June 30, 2009
Sitting here waiting for my Penetration Testing class, I am reading a copy of MIT's Technology, particularly the Simson Garfinkel article regarding Facebook.
It's a pretty good read and asks the interesting question? Why are so many privacy advocates on Facebook? This is the reality of security. Not only is it a second class, terceriary consideration. Event its advocates are willing to ignore the risk for the sake of being "where the action is".
The reality is that repetition is reputation and the view of people about Facebook is that the security is pretty good. This view is based on all these levels privacy restriction. Mind you the latest status release from Facebook has been written up in the market as an added privacy feature.
But this is the real issue, words like privacy and security go hand in hand in peoples minds as part of a security strategy. But publishing your presence status does not enhance the privacy.
Its a lot like love and marriage, privacy and security can be a blend but can just as easily have very little to do with each other.
At the root of Facebook is the opportunity for malicious attacks.
You have "zero security" as Scott McNeally has said in years past, "deal with it!"
And for most part people have.
When my own computer was stolen my identity was very vulnerable to compromise. I am still trying determine the extent of the damage done to my network, but so far it looks like my MAC has not been used to visit the same sites as mine.
But these issues of security are of great concern. I have recieved spam from friends, and of course invites and causes that might as well have been spam.
From my own perspective I can not image this is going to be the norm for the rest of our lives. I expect security is going to become more than a fear and into an action.
For myself I now think of Facebook as something to send to, not to reside on. I am back to email. Unfortunately it is GMAIL. Which I will write about my frustrations with that system presently.
Feedback for Face(It)Book: Get Over It!