything unethical. It's all above the board, however much of the value of facebook is in it's applications, and they give you no way to participate without compromising your privacy. This is as big an issue as people want to make of it. They really should have privacy settings for controlling in detail what information an application can see about you. Applications could in turn decide what is necessary to work, and facebook would be off the hook.
    2. Re:Translated Quote... by kebes · · Score: 4, Informative

      You are clearly asked if this is okay when you install the application, so facebook is not doing anything unethical. It's all above the board... It's mostly above board. The part that isn't is that even if you don't install any Facebook applications, if one of your friends (who can see your private profile) decides to install an application, that app now has access to your profile. As TFA explains:

      Many Facebook users set their profiles to private, which stops anyone but their friends from seeing their profile details. This is a great privacy feature that can protect users from cyberstalkers and is completely gutted by the application system. To restate things--if you set your profile to private, and one of your friends adds an application, most of your profile information that is visible to your friend is also available to the application developer--even if you yourself have not installed the application.
      (Emphasis in original.)

      You can disable this loophole in Facebook's settings (go to Privacy > Applications > Other Applications and set it to "do not share"), but it isn't made very clear that by default your private details are nevertheless accessible to third-party apps through your friends list. Facebook should make this much more explicit (or perhaps have this setting default to "do not share" for anyone who sets their main profile to private?).
    3. Re:Translated Quote... by SportyGeek · · Score: 1
      I do not believe that is a loophole. In Privacy > Applications > Other Applications, it says

      The following settings apply only to Facebook Platform applications to which you have not already granted access or explicitly restricted.
      I take this as meaning that you can block applications that you haven't already granted access to your information and that when you add an application, you are granting access to your information.

      As a side note, I found applications that I had supposedly granted access to in my "Authorized Applications" that I do not remember adding to my profile. Go figure. I guess I should pay closer attention.
  21. It's an API by mattwarden · · Score: 5, Insightful

    Dude, what is so hard here? It is an API. Do people typically customize an API for every user (as in application using the API) to limit the available calls only to what is needed? It is an interface. The data available in said interface is CLEARLY DOCUMENTED. Yes, technically Scrabble has access to the religion of its users. Yes, it could be storing this.

    Seriously, what is confusing here? You have to agree when you add an application that it will be able to access your profile data. When you say 'yes, allow this', why would you be surprised that the application is then allowed to do what you just allowed?

    http://developers.facebook.com/documentation.php?doc=fql

    1. Re:It's an API by kebes · · Score: 3, Insightful

      You're right, of course. The fact is that Facebook provides a uniform, generic API. It's up to application developers which bits of information are relevant to their application.

      But that's not to say this is the only way to do it. It would be possible, for instance, to have the API set such that the application initially makes a request for which database fields it will need to use. Then the application is only allowed to use those fields; all others are invisible. When a user installs an app, it clearly shows which fields the app will be using. This would allow users to make informed choices about which apps to install. If "SuperPoke" says it will access your friends list, that's fine. If it says it will access your address and phone number, that's suspicious.

      My point is that Facebook decided to implement a binary security model: either you don't install the app, or you give it access to everything. This doesn't seem like the best model. As a general security rule, an application should be given access to the absolute minimum breadth of resources/data needed to do its job properly.

      This is why I don't install Facebook apps: there is no mechanism for controlling the security or even establishing a chain of trust for the application developer.

    2. Re:It's an API by lorenzino · · Score: 1

      Completely agree with you. And most of the time I look up at the dev of the application and .. I get even more suspicious. I have no application installed .. they bloat you home page, and more importantly, they make dump people sending you hundreds of [stupid¦evil] notifications. HATE IT. It might be interesting if you could give granularity to the access they've got.

    3. Re:It's an API by SteveAyre · · Score: 1

      Yes, technically Scrabble has access to the religion of its users. Yes, it could be storing this.

      However if they do so for longer than 24 hours (for caching), show it to anyone unless the Facebook user requested it and a few other things they're breaking their agreement with Facebook, so any application caught doing so could be kicked off of Facebook.

      (Of course spotting applications doing so could be rather tricky...)

    4. Re:It's an API by yukster · · Score: 3, Informative

      Yes, technically Scrabble has access to the religion of its users. Yes, it could be storing this. Actually, the developer terms of service explicitly prohibit storing anything other than ids (pretty much):

      http://developers.facebook.com/documentation.php?v=1.0&doc=misc
    5. Re:It's an API by Web+Goddess · · Score: 1

      Yes, technically Scrabble has access to the religion of its users. Yes, it could be storing this.

      No. Technically. Scrabble does not have access to private information.

      Goddess. increasingly irate, at oort dot com.

    6. Re:It's an API by The+One+and+Only · · Score: 1

      So technically Scrabble could simply make a call, though Facebook, to get the religion of its users whenever they wanted it.

      Only 1 out of a half-dozen phone companies told the NSA to go fuck themselves when they came asking for call records. How many application developers are there? How many people does the CIA have to ask until they find out what my favorite movies are?

      --
      In Repressive Burma, it's not just your connection that dies. slashdot.org/comments.pl?sid=314547&cid=20819199
    7. Re:It's an API by mattwarden · · Score: 1

      Would be helpful if you elaborated...

  22. Yes and no by MikeRT · · Score: 3, Insightful

    I have never bought into the argument that communicating online should always be legally regarded as the equivalent of having a conversation in public. People frequently put access controls and encryption on information sent over the Internet, and it's not like every person on the Internet has the ability to listen in on what you're saying in an IM conversation, emails, etc. There should be a reasonable basis to assume privacy in certain contexts, such as email and IM. IMO, the law should sanction people who eavesdrop on such communications without a good reason.

    With Facebook, it all depends on the context. They should be required to show what information they are passing onto their application developers, but there should be no legal protection beyond that. People should be able to sell off their personal information in exchange for something they want. The only reasonable issue here is when the user is not able to reasonably find out and consent to the sharing of the information.

    Personally, I am a lot more concerned with things like the FBI's latest attempts to get carte blanche access to email. If there is any institution that will destroy privacy in America, it's the federal government. Every major information/privacy issue that comes back to haunt the average person stems from the law or law enforcement agencies. The reason we worry about identity theft on the financial side of things is that the **law** does not put the onus on the lender to verify the identity of their customer. Why should it be my responsibility to ensure that someone isn't signing up in my name for credit cards? You worry about devastating legal decisions for privacy? The precedents are being set by the DoJ, not corporate America.

    1. Re:Yes and no by wwahammy · · Score: 1

      I think you bring up a good point in saying that assuming everything online should be public is wrong but we need to take it a step further. If people are unable to express themselves online without fear of retribution from an employer or school, then isn't the internet an anti-free speech zone?

      A few years ago a couple posted pictures and videos of themselves online. The woman was fired from the hospital she worked at as a nurse because of that. Now did she commit a crime? No, it's totally legal. Does it prevent her from doing her job? Not at all, but she was still fired. You might feel that she should have known better. What about if you protested against the war on your weekends? How about if you were a member of the Democratic Party? What about if you wrote your Congressman to explain why you think the DMCA is bad? You can be fired for each and everyone of those activities.

      This didn't happen a lot before (excluding the Communist purges in the 50s) but the internet gives employers an easy way to check up on employees that didn't exist before. The right to free speech is held hostage by employers and the law hasn't caught up to technology unfortunately. The law should protect the right of employees to engage in legal activity not related to their work.

    2. Re:Yes and no by wwahammy · · Score: 1

      To clarify, the photos and videos were pornographic.

  23. Politics by Anonymous Coward · · Score: 0, Interesting

    I registered on Facebook with a made up name just to see what the fuzz was all about and found out that the only serious options you can choose when it comes to politics are:

    Liberal
    Very Liberal
    Moderate
    Conservative
    Very Conservative
    Libertarian

    My first thought was "typical american bullshit", then I logged out never to return.

    1. Re:Politics by Anonymous Coward · · Score: 0

      Aw, wow, Anarchist isn't an option?

  24. Profile of Facebook users by Zollui · · Score: 1

    They are youngish and tend to be under-par in terms of computing/IT literacy. I have been asked by friends to create a Facebook account, which I have done albeit using an invented name and invented personal details (e.g. date of birth, home town, etc.) It's not a good idea to use Facebook in the manner in which it was intended.

  25. I've really started to dislike Facebook by bennomatic · · Score: 1

    It has the potential to be a really great tool, but there's a little too much social in this social network. The boundaries aren't clear and simple, and just about every transaction *REALLY WANTS* to share your information with other people.

    I can't count how many times I've received notifications from people who were intending to send a private message to someone else. Whenever I do a quiz or something, I have to go out of my way not to "share with my friends" or "invite my friends to beat my score." I just want to have some fun and *CHOOSE* to have friends to participate, rather than having to do an extra step just to avoid sending out information about my activities.

    At this point, I'm up to here with zombies and vampires. I log in to do the occasional fun quiz, or send a message to a friend who does more FB than email; otherwise, I stay away from FB.

    --
    The CB App. What's your 20?
  26. Re:Profile of Facebook users by trolltalk.com · · Score: 1

    So you're on facebook as George Bush?

  27. What world will you live in? by Anonymous Coward · · Score: 1, Insightful

    Everything is going online. It is now, not in the future, that we demand privacy and protection.

    I do everything online. This includes transmitting legal documents, banking and having meetings. When I have a meeting at a local restaurant, I don't expect them to bug my booth and listen in. Sure, having a conversation there isn't giving them "personally identifiable" information but aggregated, the information can identify me, my clients and my work.

    When I use my bank, I don't want them to transmit my transactions save my name to a 3rd party. Why? Pretty soon someone can piece together my actions (always buying a beer at this location on friday night between 8:35-9:05pm) and me.

    What I think we need is a blanket privacy statement and recompense if broken.

    Every action I'm engaging in is now somehow online. My banking, entertainment purchases, my religious organizations. I only expect more and more of what I do to be online. It's the way of the future, databases and all that. You can say "just don't use it" but the reality is every action has become easier because someone created a database and now those databases are online.

  28. If You Want It Private Keep It Private by John+Hasler · · Score: 2, Insightful

    > They seem to be going on the assumption that if someone uses Facebook, they really have
    > no privacy concerns.

    Sounds like a reasonable assumption to me.

    > Do Facebook users deserve privacy?

    Sure. And they can have it. All they need to do is keep the stuff that they want to remain private off Facebook.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  29. Missing The Point by zubikov · · Score: 1

    I'm sorry, am I missing the point of Facebook, or is it a PUBLIC SOCIAL NETWORKING site? If you have a problem with your drunk pictures making it to your boss's desk, or you'd rather keep your sexual orientation to yourself, then don't put it out there for the whole world to see. Simple as that. Sure there are "privacy settings", but come on we all know it'll get out there eventually through friends and links. That's just being realistic.

  30. It's quite poopular by FrameRotBlues · · Score: 2, Informative
    I started reading the virginia.edu piece, and came across this line:

    It's been a wild success: the most poopular Facebook applications have around 24 million users[...]

    That's just it: no one who adds the applications gives a crap about their privacy. When you add an application, there are several checkboxes, and you don't have to have them ALL checked in order to add an application, but the only one you DO have to have checked is the "Allow this application to know who I am and to access my information" box. If you uncheck that and try to add the application, Facebook tells you that you need to have this checked, and if you don't feel safe about that, don't add the application. Therefore, IMHO, Facebook gives plenty of warning to those adding applications.

    However, I have very few applications on my Facebook - I don't care about the OC, or Dawson's Creek Quotes, or Hot Or Not. I find that the demographic of people that add those kinds of applications don't give two shits about their privacy, and they never read the fine print. They just want to show their friends how much they like the OC or Dawson's Creek. It's just natural selection, internet-style.

  31. privacy? by Deanalator · · Score: 1

    Facebook users deserve privacy in the same way that swimmers deserve dryness.

    The whole point of social networks is that it allows one to easily control the information that they radiate. Remember when all we had to go on was rumours? Now we know who is gay, we know whose brother was killed in a car accident last year, we know that our previous significant other is now dating again. All of these things that once might have been awkward to bring up are now just pieces of information. If facebook and myspace are any indication, people are tired of keeping secrets, and hearing rumours about themselves, and welcome the opportunity to control the information about themselves directly. I think that this age of information is the best thing that could be happening to this world right now.

  32. Out of step by Dan+Posluns · · Score: 1

    One of the things I liked best about Facebook when joining was that it wouldn't reveal anything more than my name and photo to people searching for me until I approved them.

    The way they handle privacy when it comes to applications is surprisingly out of step with that sort of sensibility. Which is why I won't install anything... it'd be one thing if I was told "this application needs to know your name, age and hometown" and the reasons made sense, but there's no way I'm installing "Happy Vampire Fun Wall O' Pirates" under the blanket provision that it gets to know whatever private information it wants about me.

    Yet it doesn't seem to stop anyone else, as I still get bombarded by endless requests for such things... I suppose people are just more willing to trust a faceless application than they are the actual individuals they know might be looking them up...

    Dan.

  33. Well, I kinda agree... by immcintosh · · Score: 1

    These people are putting their personal information up on a site, the purpose of which is to share your personal information on. Now, granted there are varying degrees of access you can grant people, but I wouldn't assume too much privacy in doing so. I think the real problem here is people just assume they can go handing out whatever willy nilly and it'll just "all work out."

    My take? If you don't want your information shared with abandon, don't put it on a site that has made its while business on sharing personal information with abandon. I've really never understood this silly social networking on the web fad (but then I'm just an old fogie on the inside).

  34. I don't use any of the applications by Ralph+Spoilsport · · Score: 2, Interesting
    I got burned once too many times by crappy idiotic third rate nonsense "applications" on facebook. Someone sent me a kiss, so I sent one back, but I had a bunch of windows open and didn't notice that I had just sent a kiss to EVERYONE. Now they all know I love them, that's no big deal, but it's the assumption of broadcasting and the will to spam itself that I find offensive about facebook.

    So, one day, I just sat down and yanked most of the applications out. so, if you send me something on the Funwall, sorry - I won't be seeing it. And if you have some dorky movie compatibility quiz, I won't be playing the game. If you want to contact me, there's a facility for sending messages and comments. If you can't get put enough words together to do that, then you're probably not one of my friends, anyway.

    Facebook has outlived its usefulness.

    Perhaps something like allvoices.com will be the next big thing because there, you have to do something - contribution to the data matters more than just being a consuming node for a data mine.

    RS

    --
    Shoes for Industry. Shoes for the Dead.
  35. IQ != ? by G3ckoG33k · · Score: 2, Funny

    As you know, IQ doesn't necessarily correlate positively with the hours in front of a computer. It may have been true in the 50s, 60s, 70s, and 80s, and to some extent the 90s, but surely not for this decade... The undeniable charm of the Internet destroyed that. :)

    -

    1. Re: IQ != ? by Anonymous Coward · · Score: 0

      You might want to double check which saving throw you're using. The decision to post personal info has little to do with the silly "IQ scale" which is more a measure of pattern recognition, spatial awareness, and analytical reasoning. It's more about knowledge of how stuff works and the behavior of other people.

      In other words, it's a D20 vs wisdom, not intelligence.

  36. Blacklists suck by Benanov · · Score: 1

    I've turned off the API (had to remove all the applications that aren't built-in to Facebook to do so, but I knew that) ...And I still get spam in my news feed from some friend adding an Application.

    I block every single one my friends add, mainly because blocking an application turns off the spam in the news feed from all the applications. It's common knowledge on Slashdot: blacklists suck.

    I'm actually trying to use Facebook in the manner it was prescribed, but in order to protect some semblance of my information I have to be very choosy in what I provide.

    There is no balance. It's either world-viewable or non-existent.

  37. University... by manXxon · · Score: 0, Flamebait

    University of Vagina. Crap, I need new glasses :\

    --
    Only two things are infinite, the universe and human stupidity, and I'm not sure about the former. (A. Einstein)
  38. Allow this application to... by sherriw · · Score: 2, Interesting

    I have a friend who thought that the check box "Allow this application to know who I am and access my information" meant:

    Allow it to know my name. Allow it to 'know' the info I put into the application itself. Ie, what I type INTO the funwall. She didn't know that it meant 'access my PROFILE information'.

    I think this should be clarified to: "know who I am and access all of my profile information."

    1. Re:Allow this application to... by Dhalka226 · · Score: 1

      Clarification is always good. No problem with that.

      However, it seems to me that the easiest and best solution is to simply add a field to a user's account: "Treat Facebook Applications as a [Friend|User|Guest|whatever other access levels they might have]." In other words, to pretend there's some "Facebook Applications" account. If you "friend" apps, they can see all the information that your friends could see if they went to your page. If they're a guest, they get whatever a guest can see based on your preferences. (Believe it or not I haven't used Facebook; I'm assuming it's much like MySpace in that you can choose whether everybody or just "friends" can see most of your information.) Set it to whatever Facebook likes best--I assume this would be "friend" or whatever the highest level of access to a person's profile is--and send out an email telling people they're free to change it.

      I mean, Facebook is not not rummaging through your medical records to find out your sexuality or anything like that; if it knows that information, it's because you've chosen to enter it. The privacy issue is that you may have chosen to restrict that information to only friends. Why not mirror that choice to the applications? It seems like something that should make everybody happy.

  39. It wasn't like this when I first signed up by solar_blitz · · Score: 1

    I was a sophomore when Facebook was put onto the series of tubes. At first I was reluctant to sign up, and for the same reason most are inciting right now: loss of privacy. I mulled it over and realized that Facebook was a good tool to keep in touch with people you could not or would not see that often. This can be important, especially in the college environment the site was designed for. You'd have one class with someone you were interested in - either as a friend or something else - and then you'd never see them again. So for those of us who wanted to continue keeping in contact with one another on a semi-regular basis, we could just look each other up on Facebook. The same went for getting in contact with old high-school buddies, too.

    But depending on how you use it, it can be a good or bad thing. Anybody who has used Facebook could easily use it to scan different people they like and try to find out more about their personal life (and trust me, many people do it). If a girl or guy you like is "in a relationship", that feels pretty bad. But hey, if they don't even list themselves as "in a relationship" and are seeing somebody, is that worse? It's a real insecure thing to do, but college students are about as insecure as they come.

    In all honestly I made a bunch of stupid mistakes on my Facebook profile that got me into some trouble with friends - thankfully, it didn't have any impact on my professional life - but I learned my lesson the hard way. From what I can tell, there's no harm in Facebook as long as you don't post "naughty" stuff like discriminatory remarks and racy photographs. You might as well wear an "I'm with stupid" t-shirt to every job interview and career fair you attend.

    Now, though, you have to be wary of anything you put onto your profile because you don't know which program will take information from it. Big business found Facebook and thought to itself "That's a huge demographic", just like they thought when they first discovered the World Wide Web.

  40. "Secretly"? by quadelirus · · Score: 2, Insightful

    I don't see how this is a big secret. When you add an application there is a checkbox that says (and I quote), "Allow this application to... Know who I am and access my information." If you uncheck this box Facebook tells you "Granting access to information is REQUIRED to add applications. If you are not willing to grant access to your information, DO NOT ADD THIS APPLICATION."

    I saw this the first time I went to add a Facebook app, and thought "hey, I don't want that, so I'm not going to add it."

    Facebook is an advertising platform just like everyone else, so either I'm missing something (which, I'll admit is entirely possible--I recognize that I make mistakes all the time), or is there really a story here?

    BTW, just read the terms of service for each application--if it doesn't say what they will do with your data, don't add the app. Then it isn't a whole lot different than putting the same data into any other web application. Also, being aware that this can happen, don't put data on your facebook profile you don't want the rest of the world seeing. It's not rocket science-just common sense.

  41. brilliant by Anonymous Coward · · Score: 0

    You just invented P2P.

  42. The Facebook Riots are Coming by balls199 · · Score: 1
    This is just the beginning. As I've predicted on my blog, there will be Facebook rioters on the street.

    After repeatedly ignoring privacy concerns, all Facebook users revolt. The revolt initially remains confined to Facebook, but will suddenly explode through the Internet, then out into the streets of every major city. ... Social rioting becomes the next hot technology, and 1000's of entrepreneurs collectively raise billions of dollars to entice more people to riot. When asked how they plan to make money of the rioting, the entrepreneurs will shuffle their feet and mumble something about advertising.
  43. Facebook Developer by justfred · · Score: 4, Insightful

    I'm a newbie Facebook app developer.

    Here's the info I can see for any user that adds my app and clicks the box:

              uid*, first_name, last_name, name*, pic_small, pic_big, pic_square, pic, affiliations, profile_update_time, timezone, religion, birthday, sex, hometown_location, meeting_sex, meeting_for, relationship_status, significant_other_id, political, current_location, activities, interests, is_app_user, music, tv, movies, books, quotes, about_me, hs_info, education_history, work_history, notes_count, wall_count, status, has_added_app

    (More info on the already-linked http://developers.facebook.com/documentation.php?doc=fql )

    To me this seems like way, way too much. I haven't told our marketing people we can get all this.

  44. Stupid Question by dwye · · Score: 2, Insightful
    From someone who, for the most part, cannot conceive why people would want to use an Internet-based something like Facebook, in the first place (seriously, why post your life to 1 billion Chinese, let alone any other group?):

    Why is the application not treated as-if it were another user? From what I understand, there is a reasonable granularity of privacy settings for users. Let each app be a unique user, and you automatically get these benefits.

    Or are the apps client-based, so that my Facebook on machine X can use apps and on machine Y it cannot, because of how it was set up? In this case, I suppose that I understand (since an app running as "me" only restricts "my" privacy as a favor, and cannot be compelled or punished, except by deletion).

  45. "Do Facebook users deserve privacy?" by powerlord · · Score: 1

    From the Fine Summary: ...Do Facebook users deserve privacy?


    Deserve privacy? Probably, but these are same people who post pictures of themselves engaging in illegal/inappropriate activities (underage drinking, drug use, etc.), and then wonder why "the wrong people" got into their "personal" files.

    What they truly deserve is "common sense" to know that posting things on the net (or on any computer/space outside YOUR control) means others could have access to that information, and to think and consider what to do before you use it. Likewise they should have enough common sense to think that if they choose to divulge information about themselves Wholesale, they shouldn't be surprised when Identity theft rates skyrocket in the near-future, once some unscrupulous character gets a hold of the data Facebook is happy to dish up.
    --
    This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
    1. Re:"Do Facebook users deserve privacy?" by WillAffleckUW · · Score: 1

      Define Underage.

      In France, it's legal to drink when you're 6. If your parents say you can. At 16 it's legal to drink without their permission.

      And 16 is drinking age in the UK too.

      How do you know it's underage? When I was in the military, federal drinking age was 18, so while it might be 21 in the state I was in, I can drink on base at 18.

      --
      -- Tigger warning: This post may contain tiggers! --
    2. Re:"Do Facebook users deserve privacy?" by powerlord · · Score: 1

      Define Underage.


      That's exactly why I DIDN'T use a specific number. You are underage if you were below whatever you're jurisdictions age was. If you weren't to young, then you wouldn't have a problem later, although the pictures of being completely shitfaced that employers might dig up, are usually a bad idea in most cases.
      --
      This space for rent. All reasonable inquiries will be entertained at proprietors discretion.
    3. Re:"Do Facebook users deserve privacy?" by Vegeta99 · · Score: 1

      I think that Federal rule still applies. I was on a Parks Service campground drinking with a few friends one time and the park police came by and saw the beers in our hands. We thought we were fucked, but he rolls his window down, says "You all 18?", we showed him our IDs, and he thanked us.

      We all just kinda stood there... uhhh.... wtf? We had to get a 21 year old to BUY it why can we DRINK it?

    4. Re:"Do Facebook users deserve privacy?" by WillAffleckUW · · Score: 1

      So if I post a Facebook pic of me and teen friends getting drunk on our trip to France ...

      What's your damage?

      --
      -- Tigger warning: This post may contain tiggers! --
    5. Re:"Do Facebook users deserve privacy?" by jackhererUK · · Score: 1

      As a raging pedant i must point out that in the UK you have to be over 18 to buy alcohol. To drink alcohol legally purchased then you only have to be over the age of 5 so long as you are not drinking it in a bar/pub/club.

    6. Re:"Do Facebook users deserve privacy?" by WillAffleckUW · · Score: 1

      As a raging pedant i must point out that in the UK you have to be over 18 to buy alcohol.

      Oh. Dang, when I was in the UK all the vending machines in the hotels said 16 - I seem to recall this was one of my high school's high points in London ...

      --
      -- Tigger warning: This post may contain tiggers! --
  46. So basically by WormholeFiend · · Score: 4, Interesting

    the title of this post should read "People are sharing too much personal data with Facebook"...

  47. Correction and Plug by Anonymous Coward · · Score: 0

    Solove is not at Georgetown, he is at George Washington. (I'm a student of his, posting from a public terminal in the George Washington University Law complex.) His book, The Future of Reputation talks about a lot of the issues raised by this article. I highly recommend it to anyone interested in this sort of thing.

  48. So don't use them by Rix · · Score: 1

    No one is forcing you to use the apps, or facebook at all for that matter. Personally, I just don't put anything in facebook that I'd be upset about being public.

    That said, it would be nice if they had granular control over what is released to apps, like they do for every other aspect of the site.

  49. Lay off... by Farhood · · Score: 1

    Dude, keep quiet!!! My fake Method Man profile has over 15k friends...and we're data mining like never before!

  50. How to fix it by grilled-cheese · · Score: 1

    My thought on how to fix this is to mandate each application to request specific information instead of just getting access to everything.

    That way when people add applications they are prompted to allow an application access to specific information. I believe that if people realized exactly what information was being shared, rather than "Know who I am and access my information", they would think twice on adding applications that required irrelevant information.

  51. Not Practically Speaking by Anonymous Coward · · Score: 0

    I agree with you to a degree. If you REALLY can't afford to have something read by others, then DO NOT POST IT ONLINE PERIOD.

    However, the world is not black and white.

    Consider walking down the street. Theoretically, you could have your picture taken and posted online. There are things you do in public that you assume will not be placed online. If you assumed everything would go online to be seen by everyone, you probably couldn't function properly in society.

    Realistically, there is a tradeoff...

  52. Good luck to these companies by WaroDaBeast · · Score: 1

    To share information about people who, like me, are living overseas.

    --
    "The body may heal, but the mind is not always so resilient." -- Deus Ex: Human Revolution
  53. Re:The assumption is that we tell Facebook the tru by urcreepyneighbor · · Score: 1

    Now, true, half my friends post pics of their drunken parties (yo! Aislinn and Katelyn! love the pics!), ooh, goodie! More drunken college girls to add to my 125GB collection.

    Yesh, my precious....

    We all realize you're all pervs. No, I'm not!

    *faps frantically to drunken college girls making out*
    --
    "The fight for freedom has only just begun." - Geert Wilders
  54. Facebook = Myspace by WebmasterNeal · · Score: 1

    Ever since facebook added those stupid applications to their site people feel the need to add EVERY SINGLE ONE to their profile. Often times it takes several rolls of the mouse wheel to post a comment on someones wall (assuming you skip past their "advanced wall" and "super happy fun wall")

    Facebook used to have a great sense of style on their site (something myspace has always lacked) but since they've opened their site up to blind/color blind developers it sucks.

    I've tried to avoid the applications like the plague, since I've always figured they got access to more information than I wanted, but there are a few apps that work well and look good at the same time.

    --
    "During My Service In The United States Congress, I Took The Initiative In Creating The Internet." -Al Gore
  55. Re:Free Software and Free Networks Solve the Probl by Macthorpe · · Score: 0

    So, your solution to Facebook sharing too much of your personal information is for you to host your personal information yourself then share it via a P2P-like system with as many free software owners as possible?

    You seem to have overlooked the fact that you only have to give Facebook as much personal data as you feel you want to share. How does changing the distribution method absolve you of the care of your info?

    --
    "It does not do to leave a live dragon out of your calculations, if you live near him." - Tolkien
  56. The problem with facebook... by kellyb9 · · Score: 1

    Just a few thoughts I've had about the so called social networking revolution: Initially, I didn't mind facebook and I had one of my own. I used to keep in touch with people at school. It was simple, you couldn't add any ridiculous templates to the site like MySpace. It was visually appealing, etc. Then they decided to introduce feeds. Everyone pretty much hated this, and I think eventually they scaled it back a little bit, but you essentially knew every time someone entered something into someones wall. Not really the service I signed up for, but I could deal with it. THEN they opened up their API, probably the single dumbest move I've ever seen. Now I'm getting emails to join the battlestar gallactica game on facebook and getting stupid quotes from television shows in my mailbox every f'n day. AGAIN, Not the service I SIGNED up for. Bottom line is, I understand when I signed away my rights they could pretty much change the terms at any time, but how much is TOO MUCH. To make matters worse, I can't delete my account. Facebook has no option to rid their databases of your personal information. Apparently their database administrators aren't sophisticated enough to develop a DELETE statement!

  57. ...really? by ody5iu5 · · Score: 1

    There is no secret - of course Facebook shares information with the applications its' users installed, the users agree to grant access to the applications every time they add one. At what point does personal responsibility become part of the equation? How many times does Facebook or any other system for that matter, have to ask you if you're *sure* you want to let people know that your favorite color is green. And honestly, does it really matter that much? Facebook doesn't share any of you're legitimately sensitive information with the applications i.e. phone number, IM contact information, email address, etc... Furthermore, Facebook applications are only allowed to store a very limited amount of anonymized information (IDs that require users' permission to be exchanged for associated data) about their users for a limited time and are required by the TOS to delete it if the user removes the app.

  58. Photo Albums are shared to everyone by default by Anonymous Coward · · Score: 0

    Your photo albums are shared to EVERYONE by default, and there is no way to change the default. You have to manually change every album separately.

  59. I doubt is has much to do with privacy... by The+Queen · · Score: 1

    I think the shift you're noting has more to do with the overwhelming bulk of e-mail than any perceived lack of privacy. I am finding that many of the e-newsletters and things I used to think were so entertaining/useful/enlightening/etc. are now just junking up my overcrowded inbox. I would much rather get a brochure in the mail than to try to save a dozen huge online brochures and have to read them on my screen... or to have an e-mail volley with some recruiter who may or may not ever stop spamming me.

    --

    The House Between - Original Sci-Fi Series
  60. It's not that simple by Gordo_1 · · Score: 2, Informative

    Even pictures you didn't know existed get posted on the Internet and become essentially public information tied to you through facebook due to your meddling friends. This is how my privacy was breached: I accepted a friend's invitation to join Facebook. I input my real name, username and a password. That's it, I added no other details because I didn't really want an account, I just wanted to see pictures in his profile. Little did I know that I'd be subsequently deluged with requests from various acquaintances to reconnect after a dozen or more years -- I graciously accepted connect invitations, but refused to add any applications at all. Then a number of my friends who snap pictures at bars we hang out at or football game we go to, started identifying me in various snapshots, and these pictures are forever tied to my account. No I'm not happy about this, but serves me right for even signing up in the first place.

    1. Re:It's not that simple by Runagate+Rampant · · Score: 1

      why not just click the "remove tag" link under the photo?

    2. Re:It's not that simple by Death1985 · · Score: 1

      That brings up an interesting point. A friend of mine was "forced" into signing up to facebook because her friend created an account for her that included embarrassing, untrue comments requiring her to sign in and actually change her information and, to some extent, revealing more information than she wanted to. Since there are no ways to completely delete accounts (that I am aware of after reading posts) as well as verify the legitimacy of people signing up, I wonder how many people are forcibly caught in the facebook web of data collection.

    3. Re:It's not that simple by uhlume · · Score: 1

      http://www.facebook.com/photo_search.php

      Click on each photo for larger version, then click on the words "remove tag" next to your name beneath the photo. (I believe this also prevents anyone from re-tagging the photo.)

      Unfortunately, there doesn't seem to be any way to opt out completely. (Although it occurs to me that disabling searches for your account may disable tagging as well, since the tagging feature performs an implicit search on the name. Worth an experiment.)

      --
      SIERRA TANGO FOXTROT UNIFORM
    4. Re:It's not that simple by kieran · · Score: 1

      Have you even looked at the privacy settings (so that others cannot see from your profile what photos are tagged of you), or tried untagging yourself from thoses photos? Hint: you can't be retagged if you do.

  61. Should We protect them from their stupidity? by Requiem18th · · Score: 1

    Of course, Facebook has a jihad on privacy and we, slashdotters, understand that every piece of data you give them directly, plus some data they get indirectly, is forever theirs to aggregate, analyze and sell. We also know that some people, specially college students are under enormous peer pressure to join it but, in our characteristic disregard for socialization, blame them for their weakness of character, and down right stupidity.

      But, our culture is littered with evidence that we do in fact protect people from themselves all the time. We protect minors from alcohol, we protect children from sex, we protect drivers from accidents, we protect everybody from drug abuse. We protect -as much as possible- everybody from jumping from building, we protect people from falling of riffs, we protect people from wet floor for Gaia's sake.

      Of course some of these protections are debatable but the fact is that we do protect people from themselves, all the time. So yes, we have to heavily regulate the activities of Facebook or any other site with such potential for disaster. There is no question about it. Or you disagree because...?

    --
    But... the future refused to change.
  62. Re:The assumption is that we tell Facebook the tru by MagusSlurpy · · Score: 1

    Facebook believes me to be named Duncan Idaho, with a hometown on Giedi Prime, and a "Follower of Muad-dib." I, frankly, could give a damn whether or not they sell that information.

    Of course, since the last time the FBI came to visit me (for using Dune as the basis for a RESIGNATION LETTER), maybe I should be more careful. . .

    --
    My sister opened a computer store in Hawaii. She sells C shells by the seashore.
  63. how is this terrible? by Durnsilicious · · Score: 1

    I just came from my facebook page, and I looked it over very carefully, and there isn't information on there that I care if the "corporate fat cats" know or not, does it help them to know that I am interested in "boring crap"... or that when asked to describe myself i say "I'm tall like things that look ugly music thats bad, hate dorks, but love dorky stuff".... my point is that b/c something is out there doesn't make it dangerous. and Personal information on facebook doesn't include bank accounts, credit cards or social security numbers. So why do people care? And: Hasn't market research been doing this for years? look at cigarettes Salem, are seen as a city kind of new young hip brand, while Marlboro are the cowboy rebel cigarettes, why? becuase they found out those brands were being bought mostly by those people so they changed the image to support that And voting data too? We[the US] can break down the votes for the past 10 elections by race, age, number of brothers and sisters, heritage, and damn near anything else we can think of. At the very worst breakdown of privacy on this level will help alert you[facebook users] to products you may enjoy... if your so anti-corporate that that bothers you, then why do you have a facebook?

  64. Utter bullshit. by jotaeleemeese · · Score: 1

    Privacy is not a matter of money, it is a matter of will.

    And in some cases a matter of compliance with the law, I would be very surprised if they are not breaking EU or UK law... An enterprising solicitor will get them by the short hairy ones.

    --
    IANAL but write like a drunk one.
    1. Re:Utter bullshit. by Tim+Browse · · Score: 1

      My point was also that you deal with your bank in the matter of currency.

      In Facebook, that currency is your personal info, and your eyeballs on adverts. It's like saying why can't you deal with your bank without them having to keep hold of your money, and earn interest on it, etc. It's what they do. It's how it works.

      Facebook makes most of this reasonably obvious, but they're banking (ha!) on the average person not caring or reading what they're told.

      I don't have much opinion on whether this is good or bad. It's obvious to me that a site like Facebook has to make what money it can from advertising or using/selling personal info, so I treat it as such. I guess it's not obvious to a lot of people, and they don't. I find it hard to get worked up about it. As many people have said, if you really don't want your personal info made public, don't put it on the internet.

  65. They want my real name.... by jotaeleemeese · · Score: 1

    When you meet strangers the get the first name, at most. Never the full name.

    At that point I decided not to join this "revolution"....

    --
    IANAL but write like a drunk one.
  66. Can't find the settings... by jackhererUK · · Score: 1

    I put only the most limited info in my profile, basically that I am a 32 year old, liberal pastafarian but i still try to keep unwanted apps away from my info. I rarely install thrid party apps (i think i have 2 or 3 installed), and i only do it for apps made by people who have that info anyway. I wasn't aware that my friends apps could access my info without installing them, if they can then why would you have to install them? I have tried to disable it by following the instructions in the article but there simply isn't the "other apps" section in my privacy settings it refers to. Anyone else had this problem?

  67. another article about this by Anonymous Coward · · Score: 0

    is in this week's Chronicle of Higher Education
    http://chronicle.com/free/2008/02/1489n.htm

  68. ICQ spam by davotoula · · Score: 1

    Ah, so that is why I have started getting ICQ spam recently... something I haven't had for years. I guess what they say is true: if it is information you don't want to share with the public, do not put it on the Internet!