Home
BYTE Newsletter
Keep up with all the BYTE News and Reviews

Subscribe

Oh, Facebook, Why Can't I Quit You?

Comments | Boonsri Dickinson, BYTE | May 18, 2012 06:03 PM

Category: Social Networking

Apps present another security risk. "Both [tracking and apps] are big concerns. But I'd have to say that the app gap is a big problem," said Rebecca Jeschke, a PR rep from Electronic Frontier Foundation. "You shouldn't have to share your info with your friend's applications because you want to use just one application."

More Insights

Webcasts

More >>

White Papers

More >>

Reports

More >>

Facebook apps present other possible security problems. We've already seen issues with apps such as Path gaining access to contact data on phones. A similar thing could happen with poorly coded Facebook apps and malware. Apps can give hackers access to information they normally wouldn't have and act as windows into other websites. You never know who is writing an app. Some apps are written by big companies. Others are written by a random guy in his bedroom. Granting an app access to your friend list, gender, or info could compromise your privacy and even your company's secrets. "There have been multiple vectors, scams, malware, clickjacking scams, based on Facebook apps that were either written poorly or written to be intentionally malicious," Soltani said.

Then you have social engineering, which is designed to trick users into giving information so the hacker can gain access to Facebook. "The attacker knows information about the victim that they're able to exploit for a variety of purposes, including identify theft, revealing personal info, and attacks on password reset dialogues," Soltani said.

Think about it. If a hacker knows your hometown, favorite pet, or high school best friend, it allows him access to something he wouldn't normally have access to without that information. A number of celebrities had their email accounts accessed after an attacker used data that was classified as publicly available to guess their password reset secrets. Remember when Sarah Palin's email was hacked? "As we post more on social networks, we also reveal information that may be used in a way we didn't anticipate, including guessing our passwords," Soltani said.

Living your life out in public can not only give hackers too much information that compromise your privacy, but it can give your employers a window into your private life. An employer can tell if you are at home or at work by looking at what you are posting on Facebook--especially if you are surfing while on the company network. What's more, Facebook itself could track your whereabouts. "Facebook knows when you go to work and go home, which would be an interesting privacy leak," said Jeremiah Grossman, CTO at WhiteHat Security. Employees who use Facebook apps at work put their companies at additional risk, he added. "A work compromise might lead to intellectual property loss, fraud, and account compromise."

It's easy to understand what is private in real life. You wouldn't say out loud anything you didn't want your co-workers to hear. But many people are not as cautious online. Online communities like Facebook can also present unusual problems for a company when employees mix work with personal. Jules Polonetsky, director of the Future of Privacy, said every responsible company needs to have a social media policy. For instance, a salesperson might connect with prospects on Facebook and then gets fired. The employer does not have access to that person's personal Facebook page, thus does not have a record of the contacts made. In another scenario, an employee might check in at a client's headquarters, forgetting that he is sharing his location. Competitors can look at his check-in and see what client he is talking to.

"There are a range of ways employees need to understand and need to manage their social media. People often merge professional with personal. There needs to be a more rigid separation to ensure lines between personal and company data [are kept separate]," Polonetsky said.

In the meantime, Facebook stands to benefit ever more prosperously from our indiscretions. Sean Gourley, co-founder of Quid, a data analysis and consulting firm, thinks about the power of algorithms and how it's being used to manipulate people into consuming more. "A billion people are competing with each other and sharing more info. That's the world that we got, the world Mark Zuckerberg created--a platform that can collect as much information out of us, using addictive game mechanics and using algorithms to sell you stuff. The more you share, the more you project, and the more money Facebook makes--and the richer Zuckerberg becomes. Slowly we will wake up to this" he said.

So the next time you feel the urge to make your life look better by updating your Facebook page, think about the possible professional risks of posting, the security risks to your company, and the algorithms that are used to sell you stuff you didn't even know you needed.

Now that's the heart of consumerism. How do you "like" that?

Boonsri Dickinson is the Associate Editor of BYTE



Related Reading




Currently we allow the following HTML tags in comments:

Single tags

These tags can be used alone and don't need an ending tag.

<br> Defines a single line break

<hr> Defines a horizontal line

Matching tags

These require an ending tag - e.g. <i>italic text</i>

<a> Defines an anchor

<b> Defines bold text

<big> Defines big text

<blockquote> Defines a long quotation

<caption> Defines a table caption

<cite> Defines a citation

<code> Defines computer code text

<em> Defines emphasized text

<fieldset> Defines a border around elements in a form

<h1> This is heading 1

<h2> This is heading 2

<h3> This is heading 3

<h4> This is heading 4

<h5> This is heading 5

<h6> This is heading 6

<i> Defines italic text

<p> Defines a paragraph

<pre> Defines preformatted text

<q> Defines a short quotation

<samp> Defines sample computer code text

<small> Defines small text

<span> Defines a section in a document

<s> Defines strikethrough text

<strike> Defines strikethrough text

<strong> Defines strong text

<sub> Defines subscripted text

<sup> Defines superscripted text

<u> Defines underlined text

BYTE encourages readers to engage in spirited, healthy debate, including taking us to task. However, BYTE moderates all comments posted to our site, and reserves the right to modify or remove any content that it determines to be derogatory, offensive, inflammatory, vulgar, irrelevant/off-topic, racist or obvious marketing/SPAM. BYTE further reserves the right to disable the profile of any commenter participating in said activities.

COMMENTS

Tune In to BYTE
Facebook Twitter LinkedIn Newsletter RSS
Whitepapers
whitepaper
In this paper you will learn the five trends shaping the future of enterprise mobility. Learn how the rise of social media as a business application, the lurring between work and home, the emergence of new mobile devices, the demand for tech savvy employees and changing expectations of corporate IT will fundamentally change the workplace.
whitepaper
In a survey of more than 1,700 information workers (iWorkers) in North America, notebooks, desktops, and smartphones were found to be “must-have” devices, while tablets, slates, and netbooks were relegated to “nice-to-have” status, according to a commissioned study conducted by Forrester Consulting on behalf of Dell and Intel.
Sponsored by: Dell
Upcoming Events