Slashdot Mirror


Facebook's 'Like This' Button Is Tracking You

Stoobalou submitted a story about some of the most obvious research I've seen in a while ... "A researcher from a Dutch university is warning that Facebook's 'Like This' button is watching your every move. Arnold Roosendaal, who is a doctoral candidate at the Tilburg University for Law, Technology and Society, warns that Facebook is tracking and tracing everyone, whether they use the social networking site or not. Roosendaal says that Facebook's tentacles reach way beyond the confines of its own web sites and subscriber base because more and more third party sites are using the 'Like This' button and Facebook Connect."

41 of 273 comments (clear)

  1. No surprises here by korkwin · · Score: 5, Insightful

    This is nothing new. We've all known this.

    1. Re:No surprises here by Anonymous Coward · · Score: 3, Insightful

      Yep. I've been aware of this long before Facebook even added that feature. After all, this is the reason that most email programs/sites don't display images by default because spammers use it to verify/track email addresses.

      The stupid thing is that the websites just give Facebook the free space without getting anything in return. FaceBook has a free ad on every single page that sites display the Like button on, and all the site gets is the chance that the user will add it to their list of liked things, and maybe--if the stars align--their addition will be reflected in someone else's feed and make it go viral.

      I'm tired of Facebook, but there really is no good alternative.

    2. Re:No surprises here by krazytekn0 · · Score: 3, Funny

      I'm tired of Facebook, but there really is no good alternative.

      There is being social in person...but that's a little strange for us I admit

      --
      Not all life is cyber. Extra Income
    3. Re:No surprises here by CaptainPatent · · Score: 3, Funny

      *CaptainPatent likes this*

      --
      Well, back to rejecting software patent applications.
    4. Re:No surprises here by sarysa · · Score: 3, Insightful

      Some people seem to have the delusion that companies actually care about who you are and why you're clicking this and that, but they only care about your statistics. They want to know that single white 27 year old female likes Lady GaGa, not that Janet Doe likes Lady GaGa...

      --
      Charisma is the measure of someone's ability to lie with a straight face.
    5. Re:No surprises here by rwa2 · · Score: 4, Interesting

      Meh, facebook is just connective tissue; grey matter. I don't really use it all that differently from twitter... actually most of my FB posts come from twitter.

      The real content gets posted to Slashdot, LiveJournal, Blogspot, Flickr, Picasa, Youtube, etc., sometimes even Buzz. Twitter / FB are just open / closed syndication engines for that content, sort of like a consolidated form of RSS with some extra integration features.

      Relevant to the actual subject, StumbleUpon has always provided a much better "Like" button... since it includes a "don't like" button and actually does something useful with the information you provide by giving you more random links that you would probably like based on what you have in common with the other people who liked that link.

      Strangely, I have no desire to share this StumbleUpon "like" information with the rest of my IRL friends on FB / twitter, partly because our pr0n tastes can be quite different, but in general I just don't care to share links as a feed. If there's an article someone should read, I send them a directed email. If I find something funny, I might go so far as to post it to our IRC channel.

      Come to think of it, I think FB / Twitter might just be some sort of gap filler for people who don't lurk on IRC.

    6. Re:No surprises here by Nightlight3 · · Score: 4, Interesting

      It's trivial to block this -- just add a batch file nofb.bat that replaces your host file with the one that has facebook redirected to 127.0.0.1. If you use fb and wish to actually go there, you can have another bat file, gofb.bat which changes host file back to the one with facebook entry commented out (the bat file may call a little executable that flushes local DNS cache on your machine by resolving the affected domain name). In general case, if you wish to do this selectively for n tracking sites, with n>1, you will need one bat file that blocks all of them and one for each site that has just one site site unblocked, hence you need n+1 bat files. Also, going to any of the tracking sites to use their services will also cost you an extra click for in and out.

      Note that google, digg and many others are doing the same kind of tracking, whether you subscribe to their site or not. You get ID on their servers attached to your cookies, tracking your visits anywhere where their bug is placed. That way they can sell to some site A which you are visiting now the fact that you have also visited sites B, C, D, ... earlier (when and how many times each, what kind of content you used there, etc). Of course, if the tracking servers know who you are, they can also sell that info to sites A, B, C..., at a higher price.

    7. Re:No surprises here by Anonymous Coward · · Score: 5, Insightful

      Why on EARTH do people run their scripts, anyway?

      Because the out-of-the-box default behavior for every popular browser is to download everything referenced, pass whatever cookie it happens to have whenever it does that, execute every such downloaded script, and so on.

      Facebook isn't really the problem here. Our browsers are.

    8. Re:No surprises here by Magic5Ball · · Score: 2, Interesting

      Simpler way:
      Block www.facebook.com and facebook.com (which serve the offsite like buttons and such).
      Allow m.facebook.com (which doesn't serve like buttons or any scripts).

      The result is an ad-free light-weight facebook page without app spam in the feeds, faster page loads off-site, and no Flash cookies or other persistence, without batch file hackage.

      --
      There are 1.1... kinds of people.
    9. Re:No surprises here by oldspewey · · Score: 2, Funny

      It's trivial to block this --

      I'll give you $100 if you can somehow explain this process to my barely-computer-literate-but-facebook-loving relatives.

      --
      If libertarians are so opposed to effective government, why don't they all move to Somalia?
    10. Re:No surprises here by Logical+Zebra · · Score: 2

      Firefox equipped with NoScript and Adblock Plus will do 99% of that without having to write code.

      --
      I have a bad feeling about this...
    11. Re:No surprises here by dwinks616 · · Score: 2, Insightful

      You can't tell me they'd rather send you ads they THINK you'll like based on age, sex, income versus sending you ads they KNOW you'll like. They use general stuff like age, sex, etc because they don't know what else to do, YET. And I'm sure they are trying.

    12. Re:No surprises here by RenderSeven · · Score: 2, Interesting

      I'm tired of Facebook, but there really is no good alternative.

      I'm tired of Facebook because it needs no alternatives. Narcissists may need an outlet but they always have, but I dont need to be part of their constant need for attention. The one thing I thank Facebook for, is teaching me that my 'friends' have boring lives, and they have as little real interest in my life as I do in theirs. I find myself encouraged to go DO things that are worth posting, and having DONE something really worthwhile the reward has nothing to do with posting it on Facebook.

    13. Re:No surprises here by GuruBuckaroo · · Score: 2, Informative

      Well, many home routers use 127.0.0.1 as the Info/Config page. I think mine uses 127.0.0.2, but still...

      I hate to be negative, I really do. However, this post merely illustrates that you have absolutely no idea of what you are talking about.

      Unless your router has a monitor and keyboard attached to it, it is impossible for any machine to talk to any other machine using any address that starts with 127. These are "localhost" addresses that always, always equate to the same machine the request originates from. In other words, your workstation.

      I'm pretty sure your router actually uses something more like 192.168.0.2. Linksys routers will default to 192.168.1.1, for instance.

      --
      Poor means hoping the toothache goes away.
    14. Re:No surprises here by silanea · · Score: 2, Insightful

      [...] they only know as much about you as you submit to them. [...]

      To me there are two problems: First and foremost, it is increasingly hard to find out who is included in that latter "them". So many external resources are linked in websites, from JS libraries to advertising to tracking cookies from collecting societies to Flattr to Facebook to Amazon to what the hell else there is, that even with Adblock Plus and NoScript I am sometimes overwhelmed with what to block and what to allow. And it is only getting worse.

      The second problem is that basically legitimate features are spreading beyond what is tolerable from a privacy-oriented point of view. I have a Facebook account under a fake name and registered to an e-mail address that I do not use anywhere else. I do share links and other resources through this account with contacts there. But I do not want Facebook to know what other websites I browse. I would have to go through quite some trouble to maintain perfect separation of concerns in day-to-day browsing. That is unacceptable. Browsers need to catch up to what is reality in the web of 2010.

      --
      Rudolf Hess edited Mein Kampf. He was the very first grammar nazi.
  2. Naw, really? by drunkennewfiemidget · · Score: 5, Insightful

    I'm not a doctoral candidate, and I could have told you that.

    Facebook's primary objective is data collection and selling it to marketers. It's kind of what they do.

  3. Wait so... by Haedrian · · Score: 5, Funny

    Facebook is actually using personal data and information which its collecting for me... in order to make profits? Facebook is tracking me in order to learn more about me?

    Who would have thought that an innocent company like Facebook, with no privacy issues ever - would stoop to that?

    I am shocked! This internet thing is so new to me.

  4. It Happened Late at Night by eldavojohn · · Score: 5, Funny

    Facebook's 'Like This' Button Is Tracking You

    I now feel I have the courage to speak out about what happened one month ago.

    I was walking home from a late night shift and noticed a glassy aero blue vehicle drive by me slowly. I couldn't see inside through the blue glass reflection but the vehicle moved at an ominous pace. I quickened my pace and made hast for my house now only five blocks away. I broke into a run at four blocks, I was so close to home and safety. But I heard the squeal of tires on pavement behind me and my pulse spiked. I covered the next two blocks as fast as the wind but the blue vehicle was faster. It pulled up onto my lawn in front of me and the doors opened as I ran by it. I didn't look, I couldn't look at them but I heard pixelated fingers running through the grass as I scrambled to find the key to open my front door.

    I opened the door and turned around to slam it shut but there was a blocky thumb that caused it to bounce back. My wife came in to see what the commotion was about and screamed as the first hand with its blue cuff and erect them grabbed my ankle and tripped me. "Get the children to the panic room" I screamed. And in ten seconds my family was safe but I still grappled with the blue shaded hand holding me down mercilessly as three more hands with blue cuffs came in through the open door. Another held down my other ankle as the third raised his cuff to expose his fully erect thumb. The fourth pulled my pants down and I screamed in agony as I was viciously sodomized in my own living room while my family watched from the panic room camera. For hours it went on while the fourth Facebook 'Like' hand sat their smoking a cigar, laughing and rubbing his thumb and forefinger together when I asked why they were doing this to me. Why? Again, they rubbed their thumbs together with their fingers signifying money.

    The police said I was powerless, I had given up my right when I had clicked through the Terms of Service to join Facebook. Zuckface could do whatever he wanted to do to me and I was powerless. The policemen told me to go back to my Farmville and watch my crops and just be happy the 'like' hands had left me alive, at least the Zuck had shown some mercy. Then they excused themselves and cautiously walked out to their squad car, hands ready on their sidearms, alert for any remaining 'like' hands.

    It happened to me and it could happen to you.

    --
    My work here is dung.
    1. Re:It Happened Late at Night by Ash-Fox · · Score: 2, Insightful

      do you want to be tracked by slashdot buttons also?

      No, he wants a one click 'slashdot this site', to take down enemy sites.

      --
      Change is certain; progress is not obligatory.
  5. ABP by scheveningen · · Score: 5, Insightful

    And that is why we like Add Block Plus. Not only does it protect some of your privacy, it also speeds up your page loading.

    1. Re:ABP by noidentity · · Score: 2, Funny

      And that is why we like Add Block Plus. Not only does it protect some of your privacy, it also speeds up your page loading.

      Unfortunately it makes your CPU slower, because it has to translate all the blocked ADD instructions into a NEG SUB pair.

  6. Not that hard to kill facebook's tracking by gurps_npc · · Score: 4, Informative

    Noscript, Taco with Abine, BetterPrivacy.

    --
    excitingthingstodo.blogspot.com
    1. Re:Not that hard to kill facebook's tracking by BitZtream · · Score: 2, Informative

      Except the article is about facebook tracking everyone on sites other than facebook, such as when you go to some stores website and they have a 'Like It' button for all their products ... facebook is tracking you and that you've viewed that item, regardless of wether you have a facebook account or not.

      But don't bother reading the article or even the summary or anything.

      --
      Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
    2. Re:Not that hard to kill facebook's tracking by seandiggity · · Score: 2, Insightful

      Noscript, Taco with Abine, BetterPrivacy.

      Too bad TACO/Abine had a release in June that was ridiculously bloated and annoying. I got a dozen or so e-mails/phone calls/IMs in the days the update went through, and I told everyone whose comp I had recommended/installed it on to get rid of it. There's no reason to trust that it won't happen again. As far as trustworthy ad-blockers go, I'd add Privacy Plus, Optimize Google (formerly Customize Google), and Facebook Beacon Blocker (although I don't know if Beacon is defunct or not, and this add-on hasn't been updated recently).

      --
      Geeks like to think that they can ignore politics, you can leave politics alone, but politics won't leave you alone.-rms
    3. Re:Not that hard to kill facebook's tracking by seandiggity · · Score: 2, Informative

      ...apparently the pre-Abine version of TACO has been forked as Beef TACO, so I'm giving it a second chance on this machine...hopefully it doesn't ever get updated with the Abine crapola.

      --
      Geeks like to think that they can ignore politics, you can leave politics alone, but politics won't leave you alone.-rms
  7. Plugins by mr100percent · · Score: 5, Informative

    This is why I use plugins like Defacer, which hides the iframes for Facebook and (coming soon) the other Share buttons.

    1. Re:Plugins by Anti-S · · Score: 5, Informative

      AdBlock exception rule: ||facebook.*$domain=~facebook.com|~127.0.0.1

  8. Beacon by Thelasko · · Score: 2, Insightful

    The beacon is back, and better than ever.

    --
    One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
  9. Re:Perspective, kthxbai by Faylone · · Score: 4, Informative

    Even if you're not going to read the article, could you at least read the summary? Even if you don't use Facebook, you're still being tracked.

  10. Speak for yourself by betterunixthanunix · · Score: 5, Insightful

    You have a website that has pictures of you, your current whereabouts, mood, who you like, where you live, work, sleep, and every interaction with anyone else has just as much information pulled out and sorted. And you're bothered by the Like this button?!

    You seem to be a Facebook user; I am not. If Facebook is tracking me anyway, then yes, I am bothered.

    --
    Palm trees and 8
    1. Re:Speak for yourself by vux984 · · Score: 4, Insightful

      If you are in the habit of accepting and keeping every cookie ever offered to you, you were being "tracked" before Facebook got involved.

      For my part I *really* don't care if the website I'm visiting is tracking my movements on its own site.

      I -only- get irate when that tracking starts to follow me around after I leave.

      I don't use facebook, and that near ubiquitous facbook icon on pages used to merely annoy me for being a waste of space and an eyesore. But I wasn't specifcially aware that it was actively tracking me if I ignored it. Perhaps if I had thought about it, I'd have realized that it was likely wired back to facebook and tracking me, but until now I hadn't.

      So I do find this interesting. Not that I needed another reason to despise facebook.

      And yes, other widespread tracking systems also do bother me; I've regularly criticized google's reach between its advertising and analytics numerous times here on slashdot.

    2. Re:Speak for yourself by gambino21 · · Score: 4, Informative

      I only recently discovered facebook's instant personalization "feature". I went to rottentomatoes and it showed movies that my facebook friends liked. This seems very inappropriate to me because how did rottentomatoes know who I am in facebook, without logging in or doing any kind of verification. Apparently rottentomatoes uses thirdparty cookies to fetch your facebook info and display it. This seems to mean that potentially any website can check who you are in facebook (if you are currently logged in). I was able to turn off this feature by disabling thirdparty cookies in Firefox.

      More than anything this seems like a big privacy leak and is the fault of the browsers. This should be off by default in firefox and other browsers. If I go to rottentomatoes.com, I would expect that by Firefox would only send cookies back to rottentomatoes and should not even allow read access to other cookies while I'm on that page. The same goes for flash plugins and other scripts, etc. that read cookies, they should only have read access to the cookies for the current page.

  11. Not if you... by Posting=!Working · · Score: 5, Informative

    Add this to your Adblock Plus filter:

    ||facebook.*$domain=~facebook.com|~127.0.0.1

    What like button?
    You can still use facebook, but they're blocked from any page that isn't facebook.com.

    --
    This sentence no verb.
    1. Re:Not if you... by bassman998 · · Score: 5, Informative

      I use the following Adblock rules:

      ||fbcdn.com/*$domain=~facebook.com
      ||fbcdn.net/*$domain=~facebook.com
      ||facebook.com/*$domain=~facebook.com
      ||facebook.net/*$domain=~facebook.com

      I never see Facebook content on any site other than Facebook, and their social plugin can't track me.

  12. Re:Perspective, kthxbai by BitZtream · · Score: 3, Interesting

    The problem is that it is tracking ME. Someone who has NEVER had and NEVER WILL HAVE a facebook account, because I visit some random companies website and they have that retarded Like It button.

    This has nothing to do with tracking facebook users, it has to do with tracking EVERYONE regardless of their facebook account, or lack of one.

    In reality though, its no different than any other web tracker, except now instead of using 1 pixel sized transparent GIFs, they put a visible button on the page.

    --
    Persistent Volume manager for Kubernetes - https://github.com/dwimsey/openshift-pvmanager
  13. Help for Those That Need It by eldavojohn · · Score: 5, Funny

    Thanks for the story. Now I won't be able to sleep tonight.

    There, there, fellow victim, I have a method to help you with this problem. Lay on your bed, look at your hand, now back to me, now back at your hand, now back to me. Sadly, your hand cannot stop the 'Like This' button, but if you stopped using Facebook and switched to Diaspora, you could avoid the blue terror like me. Look down, back up, where are you? You’re on a cloud with only about five hundred other users. What’s in your hand, back at me. I have it, it’s your mouse connected to your computer where you just need to enter your password one final time to leave Facebook. Look again, the mouse is now diamonds. Anything is possible when you're not promoting Facebook. I’m on a butterfly.

    --
    My work here is dung.
  14. hmmm by jarkus4 · · Score: 2, Funny

    First, we dont really know they make any use of this data. They have the possibility, but they dont have to use it (its quite likely they do, but thats a different matter) Second, to avoid sending this data they would have to either limit some functionality or go out of their way and create some special domains to avoid passing the cookies between the systems. And this would be for no gain for them whatsoever - "not stealing" personal information is never a news topic. Also the only people who actually can be "offended" by this are some geeks that, lets be honest, are not an important market part to them, IMO the most realistic scenario for this is accidental data collection. They started partnering with whomever they could and putting their logo button there just to bring more traffic to their site (and their ads). PERHAPS then someone noticed that they can make also use of this extra data they get.

  15. Definition of irony: by magsol · · Score: 2, Insightful

    Why is there a "Share this on Facebook" button at the end of TFA?

    --
    "I'd just like to emphasise that taking a million years isn't a metaphor here..." -Rich Bradshaw
  16. Facebook knows me... by Wiarumas · · Score: 3, Funny

    Facebook knows a lot about me: that I have no friends, no interests, and log in between the hours of 1 and 5AM from my mother's basement. I keep getting advertisements from Slashdot and World of Warcraft.

    --
    I will bend like a reed in the wind.
  17. Re:Perspective, kthxbai by Lord+Byron+II · · Score: 2

    Noscript and "no cookies" are a start, but there's been plenty of evidence that the marketers are starting to dig even deeper than that. For example, linking all of the pages you visit (on their ad network) via IP address and Flash cookies.

    And so many sites are using Javascript for the simplest things (like displaying images) and benefit from logons (Slashdot included) that it's really hard to just surf anonymously like we did 15 years ago.

    I can only imagine that this is going to get much, much worse before it gets better.

  18. Re:Hardly news by gstoddart · · Score: 2, Insightful

    I don't want to sound condescending, but I believe that you are missing an important part of what defines the Internet today.

    I'm not missing it at all, I'm just not seeing it. There is a difference.

    As tech enthusiasts, we pride in "getting" the zeitgest. Deliberately ignoring this side can undermine this goal

    *laugh* I am old enough, and curmudgeonly enough, that there are certain parts of the zeitgeist I just don't give a damn about.

    Heck, I still don't get this whole showing your underpants thing that started about a decade ago, I sure as hell don't want to hear about Survivor or Justin Beaver any more than I need to. Facebook and almost anything to do with Fox? Completely out.

    If I ignore them long enough, emo kids and the continuing popularity of the 80's will just simply go away. Baseball, however, won't go away no matter how much I try. ;-)

    --
    Lost at C:>. Found at C.