If geeks love it, we’re on it

All hands on deck: Facebook’s emergency privacy meeting was a total failure

All hands on deck: Facebook’s emergency privacy meeting was a total failure

Then 2009 hit, and the world was rudely informed that Zuckerberg fully intended to monetize his users’ information. In November, updates to the privacy policy resulted in your name, picture, gender and networks being publicized by default. Your friends became exposed to all Facebook users, too. In December, your friends became fully public, as did your “likes.” Your privacy options got simultaneously smaller. Quoting the EFF on the subject:

Looking even closer at the new Facebook privacy changes, things get downright ugly when it comes to controlling who gets to see personal information such as your list of friends. Under the new regime, Facebook treats that information — along with your name, profile picture, current city, gender, networks, and the pages that you are a “fan” of — as “publicly available information” or “PAI.” Before, users were allowed to restrict access to much of that information. Now, however, those privacy options have been eliminated. For example, although you used to have the ability to prevent everyone but your friends from seeing your friends list, that old privacy setting — shown below — has now been removed completely from the privacy settings page.

In Facebook’s own words, they just made it simpler for you, since nobody really used those options anyway:

With these changes, a limited set of basic information that helps your friends find you will be made publicly available. This information is name, profile picture, gender, current city, networks, friend list, and Pages. The overwhelming majority of people who use Facebook already make most or all of this information available to everyone.

The web roared. How could Facebook make such a bold step to make all of that information–including Pages, which many users consider sensitive–completely public, even to Google searches? It was abhorrent. In a hilarious flub, Mark’s profile suddenly became incredibly public as well, though he later tried to explain it away as an intentional update.

This move to publicize everything was nevertheless right up Zuckerberg’s alley. In an interview with Michael Arrington in January, he tried to justify it by saying that people already shared most of this information. The “social mores” were changing, and conveniently in Facebook’s profit-boosting favor.

When I got started in my dorm room at Harvard, the question a lot of people asked was ‘why would I want to put any information on the Internet at all? Why would I want to have a website?’ And then in the last 5 or 6 years, blogging has taken off in a huge way and all these different services that have people sharing all this information. People have really gotten comfortable not only sharing more information and different kinds, but more openly and with more people. That social norm is just something that has evolved over time. We view it as our role in the system to constantly be innovating and be updating what our system is to reflect what the current social norms are.

A lot of companies would be trapped by the conventions and their legacies of what they’ve built, doing a privacy change – doing a privacy change for 350 million users is not the kind of thing that a lot of companies would do. But we viewed that as a really important thing, to always keep a beginner’s mind and what would we do if we were starting the company now and we decided that these would be the social norms now and we just went for it.

In other words, if Mark was doing it all over again, everything would be public from the start. Here in 2010, somebody creating a new profile today would only keep his or her contact information and birthday private. Everything else? Fair game.

The seeds of that ambition can already be seen. Your interests, favorites, work and education now link to Pages, which (surprise!) makes them available for all to see. Anything you “like” can create a connection, which instantly goes public as well. The Instant Personalization service even allows sites to poke their heads into your profile and harvest your information: the music you like, the movies you watch, your name, gender, affiliations. . . everything.

The pride before the fall

So, with the wrath of the Internet at their doorstep and famous folk publicly deleting their Facebook account, Facebook called an all-hands meeting to discuss its site-wide privacy strategy. The company emerged with just one announcement: new tools to prevent unauthorized computers from logging into your account.

Facebook will now allow you to specify (like a banking site) which computers you’re usually going to log in from. Facebook will notify you of attempted logins from other computers, and it may even ask you security questions to determine your identity should you log in from an abnormal computer.

It’s a decent tool. It also completely fails at addressing the root cause of the growing backlash.

Facebook has become big enough that it can afford to do this, however. Whether you don’t know how or can’t find the motivation, Zuckerberg knows the vast majority of you will not leave the service.

The ones that try are treated to full-on guilt trip. Go on, click it. At the time of writing, Facebook’s account deactivation page tries to prevent you from doing so by displaying a selection of your friends, noting that they (and all the rest) will miss you if you go. Good luck even accessing the account deletion page while looking through the site – it’s harder to find than a needle in a haystack comprised of needles.

The sad part is that they’re entirely correct. Farmville alone draws 80 million unique users per month. Many people, myself included, also retain a Facebook account because they make life easier. It’s starting to push that line, though.

I’ve thoroughly neutered my profile by removing virtually every relevant bit, and you can do the same by following Rob Hallock’s privacy guide. You can also support the Diaspora project, which intends to offer an open version of Facebook that puts the privacy reins firmly in your own hands:

As they describe it, the Diaspora* software will let users set up their own personal servers, called seeds, create their own hubs and fully control the information they share. Mr. Sofaer says that centralized networks like Facebook are not necessary. “In our real lives, we talk to each other,” he said. “We don’t need to hand our messages to a hub. What Facebook gives you as a user isn’t all that hard to do. All the little games, the little walls, the little chat, aren’t really rare things. The technology already exists.”

With any luck, Facebook’s anti-hacking measures won’t be the only outcome of today’s meeting. Hell, maybe they’ll roll back some of the privacy changes like they have before, but only continued dissent and the prospect of viable alternatives will help keep Facebook honest.

Without changes to the service, Facebook will inevitably suffer losses, either of users as they quit, or of revenue as people strip their profiles. I know Zuckerberg doesn’t want Facebook to go the way of MySpace, so we can only hope he makes decisions that reflect a desire to win users’ trust back.

« Previous

Comments

  1. Tim
    Tim Maybe I'll make a facebook profile for me, but not include one piece of significant or insignificant information, so I can "get" the people who run facebook and not make any money for them by way of their advertising methods.

    Or I can just continue to not have a facebook page in the first place. That might be even better! :)
  2. TiberiusLazarus
    TiberiusLazarus U.S.S Facebook Midshipman #1: We've got a massive privacy breach, starboard side Captain!

    Civilian #1: Oh sweet baby jesus do something captain! All my information is getting loose!

    U.S.S Facebook Captain: Hmm....Keep going.

    U.S.S Facebook Midshipman #2: What about the hole, Captain? We're flooding the seas with private data.

    U.S.S Facebook Lieutenant: I've got this anti-hacker net my son made in Boy Scouts.

    U.S.S Facebook Captain: Put it up ensign. We've got to get this shipment of crops out to the FarmVille Archipelago before sunset. You would have given that information away anyways civilian.

    Civilian #1: DOT...DOT...DOT.............
  3. Kwitko
    Kwitko
    Tim wrote:
    Maybe I'll make a facebook profile for me, but not include one piece of significant or insignificant information, so I can "get" the people who run facebook and not make any money for them by way of their advertising methods.

    Or I can just continue to not have a facebook page in the first place. That might be even better! :)

    Both ideas: PURE PWNAGE!
  4. Shiva I have a facebook page with most of my former co-workers and friends. 99% of the time the only posts i see from them are the incredibly ridiculous jedi mind trick games (farmtown etc). Or that one of them has finally gotten a job. Could anything be more boring?

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!