The Social

Read all 'Facebook' posts in The Social
December 21, 2009 3:20 PM PST

Big Facebook privacy void: Controls on Connect

by Caroline McCarthy
  • 4 comments

A Foursquare check-in posted to Facebook through Facebook Connect.

(Credit: Facebook)

Privacy on Facebook has been front and center this month as the company has rolled out the controversial revamp of its user privacy settings. One thing that's thankfully stayed intact has been the ability to restrict the third-party applications on your profile to specific "lists" of friends--so that you can, for example, block your Mafia Wars activity from everyone who's not on your "People Who Know About My Mafia Wars Addiction" list.


Dopplr, an app that you can install as a 'box' on your Facebook profile, has privacy controls that allow you to block it from various groups of your friends.

(Credit: Facebook)

But for stuff on my profile that was published through Facebook Connect rather than an app "built" on the platform, this is not the case. For some reason, information published to Facebook through Facebook Connect does not have any privacy controls attached to it, so it's either available to everybody or nobody.

To backtrack a little bit, Facebook first rolled out developer-created applications in the summer of 2007, and then a year later introduced Facebook Connect, which lets users log into third-party sites (and iPhone apps) from their Facebook profiles and publish content back to Facebook.

Facebook Connect apps that publish content back to Facebook profiles (which have additional permissions from those that simply let you log in with your Facebook ID) are grouped alongside the original variety of platform apps in Facebook's "Application Settings" privacy controls section. But the Connect apps don't have a "Profile" tab in their settings, because there isn't an embedded "box" for the app--just what shows up in your News Feed.

"We are evaluating adding post-level privacy settings for stories created through external developers, but for the time being, there is currently no difference between the settings for applications and Facebook Connect activities," Facebook representative Malorie Lucich told CNET via e-mail. "So, while you can control who sees the applications living in your profile boxes and application tabs, you currently cannot granularly control who sees your application activity in your feed."

I discovered this when I was testing out the new Facebook Connect feature on geo app Foursquare, one of the many mobile apps that lets you "check in" to different establishments and broadcast it to your friends from your phone. Foursquare will let you choose before you check in whether you want to broadcast that location to Twitter, and co-founders Dennis Crowley and Naveen Selvadurai tell me that a selective "share this on Facebook" button is coming alongside the Twitter button in a future version of its iPhone application. That'll help a lot, because right now, it'll share all of your check-ins to Facebook or none of them.

In the meantime, I decided to see whether I could restrict Foursquare's Facebook Connect publishing to one or two of my stratified Facebook friends lists--I mean, I don't need to clog all those news feeds up with a day's worth of check-ins, and my boss doesn't need to see that I checked in at Tom & Jerry's Bar after midnight on a weekday. (Not that I'd ever do that.)

Those settings don't exist for Foursquare, though, which takes the form of a Facebook Connect implementation rather than an embeddable app.

(Credit: Facebook)

Unfortunately, because you can't modify privacy controls for a Facebook Connect app, this means I can either show actions to all my friends (my profile is friends-only by default) or none of them. This appears to be the case for everything that's published to Facebook through Connect rather than an app--the same applies, for example, to Foursquare competitor Gowalla.

Right now, Facebook's Malorie Lucich explained to CNET, Facebook Connect posts are treated as "wall" activity. "With Facebook Platform applications and Facebook Connect, users always have control over whether or not they want their activity published to their feed for their friends to see," she wrote. "You can also control who sees your overall activity on Facebook by setting who can see 'posts by me' on your privacy settings page. This will limit who can see your Wall."

"As outlined in our (developer) roadmap, upcoming changes will make it easier for users to directly communicate with their friends about applications and Facebook Connect activity via the inbox," Lucich's e-mail continued. "Additionally, profile boxes and the boxes tab will be removed, making application tabs the sole way to integrate applications statically with your profile--and you will continue to be able to control who sees that content."

But Facebook Connect is huge. More than 80,000 third-party sites are now participating, and not all of them deal with publicly available content (i.e. Yelp reviews, photos uploaded to Flickr, comments on Digg). Privacy controls here are something that Facebook could certainly improve; the company says that plans for data permissions are still evolving.

This post was expanded at 4:46 p.m. PT with comment from Facebook.

December 18, 2009 11:34 AM PST

Facebook to hold spring F8 dev conference

by Caroline McCarthy
  • Post a comment

Looks like Facebook will be throwing another big "F8" developer conference in the spring, after taking 2009 off. According to a sparse post on the company's developer blog, the event will be held April 21 and 22 in San Francisco. No more details are currently available.

"F8 has always been about empowering a community of developers to hack, to build and to delight users," the post reads. "We're looking forward to continuing this tradition at our third F8 in San Francisco on April 21-22, 2010. Please save the date!"

This is a big deal because Facebook's past two F8 conferences have marked the debut of some of its biggest products: in 2007, the groundbreaking Facebook developer platform, and in 2008, Facebook Connect. It's likely that the 2010 version will involve some kind of high-profile launch, too.

What could it be? The obvious possibility is Facebook's long-rumored payment platform or virtual currency system, which currently only powers the internal "gift shop" feature along with a few test developer apps and nonprofit partners. This is more or less Facebook's worst-kept secret: it's been in development for quite some time, but appears to have been repeatedly modified internally. Once said to be a straight-up PayPal competitor called "Facebook Wallet," the project has evolved to fall more in line with the meteoric rise in virtual goods-based social gaming, one of the biggest and most profitable runaway hits on Facebook's platform. It could also mean that Facebook starts to make some serious money from transaction fees and become a real power player in the e-commerce space.

Still, we don't know for sure. We'll keep you updated as more details become available about F8 2010 over the coming months.

This post was updated at 11:42 a.m. PST with a link to the post on Facebook's developer blog.

December 17, 2009 3:03 PM PST

FTC may enter latest Facebook privacy debacle

by Caroline McCarthy
  • 7 comments

Privacy advocates opposed to new privacy regulations at Facebook are attempting to get the attention of the U.S. Federal Trade Commission, according to a complaint filed Thursday on behalf of the Electronic Privacy Information Center and several allied groups.

"These changes violate user expectations, diminish user privacy, and contradict Facebook's own representations," the complaint says of Facebook's new regulations, which push more content public, and make even more data available to third-party applications and advertisers. EPIC's goal is to force Facebook to restore the old settings and add additional controls for members.

"We've had productive discussions with dozens of organizations around the world about the recent changes, and we're disappointed that EPIC has chosen to share their concerns with the FTC while refusing to talk to us about them," a retaliatory statement from Facebook read. "We're pleased that so many users have already gone through the process of reviewing and updating their privacy settings, and are impressed that so many have chosen to customize their settings, demonstrating the effectiveness of Facebook's user empowerment and transparency efforts. Of course, the new tools offer users the opportunity to decide on privacy with every photo, link, or status update they wish to post, so the process of personalizing privacy on Facebook will continue."

It's one thing when Facebook users start complaining about new features that they deem excessively creepy--just look at the outrage that surrounded the News Feed, now a mainstay of the site, when it launched in 2006.

It's a bigger fish entirely when government regulatory bodies get involved, particularly the FTC, which has major sway over the advertising and marketing industries. It was only when privacy groups flagged concerns about Facebook's Beacon advertising program two years ago that participating advertisers started to pull out amid bad publicity. A class action settlement over the Beacon program was resolved recently.

Since then, Facebook hasn't had a privacy-related debacle on the same scale. Much of the philosophy behind Beacon was baked into its Facebook Connect universal log-in tool, which shares information from third-party sites on Facebook profiles and lets users log into other sites with their Facebook credentials. But with the public-relations pitch geared toward making the entire online experience easier for users (fewer passwords to remember, no more registration headaches) rather than helping advertisers exploit social-networking channels, the debut of Facebook Connect wasn't subject to the same scrutiny.

The controversial new privacy standards at Facebook have been a long time coming, considering the fact that the social network started to publicly set the groundwork nearly six months ago with a series of announcements about modified privacy controls. It's clear that the company was trying to avoid the sort of press bloodbath that came after the debut of Beacon.

That didn't happen. Facebook has already backtracked on one component of its new privacy regulations, one which made users' friends lists publicly available. It's unclear as to how much EPIC's coalition, not to mention the FTC, will prioritize this most recent controversy.

Behind Facebook's traditional willingness to make tweaks and modifications to new features and products, if they spark some kind of concern among government regulatory bodies or marketers, is a fight that the company will not give up easily. What it all comes down to is that Facebook's once-watertight log-in wall--remember the time that representatives mulled banning a blogger who'd posted Facebook-hosted photos publicly?--is getting in the way of the social network's potentially central role in one of the digital world's crazes du jour, searchable real-time information.

Search companies have been announcing big deals to pull Facebook status messages and Twitter tweets into results, and the media business has gone nuts over the potential to harness the "real-time Web."

Facebook, dependent on advertising revenues and still looking to expand its base of more than 350 million users, obviously wants in on this. But if it doesn't have enough status messages, shared links, and other information pulled into search results, it stands a chance at losing ground to the much-smaller Twitter--already the top name, in terms of a massive, searchable clearinghouse for up-to-the-minute information.

Plus, there are marketers and advertisers for Facebook to consider: more search results equals more page views and more ad revenue, and more public information on users' profiles means more ways for the advertising industry to reach them. But if those same marketers and advertisers are the ones pressuring Facebook to change course, in terms of user privacy, it could cause some friction between the social network and the businesses that have finally begun to accept it as a choice destination for their ad dollars.

Now EPIC is alleging to the FTC that Facebook's new regulations can be outright dangerous: "Dozens of American Facebook users, who posted political messages critical of Iran, have reported that Iranian authorities subsequently questioned and detained their relatives," an item in the complaint reads. "Under the revised privacy settings, Facebook makes such users' friends lists publicly available."

That's not good PR for Facebook, which has repeatedly pitched itself as a destination for open dialogue and grassroots organization across zones of political and ethnic conflict.

December 17, 2009 6:08 AM PST

Russian firm DST on a roll, upping stake in Facebook?

by Caroline McCarthy
  • 2 comments

We didn't know much about Russian investment firm Digital Sky Technologies before it invested $200 million in Facebook this spring. But it's been in the news a lot more recently: Russian newspaper Kommersant reported Thursday that the firm has purchased more Facebook stock, sending its stake in the massive social network past 5 percent at a $10 billion valuation. Its original stake was 1.96 percent. It's reportedly still looking to buy more.

A Facebook representative told CNET via e-mail that because it's a private company it opts not to discuss shareholder percentages.

According to the Russian-language publication (first referenced in English by Quintura), DST's increased stake comes from its offer to purchase employee stock as part of the buyback program announced this summer. It's continued to pay $14.77 per share, Kommersant added. But if DST's stake is indeed over 5 percent now, it's purchased far more than the $100 million originally stipulated in Facebook's terms (its total stake is now over $400 million, according to Kommersant).

That's not all DST has been up to. Earlier this week, social gaming company Zynga--arguably the most profitable company to grow out of Facebook's developer platform--announced that DST had led a $180 million funding round designed to "fuel Zynga's growth and...facilitate liquidity for employees and investors." It's a "passive investor," meaning that it will not take a seat on the company board.

"Our earlier investment in Facebook and now in Zynga underscores our premise that social networking and social entertainment will define the next generation of the web," DST head Yuri Milner was quoted as saying in a release from Zynga.

Additionally, earlier this month another Russian newspaper reported that DST was in talks to acquire ICQ, an instant-messaging service that AOL is looking to sell off.

This post was updated at 7:56 a.m. PT with comment from Facebook.

December 15, 2009 1:58 PM PST

Hitwise: 'Facebook' the year's top search term

by Caroline McCarthy
  • 10 comments

Mark Zuckerberg should be proud: The top search term of 2009, according to Experian Hitwise, was not "porn," "poker," or "Britney Spears." It was, for the first time, "Facebook."

In 2008, Facebook had been the tenth most searched term on the Web, according to the traffic company's annual survey of search queries.

The rest of the list for 2009 is also made up of "navigational" searches, which Hitwise reps say actually always dominate top search queries despite the common wisdom that top searches tend to be for online gambling or racy pictures. In spot No. 2 is last year's leader, "myspace," followed by "craigslist," "youtube," "yahoo mail," "google," "yahoo," "ebay," "facebook login," and "myspace.com." If you add up all four Facebook-related terms in Hitwise's top 300 search terms, they make up slightly over a percent of all searches on the Web. The #1 term alone accounts for 0.67 percent.

Meanwhile, searches for "porn" came in at No. 16. Britney, unfortunately, didn't crack Hitwise's top 300, but the most searched for celebrity was Michael Jackson at No. 95, and "Twilight" hottie Robert Pattinson came in at #221. (Hitwise representatives say that they are currently reevaluating the data to see if recently beleaguered golfer Tiger Woods has moved up in the rankings, too.)

Update at 2:10 p.m. PST: So where's "Twitter" on Hitwise's list? It's hanging in there at #56, the company says.

December 11, 2009 8:04 AM PST

Facebook backtracks on public friend lists

by Caroline McCarthy
  • 13 comments

It's been a matter of days since Facebook's new privacy controls went into place, and the company is already making modifications in response to user complaints that they expose too much information. Namely, the company has made it easier to prevent people from seeing who your friends are.

For one, Facebook no longer makes a link to a list of your friends publicly available, and it has added an option for members who want no one at all--including other friends--to see their connections. Third-party applications, however, can still access it.

"In response to your feedback, we've improved the Friend List visibility option," an update to Facebook's blog post about the new privacy settings read. "Now when you uncheck the 'Show my friends on my profile' option in the Friends box on your profile, your Friend List won't appear on your profile regardless of whether people are viewing it while logged into Facebook or logged out. This information is still publicly available, however, and can be accessed by applications."

Facebook's reasons for making this move likely have something to do with the fact that it wants to be a safe place for professionals: in some fields of work, people may be uncomfortable with basically opening up their Rolodexes. There was a high-profile incident that highlighted these potential pratfalls of making one's Facebook friend list publicly available: Business Insider revealed earlier this week that Overstock.com CEO Patrick Byrne was keeping a list of journalists covering the company as well as their professional connections found through Facebook.

The new privacy settings give members more control over how much they share in general, but they additionally encourage them to make more content public as the site moves from a closed-off, login-required site to a potentially huge player in the new real-time search craze. But the company remains under pressure from not only its 350-million-plus users, but also lawmakers in multiple countries who have voiced concerns about how much the company is doing to protect users' privacy.

December 9, 2009 7:44 AM PST

MySpace launches new developer tools

by Caroline McCarthy
  • Post a comment

Not willing to let Facebook and Twitter completely own the market for searchable, up-to-the-minute information, MySpace announced on Wednesday a set of new developer application programming interfaces (APIs) designed to let third-party sites access more of its content.

The new APIs offer a variety of features: letting third-party sites tap into MySpace members' status and "mood" updates, incorporate real-time activity information (this is something we saw implemented earlier this week in Google's real-time search announcement), upload photos to MySpace from external services, and make public MySpace content more searchable.

Developer announcements used to come out of MySpace regularly as it tried to keep up to speed in what used to be a close race with Facebook for social-networking mindshare. These days, MySpace has been focused more on restructuring: with its traffic increasingly eaten up by the fast-growing Facebook, the News Corp.-owned social site assembled a new executive team with solid entertainment industry experience and chose to put entertainment front and center instead. It's launched a streaming music service, buying several smaller rivals in the process, and is putting the MySpace Music product front and center.

In fact, word has it, MySpace will likely be adopting the Facebook Connect log-in standard soon, in a move that further indicates it's given up the battle for social-networking market share and hopes to promote its content offerings instead. Wednesday's developer announcements, made in conjunction with the Le Web conference in Paris, play right into the revamped MySpace strategy: it's about getting that content further out onto the Web.

The question, then, is whether developers will bite. To provide an incentive, MySpace has launched a developer contest running until January 4 to find the best implementation of the new APIs.

December 3, 2009 2:57 PM PST

Facebook notifies members about Beacon settlement

by Caroline McCarthy
  • 5 comments

An e-mail was sent on Thursday to Facebook users who were members at the time that its controversial, now-defunct Beacon advertising program was operated: it's the official notice about the proposed settlement for the class-action lawsuit against Beacon. The terms of the settlement have been public since September, but the court-ordered summary notice is the last step in the process before final approval on February 26.

"This is not a settlement in which class members file claims to receive compensation," the notice explained (possibly crushing the hopes of any Facebook members who might have got excited that this would be an easy way to make some pizza money). "Under the proposed settlement, Facebook will terminate the Beacon program. In addition, Facebook will provide $9.5 million to establish an independent nonprofit foundation that will identify and fund projects and initiatives that promote the cause of online privacy, safety, and security."

A Web site has been set up to explain the terms of the settlement for the case Lane et al. vs. Facebook Inc. et al., which was originally filed last summer.

Beacon, an advertising program that shared members' activity on participating third-party sites on their Facebook profiles without much warning or notification, was a much-hyped part of the Facebook Ads initiative that debuted in the fall of 2007. But it was, unfortunately for Facebook, a complete public relations disaster.

Pressure from privacy and activist groups resulted in notable changes to the product and member controls thereof, but image repair proved to not be enough and Facebook let Beacon fade to black.

December 3, 2009 9:18 AM PST

Orangutan takes photos, shares them on Facebook

by Caroline McCarthy
  • 20 comments

An orangutan in the Vienna Zoo takes pictures that are uploaded to Facebook. No, she didn't take the self-portrait.

(Credit: Nonja's Facebook page)

She's like the Ashton Kutcher of the ape world: an orangutan in the Vienna Zoo now has a Facebook fan page to showcase the photos she takes with a digital camera. The orangutan, named Nonja, uses a Samsung ST 1000 point-and-shoot that automatically uploads the photos.

When this post was published, Nonja had over 9,000 "fans" subscribed to her page.

But there's a catch: coverage of the camera-toting ape in the U.K.'s Daily Mail explains that the camera has been modified to dispense a raisin whenever the shutter button is pushed. So Nonja is evidently more interested in tasty treats than in artistic endeavors.

The non-orangutan version of the Samsung ST 1000 was released this summer (though not in the U.S.) and is equipped with Wi-Fi, Bluetooth, and GPS.

December 1, 2009 8:53 PM PST

Mark Zuckerberg's grand missive: The translation

by Caroline McCarthy
  • 15 comments

Facebook CEO Mark Zuckerberg put out an "open letter" to the site's massive membership on Tuesday, explaining the site's revised privacy controls that are finally going into effect after being announced this summer, and additionally announcing the milestone that the site has reached 350 million active users around the world.

But CEOs are notoriously deft with spin, and Zuckerberg is a clever fellow. So, luckily, CNET has translated his entire letter for you! In italics are Zuckerberg's words. Below are the ones we found to be an appropriate substitution after extensive research, experimentation, and a little inspiration from a fluffy-white-cat-stroking supervillain.

It begins.

It has been a great year for making the world more open and connected. Thanks to your help, more than 350 million people around the world are using Facebook to share their lives online.

What he means: "We are taking over the freaking world. Eat it, MySpace."

To make this possible, we have focused on giving you the tools you need to share and control your information. Starting with the very first version of Facebook five years ago, we've built tools that help you control what you share with which individuals and groups of people. Our work to improve privacy continues today.

What he means: "I KNOW ALL YOUR SECRETS. But I promise I won't tell that ex-girlfriend of yours whom you chucked onto Limited Profile setting after she dumped you even though I totally know you check up on her profile every three days because I know everything. Have you met my fluffy white cat?" OK, well, maybe that's a little bit fanciful.

Facebook's current privacy model revolves around "networks"--communities for your school, your company or your region. This worked well when Facebook was mostly used by students, since it made sense that a student might want to share content with their fellow students.

Over time people also asked us to add networks for companies and regions as well. Today we even have networks for some entire countries, like India and China.

What he means: "Some of my Harvard classmates wanted to brag that they get to live in Buenos Aires or Sydney. Or that they wanted to find hot girls who lived nearby. That worked for a while."

However, as Facebook has grown, some of these regional networks now have millions of members and we've concluded that this is no longer the best way for you to control your privacy. Almost 50 percent of all Facebook users are members of regional networks, so this is an important issue for us. If we can build a better system, then more than 100 million people will have even more control of their information.

The plan we've come up with is to remove regional networks completely and create a simpler model for privacy control where you can set content to be available to only your friends, friends of your friends, or everyone.

What he means: "I could be deceptively upfront and say that this was just getting messy and that it makes little sense for millions of you with only a passport in common to be grouped under the same label. But let's be honest. I am simply preparing you for the day in the not-so-distant future when you all willfully renounce your national affiliations and become citizens of the Grand Republic of Facebook. And I shall be your Fearless Leader. Did I mention I own a white fluffy cat?"

We're adding something that many of you have asked for--the ability to control who sees each individual piece of content you create or upload. In addition, we'll also be fulfilling a request made by many of you to make the privacy settings page simpler by combining some settings. If you want to read more about this, we began discussing this plan back in July.

What he means: "It's taken a while to get this out of the gates. But you'll dig it. When we launched privacy controls that let you see who sees what on your profile, a lot of you already had big friends lists (because you are totally addicted to my brilliant creation). So we're making it all less messy. And now you'll also be able to be more specific about controls on content, like letting your mom have access to the 'note' where you talk about how much you love her chocolate chip cookies but not the one where you ask for all your friends' phone numbers because you got crunked and dropped your iPhone in the toilet.

More importantly, this means that I can hand-pick which of you get to see each video of my white fluffy cat that I upload. Wait till you see the one where he chases a laser pointer! YouTube would die for it!"

Since this update will remove regional networks and create some new settings, in the next couple of weeks we'll ask you to review and update your privacy settings. You'll see a message that will explain the changes and take you to a page where you can update your settings. When you're finished, we'll show you a confirmation page so you can make sure you chose the right settings for you. As always, once you're done you'll still be able to change your settings whenever you want.

What he means: "We know the indoctrination process can take some time. So we'll be patient with you, minions."

We've worked hard to build controls that we think will be better for you, but we also understand that everyone's needs are different. We'll suggest settings for you based on your current level of privacy, but the best way for you to find the right settings is to read through all your options and customize them for yourself. I encourage you to do this and consider who you're sharing with online."

What he means: "The press loves to write about it when some numb skull puts all his Halloween party photos on Facebook and his boss sees them and sacks him. And that scares everybody and makes Facebook look less like the future of the open and connected social graph and more like an oozing vat of scandal and danger. I don't want that and neither does my white fluffy cat. So, please don't be stupid."

Thanks for being a part of making Facebook what it is today, and for helping to make the world more open and connected.

What he means: "My work here is complete. Now, Elliot, have you located the map of all the air vents in Twitter's new headquarters that are large enough to accommodate a mutant panther-raccoon hybrid?"

Disclaimer: CNET is unable to confirm whether Mark Zuckerblofeld, uh, I mean Mark Zuckerberg, actually owns a white fluffy cat.

Also, this post is not intended to be taken seriously.

advertisement

Behind the scenes: NORAD's Santa tracker

For decades, the defense group has let you follow the Christmas Eve travels of the jolly old elf. These days, technology is playing a bigger role than ever.

Intel redesigns Atom chip for Netbooks

The chipmaker officially announces the next generation of its popular Atom CPUs for Netbooks, the N450, weeks before the CES trade show.

About The Social

CNET News' Caroline McCarthy is a downtown Manhattanite who believes that, despite popular opinion, the Web can actually help your social life. She's happily addicted to fun social-media tools from Twitter to Yelp to Facebook, sends an inordinate number of text messages, and has a tendency to waste time at the office reading restaurant blogs. Here, she explores all facets of the Web's gregarious side, as well as the unique tech culture in her home city of New York. (Don't call it Silicon Alley.)

Add this feed to your online news reader

The Social topics

Most Discussed



advertisement

Inside CNET News

Scroll Left Scroll Right