Live data from Hacker News

Abusing Facebook's "Publicly Available Information"

nathanhammond.com

21–26 of 26 posts

Re: Abusing Facebook's "Publicly Available Information"

#21
To respond to one of the article's examples, maiden names and family relationships simply should not be used for security purposes.

Making this information public by default will be very beneficial for genealogical purposes. Why prevent this in favour of perpetuating broken security questions?

Re: Abusing Facebook's "Publicly Available Information"

#22
post #18

Earlier quoted context omitted.

Other posters have mentioned how this fails also - but more egregiously, when I went through the wizard several key options were by default not "old settings". Anyone breezing through the tool would have gotten caught.

Yeah, it does help if you actually read what's on the screen...

And I suppose you read all your EULA's in their entirety...

Re: Abusing Facebook's "Publicly Available Information"

#23
post #21

To respond to one of the article's examples, maiden names and family relationships simply should not be used for security purposes. Making this information public by default will be very beneficial for genealogical purposes. Why prevent this in favour of perpetuating broken security questions?

Agreed. The real issue is with sites posing a "security" question that is researchable. However, this is still a very common problem. I've taken to giving a password when somebody asks for my mother's maiden name.

I'm in favor of genealogical research, but by my estimation that isn't nearly as difficult these days and Facebook probably poses no obstacle nor discernible benefit. I was simply pointing out a possible vector of exploiting the information and that was the first one that came to mind.

Re: Abusing Facebook's "Publicly Available Information"

#24
post #19

Earlier quoted context omitted.

That is not the case, as explained here: http://dotrights.org/what-does-facebooks-privacy-transition-... The discussion on that blog mirrors my experience with the tool, I had to reset most of my things to "Only Friends" after going through the tool.

The link you give doesn't say anything about settings in the new privacy wizard failing to take effect. I set everything to "old settings", and when I went to my privacy page it had indeed kept all the old settings. I expect people experiencing this just forgot to click one of the radio buttons or something. It would be better if the wizard defaulted to "old settings" for everything, but it really isn't that hard to…

My apologies, you are correct about that article. For some reason I thought that article provided better information.

I can however state that from my personal experience all of my information was set to "Only Friends" and after selecting "Old Settings" for everything, most of my privileges were reset to "My Networks and Friends" ... I don't have documentation of that, but that was my experience with the tool. I had to manually go back through each to make it map to my desired privacy settings.

Re: Abusing Facebook's "Publicly Available Information"

#25
post #18

Earlier quoted context omitted.

Yeah, it does help if you actually read what's on the screen...

And I suppose you read all your EULA's in their entirety...

You can hardly compare a EULA to a set of ~10 radio buttons.

Re: Abusing Facebook's "Publicly Available Information"

#26
post #11

Earlier quoted context omitted.

This isn't obsession - I was shocked yesterday when Facebook prompted me to update my privacy settings, and I found that in several places they chose (by default) to loosen privacy in significant ways. This is deliberate and sneaky - if someone just clicked through the dialog they'd automatically sign up to broadcast to the world what was before set as private communication.

All you have to do is select the "old settings" option for everything and it keeps it all the same. I don't know what is so hard to understand.

I did select "old settings" for everything. And found that a photo album which had been private under my old settings was now public.
Post reply on HN