Schwartz On Security: Click 'Dislike' For Facebook Safety

Social networks allow for friends, but what about your enemies, as in the myriad viruses and worms out to fry your account and personal financial information?

Mathew J. Schwartz, Contributor

November 17, 2010

2 Min Read

Slideshow: Cloud Security Pros And Cons

Slideshow: Cloud Security Pros And Cons


Slideshow: Cloud Security Pros And Cons (click image for larger view and for full slideshow)

Pescatore said there's a pattern to Facebook's security spin. "Basically, what you see is Facebook taking several steps to protect its customers -- advertisers. If they were trying to protect Facebook users, they would have taken very different steps. Because what you don't see is any real attention to actually addressing the real vulnerabilities."

Unfortunately, this has echoes of the story that broke in August about Microsoft axing better Internet Explorer 8 privacy controls because it would result in less advertising revenue -- for Microsoft, among others.

How can people still use social networks, but stay more secure? Stemming the flow of information to third parties is a start, for example by deactivating content-sharing buttons such as Facebook Connect.

Helpfully, Google Chrome users can employ an extension developed by Google engineer Brian Kennish, called Facebook Disconnect. The extension blocks the flow of data to the more than 1 million websites that use Facebook Connect. As Kennish said in the accompanying release notes, Facebook Connect "has a history of leaking personally identifiable information to third parties." Accordingly, his extension stops it from being able to track you.

Maybe the secret for better social networking security for the masses would be a browser plug-in that goes one step further. Let's show what Facebook -- or MySpace and LinkedIn, or Google and Microsoft, or any other website -- earns, in real-time dollars, thanks to serving advertising to you and selling your data to outsiders.

Call it the "Follow the Money" extension. People could still connect via their social network of choice. But if they saw the meter running in the background, would it cast their social interactions in a different light, perhaps at the same time highlighting the accompanying and alarming security and privacy concerns?

Read more about:

20102010

About the Author(s)

Mathew J. Schwartz

Contributor

Mathew Schwartz served as the InformationWeek information security reporter from 2010 until mid-2014.

Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.

You May Also Like


More Insights