Earlier this week I wrote a post about how I didn't like that I couldn't alter the Facebook Connect privacy settings for updates from Foursquare, an iPhone app that shares my location through a GPS-enabled city directory. It didn't make sense to me that Facebook Connect information was automatically visible to anyone who had access to posts on my "wall," whereas privacy settings on a third-party app embedded directly on my profile were much more fine-tuned, allowing me to restrict them to specific subsets of friends.
I've been e-mailing back and forth with Facebook, and I've gotten some clarification on how the process works. Privacy controls for embedded apps aren't as simple as I'd thought. I can opt to block the "box" for a third-party game like Mafia Wars or Farmville, as the privacy controls indicate, but activity from those apps--i.e. if I just picked up a new weapon in Mafia Wars--will still show up to anyone who can see what I post on my Facebook wall, like status messages and new friend connections. (You can, however, block individual Platform apps from posting to your wall in the first place.)
"Activity from apps and Connect sites are grouped with the activity you take on Facebook (which then appears on your wall), all of which can be blocked from a select group of people using publisher privacy," Facebook representative Malorie Lucich explained to me via e-mail. "So, for example, if you don't want your boss seeing your Mafia Wars activity and your usual Facebook activity, you can block her/him from viewing your wall."
Everything on the wall, therefore, is treated as a single unit. Except not quite: With status messages and content posted directly through Facebook, as part of Facebook's new privacy controls there's now a drop-down menu that lets me choose exactly who can see that message--the public Web, friends of friends, only my friends or "networks," or stratified groups of friends. That's great, because I can post a status message asking for Christmas present suggestions, and opt to block it from my family or other potential gift recipients.
For third-party apps, I'm not so lucky. I'm sure I wasn't the only Facebook member who figured that blocking the Mafia Wars "box" from a certain list of friends would also block activity updates on my wall. According to Facebook, it doesn't.
I'm also sure I'm not the only one who would like to use Facebook Connect with a service like Foursquare that isn't normally public; I liked some of the comments that would appear on "check-ins" pushed to Facebook (when I checked into a restaurant, for example, a few people responded with their favorite menu items, and another asked about the variety of beers on tap). But wanting to keep them restricted to half or a third or a quarter of my Facebook friends is not always just a matter of privacy--the majority of my Facebook friends have no interest whatsoever in which coffee shop I just checked into on the likes of Foursquare or Gowalla, and out of courtesy I don't want to plaster it all over everyone's news feeds. I'd like Foursquare's implementation of Facebook Connect, theoretically, to only be visible to close friends and people who live nearby.
Facebook is, and should be, proud of the wealth of data that gets shared on members' "walls." On Friday morning, I used my status message to solicit tips for an upcoming tropical getaway, and got some terrific suggestions from people in my "social graph" whom I hadn't talked to in ages. This was a great example of something that I'd like to open up to my entire Facebook network. But when it comes to information that's local, sensitive, or otherwise private, I'd like to be able to restrict it. As Facebook Connect grows bigger and more diverse, these instances are likely to come up more often.
So if I had to come up with a most-wished-for new Facebook feature, this might have to be it.
A Foursquare check-in posted to Facebook through Facebook Connect.
(Credit: Facebook)Privacy on Facebook has been front and center this month as the company has rolled out the controversial revamp of its user privacy settings. One thing that's thankfully stayed intact has been the ability to restrict the third-party applications on your profile to specific "lists" of friends--so that you can, for example, block your Mafia Wars activity from everyone who's not on your "People Who Know About My Mafia Wars Addiction" list.
Dopplr, an app that you can install as a 'box' on your Facebook profile, has privacy controls that allow you to block it from various groups of your friends.
(Credit: Facebook)But for stuff on my profile that was published through Facebook Connect rather than an app "built" on the platform, this is not the case. For some reason, information published to Facebook through Facebook Connect does not have any privacy controls attached to it, so it's either available to everybody or nobody.
To backtrack a little bit, Facebook first rolled out developer-created applications in the summer of 2007, and then a year later introduced Facebook Connect, which lets users log into third-party sites (and iPhone apps) from their Facebook profiles and publish content back to Facebook.
Facebook Connect apps that publish content back to Facebook profiles (which have additional permissions from those that simply let you log in with your Facebook ID) are grouped alongside the original variety of platform apps in Facebook's "Application Settings" privacy controls section. But the Connect apps don't have a "Profile" tab in their settings, because there isn't an embedded "box" for the app--just what shows up in your News Feed.
"We are evaluating adding post-level privacy settings for stories created through external developers, but for the time being, there is currently no difference between the settings for applications and Facebook Connect activities," Facebook representative Malorie Lucich told CNET via e-mail. "So, while you can control who sees the applications living in your profile boxes and application tabs, you currently cannot granularly control who sees your application activity in your feed."
I discovered this when I was testing out the new Facebook Connect feature on geo app Foursquare, one of the many mobile apps that lets you "check in" to different establishments and broadcast it to your friends from your phone. Foursquare will let you choose before you check in whether you want to broadcast that location to Twitter, and co-founders Dennis Crowley and Naveen Selvadurai tell me that a selective "share this on Facebook" button is coming alongside the Twitter button in a future version of its iPhone application. That'll help a lot, because right now, it'll share all of your check-ins to Facebook or none of them.
In the meantime, I decided to see whether I could restrict Foursquare's Facebook Connect publishing to one or two of my stratified Facebook friends lists--I mean, I don't need to clog all those news feeds up with a day's worth of check-ins, and my boss doesn't need to see that I checked in at Tom & Jerry's Bar after midnight on a weekday. (Not that I'd ever do that.)
Those settings don't exist for Foursquare, though, which takes the form of a Facebook Connect implementation rather than an embeddable app.
(Credit: Facebook)Unfortunately, because you can't modify privacy controls for a Facebook Connect app, this means I can either show actions to all my friends (my profile is friends-only by default) or none of them. This appears to be the case for everything that's published to Facebook through Connect rather than an app--the same applies, for example, to Foursquare competitor Gowalla.
Right now, Facebook's Malorie Lucich explained to CNET, Facebook Connect posts are treated as "wall" activity. "With Facebook Platform applications and Facebook Connect, users always have control over whether or not they want their activity published to their feed for their friends to see," she wrote. "You can also control who sees your overall activity on Facebook by setting who can see 'posts by me' on your privacy settings page. This will limit who can see your Wall."
"As outlined in our (developer) roadmap, upcoming changes will make it easier for users to directly communicate with their friends about applications and Facebook Connect activity via the inbox," Lucich's e-mail continued. "Additionally, profile boxes and the boxes tab will be removed, making application tabs the sole way to integrate applications statically with your profile--and you will continue to be able to control who sees that content."
But Facebook Connect is huge. More than 80,000 third-party sites are now participating, and not all of them deal with publicly available content (i.e. Yelp reviews, photos uploaded to Flickr, comments on Digg). Privacy controls here are something that Facebook could certainly improve; the company says that plans for data permissions are still evolving.
This post was expanded at 4:46 p.m. PT with comment from Facebook.
Looks like Facebook will be throwing another big "F8" developer conference in the spring, after taking 2009 off. According to a sparse post on the company's developer blog, the event will be held April 21 and 22 in San Francisco. No more details are currently available.
"F8 has always been about empowering a community of developers to hack, to build and to delight users," the post reads. "We're looking forward to continuing this tradition at our third F8 in San Francisco on April 21-22, 2010. Please save the date!"
This is a big deal because Facebook's past two F8 conferences have marked the debut of some of its biggest products: in 2007, the groundbreaking Facebook developer platform, and in 2008, Facebook Connect. It's likely that the 2010 version will involve some kind of high-profile launch, too.
What could it be? The obvious possibility is Facebook's long-rumored payment platform or virtual currency system, which currently only powers the internal "gift shop" feature along with a few test developer apps and nonprofit partners. This is more or less Facebook's worst-kept secret: it's been in development for quite some time, but appears to have been repeatedly modified internally. Once said to be a straight-up PayPal competitor called "Facebook Wallet," the project has evolved to fall more in line with the meteoric rise in virtual goods-based social gaming, one of the biggest and most profitable runaway hits on Facebook's platform. It could also mean that Facebook starts to make some serious money from transaction fees and become a real power player in the e-commerce space.
Still, we don't know for sure. We'll keep you updated as more details become available about F8 2010 over the coming months.
This post was updated at 11:42 a.m. PST with a link to the post on Facebook's developer blog.
Not willing to let Facebook and Twitter completely own the market for searchable, up-to-the-minute information, MySpace announced on Wednesday a set of new developer application programming interfaces (APIs) designed to let third-party sites access more of its content.
The new APIs offer a variety of features: letting third-party sites tap into MySpace members' status and "mood" updates, incorporate real-time activity information (this is something we saw implemented earlier this week in Google's real-time search announcement), upload photos to MySpace from external services, and make public MySpace content more searchable.
Developer announcements used to come out of MySpace regularly as it tried to keep up to speed in what used to be a close race with Facebook for social-networking mindshare. These days, MySpace has been focused more on restructuring: with its traffic increasingly eaten up by the fast-growing Facebook, the News Corp.-owned social site assembled a new executive team with solid entertainment industry experience and chose to put entertainment front and center instead. It's launched a streaming music service, buying several smaller rivals in the process, and is putting the MySpace Music product front and center.
In fact, word has it, MySpace will likely be adopting the Facebook Connect log-in standard soon, in a move that further indicates it's given up the battle for social-networking market share and hopes to promote its content offerings instead. Wednesday's developer announcements, made in conjunction with the Le Web conference in Paris, play right into the revamped MySpace strategy: it's about getting that content further out onto the Web.
The question, then, is whether developers will bite. To provide an incentive, MySpace has launched a developer contest running until January 4 to find the best implementation of the new APIs.
Professional networking site LinkedIn's platform, previously a closed offering for select partners, has opened up to developers at large, according to an announcement Monday on the company blog.
Well, sort of. Building an embeddable widget on LinkedIn, unlike Facebook's, still requires a stringent application process. But LinkedIn's own code has now been opened up so that developers can integrate it into their own sites. It's launched a developer site for those interested in features that let site users access their LinkedIn profile and contacts externally. They still have to request a key to get into the platform's application program interface (API), which means that LinkedIn widgets likely will not be coming to office prank-calling Web sites any time soon, despite that they could make it much easier to robo-call your boss and ask if his refrigerator is running.
One of the first participants, for example, is desktop Twitter client TweetDeck, which says that it will soon allow users to plug in their LinkedIn contacts' status updates alongside Twitter, Facebook, and MySpace contacts.
LinkedIn has about 50 million users as of last count.
An example of Brizzly's new tweet translation.
(Credit: Brizzly)Web-based Twitter client Brizzly made a dual announcement Friday: first, it's opened up into a full public beta mode (previously, an invite code was required); and second, it can now translate tweets into your default language on the site.
To translate a tweet in Brizzly--which already expands links, videos, and photos posted to Twitter, creating a more visual experience--you can click on a question mark for an instant translation. This is interesting, as Twitter has made its first moves recently in launching translated versions of the service (starting with Spanish), meaning that there will potentially be many more non-English tweets flowing through the system. It uses Google Translate, so needless to say, it's not totally perfect.
Location awareness is hot, from gamelike social services such as Foursquare and Gowalla to platforms such as Google Latitude. Now one start-up is hoping to make it as easy for any company to integrate into a Web or mobile service as it is for retailers to use PayPal. Meet SimpleGeo, which on Thursday is launching into a private beta.
Boulder, Colo.-based SimpleGeo, co-founded by former Digg engineer Joe Stump and Socialthing founder Matt Galligan (who sold the would-be FriendFeed competitor to AOL), started out as a company called Crash Corp. earlier this year. The goal was to make augmented-reality applications for mobile devices like the iPhone, but the founders said that building the location-aware infrastructure for their first game took a whopping three months.
So they changed their company name and angle: SimpleGeo's purpose is to build that infrastructure for other companies to eliminate the development hell, hoping to do for "geo" apps what PayPal did for sites requiring payment systems or Facebook did for sites requiring logins and social-networking features. The complete offering, which can also build in augmented-reality features, encompasses storage, analytics, and a software development kit (SDK).
Three versions are available: free, $399 per month, and $2,499 per month. A public version is slated to launch in the spring.
Nobody's really doing this yet, though apparently a few other start-ups are toying with similar business plans, and SimpleGeo is still new enough that it has not yet closed a round of venture funding. Because it's in private beta, we also haven't yet seen just how powerful it is (though Galligan has posted some test video to Flickr) so it's not yet possible to answer the big, glaring question: what if Google makes a big, developer-focused Latitude push that could snuff out smaller competition?
The industry P.R. frenzy over scams in ads and offers on social networks goes on: Facebook announced on Thursday evening in a post on its developer blog that since it updated its developer platform terms of service this summer, it has disabled two ad networks that it says were running deceptive advertisements.
This comes in the wake of allegations that some companies that power offer- and survey-related moneymaking operations for social-gaming applications on platforms like Facebook's have effectively been scamming users into paying for services without disclosing those costs. One of them, Offerpal Media, has been particularly visible in the crosshairs.
"This battle is not new and it's far from over," the post by Facebook's Nick Giano wrote. "We faced stimulus scam ads on our own system earlier this year and pushed them off the site with rigorous enforcement. We did the same months later when deceptive ads from third-party ad networks appeared in applications. We're doing that again now as we see them appear in the form of offers."
Additionally, Facebook--which has said for quite some time that many of the activities highlighted in the "app scam" controversy are already banned by its terms of service--included in the post that more than 100 developer applications have been either "suspended or brought into compliance" over advertising issues, and that more than half of them were used by at least 1 million Facebook members per month. It's not clear whether these were all related to scams, or to other advertising-related infringements like the Burger King marketing campaign that encouraged users to "unfriend" their contacts in exchange for a free cheeseburger.
Facebook representatives declined to name which ad networks or applications it has banned. But the company did ban two companies in June, Social Hour and Social Reach, citing ad network policy violations. It's possible that the two ad networks mentioned in Facebook's blog post were banned months ago, given the "since July" language.
Earlier this week, MySpace--another big destination for social-network apps--announced that it had updated its terms of service to ban app scams. Prior to that, several prominent application manufacturers announced that they had banned potentially deceptive offers, despite the fact that they are responsible for a big chunk of virtual-goods revenues.
An update was made to this post at 7:51 a.m. PT on November 6 to note that Facebook banned two ad networks in June.
In the wake of a firestorm over just how much of social-gaming companies' profits can be attributed to potentially scammy offers and incentives, News Corp.'s MySpace has taken a stand (and, it could be said, taken advantage of the PR opportunity) by coming out vocally against them.
"We're adding a fifth principle (to our developer terms of use) that clarifies a specific use case that we feel is particularly damaging to the user experience: promotions that include hidden renewals without specific opt-in will not be permitted," a company blog post by CEO Owen Van Natta read. "Because it's our belief opt-out offers are misleading and do not have the best interests of the users in mind, we will be updating our Terms of Use this week to better clarify this for users and developers."
What exactly is he referring to? In many of the most popular (and profitable) games built for big social-networking platforms like Facebook and MySpace, players can progress faster in the game by either buying virtual goods with "real" money, or by completing offers and surveys from a partner company like the prominent Offerpal Media. Critics say that many of these offers aren't actually free, and unwittingly can sign users up for expensive subscriptions or programs.
After a public confrontation between TechCrunch's Michael Arrington and Offerpal CEO Anu Shukla at last week's Virtual Goods Summit event in San Francisco, game makers like Zynga and RockYou put out statements saying that they're cracking down on offers that are potentially misleading.
Could this lead to real industry changes? Yes. But keep in mind that Facebook, the biggest destination for these social games, already bans this stuff in theory. "Ads cannot be deceptive or fraudulent about any offer made," the company's advertising guidelines read, and adds "if an ad includes a price, discount, or 'free' offer...the destination URL for the ad must link to a page that clearly and accurately offers the exact deal the ad has displayed (and) the ad must clearly state what action or set of actions is required to qualify for the offer."
But judging by the amount of sketchiness that allegedly takes place on the platform, it seems like advertisers aren't necessarily following these guidelines. Whether MySpace's stance against them can lead to a legitimate crackdown has yet to be seen.
The revamped Facebook gift shop.
(Credit: Facebook)It's not just music as rumored: Facebook announced on Wednesday a major overhaul to its "gift shop" feature, meaning that the social network just became an even bigger player in the burgeoning virtual-goods industry.
"We now are unveiling a newly stocked and redesigned Gift Shop, with new categories of gifts and additional gifts for charity, music, and sports from developers," a post on the company blog by Facebook's Will Chen read. With so many gifts available, we also introduced a new design to make it easier for you to browse and purchase gifts with different gift categories." It'll be rolling out over the next few weeks, he added.
Needless to say, this is a huge deal for the virtual-goods industry, which some estimate is now a billion-dollar business.
It also beefs up one of Facebook's few non-advertising revenue streams (though many of the virtual goods in the "gift shop" are licensed or sponsored)--even though in a talk on Wednesday at the Web 2.0 Summit in San Francisco, Chief Operating Officer Sheryl Sandberg downplayed rumors that the company would be making big moves into bringing commerce and payment transactions to its developer platform.
Music files, as rumored, will be sold through a partnership with Lala. Right now, they are only available to Facebook users in the U.S.--less than a quarter of its total membership. For one Facebook "credit" (10 cents U.S., and currently available for purchase in 15 currencies from around the world), members can buy one another songs that can be played online. For 10 credits (a dollar), they can gift downloadable MP3 files. "Other people who are able to see the music gift (in that member's profile) will only be able to play the song in full once, after which they will be able to play a 30-second clip," Chen's post added.
This is a big move on Facebook's part for another reason: iLike, which powers the extremely popular "Music" app on the social network, and which allowed members to gift songs to one another through the third-party application, was acquired by Facebook rival MySpace this summer.
Instead, it's partnered with Lala--which is also one of the partners in the music initiative that Google is slated to launch next week.
But music isn't all that's new in Facebook's revamped Gift Shop. There are also sports gifts officially licensed by teams--branded virtual goods from a number of college sports teams as well as the National Basketball Association and U.S. Major League Soccer. Also rolled in have been the non-profit gifts that Facebook first debuted this summer. In addition to existing partners like Kiva and Project Red, virtual charity gifts will also be sold by popular third-party Facebook app Causes.
And images posted to the Facebook blog show additional categories--e-cards, which are pretty self-explanatory, and "real gifts," which bundle a physical gift sent in the mail along with the virtual gift. These have all been tested in a limited scope by Facebook over the past few months.
Leaked screenshots of a document that Facebook distributed to advertisers earlier this month revealed that an upcoming design modification to Facebook's home page will make birthday alerts--which also encourage members to buy gifts for one another--more prominent.
Facebook hasn't disclosed any financials related to how much advertisers pay for sponsored gifts, or how any revenue-sharing logistics pan out.
Other social-networking services are trying to get in on the action, too. Social-site creator Ning, for one, launched a gifts platform earlier this week.
More to come...last updated at 4:01 p.m. PT.
