Employer Facebook Password Requests Suspended
Hugh Pickens writes "The Washington Post reports that Maryland's Department of Public Safety and Correctional Services has suspended a roughly year-old practice of asking prospective employees to voluntarily divulge their user names and passwords to social media Web sites such as Facebook. In a statement, the department said requests for user names and passwords had been voluntary, and had not been taken into account when evaluating job applicants. Nonetheless, 'in light of these concerns raised by the ACLU and because this is a newly emerging area in the law, the department has suspended the process of asking for social media information for 45 days to review the procedure and to make sure it is being used consistently and appropriately.'" We covered this story back when the ACLU took the case.
Here is how I would implement a policy like that. I would ask, all applicants for their facebook username and password up front.
Then, everyone who gave it to me, would get a polite letter informing them that they did not get the job because they so easily violated the TOS of facebook, with whom they had a standing agreement before they applied with us. Thus, there is no way that we could trust them with access credentials on our system.
You failed the test, you are the weakest link, goodbye.
"I opened my eyes, and everything went dark again"