The Social

Read all 'controls' posts in The Social
December 21, 2009 3:20 PM PST

Big Facebook privacy void: Controls on Connect

by Caroline McCarthy
  • 7 comments

A Foursquare check-in posted to Facebook through Facebook Connect.

(Credit: Facebook)

Privacy on Facebook has been front and center this month as the company has rolled out the controversial revamp of its user privacy settings. One thing that's thankfully stayed intact has been the ability to restrict the third-party applications on your profile to specific "lists" of friends--so that you can, for example, block your Mafia Wars activity from everyone who's not on your "People Who Know About My Mafia Wars Addiction" list.


Dopplr, an app that you can install as a 'box' on your Facebook profile, has privacy controls that allow you to block it from various groups of your friends.

(Credit: Facebook)

But for stuff on my profile that was published through Facebook Connect rather than an app "built" on the platform, this is not the case. For some reason, information published to Facebook through Facebook Connect does not have any privacy controls attached to it, so it's either available to everybody or nobody.

To backtrack a little bit, Facebook first rolled out developer-created applications in the summer of 2007, and then a year later introduced Facebook Connect, which lets users log into third-party sites (and iPhone apps) from their Facebook profiles and publish content back to Facebook.

Facebook Connect apps that publish content back to Facebook profiles (which have additional permissions from those that simply let you log in with your Facebook ID) are grouped alongside the original variety of platform apps in Facebook's "Application Settings" privacy controls section. But the Connect apps don't have a "Profile" tab in their settings, because there isn't an embedded "box" for the app--just what shows up in your News Feed.

"We are evaluating adding post-level privacy settings for stories created through external developers, but for the time being, there is currently no difference between the settings for applications and Facebook Connect activities," Facebook representative Malorie Lucich told CNET via e-mail. "So, while you can control who sees the applications living in your profile boxes and application tabs, you currently cannot granularly control who sees your application activity in your feed."

I discovered this when I was testing out the new Facebook Connect feature on geo app Foursquare, one of the many mobile apps that lets you "check in" to different establishments and broadcast it to your friends from your phone. Foursquare will let you choose before you check in whether you want to broadcast that location to Twitter, and co-founders Dennis Crowley and Naveen Selvadurai tell me that a selective "share this on Facebook" button is coming alongside the Twitter button in a future version of its iPhone application. That'll help a lot, because right now, it'll share all of your check-ins to Facebook or none of them.

In the meantime, I decided to see whether I could restrict Foursquare's Facebook Connect publishing to one or two of my stratified Facebook friends lists--I mean, I don't need to clog all those news feeds up with a day's worth of check-ins, and my boss doesn't need to see that I checked in at Tom & Jerry's Bar after midnight on a weekday. (Not that I'd ever do that.)

Those settings don't exist for Foursquare, though, which takes the form of a Facebook Connect implementation rather than an embeddable app.

(Credit: Facebook)

Unfortunately, because you can't modify privacy controls for a Facebook Connect app, this means I can either show actions to all my friends (my profile is friends-only by default) or none of them. This appears to be the case for everything that's published to Facebook through Connect rather than an app--the same applies, for example, to Foursquare competitor Gowalla.

Right now, Facebook's Malorie Lucich explained to CNET, Facebook Connect posts are treated as "wall" activity. "With Facebook Platform applications and Facebook Connect, users always have control over whether or not they want their activity published to their feed for their friends to see," she wrote. "You can also control who sees your overall activity on Facebook by setting who can see 'posts by me' on your privacy settings page. This will limit who can see your Wall."

"As outlined in our (developer) roadmap, upcoming changes will make it easier for users to directly communicate with their friends about applications and Facebook Connect activity via the inbox," Lucich's e-mail continued. "Additionally, profile boxes and the boxes tab will be removed, making application tabs the sole way to integrate applications statically with your profile--and you will continue to be able to control who sees that content."

But Facebook Connect is huge. More than 80,000 third-party sites are now participating, and not all of them deal with publicly available content (i.e. Yelp reviews, photos uploaded to Flickr, comments on Digg). Privacy controls here are something that Facebook could certainly improve; the company says that plans for data permissions are still evolving.

This post was expanded at 4:46 p.m. PT with comment from Facebook.

July 1, 2009 10:34 AM PDT

Facebook cleans up its privacy controls

by Caroline McCarthy
  • 7 comments

Revamped privacy settings are coming soon to Facebook.

The social network's privacy controls had gotten so sprawling that they were distributed across six separate pages and 40 different settings, according to a conference call the company held on Wednesday.

"These can add up and pile up and not be as clean as one would like," Facebook chief privacy officer Chris Kelly said on the call. From what it sounds like, they'd gotten so complicated that many members just ignored them altogether--something that Facebook certainly doesn't want as it encourages its 200-million-plus members to post and share even more content.

As a result, Facebook's new controls will be more streamlined so as to offer easier and simpler controls about how much everything from entire profiles to individual pieces of content are shared. Users will be introduced to this through "transition tools" that allow them to toggle how open everything on their profile will be--totally public, friends-only, restricted to company or school networks, etc.

One of the biggest changes along with the new controls is that Facebook is getting rid of "regional networks," the opt-in way that members could designate themselves as residents of certain geographic areas. Only half of members even joined these networks, according to Facebook. It's a change that's been anticipated for some time, and privacy controls regarding regional networks have already been phased out.

"Networks were kind of the bedrock of privacy," product manager Leah Perlman said on the call. "When we expanded past college and work (networks), we created the concept of regional networks in order to have our privacy model expand." Members could share content selectively with members of their regional network, but representatives said that it was never quite clear as to exactly who else was in that regional network, and the delineation of networks was messy--some were defined by city, other by broader region or state, and others encompassed entire countries.

Facebook chief privacy officer Chris Kelly is also considering a run for attorney general of California.

(Credit: Kelly2010.com)

There were, for example, separate networks for each of New York City's five boroughs, but most residents just chose to join the broader "New York, NY" one instead. Facebook says that this shouldn't affect locally targeted advertisements: the company will be porting regional network data to its "Current City" field, and has already been using other data like IP address information to hone local ad targeting.

Facebook is keeping school- and company-based networks intact.

This comes in the wake of an announcement that Facebook would be tweaking its "publisher," the toolbar that lets members update their status messages or post content like individual photos and videos. The "publisher" will now have a privacy toggle for individual pieces of content, letting a user choose whether to make them available to friends only, custom friend groups, or--for the first time--to the Web at large. Making content available publicly will bring Facebook better in line with the thirst for real-time, searchable mass information that Twitter has captured so effectively thus far.

So how will this be handled? Facebook members will be guided through one of the aforementioned "transition tools," which representatives said will take one of two forms: either an ultra-specific set of granular, custom controls or a more no-brainer set of radio buttons. The new controls will first be tested with 40,000 users in the U.S. before rolling out to a bigger, international group of beta testers and then worldwide.

Last updated at 12:20 p.m. PDT.

  • prev
  • 1
  • next
advertisement

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About The Social

CNET News' Caroline McCarthy is a downtown Manhattanite who believes that, despite popular opinion, the Web can actually help your social life. She's happily addicted to fun social-media tools from Twitter to Yelp to Facebook, sends an inordinate number of text messages, and has a tendency to waste time at the office reading restaurant blogs. Here, she explores all facets of the Web's gregarious side, as well as the unique tech culture in her home city of New York. (Don't call it Silicon Alley.)

Add this feed to your online news reader

The Social topics

Most Discussed



advertisement

Inside CNET News

Scroll Left Scroll Right