Facebook’s Instant Personalization Is the Real Privacy Problem

http://gigaom.com/2010/04/22/facebooks-instant-personalization-is-the-real-privacy-hairball/

by hshah • 16 years ago

65 40 16 years ago

jkincaid3• 16 years ago

This actually wasn't a surprise — I wrote about it a few weeks ago (http://techcrunch.com/2010/03/27/facebook-privacy-connect/) and it was hinted at in Facebook's new Terms of Service.

Facebook knows it could lead to some major backlash too, so they're being very conservative with the initial rollout. If you go to Yelp, it's actually hard to tell at first glance that any data sharing has occurred. Go to Pandora and it will know what bands you like, but who is going to get upset about that? And Docs.com doesn't appear to be open to the public yet.

As the program expands, though, there could be a pretty serious shitstorm. I don't think people understand what the 'Everyone' option means, and this could be the first time they realize what they signed up for during Facebook's privacy overhaul last December, when Everyone became the default.

robotron2• 16 years ago

But you know what? There's a setting in Privacy Settings->Applications and Websites called "Instant Personalization". Uncheck it and there you go. I realize there are a lot of people who won't do this but the option is there.

pxlpshr• 16 years ago

I did just that, and this is what it told me:

"Please keep in mind that if you opt out, your friends may still share public Facebook information about you to personalize their experience on these partner sites unless you block the application."

mikebo2• 16 years ago

Does that setting keep the FB iframe request w/ my cookie and URL I'm viewing from being sent to FB? That's the real issue in my book.

jkincaid3• 16 years ago

That's sort of beside the point. If people start freaking out about this, they aren't going to see that setting and say "Oh, I guess this is OK then". They're going to be angry that they were signed up for it in the first place without realizing what was going on.

jfager• 16 years ago

Any change that exposes more of your personal information should be opt-in, period. This should be a mantra for these kinds of services.

This move by FB makes whatever mistakes Google made with Buzz look relatively innocent. They need to get burned hard over this.

aphyr2• 16 years ago

Even with instant personalization turned off, your friends can share your info on any service they get suckered into using. Given how many of my Facebook friends bombard me with quizzes and Farmville, I'm guessing that's going to happen a lot. You have to block each application individually.

Moreover, any site can display your profile information. http://cnn.com even seems to combine it with what CNN stories they liked recently, which makes me wonder how much data they can read back. Has anyone taken a look at the Facebook social plugins to determine how much data, if any, you can get out of them?

jkincaid3• 16 years ago

We were told that third parties can't get any information from the social plugins. The data is served directly from Facebook using an iframe.

aphyr2• 16 years ago

Ah, so CNN is handing its template and some fb query off to the plugin for display, then?

banjiewen• 16 years ago

That's true for the social plugins, but if you've authenticated with the site (e.g., click the "log in" button at the top of any CNN page and log in with FB), any 3rd party running javascript on the page will have access to all of the data you've allowed the parent site to access.

Facebook uses their parent-child-parent iframe tricks to assign a first-party cookie for the host domain. This cookie contains the Facebook user id and the OAuth access token used to make requests to the Graph API.

Any javascript running on the page can snatch that cookie and send the data back up to its mothership, which can then impersonate the host domain to make API requests on behalf of the user. Fun stuff.

83457• 16 years ago

The author states...

Instant personalization means that if you show up to the Internet radio site Pandora for the first time, it will now be able to look directly at your Facebook profile and use public information — name, profile picture, gender and connections, plus anything else you’ve made public — to give you a personalized experience.

Is this true? A simple enable or opt-in prompt in the frame on the first visit to a site would be the expected behavior here.

qhoxie• 16 years ago

Yes, that is basically the point and the reason they call it "instant" - they don't want anything to be a click away.

The opt-out prompt is in the form of a blue bar at the top of the page. Once you say "No thanks" they are required to remove any of your information and not connect you on future visits.

hammerdr• 16 years ago

Screenshot of the instant signin

http://yfrog.com/iymcjp

This was without prompt, as qhoxie states.

nfnaaron• 16 years ago

"Facebook also introduced a way for certain sites to push this further than everyone else. Three carefully chosen launch partners — Microsoft’s Docs.com, Yelp and Pandora — have access to what Facebook is calling “instant personalization.” This is a powerful, inventive and creepy tool that the company hopes to extend to other partners but is testing the waters with these three first."

Wait a minute; Yelp? Isn't that the small business extortion site? What a weird outfit for anyone to want to associate themselves with.

prabhu-pd• 16 years ago

wont it be odd if you go to a website for the first time and u see that the website knows more about u than you know about the website?

iron_ball• 16 years ago

u r rite abt that lol

Or to be more precise, please use proper English. If English is your second language, we are forgiving -- unless your first language is AOLspeak.

mikebo2• 16 years ago

The biggest privacy issue here are the social plugins. They're easily embedded in existing sites using an iframe which is hosted by facebook.

As more sites adopt these, Facebook will be able to track every site you visit on the web. I don't know about you, but I'm not comfortable letting Facebook know which sites I visit.

Google adsense/doubleclick is fairly prevalent and has the same issue. You can opt out of it with Google though: http://www.google.com/privacypolicy.html -- the Facebook settings I have seen aren't clear about their data retention policies and what 'opting out' really means.

Adaptive2• 16 years ago

Forget about Google... Facebook is gunning for Claritas and other profiling companies that have been doing this for years, though behind the scenes and not in real time (see http://epic.org/privacy/profiling/ for more about profiling).

Google may have (deservedly) gotten a black eye for the Buzz debacle, but they have a lot of cultural DNA that values privacy (their CEO aside) and at least some systems in place to allow management of personal data (as well as data exodus).

Facebook on the other hand is clearly all business and will bend privacy concepts till their either break or users are conditioned to accept lack-thereof as the new standard (all in the name of "sharing").

euroclydon2• 16 years ago

That is some really scary stuff in the link you gave!!! People need to realize that it's not worth the $0.25 off a can of green beans you get by using a loyalty card, if a sleazy merchant is going to swoop in at some vulnerable time in your life and help separate you from hundreds or thousands of your dollars.

Adaptive2• 16 years ago

You got it. I worked in marketing for years and was always shocked at how much personal data we could get our hands on. It makes the recent dust ups about online privacy look (almost) tame in comparison, yet these profiling companies get away with it because no one realizes what's going on.

acgourley• 16 years ago

Can you give an example of how they are going to 'help separate you from hundreds or thousands of your dollars'?

ams61102• 16 years ago

If you're worried about it, get a loyalty card and provide fictitious information on the form. I've never been asked to provide any proof of identity to get a supermarket loyalty card.

Though if you use your loyalty card and then pay with a credit card I guess they could link back to the "real" you.

jonknee2• 16 years ago

What's the best way to block this entirely? /etc/hosts won't work because it's not on a subdomain (the iFrame loads from http://www.facebook.com/plugins/activity.php). This would make a nice Chrome/Firefox extension.

jarek2• 16 years ago

Any decent browser should be able to block content by URL. Use your adblocker.

jonknee2• 16 years ago

My adblocker (in Chrome) loads resources before removing them from the DOM. I simply want to block this before the request is made.

bombs• 16 years ago

I added http://www.facebook.com/plugins/ and https://www.facebook.com/plugins to AdBlocker's filters in Safari.

It seems to have removed all Open Graph stuff from the web for me.

naner• 16 years ago

> What's the best way to block this entirely?

A greasemonkey script to always click 'No Thanks'.

LisaValentine• 16 years ago

If you're talking about blocking on the enterprise network, check out this resource. It's a whitepaper called “To Block or Not. Is that the question?”

http://bit.ly/9f8WOT

It has lots of insightful and useful information about identifying and controlling Enterprise 2.0 apps (Facebook, Twitter, Skype, SharePoint, etc.)

ams61102• 16 years ago

Years ago, when caller ID was becoming commonplace, a company (I think it was American Express) started answering customer calls by name--- "Hello Mr. Jones, how can we help you."

This proved to be very unpopular with customers and they stopped doing it... they probably still use the caller ID but don't let you know that they are.

maw• 16 years ago

It probably also annoyed Mrs. Jones when she made calls using the Jones' shared line which was in Mr. Jones' name.

_ouxp• 16 years ago

0.0.0.0 facebook.com www.facebook.com static.ak.fbcdn.net fbcdn.net ...

metamemetics• 16 years ago

The idea is that Pandora is a somewhat hard concept to explain to new users — before it existed, people didn’t have their own personalized radio stations based on similarities between artists and song.

Last.fm always generated you radio stations based on your scrobbles or by tags you type and predates Pandora

dantheman• 16 years ago

To disable, Go To: Account > Privacy Settings > Applications and Websites > and [UNCHECK] "Instant Personalization"

des• 16 years ago

Unchecking that box only stops the personalization from happening automatically. The floating toolbar still appears asking if you'd like to opt-in (at least on yelp.com)

Facebook’s Instant Personalization Is the Real Privacy Problem

Related Stories