Slashdot Mirror


Facebook the Most Dangerous Social Tool For Businesses

wiredmikey writes "According to a recent study Facebook is by far the most popular and most dangerous social media tool among small-to-medium-sized businesses, with 69 percent of respondents reporting that they have active accounts with this site, followed by Twitter, YouTube, and LinkedIn. Facebook is also the top culprit for malware infections and privacy violations, e.g. the leaking of sensitive company information. YouTube took the second spot for malware infection, while Twitter contributed to a significant number of privacy violations. For companies suffering financial losses from employee privacy violations, Facebook was again cited as the most common social media site where these losses occurred, followed by Twitter, YouTube, and LinkedIn."

38 of 142 comments (clear)

  1. "Dangerous" is ambiguous by iONiUM · · Score: 3, Interesting

    Dangerous in what form? I don't get that.

    For malware specficially, well I guess that isn't surprising, I have a facebook account and I always see my friends posting links that are clearly spam. I guess some other people see this and click on it (by accident or not) and then they get infected too, and so it spreads.

    1. Re:"Dangerous" is ambiguous by camperslo · · Score: 2, Informative

      Malware is reportedly up about 50% this year. Wondering who the targets are?

      GData Software , a German anti-virus firm, details some malware numbers.

    2. Re:"Dangerous" is ambiguous by oatworm · · Score: 3, Insightful

      Y'know, they don't call them "rootkits" because they originally came out on Windows...

    3. Re:"Dangerous" is ambiguous by mp3LM · · Score: 3, Funny

      *nix machines are effectively immune to viruses.

      Just a note for anyone reading these comments - the parents statement is made up and not true.

      Thank you for your time.

    4. Re:"Dangerous" is ambiguous by sitarlo · · Score: 2, Insightful

      There are 1001 ways a social engineer/criminal/con artist can exploit information found on social networking sites. People who post personal or business information on sites such as Facebook or Twitter are stupid. Want to fight cybercrime? Make the internet anonymous again!

  2. Slashdot in 2010 by bonch · · Score: 5, Insightful

    Almost all of the last 20 or so stories have been about either social networking sites or Google and its products. Man, I remember when programming topics actually used to make it to the front page. You know, news for nerds.

    1. Re:Slashdot in 2010 by geekoid · · Score: 3, Insightful

      welcome to being a market demographic.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    2. Re:Slashdot in 2010 by DragonWriter · · Score: 4, Informative

      Almost all of the last 20 or so stories have been about either social networking sites or Google and its products. Man, I remember when programming topics actually used to make it to the front page. You know, news for nerds.

      Being generous and counting Android (even though it was only briefly owned by Google between the time Google bought it and the time Google transferred it to the Open Handset Alliance) as a "Google product", and going further with that generosity and counting a story about HTC Android phones as being about Android rather than the specific phones and thus a "Google product", I count 7 of the 18 current front-page stories that are either about social networking sites or Google and its product (one of which is about a forthcoming Google social networking product.)

      Being even more generous and assuming that the two next most recent stories were also about social networking sites or Google and its products, that's still less than half of the last 20 stories.

      Aren't "nerds" generally supposed to be detail-oriented and numerate?

       

    3. Re:Slashdot in 2010 by vux984 · · Score: 2, Insightful

      Man, I remember when programming topics actually used to make it to the front page. You know, news for nerds.

      Meh, the daily astroturf about Ruby On Rails a year or so back weren't any better. ;)

    4. Re:Slashdot in 2010 by MobileTatsu-NJG · · Score: 2, Funny

      Almost all of the last 20 or so stories have been about either social networking sites or Google and its products. Man, I remember when programming topics actually used to make it to the front page. You know, news for nerds.

      What's especially amazing is that Slashdot covers so many stories about popular sites that require having friends!

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

  3. Hmm.. by Anonymous Coward · · Score: 4, Funny

    Oh my lord... there's MALWARE on Facebook?? I thought all those links for free iPads were real! Noooooo!!!

    This shouldn't surprise anyone, really.

  4. Re:The point is... by geekoid · · Score: 3, Insightful

    IT's bigger then that. Human behavior is evolved to a social paradigm. With that certain expectation have become intrinsic to human interaction.

    Not the internet has made it easy for a few jackasses to violate those rules of behavior in a massive and automated way.

    This means people need to learn to ignore and change certain expectation. Not something that comes easy.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  5. People think its ok to use facebook at work? by maliqua · · Score: 4, Informative

    Companies should simply block social networking sites or have policies against there use. In my office the average user spends 135% of there work hours logged into facebook 135%?! most of them leave it logged in when they go home

    1. Re:People think its ok to use facebook at work? by cynyr · · Score: 3, Insightful

      then unblock facebook on that one persons or groups computers, not site wide. should be easy to implement.

      --
      All of the above was encrypted with a Quad ROT-13 method. Unauthorized decryption is in violation of the DMCA.
    2. Re:People think its ok to use facebook at work? by Bryansix · · Score: 2

      Not this generation. I don't care how scarce jobs are. If you block Facebook, they will quit.

    3. Re:People think its ok to use facebook at work? by blai · · Score: 2, Informative

      That's cool. I leave facebook on at the other end of ssh.

      --
      In soviet Russia, God creates you!
  6. The Most Dangerous Tool by StikyPad · · Score: 5, Insightful

    "Oooh! A talking moose wants my credit card number. That seems fair!"

    The most dangerous tool is the one sitting in the chair.

    1. Re:The Most Dangerous Tool by Anachragnome · · Score: 3, Interesting

      "The most dangerous tool is the one sitting in the chair."

      Back in my auto shop days, we had a term for a certain diagnosis--The Loose Nut Behind the Wheel.

      It referred to either the driver/owner being the source of the mechanical problem (such as pulling the parking brake out to hang ones purse on, then merrily driving away), or the driver/owner was simply insane (we had our share, and oddly enough, sanity is not a requirement for a drivers license).

      Of course, this was a diagnosis we kept to ourselves. Explaining such a diagnosis to the driver/owner was usually awkward--"Sir, the reason your Ford Escort is never going to go straight again is because you weigh 600lbs. An alignment isn't going to fix anything. You just need to switch to low-octane fuel".

    2. Re:The Most Dangerous Tool by houghi · · Score: 2, Insightful

      Here it is called PEBCAK

      --
      Don't fight for your country, if your country does not fight for you.
    3. Re:The Most Dangerous Tool by Anonymous Coward · · Score: 2, Interesting

      I prefer the term PICNIC (Problem In Chair Not In Computer) because people recognize the word and it has a comforting "sounds easy" connotation. Also as a bonus, somebody unfortunately inquisitive can be told how it is spelled (like it sounds) and won't immediately find a google term explaining it as they do for PEBCAK, or worse realize that their sticky note is calling them a name (ID 10t) and complain to the boss or HR.

      This is handy when noting help desk tickets because other savy IT staff will recognize the reference if called on for a repetition of the same error, even if the notes don't dare describe the real problem. Example: User could not find Excel file after saving from email, browsing from inside Open dialog in Excel. Demonstrated saving with extension as defaulted rather than renaming without an extension. Should be a picnic to resolve from now on.

  7. Youtube? by Scrameustache · · Score: 3, Interesting

    How do you get infected with malware from youtube?

    --

    You can't take the sky from me...

    1. Re:Youtube? by Anonymous Coward · · Score: 2, Informative

      How do you get infected with malware from youtube?

      I'm thinking 2 ways: links in video descriptions/comments/etc and there was the recent XSS flaw.

    2. Re:Youtube? by Zero__Kelvin · · Score: 2, Funny

      "How do you get infected with malware from youtube?"

      You start by running Windows ;-)

      --
      Guns don't kill people; Physics kills people! - John Lithgow as Dick Solomon on Third Rock From The Sun
    3. Re:Youtube? by TheRaven64 · · Score: 3, Insightful

      By reading the comments - they can cause permanent brain damage, unless you have a proper firewall.

      --
      I am TheRaven on Soylent News
  8. Oh well by Locke2005 · · Score: 3, Funny

    Sadly, slashdot remains last on both the list of sites from which to contract malware infections and the list of sites on which to meet people from which to contract an STD.

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
    1. Re:Oh well by drcheap · · Score: 2, Funny

      Linux users - Immune to STDs

      Immune, or just avoided by the attack vectors?

  9. I'm a Mac user - this is news to me by xwizbt · · Score: 2, Interesting

    Okay, I'm no troll, but this is news to me. How does this happen? You all run antivirus software, and yet somehow actually *visiting* a site can infect you. So how does this work? Can you visit a site wearing a 'condom', or do you know, somehow, that you shouldn't click on something.

    No trolling, but as a Mac user I click what I like. How do you know what to click or not click?

    1. Re:I'm a Mac user - this is news to me by Anonymous Coward · · Score: 2, Informative

      It doesn't happen, to be honest. If you see malware that infects the OS or user account today, chances are that:

      A) the machine is using XP / browser without process sandboxing (this requires Vista/7)
      B) the browser has admin privs (XP, or UAC disabled)
      C) browser plugins are exploited / plugins can run without request

      C is the default configuration for the three browsers but it can be changed. As a result, 99% of malware today is taking advantage of a plugin.

  10. Securityweek is pants by Jonboy+X · · Score: 3, Insightful

    To summarize: Alarmist e-zine for PHB's confirms their suspicions that Facebook and YouTube are, in fact, the devil. Why is this on Slashd...oh, it's samzenpus. Never mind...

    --

    "In a 32-bit world, you're a 2-bit user. You've got your own newsgroup, alt.total.loser." -Weird Al
  11. Who are the survey respondents? by yuna49 · · Score: 4, Insightful

    Once again we have another poll which is somehow supposed to represent actual facts.

    This is a "study" by a company that sells computer security "solutions" to small and medium-sized businesses. Haven't we all learned by now that these reports are largely designed to scare PHBs into buying the products and services these companies peddle? There's absolutely nothing in TFA that enables us to determine how the firms were chosen, who was interviewed, how they were selected, and whether they have even a clue about how sites like Facebook and YouTube might be the culprits.

    Enough breathless reporting of stupid press releases, Slashdot editors. Just because SecurityWeek has no editorial scruples doesn't mean you shouldn't have them.

  12. Re:Is it Facebook or Windows which is dangerous? by war4peace · · Score: 2, Insightful

    Do I have the impression you propose that people use one OS for their daily work and another OS for Facebook and the like?
    Now I might be considered a troll, but why oh why does the average Linux person (see, I can generalize as well!) always try to fix the tool but NOT the user?
    Irony apart, the issue with getting "infected" doesn't get solved by switching the Operating System. It might get partially solved or it might help somehow, but it's not a solution. There's no permanent solution, there's just common sense and its lack thereof.
    I am a Windows user. I don't get infected with malware. Last time there was a virus on my machine, it came via a "brand new" external hard drive which apparently was used by the company that sold it to me. The antivirus yelled when I opened the folder containing the infected files (my intention was to delete everything in there). Last time my machine was infected by anything else... well, there isn't one.
    It's all about being informed and having some common sense. People who don't have the former will still be okay, but they need extra care in checking what they're about to click on. People who don't have the latter... they will likely get infected. Those who don't have either... why on Earth would you assume they would know how to use Linux? Come on :)
    Saying Windows is dangerous is like saying a gun is dangerous. A gun ain't dangerous, not unless some moron holds it. Only then things begin to become interesting. Is Windows prone to being infected? Certainly! Is this mainly generated by dumb people who click stupid links? Oh yeah!
    Repeat after me: NOT the tool, but the person. NOT the tool, but the person. NOT the tool...

    --
    ...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
  13. Re:Is it Facebook or Windows which is dangerous? by DogDude · · Score: 2, Informative

    "I am truely flabbergasted by this resistance to change. If you stand to lose ${many} by allowing Windows on the 'net... why not prevent that loss"

    Because the potential loss from NOT using Windows would be even greater. You can't run a small-medium sized retail business without Windows... there's no robust small to mid-sized point of sale system that's not Windows based. There's no functional accounting software that's not Windows based. There are simply not enough applications for most businesses to use anything BUT Windows. Even if there were enough applications for Mac's to run a particular basis, you're looking at double to quadruple hardware costs for plain ol' workstations.

    --
    I don't respond to AC's.
  14. Re:Is it Facebook or Windows which is dangerous? by Bryansix · · Score: 2, Informative

    To be fair IE8 on Windows 7 with MS Security Essentials (all free with Win7 license) is actually a decently secure solution assuming it is set up that way from day one.

  15. Re:Is it Facebook or Windows which is dangerous? by knarf · · Score: 2, Insightful

    Repeat after me: NOT the tool, but the person. NOT the tool, but the person. NOT the tool...

    Why would I repeat something which is false? Repeating it does not make it true.

    If you want the truth and nothing but the truth you should realise that it is a combination of the tools used and the people who get to use them. If you still have any doubt about which of these tools is more susceptible to malware, well... good luck to you.

    About those people... what, in your opinion, is easier to change: habits, or tools? If you say 'habits'... good luck to you again.

    --
    --frank[at]unternet.org
  16. I believe this claim about Facebook's "danger" by 93+Escort+Wagon · · Score: 4, Interesting

    I've seen people do some really dumb stuff on Facebook that they almost certainly wouldn't do elsewhere.

    A few weeks ago, there was a viral (in the true sense of the word) page that got popular really fast - I think it claimed to let you see who'd un-friended you, but I might have that bit wrong. Anyway, after an acquaintance got hit by this, I went to check it out. Basically this page said "here's how you do it - just copy and paste the following into your browser's address bar". This was followed by what was pretty obviously a bunch of hex instructions (likely obfuscated javascript, but maybe vbscript) that apparently downloaded harmful code to the user's computer - and since the code was entered by the user, it didn't raise any red flags (maybe only by IE, maybe by other browsers as well - I didn't take it any further).

    I can't imagine anyone in this day and age going to a random website and following these instructions - but on Facebook they were happy to! It was so breathtakingly stupid I had a hard time believing people fell for it; but they obviously did.

    --
    #DeleteChrome
  17. Re:Is it Facebook or Windows which is dangerous? by TheRaven64 · · Score: 2, Informative

    People push the idea because it's true. Take a look at the list of security vulnerabilities for almost any other platform, and you'll see several that could be exploited for distributing malware. Hell, the last iPhone 'jailbreak' was enough to get root access to the phone as a result of visiting a web page. From there, you could easily scan the person's inbox for 'sent from my iPhone' and send a mail to everyone who has that inane footer on their mails a link to the exploit and install something nefarious that runs in the background (maybe something that dials a premium rate phone number periodically). The Linux kernel has had at least one root exploit that I've noticed pop up in security advisories this year, and several more in the past.

    Exploiting this stuff is not hard, but there's no point unless you can profit from it in some way. If Macs suddenly had 90% market share, OS X's poor security would be quite apparent. The same with pretty much any Linux distribution.

    Writing cross-platform malware, however, is hard. If you don't have a monoculture, it's much harder for malware to gain a foothold.

    --
    I am TheRaven on Soylent News
  18. "Dangerous" in the hands of HR by dbIII · · Score: 4, Insightful

    Also dangerous in that your HR staff are mucking about on facebook all day instead of working using the excuse that they are getting background information on potential staff. That's a horrible excuse because hiring or firing decisions should not be made on the basis of the trivia that ends up on facebook pages. You get idiots hired because they look good in a photo or have the same hobby as the HR person. Within the normal bounds of mental health and with competant management personality should be irrelevant to most jobs anyway. Profiling beyond competance for the job is almost a complete waste of time.
    We take things like facebook too seriously. Nobody in the workplace should care about a teachers "drunken pirate" costume party photo for example, let alone the teacher losing their job over it.

    1. Re:"Dangerous" in the hands of HR by drinkypoo · · Score: 2, Funny

      the real problem is that most HR people are not worth the CHON they're made of. Unfortunately this is a real side-effect of our willing to leave people issues to others who we feel will do them better. well they might be more comfortable making decisions with the lives of others, but that's usually because they're a sociopath.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"