Comments on: Leaking Information http://redheadedstepchild.org/lists/scratchpad/entry108 Fri, 21 Nov 2008 17:22:27 +0000 http://wordpress.org/?v=2.5.1 By: Alexis http://redheadedstepchild.org/lists/scratchpad/entry108#comment-113 Alexis Sat, 05 Jul 2008 02:49:37 +0000 http://redheadedstepchild.org/lists/scratchpad/?p=108#comment-113 No, I don't mean to say Facebook leaks personal information....leaking suggests something accidental, and the decision to hand that data around is a conscious business and marketing decision on Facebook's part. But I do think users often leak their information - either out of ignorance or because most businesses make it seem awfully appealing to in one way or another. As for Facebook's privacy controls, I'm pretty familiar with most of them, and tend to use them a lot more conscientiously than most people I know. You can control some level of information that apps receive or that your friends receive from apps, but part of your agreement in installing an app is that it can access anything in your profile that is visible to your friends. At any rate, I don't mean this post to be an "OMG teh thought police R stealin' R dataz!" post (another reader's interpretation of what I'm driving at). Rather, I find it 1) useful to be aware of what information is floating around out there about us and 2) interesting to actually see with my own eyes an example of such metrics in action. No, I don’t mean to say Facebook leaks personal information….leaking suggests something accidental, and the decision to hand that data around is a conscious business and marketing decision on Facebook’s part. But I do think users often leak their information - either out of ignorance or because most businesses make it seem awfully appealing to in one way or another.

As for Facebook’s privacy controls, I’m pretty familiar with most of them, and tend to use them a lot more conscientiously than most people I know. You can control some level of information that apps receive or that your friends receive from apps, but part of your agreement in installing an app is that it can access anything in your profile that is visible to your friends.

At any rate, I don’t mean this post to be an “OMG teh thought police R stealin’ R dataz!” post (another reader’s interpretation of what I’m driving at). Rather, I find it 1) useful to be aware of what information is floating around out there about us and 2) interesting to actually see with my own eyes an example of such metrics in action.

]]> By: Steve http://redheadedstepchild.org/lists/scratchpad/entry108#comment-112 Steve Sat, 05 Jul 2008 02:20:27 +0000 http://redheadedstepchild.org/lists/scratchpad/?p=108#comment-112 As a developer of a slightly popular Facebook app ( http://apps.facebook.com/medlinepublications/ ), I can tell you that the platform doesn't "leak" personal information so much as it "hands it wholesale off the back of the truck". I can find out pretty much anything that Facebook knows about any of my users, including who's on their "friend" list, their status updates, etc. IIRC, the developer ToS say that us devs aren't supposed to store any of that information... but there's no technical reason why we can't. That said, FB offers users some control over what information is available to applications... although the level of granularity is pretty high. "Personal Information" refers to maybe five or ten different pieces of information- age, sex, location, etc.- and it'd be nice if FB allowed users to specify exactly which pieces of information go to which apps. Actually, they might already do this, but I sure haven't seen it. My own app only stores FB user ids along with some application-specific information... but there's no reason why I couldn't store more. As long as FB apps are written by third-parties and run on third-party computers, I can't really think of a good solution to the problem other than a more granular permissions model. As a developer of a slightly popular Facebook app ( http://apps.facebook.com/medlinepublications/ ), I can tell you that the platform doesn’t “leak” personal information so much as it “hands it wholesale off the back of the truck”. I can find out pretty much anything that Facebook knows about any of my users, including who’s on their “friend” list, their status updates, etc. IIRC, the developer ToS say that us devs aren’t supposed to store any of that information… but there’s no technical reason why we can’t.

That said, FB offers users some control over what information is available to applications… although the level of granularity is pretty high. “Personal Information” refers to maybe five or ten different pieces of information- age, sex, location, etc.- and it’d be nice if FB allowed users to specify exactly which pieces of information go to which apps. Actually, they might already do this, but I sure haven’t seen it.

My own app only stores FB user ids along with some application-specific information… but there’s no reason why I couldn’t store more. As long as FB apps are written by third-parties and run on third-party computers, I can’t really think of a good solution to the problem other than a more granular permissions model.

]]>