Slashdot Mirror


How Google+ Measures Up On Privacy

itwbennett writes "The slow rollout of Google+ has led some to wonder whether Google was trying to create demand through scarcity, but it might just be that the company learned its lesson from the privacy fiasco that was the launch of Google Buzz. 'I think it is very smart of Google to restrict Plus to a "limited field trial" — they aren't even calling it a beta. Google made a misstep with the roll out of Buzz. They've already avoided that mistake with Plus with this limited release. And because it's so exclusive, tech savvy individuals are fighting to get in — just the type of folks that you want as beta testers,' said Sean Sullivan, an F-Secure security adviser. Of course, fixing bugs doesn't necessarily mean that Google will have privacy issues buttoned up. 'Google Plus is clearly designed to give people better control over their privacy with respect to their family, co-workers and friends, [but] there are other types of privacy that it simply can't provide,' says Peter Eckersley, a senior staff technologist for the Electronic Frontier Foundation. 'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet.'"

18 of 164 comments (clear)

  1. Obligatory South Park reference by Anonymous Coward · · Score: 5, Funny

    Host 1: [Camera zooms in on the two hosts] Welcome back to Money Quest. [Kyle looks at the show] In just over two weeks, young financial genius Eric Cartman [his picture appears on the screen behind the hosts] has managed to turn a theme park that was seeing less than a hundred attendees a day into a thriving park with attendance in the thousands.
    Host 2: And the way he did it is with the brilliant "You Can't Come" technique. For the first several days, the young businessman saturated the market with the claim that nobody could get into his park. It made the public crazy. So then, weeks later, when he opened the doors, they were lining up around the block. Simply amazing.
    Host 1: Well, ahah I thnk we should point out that this technique is already being applied by businesses all over the country.

  2. To finish the summary by countertrolling · · Score: 5, Insightful

    'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet. And nobody ever will.' - Networked computer will do everything but protect privacy. It can't be done any more than you can protect a radio broadcast. Even the best encryption depends on trust.

    --
    For justice, we must go to Don Corleone
    1. Re:To finish the summary by BitterOak · · Score: 3, Insightful

      'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet. And nobody ever will.' - Networked computer will do everything but protect privacy. It can't be done any more than you can protect a radio broadcast. Even the best encryption depends on trust.

      Your italicized statement is correct, but not quite for the reason you describe. It is possible to build secure computer networks: banks do it all the time. The problem is that social networking sites are all about sharing personal information. They would hardly be successful otherwise! Asking for a social network site that didn't compromise anyone's privacy is like asking for a non-flammable fire starter.

      --
      If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
  3. But isn't that the idea? by PARENA · · Score: 4, Insightful

    If you want to have big big big privacy, then there's no use in joining any kind of social network. The whole idea is to share information with others. Now, you can lock down showing private information (or don't even need to fill in that information), so what's the problem? If you want most control of your privacy, I don't see why you would want to join a social network. As far as I can see it's "fine" as it is: you can share the information with the people you want. The only bad thing is when EULA's or whatever say you give the owner of network a license to do with your stuff as they see fit (usually for advertising). But if they didn't do that, it'd be a quick end. That's the idea: you give them your stuff, they give you their stuff.

    --
    Here's the secret to immortality: ...oh dang, I forgot.
    1. Re:But isn't that the idea? by rust627 · · Score: 3, Insightful

      Google+ is much tighter with your data than Facebook is by about a brazillian percent

      a brazillian percent, is that a normal percent with all the private hair shaved off ?

      --
      da da da dum indeed.
    2. Re:But isn't that the idea? by Xest · · Score: 4, Informative

      I don't think it's so much privacy per-se that people want out of this systems, it's merely the ability to know and control what vectors there are to access you information.

      Google+ attempts to achieve this by making it explicit who you're sharing what with but Facebook never has, worse Facebook masks certain vectors, for example most people don't realise that just because their profile is private to everyone but their friends, this doesn't mean that their friends can't grant permission for apps to see their friends profiles bypassing any settings about "friends only" that their friends may have set- if you don't set all the options right "friends only" actually means "friends, and any app my friends use", which is quite different to friends only- it's a stealthy vector for your data to leak out to people you never wanted to be able to access it which can catch you unawares. Worse, Facebook when introducing this feature originally actually enabled it without telling anyone so that it applied retroactively- you may have thought you'd set things to friends only, but Facebook can change that when and how they want, even though doing so is a clear breach of at least the UK's data protection act, if not many other similar acts in other countries. Yet still they get away with it.

      Most people realise to use these things you have to lose some privacy, but just as I only give my e-mail address to select people to minimise that chance its gets into the hands of spammers, I'd like to be certain that my personal information is only going to who I've said it's going to- sure it may leak out if my friends get a virus, but at least I've minimised the vectors, and can narrow down where and how it happened just as I can tell that it was some forum that gave my e-mail away to spammers if I used a special forums account for all forum activity separate from my main e-mail account.

      Again, this is where Facebook fails- they let your data leak out left, right, and centre, and you have no idea to whom, where, or how- the only option is to not use it- Google+ is trying to do better than that, it can't guarantee perfect privacy, but at least it helps you understand and manage the vectors for data leakage better. and that's a good enough compromise between not using social networking at all, and your data goes everywhere to anyone who asks type wild-west of Facebook for many people.

    3. Re:But isn't that the idea? by Archangel+Michael · · Score: 5, Insightful

      Nope. If it is on the internet, it can be shared, and attributed back to you. Screenshots do this marvelously, and there is nothing you can do to stop someone from screen scraping.

      --
      Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  4. Privacy Settings by Anonymous Coward · · Score: 4, Interesting

    Allowing people to specify who can see their information alongside inputting that information itself is a big plus (pun intended). In Facebook you have to trawl through confusing menus, and are left not knowing if you've really set the privacy settings you intended.

  5. They haven't done that because it's damn difficult by jimicus · · Score: 3, Interesting

    Let's say you want to invent the Next Facebook Killer But This Time With Privacy.

    Your system needs to allow:

    - People to make just enough information public to identify themselves (so friends can find them).
    - People to send messages and make photos and other media available to others with whom they may not have connected but may have a legitimate interest in seeing it (that's pretty much the point).
    - Assuming you're planning on monetizing this by selling ads, some sort of network effect to encourage more and more people to get into it. Facebook has this in spades with things like tagging; LinkedIn gets it by essentially asking its users to spam on its behalf.
    - While at the same time ensuring that the above information doesn't end up in the "wrong" hands. The wrong hands doesn't have to be just advertisers - the most common example is if you have your colleagues as friends on facebook and they get to see all the drunken photos of you going back years. We all have something in the past that we'd rather stayed there; the only way a lot of people can function in society is because by and large it does stay there.

  6. Privacy from Google by moonbender · · Score: 4, Insightful

    Giving people tools that make it easier to keep private things from being seen by prospective employers, parents, the world at large is a good thing. However, the centralized nature still means that Google gets to see everything -- as well as anybody else Google lets in on it.

    --
    Switch back to Slashdot's D1 system.
  7. What? Is he saying that Diaspora isn't a success? by Anonymous Coward · · Score: 4, Funny

    'Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet.'

    I can't believe that at all. Diaspora has clearly become a huge success. That's why all of my friends, neighbors, and even my frail old aunt and uncle are using it.

    Diaspora has also shown the power of Ruby on Rails, and how easy it is to use Rails to create web sites that are bug-free and totally without security issues.

    Diaspora is where it's at. Diaspora is the future. Once Diaspora and Bitcoin are integrated, it'll be an unstoppable force of social change.

  8. Expand that quote, please by Lord+Grey · · Score: 4, Interesting

    All that yammering about privacy that can't be provided by Google+ but no actual references. Here is the full excerpt from TFA:

    "Google Plus is clearly designed to give people better control over their privacy with respect to their family, co-workers and friends, [but] there are other types of privacy that it simply can't provide. If you want a communications tool where the information you're sharing can't be read by Google, or by governments or lawyers in western countries, Google Plus isn't the service to use. Nobody has succeeded in building a social network that can offer those kinds of privacy protections yet," [Peter Eckersley] said.

    With that clarified: I thought that some of the distributed social networking projects offered exactly that (superb privacy capabilities). Regardless, Google+ seems to be a step in the right direction. Maybe not what everyone wants or needs, but a decent start.

    --
    // Beyond Here Lie Dragons
  9. They Still Have a Ways to Go by eldavojohn · · Score: 5, Informative

    I've been largely assembling circles these past couple days and was undecided about uploading an actual picture of me because there's no way to suppress that from being visible to people outside my circles. Sure, Google's put out an informative privacy center but I'm pretty sure in Facebook there is a way to hide nearly everything from people searching for you on the site.

    Google seems to be offering me a different strategy. I found the option to make my profile unsearchable but if someone got a hold of the crazy URL for my profile, they can see my name and picture without being in my profile. I'd rather be searchable and when unknown people find my profile they don't get much (maybe my name and nothing else) until they add me to their circle and I subsequently add them to mine. I think this is the desired functionality of nearly all my friends and that's how we use Facebook.

    I haven't said anything about this as when I first joined, I could not even control the access to my picasa albums as they were automatically imported. This was particularly worrisome as I had some photos of my family around Christmas so I just deleted the albums. A few days later I saw the privacy controls though so I'm guessing the above should be added. Google+ is really undergoing a lot of changes still.

    One complaint I had that isn't privacy related is how taxing the UI is. I just deleted a circle this morning and the action failed twice and then worked the third time. When it worked, there was a row of circles on my screen and the circle I deleted was pushed forward and rolled to the left in front of all the other circles off my screen and then the circles closed their ranks. Cute and pretty ... but not when you're on a low performance computer. Granted, it was probably a lot lighter than Flash, I'm not interested in a social network that's going to include elaborate animations for very simple actions. At least give me a way to disable that.

    --
    My work here is dung.
    1. Re:They Still Have a Ways to Go by Fnkmaster · · Score: 5, Informative

      Yes, and Google+ has the same feature. :) You can view your public profile, your profile as visible to a given other Google+ member, or your profile as visible to a member of a particular circle of yours. It's pretty trivial to figure out if you are accidentally oversharing in your public profile.

  10. Re:How would I know? by Needlzor · · Score: 3, Informative

    Not exactly. Nobody can see who other people have put in their circles and that is the whole point of it: only you see how you have compartmentalized your contacts. In addition to that, if you don't have a Google+ profile (doesn't matter if you have a Google normal profile or any other email address), you can still be added to a Circle and when someone who has added your address in a Circle shares something into that particular Circle, you will only receive an e-mail with the message/video/thing shared and a link to join Google+. Nothing more than that.

  11. Privacy, BS by pooh666 · · Score: 3, Funny

    When I went to use my invite, Google asked me for my birthdate, just one of those most imporant piecies of info for idenitity theft, I put in a fake one a usual only this time I made the mistake of making myself too young. Google then disabled my account AND my gmail account until I gave them 30 cents from my credit cart to prove I was old enough!!!!! So that led me to getting all of my email off of google via POP and saying fuck you goodbye.

    1. Re:Privacy, BS by repetty · · Score: 4, Insightful

      I know that you want me to be appalled but, instead, I find that damn funny!

  12. Google+ circles = crowdsourced user profiling? by kyoorius · · Score: 5, Interesting

    (posted on my G+ wall last week, but I thought it might be worth pasting over here also)

    There’s something creepy about Google+. It’s not so much what is seen on the surface. You have the power to manage your own user profile, the people you add to your circles, and what you want see. What you don’t have control over are the circles you are placed into by everyone else.

    As users become more familiar with Google+, they will begin to create more specialized circles. For example, a sampling of circles I have currently have configured are "friends, family, acquaintances, following, paraglider pilots, hackers, makers, the press, ceo’s." Someone else might have me classified in their circles under “pilot” or “robot hacker” or “exboyfriends” or “high school buddies”. Whenever someone adds you to a circle, they are essentially profiling you, and the more people who add you to their circles, the more detail the profile about you will become. This is not something visible to you nor I. It’s visible only to the wizard behind the curtain (Google) and whoever they wish (or are forced) to share this information.

    In the near future, ads may be served which relate to you, yet have nothing to do with anything you ever posted or mentioned on the internet. Your Google+ friends have inadvertently ratted you out.

    So, who is really in control of your profile?