Slashdot Mirror


How Google+ Measures Up On Privacy

itwbennett writes "The slow rollout of Google+ has led some to wonder whether Google was trying to create demand through scarcity, but it might just be that the company learned its lesson from the privacy fiasco that was the launch of Google Buzz. 'I think it is very smart of Google to restrict Plus to a "limited field trial" — they aren't even calling it a beta. Google made a misstep with the roll out of Buzz. They've already avoided that mistake with Plus with this limited release. And because it's so exclusive, tech savvy individuals are fighting to get in — just the type of folks that you want as beta testers,' said Sean Sullivan, an F-Secure security adviser. Of course, fixing bugs doesn't necessarily mean that Google will have privacy issues buttoned up. 'Google Plus is clearly designed to give people better control over their privacy with respect to their family, co-workers and friends, [but] there are other types of privacy that it simply can't provide,' says Peter Eckersley, a senior staff technologist for the Electronic Frontier Foundation. 'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet.'"

38 of 164 comments (clear)

  1. Obligatory South Park reference by Anonymous Coward · · Score: 5, Funny

    Host 1: [Camera zooms in on the two hosts] Welcome back to Money Quest. [Kyle looks at the show] In just over two weeks, young financial genius Eric Cartman [his picture appears on the screen behind the hosts] has managed to turn a theme park that was seeing less than a hundred attendees a day into a thriving park with attendance in the thousands.
    Host 2: And the way he did it is with the brilliant "You Can't Come" technique. For the first several days, the young businessman saturated the market with the claim that nobody could get into his park. It made the public crazy. So then, weeks later, when he opened the doors, they were lining up around the block. Simply amazing.
    Host 1: Well, ahah I thnk we should point out that this technique is already being applied by businesses all over the country.

  2. To finish the summary by countertrolling · · Score: 5, Insightful

    'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet. And nobody ever will.' - Networked computer will do everything but protect privacy. It can't be done any more than you can protect a radio broadcast. Even the best encryption depends on trust.

    --
    For justice, we must go to Don Corleone
    1. Re:To finish the summary by TangoMargarine · · Score: 2

      'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet. And nobody ever will.'

      1. "Nobody has succeeded...yet" and "nobody ever will" are kind of mutually-exclusive conclusions, yes?

      2. If it's impossible to pull off, why are they even bothering? If they're just doing it for the money/marketshare, I wish they would stop trying to make it sound like a noble enterprise or some such bullshit.

      Or is your use of a quote confusing me? I'm not sure whether you meant the "and nobody ever will" as a response or if it's in the actual article (obviously haven't RTFA). If the former is the case, kindly disregard this entire post :-)

      --
      Unity? Screw that: XFCE. Slashdot Beta? Screw that: SoylentNews. Australis? Screw that: Pale Moon. UX developers DIAF
    2. Re:To finish the summary by BitterOak · · Score: 3, Insightful

      'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet. And nobody ever will.' - Networked computer will do everything but protect privacy. It can't be done any more than you can protect a radio broadcast. Even the best encryption depends on trust.

      Your italicized statement is correct, but not quite for the reason you describe. It is possible to build secure computer networks: banks do it all the time. The problem is that social networking sites are all about sharing personal information. They would hardly be successful otherwise! Asking for a social network site that didn't compromise anyone's privacy is like asking for a non-flammable fire starter.

      --
      If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
  3. But isn't that the idea? by PARENA · · Score: 4, Insightful

    If you want to have big big big privacy, then there's no use in joining any kind of social network. The whole idea is to share information with others. Now, you can lock down showing private information (or don't even need to fill in that information), so what's the problem? If you want most control of your privacy, I don't see why you would want to join a social network. As far as I can see it's "fine" as it is: you can share the information with the people you want. The only bad thing is when EULA's or whatever say you give the owner of network a license to do with your stuff as they see fit (usually for advertising). But if they didn't do that, it'd be a quick end. That's the idea: you give them your stuff, they give you their stuff.

    --
    Here's the secret to immortality: ...oh dang, I forgot.
    1. Re:But isn't that the idea? by rust627 · · Score: 3, Insightful

      Google+ is much tighter with your data than Facebook is by about a brazillian percent

      a brazillian percent, is that a normal percent with all the private hair shaved off ?

      --
      da da da dum indeed.
    2. Re:But isn't that the idea? by Xest · · Score: 4, Informative

      I don't think it's so much privacy per-se that people want out of this systems, it's merely the ability to know and control what vectors there are to access you information.

      Google+ attempts to achieve this by making it explicit who you're sharing what with but Facebook never has, worse Facebook masks certain vectors, for example most people don't realise that just because their profile is private to everyone but their friends, this doesn't mean that their friends can't grant permission for apps to see their friends profiles bypassing any settings about "friends only" that their friends may have set- if you don't set all the options right "friends only" actually means "friends, and any app my friends use", which is quite different to friends only- it's a stealthy vector for your data to leak out to people you never wanted to be able to access it which can catch you unawares. Worse, Facebook when introducing this feature originally actually enabled it without telling anyone so that it applied retroactively- you may have thought you'd set things to friends only, but Facebook can change that when and how they want, even though doing so is a clear breach of at least the UK's data protection act, if not many other similar acts in other countries. Yet still they get away with it.

      Most people realise to use these things you have to lose some privacy, but just as I only give my e-mail address to select people to minimise that chance its gets into the hands of spammers, I'd like to be certain that my personal information is only going to who I've said it's going to- sure it may leak out if my friends get a virus, but at least I've minimised the vectors, and can narrow down where and how it happened just as I can tell that it was some forum that gave my e-mail away to spammers if I used a special forums account for all forum activity separate from my main e-mail account.

      Again, this is where Facebook fails- they let your data leak out left, right, and centre, and you have no idea to whom, where, or how- the only option is to not use it- Google+ is trying to do better than that, it can't guarantee perfect privacy, but at least it helps you understand and manage the vectors for data leakage better. and that's a good enough compromise between not using social networking at all, and your data goes everywhere to anyone who asks type wild-west of Facebook for many people.

    3. Re:But isn't that the idea? by DJRumpy · · Score: 2

      I disagree. People can be social without sharing every bit of data they hold. When you speak with your closest friends, do you tell them every secret you hold? Of course not. You always hold something back even though it's stored in your head. The same social rules apply to a social network. You may want some data public and accessible to anyone, while keeping a more private set of data for your closest friends, and many levels in between those two. The current choices with Facebook assumes all data you put out is fair game (as shown time and time again by their willingness to 'opt you in' to sharing your data and then requiring you to go in and lock it down). Unfortunately, to share any data, you must put it online if you wish to share it in a social network. It then becomes a matter of how much control you will retain over that data, and how fine the controls are in regards to who you share it with. Unfortunately, you will always be forced to share it with Google since they are hosting the site. That alone gives me pause given how much data Google already has. With Facebook, I can disassociate them from my web searches, my personal email, etc. That line becomes much more blurry when the social site, my search engine, my cell OS, my personal contacts, my personal email, and my news feeds all come from the same site. The amount of data that Google holds about me has reached a point where I'm actually very wary about Google. Their primary business is data mining and selling such for profit.

      I'm just not all that sure I want to line up for this.

    4. Re:But isn't that the idea? by brunes69 · · Score: 2

      This is true. One of the best features Google+ has is the ability to disable re-sharing of your posts. This way when you post an update you can disable your friends from attributing it back to you.

    5. Re:But isn't that the idea? by bberens · · Score: 2

      Yes, you've correctly stated the situation at hand. Only put things on a social networking site that you want to be public. The same rules apply as when you send out any communication that can easily be tracked back to you such as e-mail. I don't see what's to be so upset about.

      --
      Check out my lame java blog at www.javachopshop.com
    6. Re:But isn't that the idea? by Archangel+Michael · · Score: 5, Insightful

      Nope. If it is on the internet, it can be shared, and attributed back to you. Screenshots do this marvelously, and there is nothing you can do to stop someone from screen scraping.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  4. Privacy Settings by Anonymous Coward · · Score: 4, Interesting

    Allowing people to specify who can see their information alongside inputting that information itself is a big plus (pun intended). In Facebook you have to trawl through confusing menus, and are left not knowing if you've really set the privacy settings you intended.

    1. Re:Privacy Settings by d4fseeker · · Score: 2

      As others already pointed out, if you don't want a comany to know th color of your underwear - don't post it online.
      If you really care that much about privacy, then set up a forum on your own dedicated server and chat with your friends there.
      But be careful; now YOU have the capability to control and extract informations, thus you are no better than any of these companies...

      On the other hand, Google does a really good job of protecting your privacy against those that could -and will- use it against you;
      your boss, your fiancee, your drinking buddies, ....

  5. They haven't done that because it's damn difficult by jimicus · · Score: 3, Interesting

    Let's say you want to invent the Next Facebook Killer But This Time With Privacy.

    Your system needs to allow:

    - People to make just enough information public to identify themselves (so friends can find them).
    - People to send messages and make photos and other media available to others with whom they may not have connected but may have a legitimate interest in seeing it (that's pretty much the point).
    - Assuming you're planning on monetizing this by selling ads, some sort of network effect to encourage more and more people to get into it. Facebook has this in spades with things like tagging; LinkedIn gets it by essentially asking its users to spam on its behalf.
    - While at the same time ensuring that the above information doesn't end up in the "wrong" hands. The wrong hands doesn't have to be just advertisers - the most common example is if you have your colleagues as friends on facebook and they get to see all the drunken photos of you going back years. We all have something in the past that we'd rather stayed there; the only way a lot of people can function in society is because by and large it does stay there.

  6. Privacy from Google by moonbender · · Score: 4, Insightful

    Giving people tools that make it easier to keep private things from being seen by prospective employers, parents, the world at large is a good thing. However, the centralized nature still means that Google gets to see everything -- as well as anybody else Google lets in on it.

    --
    Switch back to Slashdot's D1 system.
  7. What? Is he saying that Diaspora isn't a success? by Anonymous Coward · · Score: 4, Funny

    'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet.'

    I can't believe that at all. Diaspora has clearly become a huge success. That's why all of my friends, neighbors, and even my frail old aunt and uncle are using it.

    Diaspora has also shown the power of Ruby on Rails, and how easy it is to use Rails to create web sites that are bug-free and totally without security issues.

    Diaspora is where it's at. Diaspora is the future. Once Diaspora and Bitcoin are integrated, it'll be an unstoppable force of social change.

  8. Expand that quote, please by Lord+Grey · · Score: 4, Interesting

    All that yammering about privacy that can't be provided by Google+ but no actual references. Here is the full excerpt from TFA:

    "Google Plus is clearly designed to give people better control over their privacy with respect to their family, co-workers and friends, [but] there are other types of privacy that it simply can't provide. If you want a communications tool where the information you're sharing can't be read by Google, or by governments or lawyers in western countries, Google Plus isn't the service to use. Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet," [Peter Eckersley] said.

    With that clarified: I thought that some of the distributed social networking projects offered exactly that (superb privacy capabilities). Regardless, Google+ seems to be a step in the right direction. Maybe not what everyone wants or needs, but a decent start.

    --
    // Beyond Here Lie Dragons
  9. They Still Have a Ways to Go by eldavojohn · · Score: 5, Informative

    I've been largely assembling circles these past couple days and was undecided about uploading an actual picture of me because there's no way to suppress that from being visible to people outside my circles. Sure, Google's put out an informative privacy center but I'm pretty sure in Facebook there is a way to hide nearly everything from people searching for you on the site.

    Google seems to be offering me a different strategy. I found the option to make my profile unsearchable but if someone got a hold of the crazy URL for my profile, they can see my name and picture without being in my profile. I'd rather be searchable and when unknown people find my profile they don't get much (maybe my name and nothing else) until they add me to their circle and I subsequently add them to mine. I think this is the desired functionality of nearly all my friends and that's how we use Facebook.

    I haven't said anything about this as when I first joined, I could not even control the access to my picasa albums as they were automatically imported. This was particularly worrisome as I had some photos of my family around Christmas so I just deleted the albums. A few days later I saw the privacy controls though so I'm guessing the above should be added. Google+ is really undergoing a lot of changes still.

    One complaint I had that isn't privacy related is how taxing the UI is. I just deleted a circle this morning and the action failed twice and then worked the third time. When it worked, there was a row of circles on my screen and the circle I deleted was pushed forward and rolled to the left in front of all the other circles off my screen and then the circles closed their ranks. Cute and pretty ... but not when you're on a low performance computer. Granted, it was probably a lot lighter than Flash, I'm not interested in a social network that's going to include elaborate animations for very simple actions. At least give me a way to disable that.

    --
    My work here is dung.
    1. Re:They Still Have a Ways to Go by Mr_Silver · · Score: 2

      I've been largely assembling circles these past couple days and was undecided about uploading an actual picture of me because there's no way to suppress that from being visible to people outside my circles. Sure, Google's put out an informative privacy center but I'm pretty sure in Facebook there is a way to hide nearly everything from people searching for you on the site.

      One of the nice features of Facebook is that if you go to Account > Privacy Settings > Customise Settings then you can find a button labelled "Preview my Profile".

      From here you can see exactly how people see your profile, right down to what invidual friends can and cannot see. Extremely helpful in working out what information you do and do not want to share with other users.

      I only publically show my picture, my home town and my current location. Just enough information for people who are trying to find me to know whether or not I'm the person they want - without giving away my life history to anyone who comes knocking.

      --
      Avantslash - View Slashdot cleanly on your mobile phone.
    2. Re:They Still Have a Ways to Go by Fnkmaster · · Score: 5, Informative

      Yes, and Google+ has the same feature. :) You can view your public profile, your profile as visible to a given other Google+ member, or your profile as visible to a member of a particular circle of yours. It's pretty trivial to figure out if you are accidentally oversharing in your public profile.

  10. Re:How would I know? by Spad · · Score: 2, Funny

    I heard that Google employees rifle through your stuff while you're sleeping and then post the information they find onto your Google+ profile even if you haven't created one.

  11. Re:What? Is he saying that Diaspora isn't a succes by wed128 · · Score: 2

    Diaspora is a great example of nerds marketing to other nerds...

    It was entirely designed to be attractive to the sorts of people who would put up Diaspora nodes, and not the people who would actually populate those nodes. Google+ is designed to cater to actual users, not administrators.

  12. Re:How would I know? by Needlzor · · Score: 3, Informative

    Not exactly. Nobody can see who other people have put in their circles and that is the whole point of it: only you see how you have compartmentalized your contacts. In addition to that, if you don't have a Google+ profile (doesn't matter if you have a Google normal profile or any other email address), you can still be added to a Circle and when someone who has added your address in a Circle shares something into that particular Circle, you will only receive an e-mail with the message/video/thing shared and a link to join Google+. Nothing more than that.

  13. One change for circiles by WindBourne · · Score: 2

    would be to have the ability to drop a circle into another. IOW, the ability to create friends, family, and then 'friends & family'. So, it still requires work. But overall, I think that we are going to drop facebook (like anybody ever can) and simply switch to google plus.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  14. Re:so exclusive by chill · · Score: 2

    They're trying to avoid the "Nobody goes there anymore because it's too crowded" problem.

    I've been handing out invites to people brave enough to give me their e-mail address.

    --
    Learning HOW to think is more important than learning WHAT to think.
  15. Exclusivity BS by ThePhilips · · Score: 2

    I have two invitations in my inbox. None accepted. All this exclusivity BS is IMO BS. Everybody who wanted to connect to each other electronically already do it in Facebook or one of its clones.

    Main question to me is: Why would I want (potentially) ruin my main e-mail account? by linking it to a social network??

    Google's Reader shared items are already more than I need. I do not see the need to broadcast my occasional musings to even more people. If nothing else, I want to have the reaction of my friends on the news item or funny picture - not jerk off comment from some strangers. If I want reaction of a particular person I would rather send it via the e-mail or the Google Talk.

    --
    All hope abandon ye who enter here.
    1. Re:Exclusivity BS by jdray · · Score: 2

      You, though, aren't a good fit for a social network. Freedom's a beautiful thing, isn't it?

      --
      The Spoon
      Updated 6/28/2011
  16. Privacy, BS by pooh666 · · Score: 3, Funny

    When I went to use my invite, Google asked me for my birthdate, just one of those most imporant piecies of info for idenitity theft, I put in a fake one a usual only this time I made the mistake of making myself too young. Google then disabled my account AND my gmail account until I gave them 30 cents from my credit cart to prove I was old enough!!!!! So that led me to getting all of my email off of google via POP and saying fuck you goodbye.

    1. Re:Privacy, BS by repetty · · Score: 4, Insightful

      I know that you want me to be appalled but, instead, I find that damn funny!

    2. Re:Privacy, BS by Anonymous Coward · · Score: 2, Interesting

      What did you expect? Lol @ you!
      "I'm a minor"
      *click, account locked because you're a minor*
      "Google is evil because when I intentionally lied to them they reacted by requiring me to prove what was true!"

      Seriously...

  17. Re:How would I know? by GigaplexNZ · · Score: 2

    I have no idea if others can see that someone has added my profile to their circle.

    The contents of circles is private. That was made quite clear while setting up the account.

    That's not entirely true. You can generally see if someone has been added to someone else's circle, but you can't see which circle they have been added to.

  18. Google+ circles = crowdsourced user profiling? by kyoorius · · Score: 5, Interesting

    (posted on my G+ wall last week, but I thought it might be worth pasting over here also)

    There’s something creepy about Google+. It’s not so much what is seen on the surface. You have the power to manage your own user profile, the people you add to your circles, and what you want see. What you don’t have control over are the circles you are placed into by everyone else.

    As users become more familiar with Google+, they will begin to create more specialized circles. For example, a sampling of circles I have currently have configured are "friends, family, acquaintances, following, paraglider pilots, hackers, makers, the press, ceo’s." Someone else might have me classified in their circles under “pilot” or “robot hacker” or “exboyfriends” or “high school buddies”. Whenever someone adds you to a circle, they are essentially profiling you, and the more people who add you to their circles, the more detail the profile about you will become. This is not something visible to you nor I. It’s visible only to the wizard behind the curtain (Google) and whoever they wish (or are forced) to share this information.

    In the near future, ads may be served which relate to you, yet have nothing to do with anything you ever posted or mentioned on the internet. Your Google+ friends have inadvertently ratted you out.

    So, who is really in control of your profile?

  19. G+ requires Picasa album permission changes by molo · · Score: 2

    When attempting to sign up for G+, I received a query about whether I wanted to join G+ and change my Picasa settings or leave them as is and not join. Here is what it said:

    Linking Google+ with Picasa Web Albums
    When you join Google+:
            [...]
            Your albums' visibility settings aren’t changed, but people they’re shared with can now share them with others.
            [...]

    So invite-only albums would now allow re-sharing, which makes them no longer invite-only. This alone made me decide to not join G+.

    -molo

    --
    Using your sig line to advertise for friends is lame.
    1. Re:G+ requires Picasa album permission changes by Chonnawonga · · Score: 2

      G+ will automatically link your Picassa account to your G+ account, yes. But it WON'T go and change the settings on all your albums to automatically share them. Those that are currently private will remain so; those that are currently public will remain so, but also be visible via G+.

      Now go take off that tin-foil hat before pictures of you wearing it appear all over Google+.

    2. Re:G+ requires Picasa album permission changes by TangoMargarine · · Score: 2

      So his albums aren't automatically made public, but those who have access to them can do so. You have refuted his point how, exactly?

      --
      Unity? Screw that: XFCE. Slashdot Beta? Screw that: SoylentNews. Australis? Screw that: Pale Moon. UX developers DIAF
    3. Re:G+ requires Picasa album permission changes by Chonnawonga · · Score: 2

      OK, let's break it down.

      Option 1: You want nobody to see your pictures. So, you make them private.

      Option 2: You want anyone to be able to see your pictures who would want to. So, you make them public. If you're on Google+, maybe they get re-shared.

      Option 3: You want your friends to be able to see your pictures, but no one else. Even if you use Google+, you use the Picassa "only those with the URL" privacy setting, and don't post the link to Google+.

      Option 4: You want to share your photos with only your friends, but no one else, via Google+, but the privacy settings don't allow for that. You post to Slashdot about how horrifying this discovery was, and declare that you have decided not to join the service for this reason alone.

    4. Re:G+ requires Picasa album permission changes by molo · · Score: 2

      No, there were three privacy settings on the old picasa:

      1. public and searchable
      2. limited access - only those with the URL auth code can view (pass around the URL to your friends)
      3. invite-only access - only specific google accounts can access.

      The problem is that users of #3 could now re-share pictures they have access to. This breaks the invite-only capability.

      -molo

      --
      Using your sig line to advertise for friends is lame.
  20. Exactly right. by Requiem18th · · Score: 2

    While I accept that I'm not a social person and thus have little use for social networks. My biggest beef with it is the matter of centralisation and control.

    No matter how much they insist that you are in control of your privacy, Google/Facebook are ultimately in control, your information is their for use or abuse as they, their business partners, their disgruntled employees, lulsec intruders, unsanctioned and sanctioned government officer and divorce or SLAPP lawyers see fit.

    --
    But... the future refused to change.