Sunday, October 24, 2010

Facebook tackles latest privacy slip with encryption

Facebook is in the news, once again, regarding its attempt to resolve the issues posed by some its recent security slips. This article talks about Facebook's direct response to the problems PK posted about nearly two weeks ago regarding some of Facebook's most popular apps (Farmville, Frontierville, Texas HoldEm Poker, etc.). These apps have been sending users' personal information to dozens of advertising and internet monitoring companies and compromising Facebook user IDs in the process. And perhaps the most concerning thing is that not only are the users of these apps at risk of their personal information being leaked, but the friends of affected users are also at risk.

As PK pointed out, the blame can be distributed both ways when trying to pinpoint who is at fault for Facebook's continued security issues. On the one hand, it is easy to see why Facebook (as the world's largest social networking host) should withhold the only the most important information of its users. In addition, Facebook should adequately protect this information and certainly not make it available to any third parties. After all, one has to wonder why Facebook hasn't been encrypting the user IDs for its users all along. On the other hand, it is easy to see why Facebook users need to be more cognizant of what they are putting online and on Facebook. It is important for people to realize that even though a website may ask for said amount of information, it does not necessarily mean one has to give all of that information. Often, people are unaware of the risks they face by putting themselves out on the internet on a daily basis.

An easy solution for this whole problem would be for Facebook to stop transmitting user ID's and personal information, but that is unrealistic. Facebook is able to function due to its ability to sell user information. Asking them to stop obtaining that would simply be a waste of time. However, I do believe that using encryption of the Facebook UIDs (unique user IDs) is a step in the right direction. As the article points out, Facebook has been able to save face by responding to this problem so quickly. If Facebook continues to try to protect the information that it promises to protect with encryption, then users will have less to complain about with these security breaches. The responsibility then falls on Facebook users to be aware of what information they are displaying on the internet, as well as how that information could be transmitted and used.

http://www.computerworld.com/s/article/9192638/Facebook_tackles_latest_privacy_slip_with_encryption?taxonomyId=17

http://www.computerworld.com/s/article/9191662/Facebook_battles_another_privacy_firestorm

1 comment:

  1. I agree that facebook should be making sure that any personal information of its users is completely confidential, however I am failing to see what sort of information on facebook is really worth stealing or can have an impact on its users. If someone hacked my facebook they could get my name, birthday, and old email address and thats about it. I think that if individuals are putting upmore private information then that then they are asking for trouble. If someone hacks your facebook and all they can see is who your friends are, your interests, and your wall then it doesnt seem like theres too much that they can do with that to hurt you. Again, I think that is facebooks responsibility to make sure that your information remains private because you have the right to decide who views your facebook page, however I think that if users are loading facebook with all of their personal information then they are asking for trouble.

    ReplyDelete