Search My Blog

Monday, October 18, 2010

Facebook admits its third-party developers have mishandled private data | Web Apps News - Betanews

Facebook admits its third-party developers have mishandled private data

By Ed Oswald | Published October 18, 2010, 3:16 PM

In what could be potentially damaging to a company already being criticized over its privacy issues, Facebook admitted late Sunday that it had knowledge of developers passing information called user IDs within applications. The user ID is a unique set of numbers that identify users on the site.

Facebook engineer Mike Vernal said in a blog post that in most cases the company believed developers were doing this unintentionally, but regardless it was a violation of the social networking site's privacy policy. Vernal did however say the press was overblowing the situation.

"Knowledge of a UID does not enable anyone to access private user information without explicit user consent," he claimed. "Nevertheless, we are committed to ensuring that even the inadvertent passing of UIDs is prevented and all applications are in compliance with our policy."

The Wall Street Journal said that the issue may affect "tens of millions" of application users, even those who have their privacy settings as strict as is currently possible. Zynga's popular apps Farmville, Frontierville, and Texas Hold 'Em all have the issue, it found, among others.

In fact, all ten of the most popular applications on Facebook had the issue, so it may be likely that significant percentage of all apps were sharing the so-called user ID -- meaning that Facebook itself could share some culpability in not educating its developers on how to keep their apps sufficiently secure.

Making matters worse, it seems clear that the site doesn't quite know how to fix the issue just yet, causing consternation among its users. "The technical challenges here are greater," Vernal said. "We are talking with our key partners and the broader Web community about possible solutions."

That wasn't enough for some of the commenters to his blog post. "Everything on FB is trust first; act later, including new settings when rolling out platform enhancements," one wrote. "In other words, there's no enforcement of their policies, no consequences for violating them, just an excuse on their part. Gee thanks," another wrote on Facebook's claims that the breach was for the most part inadvertent.

Apple Q4 2010 by the numbers: Record iPhone sales and iPad push revenue to $20.34 billion

Apple closes fiscal 2010 with gusto -- all major product lines deliver strong performance during Q4.

Sony launches Vegas Pro 10 video editing software, supports 3D, OFX plug-ins

The latest version of Sony's desktop video editing and production software, Vegas Pro 10, launched in retail on Monday, the company announced.

Firefox in the dust: Opera poised to reclaim browser performance lead

Opera Software appears to be following up last year's Christmas surprise with an equally chart-busting sequel.

Microsoft unveils 10 new Windows 7 Phones, sets 1GHz as the baseline

Monday morning, Microsoft revealed the first handful of Windows Phone 7 devices. These nine new handsets will be available in North America on November 8th, and in Europe, and Asia on October 21.

Fighting back with fire: Firefox 4 closes the gap, Chrome threatens Opera's lead

It only took one month for Mozilla to close Firefox 4's gap with IE9, but the tool it's using to do so may or may not work right yet.

Facebook admits its third-party developers have mishandled private data

Will Sprint and Clearwire make their 80-city WiMAX goal by the end of 2010?

Sprint and Clearwire today announced the upcoming WiMAX launches in NYC, San Francisco, and LA, but the companies haven't met their 80 city goal for 2010 yet.