Facebook Ads Could 'Out' Gay Users
itwbennett writes "Researchers at Microsoft Research India and the Max Planck Institute for Software Systems in Germany have written a paper showing that a users may be inadvertently revealing their sexual preference to advertisers. 'One example was an advertisement for a nursing program at a medical college in Florida, which was only shown to gay men. The researchers said that persons seeing the ad would not know that it had been exclusively aimed at them solely based on their sexuality, nor would they realize that clicking on the ad would reveal to the advertiser, by implication, their sexual preference in addition to other information they might expect to be sent, such as their IP (Internet Protocol) address.' For its part, Facebook 'downplayed the study, saying that the site does not pass any personally identifiable information back to an advertiser.'"
Never put anything on Facebook that you would not tell your parents and your boss.
If I were God, wouldn't I protect my churches from acts of me?
FB seems a little ethically challenged.... HEY! /. uhhh... you wouldn't disclose MY identity to FB now would you!!!!
(Please stay anonymous.... please stay anonymous...!!!!)
Man do you need underpants or do you need underpants?
The ads were served to males who declared themselves to be interested in other males, and females who declared themselves to be interested in other females.
Exactly where is the problem here? The users are outing themselves. Shouldn't this be filed under, "...and water is wet"?
We're on to you...
I swear to God...I swear to God! That is NOT how you treat your human!
Plus the ads were targeted at people whose profiles explicitly said they were gay, so how was anyone/any fake profile "outed"
www.RacquetUp.org - Helping Detroit Youth
Don't mention in your FB profile that you are gay, or a member of this or that race or ethnic group or have such and such religious beliefs.
Second workaround: don't join FB.
Third workaround: don't clickthru on ads for nursing programs for men.
[...]such as their IP (Internet Protocol) address.
If you don't know what IP stands for in 'IP address' then you're on the wrong site.
Someday we'll hit the human carrying capacity. And the band will just play on.
Isn't this the point of Facebook? Let's be honest, Facebook is a marketing platform that provides a social networking service in return for payment in the form of your personal information. You post information about yourself on the site, and the site serves you targeted advertising. If you tell Facebook your sexual orientation then you've outed yourself already. It would be a different story if they were analyzing your friend list and your "like" pages and deducing that you were gay. Then you'd have grounds for outrage.
Facebook makes money by data mining its users.
Two of my imaginary friends reproduced once
The MAFIAA is furiously trying to make "IP" mean "Intellectual Property" in the public mindshare. The ugly thing is when you smash both acronyms into the same sentence you get Halloween Horror.
"I recorded that this IP is stealing my IP and demand he be sued into bankruptcy".
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
there's a spot in there for filling out sexual orientation, you suddenly are surprised that you're getting highly directed ads? OTOH, you're using facebook, and you're surprised that you're getting highly directed ads?
"People don't want to learn linux" hasn't been a valid excuse since '03.
A year ago, some MIT undergrads wrote up a short piece called Project Gaydar which showcased how they were able to successfully identify gay men who were still in the closet.
Facebook might not expose this information directly (via the "sexual preferences" profile information), but your friends list is enough to extrapolate it. Since there's money in that kind of data and it is easily fetched via the Facebook API, it's being done.
Use my userscript to add story images to Slashdot. There's no going back.
FB just totally came out of the closet and everybody has missed the point. Can a website even be gay? Isn't that just a matter of improperly coding the API?
Come out of the closet at your own time...
Your "new punctuation" is gay.
This is how I originally read the title; I was promptly sadly mistaken.
You click on ads on Facebook.
How does it feel to be a liar with pants constantly on fire?
Facebook DOES pass personally identifiable information, albeit inadvertently.
As a Facebook Ads user, I have tracked down people who have clicked my ads EASILY.
How?
Your unique Facebook user ID is passed through the refer string each and every time you click on an ad.
Simply copy down this ID and paste it in the USERID variable below.
http://www.facebook.com/profile.php?id=USERID
Tada.
YOU DONT talk about fight club
My icon on FB was a pic of the Seattle Space Needle with a rainbow flag on it, but FB still has advertisers acting like I watch Fox News and like NASCAR, so I'm not that worried about it.
Even if I am straight, liberal, and think NASCAR is a waste of gas.
Heuristic algorithms are only as good as the programmers - or AI.
-- Tigger warning: This post may contain tiggers! --
Said I was interested in men rather than that I was a man. So I got some really really gay targeted ads. Gay dating services, special razors to shave with, all very fun. Try it and see.
The real issue is that the current terms of service allows yhem to share your groups and interests, which likely can identify you as being close to the GLBC.
I sometimes hang out on a web forum, and they have a special forum where you could post anonymously - it's not really anonymous, as you still need to login and post, but the postings do not show your user id or IP addresses, so it appears totally anonymous, except to the web admins. So people post a lot of random crazy stuff there which would embarrass themselves if it had not been anonymous.
Then one day the forum upgraded their software, and due to a bug, all posts inside that anonymous forum suddenly showed all user IDs - including the old ones. That quickly turned into a sh*tstorm as people ran around screaming in panic with their underwear.
The lesson: do not post anything if you don't want others to find out it's you.
Are male nurses required to be gay?
Facebook has your info, thank you. Your fucking privacy means nothing to them and they will sell it whenever it suites them. Buy a fucking clue.
"....saying that the site does not pass any personally identifiable information back to an advertiser.'"
....Unless there's money involved.
];)
Regards;
Do that many people actually click on ads? I don't think I ever have, not on purpose anyway.
OMG! They will get my IP! Oh god! Noooooo!!
No pun intended. The case in point above fails to justify facebook practice as there are few gay male nurses, albeit more than lesbian nurses. I though facebook said Microsoft was smart and innovative? That's just inaccurate or maybe doesn't mean much to a slashdot reader.
Chewbacon
The Bible is like Wikipedia: written by a bunch of people and verifiable by questionable sources.
Facebook's massive failure re privacy is pretty much the status quo, no need to rehash that.
However, let's presume a person treats their sexual status as something super secret, worthy of protection. You know, so secret that at the very least, they keep it from their general "real-world" social network, if not their closest friends and family. This involves care: watching how they talk, walk, dress, and who they associate with. Yet when it comes to websites run by strangers they're more than willing to let it all hang out. Hmm.. there can only be a reasonable expectation of privacy when there's a reasonable exercise of privacy.
The best thing about a boolean is even if you are wrong, you are only off by a bit.
I just looked at my FB profile, and I don't see where they even ask for my sexual orientation. Do they infer it from people's relationship status or something?
What facebook ads? :)Im not a facebook member and if i was i still wouldnt see the ads :)
Jack of all trades,master of none
Probably unrelated but your youtube viewing habits may also send the advertisers (sometimes erroneous) clues on what you enjoy as evidenced by the ads you are served by the site. For some reason youtube thinks that I am gay, that I would like to study cinema and that I need to find jesus... (none of the three being true, unless allmighty google knows more about me than I do)
It is the old HTTP referer leakage problem.
When you click on any link on any site, the browser sends the URL that the link was found as part of the HTTP request for the linked page. This is useful to webmasters as they can see who is linking to them. This becomes a problem, however, if the URL contains private information encoded into it.
For example, when you are logged into facebook, the URL of the site contains your user id. Thus any* website that is linked from your facebook page will see your user id when you click on their links. To avoid this, sites shouldn't contain sensitive information in their URLs. Alternately many sites use redirectors that cause all links go first to the redirector, and then to the final destination, so the linked site sees the redirector as the referer, not the original URL. *Facebook has implemented a redirector for links that users post, but conveniently forgot to apply it to advertisers.
And yes, after being pushed on this issue for over a year, they are finally talking about hashing user ids in URLs.
For its part, Facebook 'downplayed the study, saying that the site does not pass any personally identifiable information back to an advertiser.'"
If Facebook allows advertisers to target their ads to be seen by people whose personal information has certain values, then by definition, they have passed that information to anyone who clicks on that particular ad.
The advertiser can then bind that info to their IP, and if they click on other target Ads later, there is a possibility for a single advertiser to gradually discover more and more personal 'facts' about the user.
No, you don't understand. Facebook has a policy saying they won't disclose personal info, like what age you are.
Now, suppose an advertiser says "target this ad at people born in October of 1978" ... Facebook says "OK". So all of these people's birth months are revealed to the advertiser, in violation of the policy. Thru essentially costless micro-targeting, advertisers (or any attacker with $) can dig out whatever info they want. There's a simple and obvious way for an attacker to get a list of people based on a piece of information Facebook has said they're keeping private.
There is a big difference between someone clicking on an ad for, say, a gay-dating site -- when you click on an ad, you know you are implicitly signaling some level of interest in its content to the advertiser -- and clicking on an ad (*any* ad, it could be for a car or for dog food ... the content of the ad could have *nothing* to do with the audience targeting) that happens to be targeted based on a specific database query.
If a piece of information is promised to be kept private, private should not equal "disclosed to third parties who pay us."
What modern savvy internet user clicks on ads anyway? I soon discovered that I could not determine the destination of a Google ad before clicking it, so I now refuse to click any of them. It is easy for spammers to setup an ad and direct the user wherever they want them, the ad text (and link shown) often have no relation to the destination. I have much better luck and I'm on the whole safer using "organic" search results to find what I need. I also advise all my clients and users to never click on ads of any type and they thank me for the advice.
I used to be full into Facebook, until I gained my current job at a direct marketing business.
The place I am at now data mines everything that is publicly available; from the Facebook to the MySpaces, LinkedIn, every social site. From YellowPages, to Google results, it scrapes press releases, public government records to competitors websites.
Of the 10k businesses just in my town I can bring up a friend map and tell you which business owners are the most connected, and its frightening how this data is used.
In the 2 years I've been here I've seen our unsolicited rate go from low 1% to high 4%. We run such highly targeted campaigns now that we only target 3000 to 5000 key people and get the exact same, if not better results then historically targeting the whole city of 1 million.
It's crazy, I now don't ever use social sites because I can contest your information is worth a fortune.
With 4 full time developers your information is just going to be worth even more!
reserved for those who can find a job in this climate if fired.
Drug tests determine whether you are a criminal or not.
Two points:
While I personally do not believe the currently illegal drugs are good for society, I cannot in good faith apply punitive measures to someone who honestly believes otherwise. The problem with our society is that we cannot move forward toward a freer society without civil disobedience, and unfortunately that means that even people in the wrong have to be granted due deference with respect to their illegal activities because what most would consider the "normal" means of changing unjust laws are simply ineffective.
The society for a thought-free internet welcomes you.
They fixed this a while ago.
I see no adverts...
Donald 'Duck' Dunn: We had a band powerful enough to turn goat piss into gasoline.
Isn't that like trying to out-troll ACs on Slashdot?
My biggest worry (but it wasn't that big of a worry) about facebook when I signed up was the fact that I state myself "in a relationship" with another man. I like facebook for giving one thing: details about the goings on in the lives of people I care about that I wouldn't have known otherwise. And that is very powerful and very significant. That aside, I've been friended by old acquaintances pre-coming out and surprise!
Then again, maybe it wasn't that much of a surprise to those people. People do talk outside of facebook. But there's no question about it now -- no pretending with a lot of people who might have had only suspicions before. The ads that might be shown to me concern me the least. Then I think about whom the study may intend to protect.
Note to gay teenagers: It gets better. Hang in there!
I don't make the rules. I just make fun of them.
Plenty of people could correctly guess if you are gay. If we haven't said anything, it is probably because we don't care.
Plenty of people do NOT correctly guess that I am gay. I'm a software developer. I wear a wedding band. I like football (NOT soccer). When I open of mouth to speak, rainbow glitter doesn't spray out.
Person: (sees my wedding band) So, what's your wife's name?
Me: We're not married.
Person: (confused) Why not?
Me: Because the state will not allow us to marry.
Person: (ultra confused and not getting it) Why would they not allow you to marry?
I've had that conversation multiple times. I hate coming out to people. I would much rather someone else tell them when I'm not anywhere nearby. Coming out to a straight person is just saying this to someone's face: "Hi, I'm gay, which means I probably do all sorts of sexual things that you find incredibly disgusting. Now, judge me positively. I'm waiting."
Keen in mind that some gay guys could dress up as the ugliest, most offensive drag queen, and there would still be some straight people who STILL could not correctly guess. There's a whole spectrum of being clued-in.
I appreciate that you don't care. Honestly, I do. It makes life easier for gay people who live in a world where there's a great many people who DO care and are willing to do something about that problem.
I don't make the rules. I just make fun of them.
did anyone else read that as: Facebook ads could out-"gay" users?