Slashdot Mirror


Old Facebook Apps Still Plunder Your Privacy

tcd004 writes "If you added the YouTube Facebook app prior to 2009, you've given YouTube free access to nearly all the data in your profile (as well as many of your friends). But if you install the same app today, it gets very limited access. Older versions of Facebook apps, it turns out, still have 'grandfathered' access to data that the social networking service has restricted for new apps. If you're protective of your privacy, it might be a good idea to delete and reinstall any older apps in your profile."

18 of 101 comments (clear)

  1. FTFY by fuzzyfuzzyfungus · · Score: 4, Insightful

    "If you're protective of your privacy, it might be a good idea to delete your profile."

    Fixed that for you. No need to thank me.

    1. Re:FTFY by Junior+J.+Junior+III · · Score: 2

      Even if you do delete your own profile, your friends will eagerly put up enough data about you that it won't matter.

      --
      You see? You see? Your stupid minds! Stupid! Stupid!
    2. Re:FTFY by characterZer0 · · Score: 4, Funny

      The only winning move is not to play.

      --
      Go green: turn off your refrigerator.
  2. I did by improfane · · Score: 5, Interesting

    I deleted my profile but not before changing me name and deleting lots of stuff.

    One thing you should know is that Facebook never deletes anything. Even if you tell it to. The new visibility is just 'appended' to the end of your account. Bit like a journal. TFA does not surprise me.

    So if they really wanted to rewind your profile, they could. I imagine the authorities have this privilege.

    Think how much time you'll save yourself from FB if you delete it now. I mean you could spend that time on Slashdot instead!

    --
    Slashdot needs Geekcode | Can anyone recommend any good SCIFI? My tastes: Foundation, Startide Rising, CITY, Ringworld,
    1. Re:I did by vlm · · Score: 2

      Think how much time you'll save yourself from FB if you delete it now. I mean you could spend that time on Slashdot instead!

      Farming trolls? Serverfarm-ville?

      --
      "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    2. Re:I did by ConceptJunkie · · Score: 4, Interesting

      It amazes me how so many people think that that is automatically bad.

      There's nothing in my profile that I wouldn't mind anyone seeing, and I've shared a fair amount of information.

      With regard to potential future employers... if they don't want me because of something I put on FB, then they are definitely not the kind of people I would want to work for.

      Anything I've posted on FB with respect to my interests, affiliations, friends, etc, is not something you couldn't find elsewhere with a little legwork or at worst hiring a PI for a few hours. I just don't see what the big deal is provided you show a little common sense in what you are making public, and more importantly, make it a point of not doing things you wouldn't want people to know about. Maybe I'm just old-fashioned that way.

      --
      You are in a maze of twisty little passages, all alike.
    3. Re:I did by PopeRatzo · · Score: 2

      There's nothing in my profile that I wouldn't mind anyone seeing, and I've shared a fair amount of information.

      If you're just thinking about the data in your profile at any given time, like a snapshot, you're missing the bigger picture.

      I just don't see what the big deal is provided you show a little common sense in what you are making public, and more importantly, make it a point of not doing things you wouldn't want people to know about.

      You're too smart of a guy to be using the "You don't have to worry if you've got nothing to hide" argument.

      It's not just about the information you "share", it's everything you've ever shared and the persistence of the details of your behavior. You're thinking about it like Facebook is a person, who only sees what you share in your public info and only has the attention span to retain it for a limited time. But Facebook is a machine that has the time and inclination to put that "public" information together with the "public" information of all your Facebook friends, and the details of everything you've ever done and said on Facebook so it can come to conclusions about you and your behavior and your creditworthiness and you're buying patterns and how often you're on Facebook and who you tend to talk to and thousands of other connections that a person would never bother making. Then, all of that information is persistent. Facebook never forgets. Never overlooks anything as being "too trivial". Maybe some detail of your life that you think is trivial today will not be trivial in 5 years. Maybe you're personal parameters for privacy will change. But then it's too late. Whatever you chose to share in 2007 will still be public in 2015 even if you chose to not make it public in 2011.

      Anything I've posted on FB...is not something you couldn't find elsewhere with a little legwork or at worst hiring a PI for a few hours.

      But someone with "legwork" or a PI doesn't have the time and inclination to collect every single bit of information from you and everyone you associate with and doesn't have the enormous processing power to cross-reference every bot of data, or the ability to save it forever.

      The "aha" moment for a lot of us came the first time an advertisement for estate lawyers came up on your screen a short time after you mentioned on Facebook that your Mom is moving to an assisted living facility. You realize that the danger of persistent information is not in any one bit of data, but when it's collected over a period of time and kept forever, along with every bit of data every one of your friends has shared. Is your judgment and ability to predict so perfect that you're certain that you'll never drop a bit of information that can be used against you somehow, someday?

      So it's not just what they collect, but what they're able to do with it, and when. Better just to not feed the beast, IMO.

      --
      You are welcome on my lawn.
    4. Re:I did by GameboyRMH · · Score: 2

      Serverfarm-ville?

      Oh crap you just told them how to make a geek farmville...they'd drag all geek-kind into their awful digital opium den with something like that...

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
  3. Re:Lies by betterunixthanunix · · Score: 5, Insightful

    Do you browse your friends' profiles? Do you send Facebook messages to them? Do you use Facebook's real-time chat? Facebook records everything you do on the website -- just using Facebook means giving them information. It does not really matter if you lie about your age -- what matters is if you list your friends (not even accurately -- even if you have 1000 "friends," they will just take a look at the profiles you visit most frequently).

    Everything about Facebook is designed to extract information from you. The fact that you lied or left things blank on your profile has probably been detected, and used to construct the real profile about you: what sort of a person you are, what sort of advertisements you are most likely to pay attention to.

    --
    Palm trees and 8
  4. Re:Keep multiple profiles by igreaterthanu · · Score: 3, Informative

    Then, one profile, not connected in any to the above two, using a nickname or alias, and using a different E-mail address (preferably different domain), perhaps in a separate Web browser and sandbox. This profile is for fertilizing your donkey in Farmville and playing all the FB games

    No, no, no, no, NO!

    You must play Farmville on the account with all your friends who play Farmville, otherwise you won't do very well at all and they won't be able to know how awesome at Farmville you are and how committed you are that you set multiple alarms at night to go and "[fertilize] your donkey". That is the whole point of these games, if it wasn't for that you may as well be playing something like Crysis. Do you know anything about Farmville?

    --
    I dream of a nation where a man is not judged by his skin color but by an number assigned by a credit rating agency.
  5. Re:Keep multiple profiles by vux984 · · Score: 3, Insightful

    In other words, you recommend that people directly violate facebooks terms of service:

    Section 4:

    # You will not provide any false personal information on Facebook, or create an account for anyone other than yourself without permission.
    # You will not create more than one personal profile. ...
    # You will keep your contact information accurate and up-to-date. ....

    Oh, and by recommending people create multiple profiles with false information you are also in violation of Facebook's terms of service yourself:

    Section 3:
    # You will not facilitate or encourage any violations of this Statement.

    This is one of MANY reasons I recommend people not use facebook. I don't think their ToS are at all reasonable. If you have to blatantly violate them to make the site palatable, then don't use the site. Doing what you advocate just rewards them for being assholes, and if you ever have any sort of dispute with them they have you over a barrel because you are blatantly violating their ToS.

  6. On the other hand... by pedantic+bore · · Score: 4, Interesting

    While "delete your apps periodically and re-add them as needed" is probably very good advice most of the time, are there any cases where apps are getting worse with respect to privacy, and so having a newer version of an app is worse than having the older version?

    It seems likely that someone out there, having gotten a whiff of the money that might be made, is actually getting worse about this...

    --
    Am I part of the core demographic for Swedish Fish?
    1. Re:On the other hand... by A+Friendly+Troll · · Score: 2

      While "delete your apps periodically and re-add them as needed" is probably very good advice most of the time, are there any cases where apps are getting worse with respect to privacy, and so having a newer version of an app is worse than having the older version?

      In a way.

      Lately I've been bombarded with more Zynga game requests; some *Ville thing, I don't remember exactly.

      If you want to install their game, Facebook presents you with a list of many items that the game requires access to. One of the prerequisites is even your email address. Several months ago, they couldn't get that.

  7. Re:Lies by vlm · · Score: 2

    You might be on to something. Facebook obviously figured this out, and as such began blasting 90% pro-homosexual ads at me.

    (insert my best serious Dr Phil wakeup call voice here) ... Oh heck, need I even say it, you all know what we are snickering about.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  8. Don't use the apps in the first place by roc97007 · · Score: 5, Insightful

    I always felt that using third party apps in Facebook was a little like playing flash games on random websites -- you're giving alien code full access to whatever information you have on Facebook, and may even be opening attack vectors on your local computer.

    The friends and family in my close circle range from promoting social networks for a living, to distrusting them entirely and refusing to participate even under an assumed name. I'm somewhere in the middle -- I have a small circle of friends whom I actually know, I have security locked down appropriately with periodic reviews, and I never play the games or use any of the apps. No interest in virtual organized crime, virtual farms, virtual restaurants, or today's fortune, and I don't care that someone has answered a question about me that I need to click to unlock. And I have absolutely no interest in revealing my Netflix queue to my mom. Like any tool, you can use it properly or poke your eye out, your choice.

    For the facebook user swamped with lonely little cows and pillow fights in their news feed, do this: Mouse over the little "x" in the upper corner of the item. Observe a popup allowing you to "block user-name" or "block application-name". Choose the latter, and that particular app will never be seen again. Do this consistently for a week or so and you find that your news feed has been reduced from a firehose of banality to a trickle of genuine social interaction. In the rare cases where your nephew finds new crap to plaster on your wall faster than you can update your blacklist, you can always "block user-name" and ban him from your news feed. He'll never know.

    Stop using Facebook? It's a little like saying "Why don't you avoid the spam and 419 scams and viruses -- just stop using email!" If you said that in 1995 you might get a few people nodding their heads. In 2010 it's a ridiculous statement.

    --
    Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  9. Re:Keep multiple profiles by vlueboy · · Score: 2

    No. HR could not care less, just like when you complain on their demand for "5 years of experience on Windows Vista and 7." Even your specific target department (assuming IT) actually asking to see your presence doesn't care about it --they're only snooping for whether you'll be a problem to avoid. Anyone serious already keeps a non-Myspace/non-FB/non-Twitter website dedicated to their REAL technology presence, completely under their control, or sometimes a leased account on a blog.

    We're all IT people, and anyone interviewing for a company 10 years ago didn't have to provide social networking details to be hired. I've been to plenty interviews the past 3 years, and none have even asked me for Myspace/FB/twitter on their paper applications. Not even on the interviews. E-mail and personal phone numbers is as far as they go, because that has 20+ years presence and is less likely to be an empty datafield in their HR database.

    Regardless, people asked for FB presence as a requirement do so by their pick of non-IT career, and not every plain secretary job benefits from a FB presence. It makes sense only for Television, radio, sales, sales research or marketting presence job were you're supposed to be a well-known entity outside of your 9to5pm hours, like salesmen, presidents, actors and reality TV people like those Jersey Shore guys. Those are good candidates for a presence mostly because it's free 24/7 self-press, away from cameras and sky-high fees that come with them.

  10. One or the other by rudy_wayne · · Score: 2, Insightful

    Facebook and privacy are mutually exclusive. You can have one or the other but not both. Personally, I think all the worry about "privacy" is extremely exaggerated and overblown. What are they going to do? Show me targeted ads? That's what AdBlock is for.

    Unless you're actually stupid enough to put all sorts of personal info on Facebook, like your real name, address, etc. In that case you're a moron who deserves to be ass-raped by every script kiddie hacker wannabe.. The bottom line is very simple. If you really care about privacy, you don't have a Facebook account in the first place.

  11. Re:Lies by ByteSlicer · · Score: 2

    just using Facebook means giving them information.

    It's even worse than that. If you previously logged on/off on Facebook, and fail to clear your browser cache and cookies, then Facebook will track every other website you visit afterward that uses some scripts of theirs (such as the Like buttons). And unlike normal cookie tracking, they know exactly who you are from your profile data.