Commentary

Alexander Wolfe
 
See more from this author

Facebook Security Crisis Could Derail Social Nets

There's a security problem on the horizon, which could derail the progress of social networking has made in breaking down the barriers between business and personal Internet usage. (Whether that's a good thing or not is a separate argument.) I'm speaking of the rising tide of fake Facebook messages, phishing threats, and malware.

| Alexander Wolfe | November 06, 2009 04:32 PM

There's a security problem on the horizon, which could derail the progress of social networking has made in breaking down the barriers between business and personal Internet usage. (Whether that's a good thing or not is a separate argument.) I'm speaking of the rising tide of fake Facebook messages, phishing threats, and malware.And I didn't even mention the constant "friend-request" harassment from people you've never met. (Ba Dum Bum!)

Seriously, though, it's no wonder that many businesses are reluctant to allow employees to surf Facebook and LinkedIn at work. Probably these sites were blocked initially because of their time-wasting potential (and, in the case of YouTube, the unnecessary bandwidth usage). However, the security issues now running rampant on Facebook give enterprises a legitimate reason to demur.


More Global CIO Insights

White Papers

More >>

Reports

More >>

Webcasts

More >>

Possibly LinkedIn sees fewer phishing attempts for the same reason that Apple's Mac OS is supposedly safer than Windows. As in, it's not necessarily more inherently impregnable, it's just that it presents a smaller target to bad actors.

Anecdotally, even the casual Facebook user knows what I'm talking about:

  • It's messages appearing to , asking you to click on a video, which turns outs to be a piece of malware.

  • It's phishing attempts which can suck your computer into a botnet.

  • It's fake "update your account" messages, which are also a phishing scam.

    And it's stuff like this "Facebook Password Reset Confirmation. Customer Message." I received recently. (Those two periods add legitimacy to the subject line. Not.) It read:

    Hey alex,

    Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document.

    Thanks, Your Facebook.

    I flagged that email as bad quicker than a scalper makes a cop outside Yankee Stadium (to use a timely analogy). It wasn't just the "Hey" or lower-case "a" in Alex, which is not my Facebook name anyway. I thought the "Thanks, Your Facebook" at the close was a nice touch, though of course the proper response is, no, your Facebook.

    Seems to me that such security issues are more serious issue for social-networking sites than anyone has yet acknowledged. I believe the patina of friendly interaction, and the good-natured communication which Facebook inherently invites, has raised less of a reaction than if similar problems had occurred on a "regular" site.

    Think what Amazon would do if its customers were constantly being bombarded with attempts to steal their credit card numbers.

    Which is not to say that Facebook isn't working hard to stanch this stuff. It is. (Check out Facebook's blog as well as its developer wiki.)

    However, Facebook is fighting a battle which it appears ill-equipped to win. That's because the security problems facing Facebook aren't due to lapses by the site so much as their occur precisely because of its very nature. So, if you corrected the problem by locking down Facebook, it wouldn't be Facebook.

    Because, hey, if you can't trust your friends, who can you trust?

    Follow me on Twitter: (@awolfe58)

    What's your take? Let me know, by leaving a comment below or e-mailing me directly at alex@alexwolfe.net. Like this blog? Subscribe to its RSS feed: (here)

     My videos on ( YouTube)

     Facebook 

      LinkedIn

    Alex Wolfe is editor-in-chief of InformationWeek.com.


    • , join the conversation

    Related Reading

    News

    More News»

    Most Popular

    More Popular»

    Commentary

    More Commentary»

    On the Web

    More On The Web»

    Video

    More Videos»

    Slideshow

    More Slideshows»


    Currently we allow the following HTML tags in comments:

    Single tags

    These tags can be used alone and don't need an ending tag.

    <br> Defines a single line break

    <hr> Defines a horizontal line

    Matching tags

    These require an ending tag - e.g. <i>italic text</i>

    <a> Defines an anchor

    <b> Defines bold text

    <big> Defines big text

    <blockquote> Defines a long quotation

    <caption> Defines a table caption

    <cite> Defines a citation

    <code> Defines computer code text

    <em> Defines emphasized text

    <fieldset> Defines a border around elements in a form

    <h1> This is heading 1

    <h2> This is heading 2

    <h3> This is heading 3

    <h4> This is heading 4

    <h5> This is heading 5

    <h6> This is heading 6

    <i> Defines italic text

    <p> Defines a paragraph

    <pre> Defines preformatted text

    <q> Defines a short quotation

    <samp> Defines sample computer code text

    <small> Defines small text

    <span> Defines a section in a document

    <s> Defines strikethrough text

    <strike> Defines strikethrough text

    <strong> Defines strong text

    <sub> Defines subscripted text

    <sup> Defines superscripted text

    <u> Defines underlined text

    InformationWeek encourages readers to engage in spirited, healthy debate, including taking us to task. However, InformationWeek moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. InformationWeek further reserves the right to disable the profile of any commenter participating in said activities.

    Disqus Tips To upload an avatar photo, first complete your Disqus profile. | View the list of supported HTML tags you can use to style comments. | Please read our commenting policy.
    T-Shirt Giveaway T-Shirt Giveaway: Each week we're selecting one great comment from our readers. The author of the comment will receive an InformaitonWeek Community t-shirt. So get posting!
    Subscribe to RSS

    Resource Links