Facebook’s recent changes to its privacy system has been garnering a lot of attention and not a lot of it is good. Both the EFF and Kaliya Hamlin (via ReadWriteWeb) have written up their takes on the matter and, all in all, I think they are decent assessments.
With all the supposed changes in Facebook’s privacy system, I decided to revisit my work with Privacy Mirror (you can catch the backstory: here and then here). Having retested PM with both friends and strangers, here’s what I’ve learned: Plus ça change, plus c’est la même chose.
The more things change, the more they stay the same.
Facebook’s inconsistent treatment of privacy still remains. In a nutshell, what a 3rd party developer can see in your profile, having been granted access to you via your friends, directly depends on whether you have the same application they do. If you and your friends use the same Facebook app, then the 3rd party developer will see your profile (and photos and posts, etc.) as if that developer was your friend. If you do not use the same Facebook app that your friend does, then the 3rd party application is subject to a different set of constraints.
I question whether the recent changes Facebook has instituted have even remotely satisfied Commissioner Stoddart’s concerns with Facebook, specifically 3rd party access to user information. Although users can control the scope of disclosure of their posts a bit better, defaulting settings to “Everyone” access as well as potentially making user’s social graphs public undermines any attempt to cast Facebook in a pro-user control light.
There’s also a nit I’d like to pick with the privacy settings system in Facebook – inconsistent save behavior. In some cases, Facebook automatically saves changed to privacy settings. In some cases, you have to press Save. This is a small point but it points to a larger issue. If service providers do not provide their users with meaningful, usable choices when it comes to controlling privacy and disclosure controls, but instead heap more controls in hard to find places, then these service providers have not aided their customers in the least. More user choices only equals more user control if those choices are clear, consumable, and centralized.
If you want to conduct some of your own testing of Facebook’s privacy system, feel free to play with Privacy Mirror. The following are new features I’ve added:
- PM tests to see if the person your are pointing the Mirror at is a Privacy Mirror user. If they are you’ll get results based on their privacy settings with respect to you as a person. If they aren’t you’ll get results based on their privacy settings with respect to Privacy Mirror being a 3rd party application. This behavior is core Facebook Platform behavior which I feel is inconsistent and puts people at a disadvantage.
- PM tries to find some photo albums that the person may have added
- PM tried to find some photos that are tagged with the person in question
- Added the ability to point the Mirror at a specific person better using their username
Interesting app. Useful for people concerned about the Facebook Privacy. You can read more about the topic on http://fappside.com/2009/12/10/facebooks-new-privacy-settings-developers-point-of-view/
Either way it all violates your privacy, I’m definitely thinking about taking my profile off their. It’s just too scary man! I don’t need to worry about my employer checking out my profile and other stuff etc… I heard one person actually got fired because of facebook.
When Facebook started people were plastering all sorts of info on the page – emails, cell phone numbers and the like. I think people are more aware of privacy problems now,. I see facebook as a place for people to brag about themseleves and how great they are, what great things they have been doing – as they sit lonely in a one bedroom flat and cry into their 5th glass of pinot grigio….Hopefully the madness will end.