Late last year Facebook undertook a massive Privacy Settings overhaul. It was deprecating the “Networks” in favour of pages, i.e. you didn’t belong to the New Zealand Network, but the New Zealand page. In doing so, Facebook popped up on log in a dialog saying “We changed how our privacy settings works, please review your settings below.” I looked at them, and while the dialog was flakey (I complained that it wasn’t clear what “My current settings” was), I looked through them and determined my current settings were what I wanted.
Social Graphs and Personalisation
Facebook announced the Social Graph system and instant personalisation about a month ago. The former seems a lot like Twitter, and the latter seems to be something that should ask for your permission. Facebook stipulated that the only data sent is stuff that is open the everyone, yet then the cries of privacy being breached came. What happened?
My settings are pretty strict, I only share things between Friends or Friends of Friends. Well, there is the basic directory info that I share with everyone, and that’s because I want people to find me (a social network is for finding people and making connections, and if I can’t find you, then you don’t know what social networking is). Only people who I say “I know this person” can see what I’m doing and what I’m up to (although, most of the time, it’s to the oh-so-public Twitter, so, you know what I’m doing anyway).
And here’s the kicker, everyone was saying that Instant Personalisation was opt-out. Problem was, I never opted out, or opted in, and I’m not in it. I read the complaints on Twitter, when I inquired I got a “You’re kidding right?” When I figured out what the hell was going on, I found the Instant Personalisation screen and that the box wasn’t checked, and never has been.
Everyone, it means Everyone
Facebook uses the term “Everyone.” I can see why, Everyone is all emcompassing, and pretty much summarises in a single word who you are sharing your data with. But alas, there is that vague-ness about it. “So, Everyone means just people I’m friends with, right?”
When Facebook said “OK, now we have these API’s that lets people access that data,” people just went “Wait a minute. So, my data is public now?”
Yes, your data is public now, and has been since you said “Everyone” could access it.
They should probably call it something else, maybe, “Everyone, including people and businesses you don’t know.”
But, it did yield good results
The best thing about the privacy furor, good things did happen.
Facebook finally simplified the privacy controls – still giving that granular control that everyone wants, but made it simple at the same time. They should have had that to start with.
They also finally clarified what Everyone means…
Information you’ve shared with everyone – as well as your name, profile picture, gender and networks – could be seen by anyone on the Internet. Please be aware that it will be visible to anyone viewing your profile and applications and websites you and your friends use will be able to access it.
(Emphasis, theirs.)
In fact, I love their Privacy guide. Go and read it. It tells you exactly what’s going on, without the legalese. I wish every web site did this, for all legal policies. Take a look at the Creative Commons license I’ve got on this blog. It gives you an easy to read version of a legal document that can be understood by anyone looking at it for five seconds. If you must, you can dig deeper and look at the legal license that sits behind it.
Facebook also had a bug appear during the middle of all this which let you pretty much log in as someone else just by using a simple tool that lets you look at your profile as someone else. I expect QA would be tighter now on privacy than ever before.
The problem wasn’t just Facebook here, it was everyone, including people and businesses we don’t know. Facebook have done some pretty dodgy stuff (the do-first-ask-later game is getting pretty tiring), but when I read their privacy policy all I saw was “if you said that this information is public, then fair game.” Facebook asked, people said yes, but then changed their minds when it got real.
Of course, the simpler thing is to not put stuff up there you don’t want strangers to know.