Live data from Hacker News

You Might Have an Invisible Facebook Account Even if You Never Signed Up

groovypost.com

21–30 of 182 posts

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#21

What's a shadow profile? Sounds so sinister. It's probably just a line in a database with your email address and phone number. It's not like Facebook is actively keeping tabs on people that don't have accounts.

Thank god there aren't groups out there that are using Facebooks data to do just that. Then we'd have a real problem on our hands.

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#23

What's a shadow profile? Sounds so sinister. It's probably just a line in a database with your email address and phone number. It's not like Facebook is actively keeping tabs on people that don't have accounts.

The profile also probably contains a list of all the Facebook users who had you in their contact lists, and all the photos that you were tagged in. Since such information would get updated every time a Facebook user uploaded your contact information or tagged you, I'd say this qualifies as Facebook actively keeping tabs on you.

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#24

I actually got a peek at Facebook's behavior maybe 5 years ago when I signed up to beta-test a video game. They had used the Facebook login API for their beta forums without marking it on their site, so signing up for the game signed me up for Facebook. Suddenly all the Facebook ads everywhere knew my name. Three weeks and about 40 emails to "update my Facebook profile" that I reported to Gmail as phishing later, I r…

I have the same feeling about LinkedIn! I only recently signed up for LinkedIn, about a year ago, using my GMail address I use for job-hunting purposes. I've had this account since circa-2008 but I ONLY use it for work purposes (since it's a bit more professional sounding). I also have another GMail account which I have had for much longer and shared amongst friend and some old colleagues.

When I signed up for LinkedIn, I put in my name and "work" email address and straight away, without me having provided any other piece of information it was suggesting people I may know. It was not possible that it could have shadow guessed this from my email since those colleagues don't have that one, but both my GMail accounts are linked so I wonder if that was the weak point. Definitely something strange going on and it scared me somewhat...

I should also note that at no point did I use the "find my friends" type feature and give it access to my GMail to mine my contacts either.

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#25
post #15

Let's think of a typical use case where a "shadow profile" is useful. Let's say my friend Jane is on facebook. She has my phone number on her phone with my first name. Facebook notices that this phone number is not linked to any other accounts, therefore I must not be registered. Fast forward two months, and I decide to sign up for facebook. I put my phone number in (as a form of password recovery I believe) and it a…

No, that's how modern privacy invasion works. After Facebook scanned Jane's phonebook, and made the invites Jane asked, Facebook should have deleted your phone number.

You are going to be in for a real shock if you ever see a phone book. Pages upon pages of names matched with phone numbers!

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#26
The main invasion of privacy here is your friend(s) agreeing to give Facebook (a 3rd party) your information without asking or informing you. This is analogous to Facebook giving the government (a 3rd party) your information without asking or informing you.

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#28

I actually got a peek at Facebook's behavior maybe 5 years ago when I signed up to beta-test a video game. They had used the Facebook login API for their beta forums without marking it on their site, so signing up for the game signed me up for Facebook. Suddenly all the Facebook ads everywhere knew my name. Three weeks and about 40 emails to "update my Facebook profile" that I reported to Gmail as phishing later, I r…

My suspicion is pure and simple: Both Facebook and LinkedIn are operating business models that are based on stalking users on the web. If this is your mission it is almost obligatory to implement something similar to Panopticlick [1] to stalk on anything and everything that could be one of your (future) users.

[1] https://panopticlick.eff.org/

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#29
post #15

Earlier quoted context omitted.

No, that's how modern privacy invasion works. After Facebook scanned Jane's phonebook, and made the invites Jane asked, Facebook should have deleted your phone number.

You are going to be in for a real shock if you ever see a phone book. Pages upon pages of names matched with phone numbers!

But a phone book doesn't show connections between people nor have people's unlisted numbers, like somebody's phone contacts might.

Re: You Might Have an Invisible Facebook Account Even if You Never Signed Up

#30

What's a shadow profile? Sounds so sinister. It's probably just a line in a database with your email address and phone number. It's not like Facebook is actively keeping tabs on people that don't have accounts.

The profile also probably contains a list of all the Facebook users who had you in their contact lists, and all the photos that you were tagged in. Since such information would get updated every time a Facebook user uploaded your contact information or tagged you, I'd say this qualifies as Facebook actively keeping tabs on you.

How do you tag someone if they don't have a Facebook account? AFAIK it's not possible to tag someone with an email address or telephone number?

Certainly you can "tag" someone if they are not on Facebook and not in your friends (of friends) list, but it is then just tagged as text, not associated with an account... maybe I missed an option somewhere...

Post reply on HN