Print 10 comment(s) - last by Setsunayaki.. on Oct 20 at 2:52 AM

U.S. Representatives Edward Markey (D., Mass.) (right) and Joe Barton (R., Texas) (left) are demanding Facebook answer questions about a recent privacy breach.  (Source: AP Photo/House Panel on Global Warming)

Companies exploited a loophole in Facebook's URL structure to get user names and compile lists of friends, even among users with the strictest privacy settings. The companies then worked with Google to build cookies to track the users' online activities.  (Source: Taste Goblet)
Two House members have sent a letter to Facebook following reports of violations

U.S. Representatives Edward Markey (D., Mass.) and Joe Barton (R., Texas) may sit on opposite aisles of the political spectrum, but both can agree on some issues.  Together the two representatives have penned a request for information to Facebook, Inc. the world's largest social network and one of the biggest tech companies in America.

The request for information follows a report in The Wall Street Journal that accused Facebook's app partners of knowingly and/or unknowingly violating the site's privacy terms of service and exposing many of the site's 500 million users' names and friends to data mining companies for ad revenue.

Reps Markey and Barton happen to be co-chairs of the House Bipartisan Privacy Caucus.  They are asking Facebook for details about how applications on the social network handle user information, to better understand who is responsible for the latest breach.  Referring to the current incident and past problems, the officials write "this series of breaches of consumer privacy is a cause for concern."

A Facebook spokesperson tells The Wall Street Journal that they are looking into the request.  And while they admit that a flaw in Facebook's privacy settings allowed users' names to be exposed to third parties, they disagree that this constitutes a "breach".  The spokesperson asserts, "The suggestion that the passing of a user ID to an application, as described in Facebook's privacy policy, constitutes a 'breach' is curious at best."

This contradicts somewhat what Facebook executive Mike Vernal wrote in a blog post yesterday.  He writes:
We take user privacy seriously. We are dedicated to protecting private user data while letting users enjoy rich experiences with their friends. This more social Web will only occur if users trust that they are in control of their information.

Our policy is very clear about protecting user data, ensuring that no one can access private user information without explicit user consent. Further, developers cannot disclose user information to ad networks and data brokers. We take strong measures to enforce this policy, including suspending and disabling applications that violate it.

Recently, it has come to our attention that several applications built on Facebook Platform were passing the User ID (UID), an identifier that we use within our APIs, in a manner that violated this policy. In most cases, developers did not intend to pass this information, but did so because of the technical details of how browsers work.

Facebook did take action against some of the ten accused app makers in The Wall Street Journal's report.  It suspended some of their apps, though most had been restored by late Monday. 

Among those suspended and restored was LOLapps, makers of Gift Creator and other popular apps.  The company reportedly was selling user info to a company called RapLeaf that was then compiling and selling it to companies like Google.  LOLapps reports having severed its undisclosed relationship with RapLeaf and claims it never intended to collect user information.

The U.S. government in recent months has shown a fascinating desire to protect consumer privacy from corporate interests.  Reps. Markey and Barton have reportedly filed 15 similar requests for information to various data mining firms that may be violating users' online privacy. 

On a seemingly bipolar note the U.S. government is reportedly seeking to expand its spying powers online, with incoming legislation looking to make it easier to file warrantless requests for Facebook records.  Federal courts have also asserted that federal and state agents should be allowed to invade personal property and plant tracking devices on U.S. citizens' cars without warrants.

Comments     Threshold

This article is over a month old, voting and posting comments is disabled

By kattanna on 10/19/2010 11:09:10 AM , Rating: 5
The company reportedly was selling user info

claims it never intended to collect user information

so they were never intending to make all that money, it just happened, by accident?

now i get the LOL part of their title, cause thats what im doing at their response

RE: LOLapps
By Schrag4 on 10/19/2010 11:55:34 AM , Rating: 4
Although I agree with you wholeheartedly, I also LOL at anyone that wishes to have their privacy and also posts every little detail about their private life on the web.

RE: LOLapps
By kattanna on 10/19/2010 4:45:58 PM , Rating: 2
I couldnt agree more

Dear Gov't,
By Homerboy on 10/19/2010 12:34:07 PM , Rating: 3
Don't you have something better to do? Do you even understand the technologies being discussed? Or did you just jump on this as it's the current hot-topic and you're looking to get you (or your buddy) re-elected?


Honestly, this is what they are spending time on? Give me a break. Do something IMPORTANT.

RE: Dear Gov't,
By rcc on 10/19/2010 12:52:35 PM , Rating: 2
It's not that this is unimportant, it needs to be addressed. But there are a whole bunch of alphabet soup agencies that should be handling the issues.

Having Congressmen involved boils down to publicity, so yeah, they need to find something more important to do... Soon.

RE: Dear Gov't,
By Schrag4 on 10/19/2010 12:53:57 PM , Rating: 2
Yeah this ranks right up there with the whole baseball/steroids thing. It's good to see our tax dollars hard at work! </sarcasm>

Oh, and for the record, I don't like govt handling a lot of the IMPORTANT things either. I know what you meant, though.

Security Concerns?
By Iaiken on 10/19/2010 12:22:32 PM , Rating: 3
Anyone who has security concerns of any sort shouldn't be giving away information to 3rd parties like Facebook, Blizzard, Apple, Google, etc.

When did we suddenly start thinking that individual 2nd parties could keep a secret let alone the 3rd parties that they collude with?

The most important aspect of any information security is to minimize the avenues of attack. This holds true for corporations and individuals. The more parties that are privy to your information, the greater the chances of that information being compromised or even flat-out sold (as in this case).

Facebook complicates this even more as 3rd party software installed by your friends can farm information from your profile despite you having never installed a single app. I've already given two proof of concepts to the Canadian government in regards to just how badly Facebook has failed to comply with privacy law. The app was able to access any of my friends pictures, posts and info that I could see.

If you don't want your information out there, the answer is simple, REFUSE TO PUT IT OUT THERE. These systems are NOT created with the altruistic intention of letting you privately get along with your friends and family. Facebook is in the business of benevolently providing of private space, they are in the business of MAKING MONEY OFF YOU.

Don't act so shocked...

RE: Security Concerns?
By Iaiken on 10/19/2010 12:24:43 PM , Rating: 2
Facebook is NOT in the business of benevolently providing of private space


facebook privacy, thats an oxymoron
By rika13 on 10/19/2010 2:43:15 PM , Rating: 2
The idea offacebook privacy is about as reasonable as the belief in an honest politician. This is doubly so for the numbskulls who tweet while driving "@jackass: @ mile 420 lolz, cu n chi n 40" "@stupid: <insert criminal activity here>", etc. and then whines when his boss finds out he is a criminal

By Setsunayaki on 10/20/2010 2:52:17 AM , Rating: 2
This is exactly why I am not registered or never will be registered to those "Social Network" sites plastered around the internet.

Read the User-End Agreement when you register....they are totally bogus and actually infringe upon your rights in several ways.

"I f***ing cannot play Halo 2 multiplayer. I cannot do it." -- Bungie Technical Lead Chris Butcher

Most Popular Articles5 Cases for iPhone 7 and 7 iPhone Plus
September 18, 2016, 10:08 AM
No More Turtlenecks - Try Snakables
September 19, 2016, 7:44 AM
ADHD Diagnosis and Treatment in Children: Problem or Paranoia?
September 19, 2016, 5:30 AM
Walmart may get "Robot Shopping Carts?"
September 17, 2016, 6:01 AM
Automaker Porsche may expand range of Panamera Coupe design.
September 18, 2016, 11:00 AM

Copyright 2016 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki