Showing posts with label Facebook. Show all posts
Showing posts with label Facebook. Show all posts

Saturday, November 21, 2009

Locking down your Facebook account

Online social networks were not really created to protect information.  They were built to share as much as possible.  This has become problematic for many people who find their information oozing out of their accounts in ways that they didn't anticipate.  Most often this is a human to human problem, in other words, gossip.  This is never going to be solved by technological means.  However, the inadvertent loss of control of ones data can be managed to an extent with privacy tools provided.

First, I'll give you advice that my father gave me long ago..."Never put it in writing" :-)  Maybe a strange thing to say to your young son, but it's served me well over the years.  Never record, in any way, things that you wouldn't be ok with the world seeing.  However, I do understand that there are things that you would rather not broadcast to the world if you can help it, so modifying privacy settings in your online social network is a good way to address that.

Below is a quick and dirty text tutorial on locking down your Facebook account. If you do all of the following, your account and information will be as private as possible.....however, your Facebook experience will be quite limited too.  That's your choice.

Regardless, good to see you're here.

If it's a problem of too much information available to the world, you can set your settings to essentially share nothing.  However, you would still be able to send/receive messages (internal email) and comment.  Of course, there is nothing stopping your "friends" from tagging you in pictures, notes, and such, but if that's the problem, unfriend them (which, it seems, is what you did before).

Here's how to go about locking down your account.

  1. Click on "Settings" in the upper, right of the page.
     
  2. Find "Privacy" and click on the "manage" link to the right of it.
     
  3. First, you can block someone from even being able to see you in searches. You can do this by Facebook account or by email.  If you're having problems with particular people, use this.
     
  4. Click on the "Profile" link on the privacy page (the blue link, not the white one across the top). Next to each of the categories, there is a drop-down list. From this list, select "Custom".  Each of the categories will give you slightly different options here.  Select the most restrictive ones.  "Only Friends" is an obvious choice, but some allow you to specify "Only Select Friends" or even "Only me".  Additionally, you will have to select which Networks have access, choose "None of my Networks". The networks setting is the biggest privacy hole in Facebook.  People often don't realize that their entire network (say, Joliet) has access to their info.  Lastly, you can set exceptions for some categories.  So, you can specifically add peope who you want to, for example, see photos that are tagged with your name.  This is good for specific family and friends who you want to see these things.  When you are finished, click "Save Changes"
     
  5. Click on the "Contact Information" tab and make the same choices as in #4.  I'd suggest being a little freer with your email address and a little more restrictive with phone, address, and so forth.  When you're done, click "Save Changes"
     
  6. Click on "Privacy" again to get back to the main privacy settings page.  Then click on "Search".  you can restrict who can see you in a search.  In most cases, you probably want to keep this as open as possible, but you may have reasons to restrict it.  Below that, however, is a section that describes what people can see when they search for you.  I usually suggest leaving these checked: picture and a link to add me as a friend, at a minimum (otherwise people won't be able to find you.  Lastly, there is an option to have public search.  This means that your Facebook account will show up in a search like Google.  Good if you want people to find you, bad if you don't :)  When you are finished, click "Save Changes".
     
  7. Click on the "Privacy" link again to get back to the privacy setting page.  Click on the "News Feed and Wall" link.  Uncheck all of these for maximum privacy.  This stops, to an extent, your activities from being posting on yours or your friends' news feeds.  When you are finished, click "Save Changes"
     
  8. Click on the "Privacy" link to get back to the main privacy settings page.  Click on the "Applications" link. You can read the info on this page to get a better idea of what this is for, but to change settings, click on the "Settings" tab.  The first set of settings essentially tells you that you are sharing your name, networks, and list of friends with applications that you are using in Facebook.  The only way to turn this off is to delete those applications (I'll tell you about this later).  Do make sure that you aren't sharing anything extra.  Uncheck any checkbox that is checked.

    The next setting that you can change is Facebook Connect.  This is the program that lets you log into other websites with your Facebook login.  It also tracks you to a great degree.  Make sure to uncheck that box.  It doesn't turn this off, but it does make sure that "friends" don't know what sites you use it on.

    Finally, the next setting is about Beacon.  This is Facebook's social advertising platform.  Definately check this box.  You do not want your network notified when you buy your wife's Christmas present or other, more sensitive things :)

    When you are done, click "Save Changes"
     
  9. We're done with the privacy settings, but there's one more place to go to really lock down your account.  We need to manage applications.  Go to the settings link on the upper, right of the page.  You will see a drop-down list of options, click on "Application Settings".  On this page, you will see another drop-down list of items that dictate what "Show" in this list.  Choose "Authorized" to see the best list of applications.  The easiest way to control these is to delete all applications that can be deleted.  These have X's on the right side of the listed application.  By deleting the applications, then can do nothing on your behalf in Facebook.  Of course, you can no longer use them either.

    With the remaining applications, you can adjust some (not many) options by clicking on "Edit Settings".  I'd suggest limiting who can see it as much as you see fit.  At least, "Only Friends" but even "Only Me" might be a good idea. 

That's all.  Your account is locked down as much as possible now.  You can always go back and open settings up a little as you become more comfortable or see more of a need to do so.

Please, add your advice below.

Saturday, November 8, 2008

That isn't really your friend: hijacking users in Facebook and how to protect yourself

This won't come as a surprise to many of you, but Facebook has become the land of opportunity for bad folks trying to load nasty things onto your computer. I have had 3 Facebook friends send me messages that were obviously either simply spam or hijacked sites with downloaders (scripts that load bad programs onto your computer) and I've seen Wall postings on scores of other friends sites that were obviously the same. Now, I have personally received Facebook mail, chat, and Wall messages in this vein.

Some news reports on the topic: 1, 2

I like to think of myself as rather tech savvy, but I nearly click on these links too. I would never do that in my email, but Facebook is a place where we are all friends, right? And I'm not even a teenybopper with 400 friends, most of whom I hardly know; I know all of my friends in Facebook well. This is why I feel almost obligated to click on a link that they send. This is something that those bad folks are counting on and we all have to retrain ourselves.

Below is an edited and slightly expanded copy of a message that I sent one of those friends who asked how she could protect herself. The advice below is certainly not extensive, but I believe that it does cover the basics. If you have anything to add, please do so in the comments.

What to look for:

(1) Messages with just a link and no description (which means that when you send links to other people you should include descriptions).

(2) Links to websites that are not major media/tech companies or something that you know is your friend's website. Websites like CNN, MSNBC, Youtube, Flickr, and so forth are ok. Sites like geocities, msnspaces, and other sites that host free websites are not a good sign.

(3) Messages that just sound spamish--"Whoa! You gotta check this out," "I can't believe what this chick did," and the last one I got was "Someone posted a video of you being bad." (I almost fell for that one).

(4) Bad spelling and grammar. Now, you may have bad spelling and grammar yourself, but if you don't think that your friend does, don't click on it.


How to protect yourself:

(1) Most of these direct you to a website that has a script that loads something bad on your computer. This almost always comes through your browser (likely Internet Explorer), though it could come in through a host of other programs like Acrobat, Flash, or any other software on your computer that has a vulnerability that is not patched. Therefore, make sure that all of your software is updated. Most new applications have a "check for updates" option under the "Help" menu. It is especially important to have Windows and MS Office fully updated. This is where most of the bad stuff gets in.

(2) Drop Internet Explorer. It's just not worth the trouble. Firefox is the best out there in my opinion. It's also one of the safest (though nothing is perfectly safe).

(3) Invest in a good antivirus suite and keep it up to date.

(4) Make sure your firewall is turned on. It likely is, but make sure. If you are running XP service pack 2 or higher, the default is to have the firewall on.


What to do if friends report that you are sending strange messages in Facebook (and you really aren't):


(1) Contact all of your friends and tell them not to click on any links that you send, at least for a while.

(2) Change your FB password and possibly your email password that is associated with the account (they could have used that to get access through the password reminder function).

(3) Contact FB and tell them what's going on.

(4) Check all of your computers (home, work, and other) to make sure they are updated (especially the antivirus program) and run a scan.

What if a friend sends me one of these messages?

(1) Let them know immediately. They can likely stop them by simply changing their password. A little more work might be necessary if their computer has been compromised, though.

Am I safe now?

Not really. It might be that none of this works. Websites like Facebook are notoriously easy to hack for someone with a bit of energy and an ounce of know-how. It's really a numbers game, because you are always hoping that it's someone else and not you :) In the end, you just have to be a little careful and follow some basic rules and you will be a lot less likely to be a victim.


------------- UPDATE 11/15/2008 --------------
I just happened to run across Facebook's help section that makes people aware they what you are experiencing is likely a known virus (on your machine, not theirs). See Facebook info here on the Koobface worm. They point you to a Kaspersky notice that has much more information.

The short of it is that when you follow links to a bad site, it prompts you to download the most recent Flash application, but it's really a nice little virus that attacks both Facebook and MySpace sites.

How does it know your password? It doesn't have to. You're likely logged in already, which gives it access to everything it needs. It pillages your contacts and sends out a bunch more posts to the nasty Web page to infect more people. Really, if it weren't so nasty, I'd have to say it is genius.

------------- END UPDATE --------------------

Monday, November 3, 2008

Facebook | Teach the People | Recently Changed Communities

Facebook | Teach the People | Recently Changed Communities

WOW! This has real potential. If you can get your students into Facebook (and access it from school), this could be a real challenger to Ning and other online social networking apps focused on learners.

Don't get me wrong, this is not an LMS. This is an online social networking service that works on top of Facebook and provides functions that teachers might find useful. However, with the increased availability of widgets and the ability to embed them in Teach the People provide for an environment that could be just about anything you want it to be.

I've only set up a site, I haven't tested it yet. We'll see if the performance lives up to my first impression.