How Safe Is Facebook?

I’ve been a member of Facebook since the school restrictions were lifted and have really enjoyed my experience having a Facebook page.  I’ve managed to reunite with several friends from high school and college, keep in touch with distant cousins that I haven’t seen for awhile, and even managed to take several relationships I’ve made on this site to a whole new level by getting to my readers on a more personal level through Facebook. 

One of the great things about the system Facebook uses is how friends work, giving users full control over who has access to their personal information.   The problem is, people seem to treat it like MySpace and accept every invite for friendship.  

Webware recently wrote about a Facebook ID probe that was done by Sophos, where they tried to get a feel of how many people made all their personal information available to people that didn’t even know them.   Here are the results according to Webware:

Sophos created a fake Facebook profile, under the name ‘Freddi Staur’ (’ID Fraudster’ with the letters rearranged), and randomly requested 200 members to be friends with ‘Freddi.’ Out of those 200, 87 accepted the friend request and 82 of those gave ‘Freddi’ access to “personal information” such as e-mail addresses, dates of birth, addresses and phone numbers, and school or work data. Presumably, the other five had restricted ‘Freddi’ to limited profile access, which many users select for bosses, parents, or people they don’t know in real life.

Its interesting to see that even in today’s world, people still place little effort into protecting their personal information.    A couple things I do:

  1. Take full advantage of the limited profile.   You can go into the settings and establish what information you will reveal, then give people you aren’t really close to access to your limited profile.   This way they can’t view a lot of your information, but they can still leave comments and stuff.
  2. Remove the year from your birthday.  Knowing a birthday isn’t quite the same as a social security number, but it is crucial to someone trying to steal your identity. 
  3. Don’t give your full address or phone number.   Just display your City, State, County, etc.
  4. Don’t use your main e-mail address.  Instead establish a designated e-mail address that you use only for signing up for services. 

If you insist on displaying these things, make sure they are not displayed to people that view your limited profile, then start using the limited profile. 

Do you feel safe on Facebook?

Want automatic updates? Subscribe to our RSS feed or Get E-mailed Updates! |

There Are No Responses Yet. »

  1. Great stuff. Thanks Kyle.

    I also covered concerns over privacy on my blog:

    http://zia.blogspot.com/2007/08/facebook-privacy.html
    http://zia.blogspot.com/2007/08/facebooks-code-leak-raises-fears-of.html

  2. Zia – Thanks for pointing me towards both of your posts, that were really well written! I intentionally stayed away from the source code leak in my post, as to me it is another issue entirely.

    They also sold some of the ownership recently just to cover bandwidth fees and such, until they get their advertising revenue stream in place. I think that shows that they have grown to fast to keep up with. I’m confident some of the stuff on their end will be remedied in time, but nothing Facebook does can remedy these people that accept anyone as a friend and display all their personal information. :)

  3. Personally I do. I just **ignorant statement coming up** make sure who I add.

    That being said, I’m not too sure what exactly I’ve got on there. Only my mobile number and my town (though I have a unique name, so people would probably find me easily)

  4. Nice tips, Kyle. I’m going to check if I’ve given those data like birth years, etc.

Trackbacks/Pingbacks

Post a Response