Facebook again
The BBC have discovered that it’s easy to write a Facebook application that will, when loaded on a users profile, harvest all sorts of information about that person and their contacts. If the BBC are the first people to think of doing this, I would be really surprised, yet there seems to be a level of indignation that I find hard to take. This is the internet; it is not anywhere near as secure as people would like us to believe and hacking goes on. If you don’t want anyone to find out enough information about you to commit identity fraud, don’t put it on a public forum – it’s as simple as that.
Until we all learn that our personal data is valuable – and that protecting it is OUR OWN RESPONSIBILITY – then identity theft will continue to increase.
That data thing again
This story from the BBC highlights the latest arguments that are raging over online information. Apparently, the Press Complaints Commission are to undertake consultation about whether newspapers should be able to re-print information that individuals have made available on sites like Facebook and MySpace.
The impetus for this seems to be that individuals who have seen their information re-used in newspaper stories about them are objecting; they say that this information is private and not for public consumption.
Which is crap. This isn’t (or shouldn’t be) a privacy issue – it’s a question of copyright. You’ve already made the information public by publishing it on a website; if it gets re-used by a newspaper then the best you can hope for is to sue them for infringement of your copyright – so if they re-publish your holiday snaps without your permission, you’ve got a case.
As far as privacy goes, if you don’t want people to know about something then don’t put it on a website. As I’ve said before (here and here), you’re just opening yourself up for trouble.
In a related story, you may have heard of the issues that are surrounding the “whistle-blowing” site, Wikileaks. Everyone seems to be up in arms because they’ve been closed down for making public some confidential documents owned by companies; this is being seen as stifling of freedom of speech. Um, no. What it is is stopping the illegal use of documents that are not owned (and may have been obtained illegally) by those people who are making them public. Freedom of speech is a great thing and if it’s being stifled then I’m ready to protest as loud as the next person – but that’s not what is happening here.
Facebook and your data
A few days ago, I wrote this post about the amount of data that people give to Facebook, and asked whether those that do so had really thought about the implications of what they are doing. The post was prompted by the story about Robert Scoble being banned for scraping data from the site.
In the comments for that post, brightfeather asked:
(1) When you say “trimmed” I take that to mean that you removed some information. What did you remove? (2) And what would you recommend as the bare minimum amount of information to post on Facebook?
I was going to reply in the comments for that post, but thought that this was worth a post by itself.
To answer the first part, I removed photos, school history, employment history (but not current employer), all of the “About Me” type information like interests, favourite movies, etc as well as hometown, country, political views, religious views, groups and all my contact details other than websites that I’m associated with.
I also took the opportunity to remove all those annoying applications that Facebook is infested with these days, even though I didn’t have that many on my profile.
The information that I left is already in the public domain; my employer, for example, is known to anyone that reads any of my blogs. I also left my profile picture, as it’s the same picture I use everywhere.
I didn’t delete the account entirely because I use Facebook to stay in easy contact with people; if you lose their email address you can still send them a message via Facebook. And it’s also a good way to get back in touch with people that you’ve not heard from for a long time. However, my account remains restricted so even though there’s no longer much information up there, only my friends can see it all; everyone else just gets a potted version.
The rest of Facebook (all those stupid applications and how many varieties of ‘Wall’ that just get filled with the same four or five allegedly funny items) just doesn’t appeal to me – but then, it’s not really aimed at my demographic.
To answer the second part is harder and will, I imagine, be different for each individual because it comes down to how comfortable you are with disclosing personal information. The first problem is that Facebook don’t seem to have users interests at heart when it comes to spreading data around (see the recent press about Beacon) because data is valuable – they can sell it to advertisers for big bucks. The second problem is that, as Robert Scoble demonstrated, Facebook can be scraped. What this means is that you’ve got a repository of information about in excess of 50 million people (at least that’s the most recent user figure I’ve heard) which is not too hard for someone with the right software to access. And data is valuable to them too; for opening bank accounts in your name, getting credit cards or scamming you directly.
So you have to ask yourself what you’re happy about people knowing, but remember that identity theft does not require much information (see this story about Jeremy Clarkson if you’re in any doubt), so the more information you put up the more at risk you could be.
For instance, let’s say that you’re a young married man with a family. So your profile shows who you’re married, and your friends list may include your brothers and sisters, and your Mum and Dad. You put up where you went to school, where you work, pictures of your darling children (and their names and ages), pictures of your car and your house. You tell people your hometown and when you’re going away on holiday. You make status updates about how you hate your Bank – and you tell people which Bank it is so they can avoid it. All in one session at the computer.
Now you can call me paranoid if you want, but with all of the data losses that have been going on in the UK recently do you really want to give any more away? Do you really want to take the risk?
Wolfs Helpers
