Comments on: Social networking privacy – inviting your friends to sign up http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up Always something worth reading... Fri, 12 Mar 2010 11:09:45 +0000 http://wordpress.org/?v= hourly 1 By: security and more » Social networking privacy http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/comment-page-1#comment-1839 security and more » Social networking privacy Tue, 09 Oct 2007 21:16:56 +0000 http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/#comment-1839 [...] Social networking privacy - inviting your friends to sign up [...] [...] Social networking privacy – inviting your friends to sign up [...]

]]> By: Core_sa http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/comment-page-1#comment-1381 Core_sa Fri, 28 Sep 2007 23:10:43 +0000 http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/#comment-1381 As far as individuals are concerned yes I agree we all need to be more careful about what info we put out there. Although we have privacy laws we should in theory be protected by I really think the social networking companies should be held accountable for what happens with our personal data. If my info is "sold" (which I no doubt believe it has been many times over) I should at least receive a "cut" of the pie! As far as individuals are concerned yes I agree we all need to be more careful about what info we put out there. Although we have privacy laws we should in theory be protected by I really think the social networking companies should be held accountable for what happens with our personal data.

If my info is “sold” (which I no doubt believe it has been many times over) I should at least receive a “cut” of the pie!

]]> By: David Kierznowski http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/comment-page-1#comment-1371 David Kierznowski Thu, 27 Sep 2007 22:25:52 +0000 http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/#comment-1371 Mike, would be interesting to see if they mention this in their terms of service. By the way, your blog looks great. Mike, would be interesting to see if they mention this in their terms of service.

By the way, your blog looks great.

]]> By: Mike H. http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/comment-page-1#comment-1367 Mike H. Thu, 27 Sep 2007 17:54:45 +0000 http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/#comment-1367 It gets worse, depending on the service. I recently blogged about rapleaf, which uses a combination of scare-spamming and address-book-crawling to build out its database: <a href="http://www.opennetworkstoday.com/archives/2007/09/rapleaf_spams_y.html" rel="nofollow">Rapleaf Spams You Then Asks for More Addresses to Spam</a> The larger problem with rapleaf, in particular, is that it's very aggressive about aggregating and normalizing the social networking data it gathers. Such that if a friend of yours innocently uploads address book information and happens to have two address book entries for you representing identities you try to keep separate, rapleaf would uncover that connection and possibly publicize it. It gets worse, depending on the service.

I recently blogged about rapleaf, which uses a combination of scare-spamming and address-book-crawling to build out its database:

Rapleaf Spams You Then Asks for More Addresses to Spam

The larger problem with rapleaf, in particular, is that it’s very aggressive about aggregating and normalizing the social networking data it gathers. Such that if a friend of yours innocently uploads address book information and happens to have two address book entries for you representing identities you try to keep separate, rapleaf would uncover that connection and possibly publicize it.

]]> By: David Kierznowski http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/comment-page-1#comment-1358 David Kierznowski Thu, 27 Sep 2007 14:41:39 +0000 http://blogsecurity.net/social-networking/social-networking-privacy-inviting-your-friends-to-sign-up/#comment-1358 Sarah, first of all this is a great series of articles. To me this is such a difficult question: How do you protect people's personal data when they give it out freely? I think it requires the joint-responsibility of the social network service and the user. <blockquote> The first thing I strongly believe is to give people a wake up call, particulary family and friends. Hey! this may sound hard to believe, but we don't all want our baby pictures pasted all over the net along with our favourite foods and personal associations. </blockquote> Sarah, first of all this is a great series of articles.

To me this is such a difficult question: How do you protect people’s personal data when they give it out freely? I think it requires the joint-responsibility of the social network service and the user.

The first thing I strongly believe is to give people a wake up call, particulary family and friends. Hey! this may sound hard to believe, but we don’t all want our baby pictures pasted all over the net along with our favourite foods and personal associations.

]]>