Hey You, Get Off Of My Cloud

Why I don’t do Facebook, reason No. umpty-three…

When it comes to personal data security I’ve always been paranoid, and with good reason. From Techcrunch:

You’ve got to hand it to Facebook. They certainly know how to do security — not.

Today I was tipped off that there is a major security flaw in the social networking site that, with just a few mouse clicks, enables any user to view the live chats of their ‘friends’. Using what sounds like a simple trick, a user can also access their friends’ latest pending friend-requests and which friends they share in common. That’s a lot of potentially sensitive information.

Unbelievable I thought, until I just tested the exploit for myself.

And guess what? It works.

The irony is that the exploit is enabled by they way that Facebook lets you preview your own privacy settings. In other words, a privacy feature contains a flaw that lets others view private information if they are aware of the exploit.

I know Facebook wants us to share more information and open up, but I’m not sure that this is quite what they had in mind.

Video…

Oooh, I dunno, I wouldn’t put it past them, especially with the current requirements placed ISP’s and social networking companies to provide information to security organisations – how better to datamine friends and associates of someone under suspicion, no warrant required?

, “…in future finding out other people’s secrets is going to involve breaking everyday moral rules”.
Sir David Omand, former Whitehall intelligence and security co-ordinator February 2009

I was having this very conversation with my son yesterday, apropos of Charlie Stross’ article on cloud computing and Steve Jobs’ long term strategy for the development of Apple as a data handler.

My son and his iPhone-toting friends may consider me an old fart for being firmly in the open-source using, roll your own cloud tendency, but being what might be considered a political dissident in a vicious neoliberal society I’ve got good reason to be paranoid. And this from someone who read Cryptonomicon by Neal Stephenson as a teenager and loved it. Now he’s happy just to hand over his data to any old Tomasina, Dick or Harret. Feh, where did I go wrong as a parent?

This latest piece of Facebookery just goes to prove me right and him wrong. Let some corporation have control over my personal details? Not a hope in hell.

Published by Palau

Been there, done that, bought the t-shirt, washed the t-shirt 23 times, threw the t-shirt in the ragbag, now I'm polishing furniture with it.