I don’t use Facebook, largely because I don’t like giving up control of who sees various pieces of personal data. Traditionally, an address book was a very private thing, kept securely at home. But now, with social networking sites such as Facebook, people seem happy to publish a list of their contacts on the internet. It has become some sort of vulgar popularity contest. One thing I certainly don’t want is anyone to have a list of my contacts. Just because I know person A and person B doesn’t mean that they should know each other, and whether or not it would be advantageous to them, it certainly wouldn’t be to me!
Facebook fans will be quick to point out that the site allows users a lot of control over who sees what on their profile. Well, I’m not certain it’s possible to hide your list of “friends” from other “friends”, which would be a requirement. But even if you could do that today, there’s no guarantee that Facebook wouldn’t change something tomorrow that suddenly revealed the full list of “friends”, and all sorts of other private details too. They have a track record of doing so, for example last December and in September 2007, just two instances of when changes to the site meant that people were suddenly revealing more than they bargained for. And the trouble with having such complex privacy settings is that it’s very difficult to figure out exactly who can see what – often, the only way to do this thoroughly would be to create several test accounts and try out various combinations of privacy settings and mutual “friendship”.
It isn’t just a list of contacts that’s at risk either. Dates of birth and family names can give fraudsters enough information to access a bank account. Status updates saying when you are on holiday can be useful to burglars. People may also upload content such as photos to their Facebook page in the belief that only their “friends” can view them. However, in many cases, if one of their “friends” comments on the photo, the comment appears on the “friend’s” “wall”, and if their wall is publicly visible, anyone can click on the link that says, “John has commented on James’s photo” and view the photo, and from there can view the entire album to which the photo belongs! In this way, many of a person’s “private” photos are actually publicly visible, and they have little control over it, as it depends on their “friend’s” privacy settings.
The social networking privacy site Social Hacking has an article containing a Javascript bookmarklet that allows people to see all of a Facebook user’s albums that are visible in this way, so there’s no need to search through the wall history of all their “friends”. As the author says, this in no way circumvents the privacy settings, it simply makes it more convenient to see photos that are already available. There may well be a method to protect albums from this, but a quick look at a some random profiles shows that few people use it. And even if everyone tightened up their privacy settings to prevent their photos being leaked, the next time Facebook decides to change the way privacy settings work, who knows which photos will be visible again?
Ultimately, Facebook is a proprietary site controlled by one company. It goes against the whole open principle of the world wide web. Why must people put something “on Facebook” rather than “on the web”? As it is a social network, Facebook coerces people into using the site because it’s the only way to see their friends’ updates if that happens to be what their friends are using (no quotes around “friends” this time as, in this instance, it refers to real friends!). If people hosted their own blogs, and kept their photos on their own website, they could be sure of controlling who was seeing what – and who would be able to see it in a month’s time. And if people published RSS feeds, rather than Facebook updates, their friends could use any reader to view them, not be tied to one website. Facebook could easily become the next Microsoft, but worse, as it is people’s privacy at stake instead of their pockets.
If you value your privacy – or your freedom to use an open internet as we currently know it – don’t use Facebook. Direct your contacts to your website where you can show them exactly the information you want to.