Given the Option, 30% of Teens Would Unfriend Parents on Facebook

September 6, 2010

Over 75% of parents are online ‘friends’ with their kids according to a new AOL survey, a really encouraging stat, that seems to indicate parents have been listening to internet safety messaging and engaging in their teens online lives.

However, the study also found that nearly one third of teens on Facebook teens are mortified by nagging chats and clueless comments left by their parents on their online profiles that 30% would ‘unfriend’ them if they could. In fact, mothers are so uncool, the survey found that teens are more than twice as likely to want to dump mom vs. dad as a friend.

Ah the trials of childhood; some things never change.

Embarrassing parents may even be one of the causes of “Facebook fatigue.” Nearly 1 in 5 are losing interest in the site, according to a survey of teens conducted this spring by online gaming/fashion site Roiworld.

Facebook Fatigue

Statistics may help to paint a picture of the current scenario. Roiworld dubs this phenomenon as “Facebook Fatigue”!

  • About 27% of teenagers, as per the survey, are simply bored with the constant and numerous notifications.
  • 21% stopped using Facebook as their friends had stopped using it whereas a similar percentage confessed that they were simply exhausted with all the activity on Facebook.
  • Users amounting to 20% refrain from using the website due to inconsequential advertisements.
  • There was even a select 16%, according to the survey, who found quitting the better way out because their parents and elders seem to be taken by Facebook!
  • 14% said there are just “too many adults and older people.”

Unlike the day’s of yore, when teens embarrassment was simply mumbled between friends, today’s youth have broader outlets for their pain – many turn to the internet to share and swap their “I can’t believe my parent did…” stories.

Enter sites like MyParentsJoinedFacebook who’s slogan is Family. Can’t Facebook with ‘em, can’t unFriend ‘em! where teens can share evidence of their parents cluelessness. The site receives at least 20 submissions a day.

Kids are also using ‘traditional’ websites like Twitter and YouTube to tell their tales of woe – type ‘my mom’s on Facebook’ for a whole listing of videos. There are even songs – at least two – both titled (see My Mom’s on Facebook and My Mom’s on Facebook) bemoaning the situation.

Perhaps with all the safety messaging about getting online with your kids, we need to begin teaching how to be a little less clueless online….or not. In the new over-sharing online environment, it’s actually good to know that parents can still embarrass their kids.

Linda


Spam on Facebook Soon Worse than in Email?

September 4, 2010

Facebook Spam has a conversion rate of 47% – meaning that nearly half of the people who see a spam message clicked on the link to read it. That finding comes from Sean Sullivan, a security advisor at antivirus firm F-Secure who’s been researching social networking spam, as reported in an article in Information Week.

The good news? People are learning fast and becoming less likely to click on Facebook or Twitter spam. The bad news is that spam attacks will continue because it only takes a few people who fall for it to make it worthwhile for spammers.

The spam spreads through compromised or fake Facebook accounts, allowing the spam to spread through status updates, chats and private messages. Email spammers have figured out how to masking their emails so they look like Facebook messages in their efforts to increase their click-through rates, as variation of a phishing scam.

Facebook isn’t taking this lying down, they are seriously and aggressively filtering to prevent the scourge, but keeping a watchful eye on the 550 million Facebook users isn’t easy, and given end users role in spam distribution, it isn’t likely to be eradicated soon.

Another article by F-Secure suggests 3 ways Facebook could fight spam, including identifying behaviors that indicate a user has a tendency to spam, placing a “report spammers” link on every profile, limiting access to who can post to a “wall”, increased education to their users about identifying, deleting and reporting spam, and using image filtering technology to identify images that recur in spam to rout out the spam – and the spammers.

Are you part of the problem, or part of the solution?

Every user has a role to play in protecting the online ecosystem. Knowing how to spot spam and block it’s perpetuation is the responsibility of all users. Do your part, learn how to Spot the Spam.

Linda


Texas Shooter Told Facebook Friend ” I enjoy watching people beg for their life”

August 22, 2010

The advice about being selective in whom you include as a social networking friend just got more validation.

Last week Patrick Sharp attempted a massacre outside the McKinney, Texas police headquarters. According to the police, the 29-year-old man set his truck on fire and hid several hundred yards away in a wooded area.

Attached to the truck was a trailer packed with wood chips, roadside flares, gasoline and ammonium nitrate fertilizer, the type used in the 1995 bombing of the Oklahoma City federal building, but although the truck fire set the ammunition in the trailer off, it failed to ignite the explosives.

The truck fire appears to have been an apparent attempt to lure people out of the building and into his range of fire. Sharp reportedly fired approximately 100 rounds at the police station and at a nearby Collin College building, but the shots failed to hit anyone.

Less than five minutes after the incident began, Sharp was dead; the coroner ruled his death a suicide.

A 16 year old Georgia girl, who was an online friend of Sharp’s said that less than an hour before he attempted the massacre, Sharp contacted her on Facebook with a message that said “killers like to share their thoughts, seek attention,” and “I like to scare people. I enjoy watching people beg for their life. I like watching them drown. When they take their last breath, oh it’s amazing.”

In his message Sharp didn’t say who or what he planned to attack but reportedly told the girl he may have mental health issues.

The teenager said she met Sharp on a mobile social networking site called Mocospace, and that he often told her about his desire to kill people, especially children. She thought he was joking.

Someone needs to tell this teen that when 29 year-old strangers sound crazy online, it’s time to un-friend them.

On the day of the shooting he wrote to her “Just think of all the weird [stuff] on moco I said… Most of it was true.”

According to the Dallas News Sharp indicated on his Mocospace page that he had planned the attack before Tuesday morning. His last status update was Sunday, when he wrote, “I’m out for good y’all, [screw] all my haters.”

Then on Tuesday, after communicating with the teen girl, he posted his last status update on Facebook: “Goodbye everyone, I’m exodus”.

This story is shocking on a number of levels, but I’d like to focus on just one:

The teen girl who was a ‘friend’ of Sharp’s read a lot of really disturbed comments by Sharp over a period of time, but didn’t un-friend him. Why not? The Dallas News article also said that Sharp had planned to meet the girl, who lives outside Tampa, while visiting his sisters in Florida this weekend.  Why would the girl be willing to do this? Meeting any online ‘friend’ requires strong safety precautions, but meeting someone who had been ranting like this would be insane.

How do we help teens – and adults – understand the red flags that warn when to end an online ‘friendship’? There isn’t yet a lot of internet safety education teaching people when to virtually walk (or run) away from an online contact, and this gap needs addressing.

Linda


Facebook Places – What it Does, Why They Built it, and it’s Impact on You

August 21, 2010

If you haven’t heard that Facebook has rolled out ‘Places’ a new feature that allows you to broadcast your location, you’re probably over the age of 30 and not a Facebook user. But that still makes you part of a huge segment of the population, and one in which many parents of Facebook users fall into.

I’m not fundamentally opposed to location broadcasting – popularly called location ‘check-ins’. Done carefully and with deliberation announcing your location isn’t necessarily a bad thing, a point underscored by Michael Sharon, product manager for Places. “This is not a service to broadcast your location at all times, but rather one to share where you are, who you are with, when you want to. It lets you find friends that are nearby and help you discover nearby places.”

Facebook isn’t the first service to enable location beaconing, social networking services like Foursquare and Gowalla are specifically designed let you to share location information with others, and services like Mologogo have been around since 2005.

What Facebook’s Places service does

Facebook’s new geolocation features allows users to update their status with their exact location, tag themselves in pictures based on location, and tag friends who are with them in same the location. These check-ins are then broadcast as status updates on users personal sites, on a user’s friends pages, and on the Places page for that location.

Note: For now, the ability to check in at a particular location is only available for users on mobile phones.

Sharing this information can help users invite friends to their location, or join friends at their location. It can help drive awareness for events – for example, I was at the PII 2010 conference held in Seattle earlier this week, and Places made it possible to see which other experts were in attendance, and help potential attendees determine what times they wanted to be there. Sharing location information can also provide users with location based coupons and ads that they may find useful, reviews of businesses and restaurants that they may want to eat in, and identification of the popular spots around them – something that may be particularly interesting for tourists.

At the same time, sharing your location information, or the location of others, can jeopardize you or your friends ‘privacy and safety, with consequences that can range from embarrassing to deadly.

According to Walt Mossberg‘s Facebook Places review, Facebook has set an age limit so that “minors are excluded from seeing anyone except their friends.” I haven’t been able to learn more about any restrictions for youth but hope that there are also restrictions on who can see the location posted by a minor – and a clear notice to youth to talk to their parents about the feature. Another concern is that even if there are strong protections in place for minors, we know that a tremendous number of minors lie about their age on social networks, and for these, protections won’t take effect.

The business case for releasing Places

Businesses are in the business of making money, and rightly so.

Facebook says the reason they have added Places is simply enrich the social experience it already provides. “We’re just building a new way for people to share that information in an engaging way,” says one Facebook official. Facebook says it isn’t monetizing the service, at least not at first [italics added], but may consider ways for companies to make use of the data “down the line.”  This seems more than a little disingenuous.

Facebook expects that Places will increase consumers’ use of their service, and increased usage translates into more advertising dollars. Collecting users’ location information is particularly lucrative in that it will allow Facebook to capture the advertising dollars from local and small businesses that aren’t interested in the broader nationwide type of coverage. To date, this small and local advertising market has been a largely untapped revenue opportunity for internet companies, and both Facebook and Google are vying to capture this mobile advertising and local search revenue stream.

“Location gives marketers a great way to target customers,” said Debra Williamson, an analyst with eMarketer. “The whole idea is to reach people at the point of decision before they have to clip a coupon or perform a search.”

Three reasons why Facebook’s method of rollout, and lack of education materials are disappointing

  1. The arrival of Facebook’s location tracking service was not a deep dark secret – so why didn’t they educate their users – and their user’s parents - in advance of the rollout about the pro’s and con’s of using location services, and how to use these safely?

    Let’s go back to the Michael Sharon quote This is not a service to broadcast your location at all times, but rather one to share where you are, who you are with, when you want to. It lets you find friends that are nearby and help you discover nearby places.”

    Exactly how should a basic user have learned what’s involved in making informed decisions about when they might “want to” share? Who explained the potential ramifications of doing so in various circumstances?

    Where’s the information that says people who:

    1. frequently check-in from bars may see their auto insurance rates increase in the future?
    2. check-in daily from the doughnut shop may see an increase their medical insurance?
    3. checked-in years ago from a questionable location may see it haunt their reputation?
    4. lied about being sick, get fired after checking-in from the beach?
    5. broadcast their location increase their risk of physical stalking and harm?
    6. and so on…

    Awareness of these risks doesn’t come in one’s DNA at birth; it needs to be taught, and it should be taught by the very companies rolling out these services. I am less frustrated that this education wasn’t launched by the smaller location social networks, as their audiences are largely more tech savvy. But for Facebook, with its enormous number of users who are far less technically sophisticated, failing to provide this basic safety and privacy education is outrageous.

  2. Then there is the question of settings. These exist, but where are the step-by-step settings guide to help consumers actually achieve the privacy and safety they desire? Why do consumers need to go to places like Gawker to understand that The First Thing You Should Do With Facebook Places: Don’t Let Other People Tag You, or Lifehacker to learn How to Disable Facebook Places?Watch Lifehacker’s video on Facebook’s Places’ privacy settings:

    At this week’s PII 2010 conference, a UI designer (someone who designs the user interface for products and services) said that among the UI world, they’ve coined the phrase “Zuckering” (Mark Zuckerman is the CEO of Facebook) which means to make the user experience so complicated that consumers can’t figure out how to appropriately create their settings and simply give up. That the phrase was coined – and well understood by tech insiders – speaks volumes about the company’s failure to make their settings understandable to average users. Given this complexity, the lack of a step-by-step guide is especially irresponsible.

  3. You are automatically opted in to Places, if you don’t like it, you have to figure out how to opt out. And what it takes to opt out is a clear example of the “Zuckering” described above. The settings are scattered across the overall privacy settings, and nothing indicates which settings are impacted.There are four critical settings to review and adjust (While you’re at it, take the to review the rest of your settings and the settings of minors in your care as well):Log into Facebook and choose Privacy settings under your Account menu.  Next, on the bottom left, you’ll see the Customize option. Click on this to see the Customize settings option at the bottom of that page.

    Under “Things I Share” change two settings if you don’t want to be seen. Where it says “Places I check in” the default is set to visible by your friends only. To change this, use the drop down menu and select “Only Me.” (Note: once Facebook begins monetizing Places, it is unclear whether the ‘only me’ setting may still make your location visible to merchants. This will be something to watch for in the future.)

    Next, there is a checkbox next to “Include me in ‘People Here Now’ after I check in” that is by default set to enabled. What this does is to share your location to anyone looking at that location’s page, or in a search for people near you. Uncheck the Enable box if you don’t want this.

    The third setting to look at is on this same page, just scroll down to the section “Things Others Share” for “Friends can check me in to Places.” This fields may be blank, but change it to be “Disabled” or friends can check you in whether you like it or not – and where they check you in could cause you real harm – see just a few examples listed above, then come up with your own. The service does not require that a user tells the truth about a location.

    Lastly, you need to go back to your Privacy Settings page and select the “Applications and Websites” link, and navigate to the Info accessible through your friends section. Click on Edit Settings link and uncheck the box Places I check in to.

When a company is as big as Facebook or Google, it has a social responsibility to help drive the public discussion around privacy and safety tradeoffs; to educate consumers; and to actively design features that can be easily configured to comply with consumers’ intent. These companies should take some lessons on social responsibility from the large internet companies that helped forge the way, and made (and continue to make) consumer safety and awareness front and center. These include Microsoft, AOL, and Yahoo!.

Linda


100 Million Facebook Users Details Collected and Published

July 31, 2010

Using basic code, internet security consultant, Ron Bowles, collected and published limited personal data on nearly 100 million Facebook users to the file-sharing website PirateBay.com. Shared as a downloadable file, it contains the URL of every searchable Facebook user’s profile, their name and unique ID. Unsurprisingly, the file has spread rapidly across the net.

Mr Bowes said he published the data to highlight privacy issues, according to a report on the BBC.

Responding to the news, Facebook said in a statement to BBC News, that the information in the list was already freely available online. “In this case, information that people have agreed to make public was collected by a single researcher and already exists in Google, Bing, other search engines, as well as on Facebook. “No private data is available or has been compromised,” the statement added.

However, Simon Davies, from the watchdog Privacy International, told BBC News that Facebook had been given ample warning that something like this would happen. “Facebook should have anticipated this attack and put measures in place to prevent it. It is inconceivable that a firm with hundreds of engineers couldn’t have imagined a trawl of this magnitude and there’s an argument to be heard that Facebook have acted with negligence, he added. “People did not understand the privacy settings and this is the result,” he said, adding “There are going to be a lot of angry and concerned people right now who will be wondering who has their data and what they should do.”

Davies’ protest refers to the groundswell of protest heard earlier this year as Facebook once again changed their privacy settings and made it even more difficult for users to ensure their privacy was respected.

Even after another overhaul aimed at simplifying privacy settings, Facebook’s default setting for privacy makes some user information publicly available, and users have to be aware of the issues and make a conscious choice to opt-out of these defaults.

Though Facebook continues to gain users – Facebook hit the 500 million user milestone earlier this month – the sites customer satisfaction rating is in the toilet – it’s even below the IRS.

In the ZDnet article Facebook bombs on customer satisfaction, says ACSI; On par with airlines Facebook was found to be in the bottom 5% of customer satisfaction among private sector companies. Speculating on why Facebook has such poor results, ACSI points to the sites privacy problems and frequent policy and site changes.

Linda


Facebook’s Safety Page is A Dud

July 30, 2010

Facebook has just launched a new internet Safety web page, and it’s a dud. Particularly when put side by side with the latest news that an internet security consultant was able to collect personal information from over 100 million Facebook users without hacking their system.

Despite hopes that they would actually address site-specific issues, it’s just another tired, generic compilation of “common sense” advice.

All it takes is a quick glance at their home page to make this obvious. Which of the 6 tips listed are anything but snoozeworthy?

According to Facebook’s Joe Sullivan, their new safety page is intended to “highlight news and initiatives focused on ways people can keep data secure at the world’s leading online social-networking community, adding that “we’ll continue to think of innovative ways to promote safety on our service and elsewhere on the Web.”

Here’s a news flash: This isn’t innovative. Facebook will have to work a lot harder to come close to “innovative”.

If they really want to make a difference, the site will need to show users how to specifically be safer on Facebook. They’ll need to point out the risk areas, and show how to mitigate the risks – in  settings, in profiles, in images etc. And if they want to be innovative, they’ll need to actually look at ways to eliminate those risks, so consumers don’t trip up in the first place.

Linda


Four Nerds Fight Facebook; Coming Soon, Individual Social Sites?

May 25, 2010

The ‘you can use my network in exchange for our right to own and monetize anything you contribute’  model of exploitation is being challenged, and if you’re smart, you can help push it into extinction.

Facebook’s under siege for their continued erosion of consumer privacy and increasing exploitation of consumer’s information. Privacy advocates, the FTC, Congress, the Canadian government, and the EU have all threatened action – and an increasing number of consumers are adding their disgust to the argument. Is an exodus in the wings? There is certainly precedent; the collapse of MySpace, once thought to be untouchable, shows how quickly a service that falls out of consumer favor can wither. When MySpace became synonymous with child predators and a lack of innovation it’s glory days were marked.

Several legal challenges to Facebook’s exploits are forming, which the company has announced their intent to fight. Yet while this battle moves slowly through the legal process, technology may significantly alter the playing field. In a move that closely parallels Facebook’s own genesis, a group of young college students is leveraging the openness of the internet and applying technical innovation to change the playing field.

It began with four ‘nerds’ creating a vision of change. After hearing a lecture by Eben Moglen, a law professor at Columbia University, describing the current model of  centralized social networks as “spying for free,” these young men were galvanized into creating a model of individual social networks that each user would ‘own’ so you have full control of your information and privacy rather than sacrificing this to Facebook or another big business.

Explaining why centralized networks like Facebook aren’t necessary, Raphael Sofaer, 19, one of the students developing this service said. “In our real lives, we talk to each other,” he said. “We don’t need to hand our messages to a hub. What Facebook gives you as a user isn’t all that hard to do. All the little games, the little walls, the little chat, aren’t really rare things. The technology already exists.”

Figuring it would take 3-4 months to create the software, called Diaspora*, the students concluded they’d need to raise $10k in funds to live on during the development. They set up a page on Kickstarter, a funding platform site that helps people with ideas get the support they need, and estimated it would take 39 days to raise their funds.  Instead, it took 12 days. As of this writing, they’ve raised over 95k. “We were shocked,” said Dan Grippi, 21,  another one of the students involved. “For some strange reason, everyone just agreed with this whole privacy thing.”

That some reason would be consumers outrage over the exploitation. You can go to Diaspora*’s Kickstarter page to add your support.

You can also join the “FacebookProtest” movement by ensuring you log off Facebook, entirely on June 6th.

You care about your privacy, it’s time to make sure your opinions are respected, and that products don’t force you to choose between access or privacy.

More articles on this topic: Four Nerds and a Cry to Arms Against Facebook. More articles online privacy:  Debunking the myth: Young Adults Do Care About Online Privacy, and Think You’ve Got Nothing to Hide? Are You Nuts?

Linda


Why Facebook Should Ignore Ceop’s Demand for Panic Button

April 11, 2010

Facebook has come under fire in the UK from their Child Exploitation and Online Protection Center (Ceop) for being unwilling to insert a ‘Panic’ button on their service.

The thinking by CEOP is that such a button would deter pedophiles and other criminal behavior. Citing more than 297 cases where UK users reported abuse to Facebook that did not receive a response – and where the users then turned to Ceop – Jim Gamble, head of the agency said their investigations found sexual grooming, bullying and hacking, and that some suspects have been arrested.

While CEOP has identified a problem, their solution is flawed.

In this particular case I agree with Facebook. Placing a “panic” button that routes abuse reporting directly to Ceop is a very poor choice for 3 reasons:

  1. Little of what is reported will actually be a police matter, and giving this information to the police is then highly inappropriate – it’s none of their business. You don’t want your child investigated by the police simply because someone chooses to report them; that’s a form of bullying in itself.
  2. It is a poor use of police time to sift through the flood of ‘panic reports’ that don’t actually merit their attention. Shifting the burden of responsibility and cost that should appropriately fall on the company to the public is an inappropriate use of tax funds.
  3. A ‘panic’ button circumvents the service’s abuse system, which in turn means the service cannot effectively manage what’s happening on their service, or understand how to take remedial action – including blocking users.

The real solution is for users, parents of users, and governments, to hold service providers accountable for providing strong abuse detection capabilities, combined with appropriate real-time response by moderators to any abuse that’s reported.

THIS is where Facebook, and other companies providing online services for consumers need to step up.

Linda


Privacy Policy Changes – Some Companies Get Notification Right

April 9, 2010

It’s time to demand honest, clear notices that come well in advance of Privacy Policy changes to give consumers an opportunity to opt out, protest, or take some other course of action.

Facebook users learned last week that their privacy had received another ‘haircut’. This latest round of Privacy Policy changes gives Facebook the right to sell your information to other companies in a clear profit-trumps-privacy equation.

Adding insult to injury, the company chose to minimize the press coverage – and number of consumers who would hear of the changes – by delaying their notice until after press deadlines on a Friday – for more information on the latest changes see Facebook privacy changes would share user data with other sites.

These practices are unacceptable. It’s time to demand a change.

Most companies, including flagships Microsoft, AOL, and Yahoo!, go to great lengths to protect your privacy, have clearly understandable policies that don’t change every time you turn around, and clearly respect their users.

Geni.com, a genealogy site, goes even further and embodies the proactive approach to policy changes. Not only do they make their privacy practices clear on their website, the following email was just sent to their users giving very clear, advance notice about changes to their privacy policy. It’s so impressive, I’ve attached the entire email; it is well worth your attention. Click the image to see in full size

Geni.com site richly deserves the accolades they’ve received from PC Magazine, TIME, and CNET for being a great website. Their advance notification of policy changes to each and every member (and they strengthened their privacy protections – what a thought!) has now earned them a far humbler, but rarely given, award – the LOOKBOTHWAYS seal of approval. Congratulations Geni on being a shining example of transparency and consumer respect.

We encourage all companies with a web presence to employ consumer safety and privacy best practices in every aspect of their development, testing, support, and within their consumer services.”

As a percentage of companies, those who exploit consumers are but a fraction, but the tremendous reach of Facebook, and others with less than stellar track records like Google, means that most of the US population  (and a significant number of global users) are adversely impacted by their actions.

Sending users an email notification of any upcoming policy changes is easy and ethical. Sites already store every registered user’s email address, and email provides an excellent opportunity to clearly explain changes – including graphic representations of complex concepts – and provide links to where they can learn more, or ask questions.

The Radicati Group estimated that the number of emails sent per day in 2008 were around 210 billion, so for most sites sending an email to all their users would barely be a blip. But for huge sites that feel sending several hundred million emails would be prohibitive, there is a clear alternative; use a notification screen in front of every user (once per user) at least one week in advance of the changes that requires their action, or the action of their parent, before proceeding. For those who did not log on during the notification week (or longer time period), the notification should be changed to inform them of the changes that did occur so they can take action at that time.

Will providing clear notification annoy some users? Of course, so do seatbelts but they protect consumers from clear risks.

You have the right to an informed online experience. You have the right to set your own terms for your online experience. You have the right to expect online products and services to guard your safety and privacy. Learn more about your rights in Your Internet Safety and Privacy Bill of Rights.

As consumers you can—and should—vote with your feet if the experience you’re having on a service doesn’t meet your expectations. Even Facebook has had to beat a retreat when enough consumers rioted.

Linda


Warning: New Facebook AV Malware

March 30, 2010

PC Magazine is alerting consumers to a new malware attack spreading through Facebook. Found by F-Secure, the malware claims to be an anti-virus tool, that is spammed to Facebook users by friends who’ve fallen for the ploy. The malicious application asks users for access to their profile, then spreads further by sending the spam containing the malware link out to all of their friends.

Beware