Slashdot Mirror


Security Expert Slams Google+ Pseudonym Policy

An anonymous reader writes "A security expert has panned Google's "real name" policy on Google+, claiming that the hard line will damage privacy. Sophos's Chester Wisniewski says that closing accounts where users have adopted false names erodes privacy on the social network. 'What they seemed to have missed is that the very foundation of privacy is identity. Simply knowing my postal code or birth date is meaningless without a name to associate it with. By requiring people to only use their real names, unless they just happen to be a celebrity, they have eliminated the ability for people to be private in any meaningful way.'"

22 of 373 comments (clear)

  1. I feel like I should... by kenboldt · · Score: 3, Funny

    buy stock in a tin foil company with all the hats that are being made lately.

    1. Re:I feel like I should... by Opportunist · · Score: 5, Insightful

      And requiring "real" names changes that in what way exactly? The average troll/spammer does not even expect his account to live any meaningful length of time. Besides, who says that I'm not really "Frank Benson" or "Thomas Senner"? I mean, until I trolled and spammed like there's no tomorrow, i.e. when this account gets closed and "Norman Richardson" registers?

      (disclaimer: None of those names are mine, neither do I know anyone by that name. I made them up. Any similarities with existing people is purely coincidental and not intended)

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:I feel like I should... by Opportunist · · Score: 5, Insightful

      While I agree with you, I might want to point out that if people do not complain about things they do not like, these things will not change. No, we're not entitled to forcing a provider to give us whatever we want, but if people voice their opinion, maybe someone will notice that there's a market for it and will start a service.

      Free market works both ways. Sometimes, the suppliers just need to be shown what is wanted.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:I feel like I should... by CapnStank · · Score: 3, Insightful

      THANK YOU! I'm seriously sick of this entitled attitude where a company/person/group puts tremendous effort into some system only to have a chunk of users go "WHY CAN'T I USE IT THE WAY I WANT THAT WASN'T INTENDED FOR!?" If you don't like Google+'s rules then stay off, its not a necessary service by a long shot and if you're so damned concerned about privacy wtf are you doing with Social networks in the first place?

  2. anyone remember friendster? by circletimessquare · · Score: 4, Interesting

    friendster was poised to be the facebook of its age. it was wildly popular and growing explosively. i forget the year (2004? 2003?)

    then friendster started taking a hard line: no goofy fake name accounts, such accounts were deleted

    so people left in droves for a perky startup called myspace

    i remember this issue clearly covered in the press, but i can't seem to find any references to such stories to show you what doomed friendster and allowed myspace to take over, apologies

    but anyway: learn from history google, or be doomed to repeat it

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:anyone remember friendster? by martyros · · Score: 3, Insightful

      And FB requires you to use your real name as well. Somehow it has failed to keep it from growing pretty big. The thing with nonymity (as opposed to anonymity): the normal social conventions keeping people from acting like total asshats actually work. If there are actual consequences for what you say, people are more likely to act responsibly. Now, there are obviously bad sides of nonymity; those same social conventions can have nasty side effects, and the consequences of saying something can often make someone not say something at all. But you have to choose one or the other -- have the good and bad effects of anonymity (freedom to express yourself because you know there won't be consequences; freedom to act like an asshat because you know there won't be consequences) or have the good and bad effects of nonymity (People are more well-behaved and polite, because they know there will be consequences; people can't share certain things because they know there will be consequences). Some communities choose anonymity; Google chose nonymity. You're free to make your own website if you wish.

      --

      TCP: Why the Internet is full of SYN.

    2. Re:anyone remember friendster? by Opportunist · · Score: 3, Insightful

      In a nutshell, it's kinda hard to dump your real name and start over with a new one if you happened to have attracted a stalker and want to get rid of him.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  3. Duh by vadim_t · · Score: 5, Insightful

    I'm pretty sure that's Google's exact intention. If you force people to use their real name, tracking them over all the web gets much easier.

  4. Dumb for G+ by assertation · · Score: 5, Insightful

    If large amounts of people abandon Facebook for G+ they will be motivated by having more control over their privacy. Taking that motivation away, before G+ is even out of beta is a fairly stupid thing for Google to do.

    Given what happened with Buzz I'm starting to think that Google has some decision makers who are either very stupid or very out of touch with how people think. I suggest leaving the office and geek circles to get to know some regular people.

    I'm glad I created my G+ account with a faux name that sounds like a real name if this is the way they are going to be.

    1. Re:Dumb for G+ by elsurexiste · · Score: 3, Interesting

      Anonymity and privacy are two different things. If Google is going for privacy without anonymity, they're going to have to start teaching people the difference.

      They are different IRL; not so much on the internetz. Given how easily it is to (a) collect data about someone, (b) store it, (c) preserve it from degrading, and (d) communicate it, anonymity IS privacy, and sometimes even that is not enough. Privacy is always a single [security breach | disgruntled employee | greedy suit] away from disappearing; anonymity requires much more effort to dispel.

      --
      I rarely respond to comments. Also, don't ask for clarifications: a brain and Google are faster, believe me!
    2. Re:Dumb for G+ by DisKurzion · · Score: 4, Informative

      My profile has all of these items filled out. Only things viewable to public is Name,Gender, and a profile pic. Everything else is either shared with a specific circle, all circles, or extended circles based on how sensitive I find the info. Contact Info goes to specific circles. Education + Employment go to immediate circles. Relationship + Occupation go in extended circles, as that is largely public info, but not something I want shared with the whole world.

      This is not rocket science people. Every one of those options was displayed in the very same prompt that that info was entered in. The only excuse someone has for not setting their privacy settings on their profile is "I'm too damn lazy to read."

  5. Social network privacy? by Mostly+Harmless · · Score: 4, Insightful

    I value the importance of privacy as much as any good Slashdot reader, but we're talking about an opt-in social network. If you want privacy, don't use the service that's already linked to everything else you do publicly on the Internet. Rather, get your privacy at one of the other, "more secure," social networking sites, like Facebook, or MySpace. Better yet, eschew social networking altogether. Or, if you want an anonymous social network that plays by your rules, build one.

    --
    "`Ford, you're turning into a penguin. Stop it.'" -Douglas Adams, THHGTTG
  6. Oxymoron by truthsearch · · Score: 3, Insightful

    The point of social networks is to share. That's naturally counterproductive to privacy. At the very least I must know something about who I'm sharing information with or I wouldn't be there.

    The only real privacy on a social network could be within your circle of "friends", as opposed to having a public profile. But within that circle absolute privacy would be pointless.

  7. Don't like it? Don't join. by Pope · · Score: 4, Insightful

    The choice to join is still yours. If you don't like it, don't join it, pure and simple.

    --
    It doesn't mean much now, it's built for the future.
  8. They lost me by necro81 · · Score: 3, Insightful
    When I got to this line of the summary:

    erodes privacy on the social network

    Isn't a social network non-private by definition? There are plenty of ways to meet and communicate with people that are somewhat private and anonymous, but a social network (on the internet or in meatspace) is not one of them.

  9. Spamming and Trolling and PR by vlm · · Score: 4, Insightful

    ability for people to be private in any meaningful way.

    Code words for spamming, trolling, and PR astroturfing.

    I am thrilled G+ doesn't allow psuedonyms. Makes it a much higher class establishment. Rob Malda and I are in each others circles, what could be better?

    If G+ was the only social network / web bloggy thing on the internet, if 1% of the population violently disliked a policy of theirs, I guess that would be bad. But they aren't.

    Lets visit a paradise of psudonyms, how about my local, not dead yet, newspaper web site. The comments sections are nothing but a dead wasteland of political extremist astroturfers screaming the same corporate / party talking points at each other over and over, spammers trying to sell shoes (wtf?) and pills, and 4chan/goonsquad style shock trollers. Everyone else has been successfully repelled away. Seriously. No normal human beings use it because its a toxic waste dump.

    Which brings up the obvious question that always has to be asked... who benefits? Say G+ allows 4chan /. zerohedge style psudeonyms. Who benefits? Mostly I suppose any competitor, since the users of G+ will be strongly repelled. Also PR astroturfing firms will benefit. Who else makes more money? Hmm.

    Lets say G+ allows the rabble in, and the rabble repels everyone as they always do. Then whats the point? Who will ye annointed ones, ye whistle-blowers and ye wikileakers tell their important secrets to? The spammer selling dick pills? The political party talking point autopost-bot? No one's perl script will care what they post.

    One thing I've noticed in debates on G+ about anonymity is the straw dog always trotted out that unless G+ allows fake names, we'll never have whistleblowers and anonymous leaks. All of which happened before G+ was invented, so presumably could continue to happen after. Furthermore, all the people trotting out that straw dog have NEVER added anything positive to the ecosystem in general or that argument in specific other than "nah nah naah naa na, you don't know who I am, ha ha ha". Anyone trotting out that straw dog better be carrying a wikileaks-grade release, or their just annoying poseurs at best.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
    1. Re:Spamming and Trolling and PR by sadr · · Score: 3, Interesting

      I'm firmly atheist. I don't choose to participate in skepticism advocacy, but if I choose to, I might well prefer a pseudonym. (There are several fundamentalists in my management chain at work.)

      I know of several people who are involved in the burner and pagan communities, who keep all of their non-mundane activities under pseudonyms. I don't currently know anyone involved in the SCA, but in the past I understood that many people didn't mix their role and real life.

      I've been told that the BDSM community uses nicknames almost exclusively.

      Many actors, musicians, authors, etc. work under pseudonyms, and would probably prefer not to mix their personal and public identities.

      People being stalked (in real life or online) might have something to say, but not want to post under their real name.

      Activists in the middle east and china certain prefer not to be forced to post under their real name.

      Pretty much any individual or community that is subject to personal, social, legal, or political harassment may have motivation to operate in a public space, but use pseudonyms.

      How about having a couple of flags, for "anonymous accounts" and "pseudonymous" accounts (the latter being "google knows my name and has verified it as much as anything else, but it isn't posted associated with this account). And indicate anony/psuedo accounts at the top of the profile screen. Add a security setting to block them entirely.

  10. But if you know my real name by Chrisq · · Score: 3, Funny

    But if you know my real name you will have ultimate power over me.
    -- Rumple********

  11. Enforcement? by Mr.+Vage · · Score: 5, Interesting

    I have still yet to see them use the real name policy on anyone in my circles. Who checks the names? Do they need to be reported? I'm looking at one of my circles right now, and I see names like Sordid Euphemism, Mr Dragon, reddit brony, Fluttershy, the autowitch, Rainbow Danish, etc. Not to mention my own obviously fake name. As far as I can tell this policy isn't being strictly enforced, if at all. That doesn't change the fact that it is a stupid policy, but they don't seem to be removing fake accounts left and right.

  12. Re:I don't get it by Riceballsan · · Score: 3, Interesting

    I am normally a huge google fan, and I actually just recently de-activated my facebook account in favor of G+, but I do believe the main difference is enforcement. Facebook basically says "Please don't make accounts to bogus names", but 1/4th of the accounts on it are dogs, children and psudonyms, and they have made zero effort to stop that. While G+ is actually actively suspending accounts and taking out other Google services in the process. Basically it's the difference between a sign that says "Keep off the grass", and beware of the dog (with trained attack dogs paroling the grass).

  13. Re:I don't get it by Anonymous Coward · · Score: 3, Informative

    Actually, Google suspended the G+ accounts, and non-related Google services (Gmail, etc) were left intact and operable by the suspended user.

  14. I think this guy needs to look up some definitions by Co0Ps · · Score: 3, Interesting

    By requiring people to only use their real names, unless they just happen to be a celebrity, they have eliminated the ability for people to be private in any meaningful way.

    What a nice twisting of words. How is "having to use your real name" different from being indexed in a phone listing or birthday directory? I think this author needs to look up the definition of "being private". Being private does not mean that people are unaware that you exist or that they are unable to attribute your opinions or other personal data. Rather, it means that you have control over who can access what of your personal data, and I found that easier to do in G+ than FB which is one of the reasons I rather use G+.

    Also FB is known for paying people to badmouth Google. Just saying...