Facebook has a point where it comes to your privacy

My ex-boss, John Furrier, goes after Facebook after Facebook blocked Google’s Friend Connect from using its API to inport friends from Facebook into Google’s Friend Connect.

I saw Dave Morin, who runs Facebook’s developer platform, at Google’s event Monday night. You can see him at the end of the event where I shoved my cell phone in his face and tried to get him to comment. He refused.

After the camera is off he said it was “interesting” that Google had used Facebook as one of the examples during its launch of Friend Connect.

I guess it was a lot more than “interesting.”

They blocked Google because they didn’t want Google to populate its friend network with data collected from Facebook.

Oh, I know, that’s not the real reason they told TechCrunch and others. Here’s the official statement from Facebook.

Facebook is being consistent here. Dave Morin told me a few months ago all about Facebook’s concerns. Such as, what happens if you change your email address, will it change everywhere that your email address got copied to?

Clearly with Google’s Friend Connect the answer is “no.” Why? Because it was a one-time action and there was no live connection back to Facebook and Google’s Friend Connect’s data would get older and older (and more and more out of date). Want to delete your email address off of the Web? Sorry, thanks to other systems Facebook can’t ensure that’ll happen.

Now, I’ve been on both sides of this story. A few months ago I tried using some unreleased technology from Plaxo to do exactly what Google did on Monday night. I not only got kicked off of the API (which is what should have happened) but my account was hidden and I was locked out for about 20 hours.

Facebook’s “penalty” for that behavior was way too harsh. And, some, like John Furrier, believe that Facebook is on the wrong side of the line tonight again.

Me? I think Facebook has a point, but I think the horse is out of the barn already and Facebook won’t be able to shove it back in.

Why? You should check into Minggl. It’s a toolbar that does far more than what Google’s Friend Connect does.

But it does it in a way that Facebook will never be able to block. Why? Because it’s your browser that scrapes all your friend’s info into Minggl’s browser bar. That bar then uploads all that information back up to Minggl. There’s no way that Facebook will be able to block Minggl. If Google wants to push the issue they should do exactly what Minggl is doing.

To get geeky for a moment, Minngl is collecting that data with a separate IP address each time the same one your browser is using. If Facebook wants to block Minngl it’ll have to block you from browsing to Facebook. Facebook can’t do that to everyone, so Minggl has picked an architecture that makes it impossible for Facebook to block. At least using technical methods. I wouldn’t be surprised if Facebook tried to sue Minggl or other companies that use similar methods to collect data.

Privacy is dead.

Anyone who puts anything on a computer screen that they want hidden from public view should think again. I don’t think it can be stopped and the walled gardens that have built around Facebook and other social networks are temporarily walled at best. That data WILL leak out of the walls and already is. Facebook’s attempt to keep the walls up will prove unsuccessful.

Just ask former KGO Radio Talk Show host Bernie Ward. He was convicted of sending child pornography through email to someone else. If email isn’t a private medium then surely Facebook isn’t. (The person he was emailing those photos to emailed them to the authorities).

What do you think? Does Facebook have a point or is the horse already out of the barn?

UPDATE: This is being discussed at a much faster rate over on FriendFeed than over here.

UPDATE2: Google employee Kevin Marks says I’m wrong in comments here. Here’s his correction to this post: “Robert, you’re wrong about Friend Connect data getting stale. It’s fetched directly from your linked Friend Data sources, including other Social Networks, with short-term caching on Friend Connect servers. There is a live two-way connection – Friend Connect posts back events to the Social Networks’ activity streams when the user choses to do so.”

UPDATE3: Mike Arrington over on TechCrunch thinks I’m wrong on this post. But, if you read the comments over on his blog you’ll see we’re not that far apart.

77 thoughts on “Facebook has a point where it comes to your privacy

  1. Everybody wants to “own” the user data and nobody wants to “view” it. So what’s the real problem? Making money on the internet revolves around user data and page views. That’s the bottom line. Facebook knows that the “walled garden” approach is the only way they can keep those two things to themselves.

    Like

  2. Everybody wants to “own” the user data and nobody wants to “view” it. So what’s the real problem? Making money on the internet revolves around user data and page views. That’s the bottom line. Facebook knows that the “walled garden” approach is the only way they can keep those two things to themselves.

    Like

  3. Excellent reporting, thinking and explanation. You’re right. Still, the gesture of trying to maintain privacy is worth something. It’s symbolic. But just because you can’t do everything doesn’t mean you can’t do something. I like the psychology of feeling that Facebook is at least throwing up some checkgates against the inevitable Google flood.

    Like

  4. Excellent reporting, thinking and explanation. You’re right. Still, the gesture of trying to maintain privacy is worth something. It’s symbolic. But just because you can’t do everything doesn’t mean you can’t do something. I like the psychology of feeling that Facebook is at least throwing up some checkgates against the inevitable Google flood.

    Like

  5. Nice blog post, I 2nd Prokofy. Call me an old-school blogger.

    “I don’t have no time to monitor no skink’in Twit or Friendfeed!

    Like

  6. Nice blog post, I 2nd Prokofy. Call me an old-school blogger.

    “I don’t have no time to monitor no skink’in Twit or Friendfeed!

    Like

  7. Robert, I thought you were all for putting all your private data and company data in the Cloud.

    This is why I think most people will never trust cloud computing.

    Like

  8. Robert, I thought you were all for putting all your private data and company data in the Cloud.

    This is why I think most people will never trust cloud computing.

    Like

  9. I disagree with Dawnkey… “Cloud” computing is going to take hold just like the Internet. There have been several good takes on Cloud Computing over the past couple of weeks and the best analogy I’ve read is that people use to save their money in their mattresses. Now people trust the banks and rarely see most of their “money” as they use it electronically.

    I just finished replicating my original blog (http://www.eclecticismo.com/hhblog) to WordPress.Com (at http://bloghh.wordpress.com) because I trust WordPress will be around for years to come and they have given me the capability to move my data if I ever desire to do so.

    Next up is my 35GB of pictures. Eventually I’ll move my real personal data when I find a vendor who has proven themselves in the market place.

    Have no doubt that “Cloud” computing will grow and become as common as turning on a light switch — the data will just be there no matter where you are in this world and one day in the Galaxy, then it will be “Space Computing.”

    Like

  10. I disagree with Dawnkey… “Cloud” computing is going to take hold just like the Internet. There have been several good takes on Cloud Computing over the past couple of weeks and the best analogy I’ve read is that people use to save their money in their mattresses. Now people trust the banks and rarely see most of their “money” as they use it electronically.

    I just finished replicating my original blog (http://www.eclecticismo.com/hhblog) to WordPress.Com (at http://bloghh.wordpress.com) because I trust WordPress will be around for years to come and they have given me the capability to move my data if I ever desire to do so.

    Next up is my 35GB of pictures. Eventually I’ll move my real personal data when I find a vendor who has proven themselves in the market place.

    Have no doubt that “Cloud” computing will grow and become as common as turning on a light switch — the data will just be there no matter where you are in this world and one day in the Galaxy, then it will be “Space Computing.”

    Like

  11. I hear this banking argument all the time and I think it’s bogus. If somebody takes your money, there is a trail. You will know it instantly and the bank will have to make good on it and give it back. Money is money. It doesn’t have to be the exact same money that they took, just the same amount.

    Data does not work like money. If somebody takes your information, like your business secrets and your social security number and your medical records, you may never know or find out years down the line when you’re adversely affected. And there is no good way to compensate you for the loss.

    If somebody suddenly comes out with a product or service very similar to the one you were designing using cloud computing, could you prove that somebody accessed your records? No. They could argue it’s a coincidence or that they got the information some other way.

    It’s not like banking at all, and everybody who makes this argument doesn’t understand how hard it’s going to be to get the mainstream public to trust the Cloud.

    Like

  12. I hear this banking argument all the time and I think it’s bogus. If somebody takes your money, there is a trail. You will know it instantly and the bank will have to make good on it and give it back. Money is money. It doesn’t have to be the exact same money that they took, just the same amount.

    Data does not work like money. If somebody takes your information, like your business secrets and your social security number and your medical records, you may never know or find out years down the line when you’re adversely affected. And there is no good way to compensate you for the loss.

    If somebody suddenly comes out with a product or service very similar to the one you were designing using cloud computing, could you prove that somebody accessed your records? No. They could argue it’s a coincidence or that they got the information some other way.

    It’s not like banking at all, and everybody who makes this argument doesn’t understand how hard it’s going to be to get the mainstream public to trust the Cloud.

    Like

  13. Same question (or issue) comes up when you think of the social graph… if I unfriend someone, we may still be friends forever in various places that scraped it during more amicable days. Pretty soon the social graph starts looking like a credit report, but with no real way to correct it.

    Like

  14. Same question (or issue) comes up when you think of the social graph… if I unfriend someone, we may still be friends forever in various places that scraped it during more amicable days. Pretty soon the social graph starts looking like a credit report, but with no real way to correct it.

    Like

  15. Robert, you’re wrong about Friend Connect data getting stale. It’s fetched directly from your linked Friend Data sources, including other Social Networks, with short-term caching on Friend Connect servers. There is a live two-way connection – Friend Connect posts back events to the Social Networks’ activity streams when the user choses to do so.

    Like

  16. Robert, you’re wrong about Friend Connect data getting stale. It’s fetched directly from your linked Friend Data sources, including other Social Networks, with short-term caching on Friend Connect servers. There is a live two-way connection – Friend Connect posts back events to the Social Networks’ activity streams when the user choses to do so.

    Like

  17. It just shows how important email addresses have become. They’re the new fingerprints. The expectation is that they’ll never change.

    Like

  18. It just shows how important email addresses have become. They’re the new fingerprints. The expectation is that they’ll never change.

    Like

  19. So facebook say that Google friend connect “redistributes user information from Facebook to other developers without users’ knowledge”.

    Erm, so what does Facebook Connect do, if it doesn’t do, oh, exactly that?

    Like

  20. So facebook say that Google friend connect “redistributes user information from Facebook to other developers without users’ knowledge”.

    Erm, so what does Facebook Connect do, if it doesn’t do, oh, exactly that?

    Like

  21. A subtle but important point is to distinguish between the types of data being shared/exported. There is a valid case about being in control of your own data. But some of the information created on a social network site is jointly owned. So people need to work within the terms of service, including application developers. Two posts that support what Facebook is doing:

    http://mikeg.typepad.com/perceptions/2008/05/facebook-is-cor.html

    http://mikeg.typepad.com/perceptions/2008/05/data-portabilit.html

    Like

  22. A subtle but important point is to distinguish between the types of data being shared/exported. There is a valid case about being in control of your own data. But some of the information created on a social network site is jointly owned. So people need to work within the terms of service, including application developers. Two posts that support what Facebook is doing:

    http://mikeg.typepad.com/perceptions/2008/05/facebook-is-cor.html

    http://mikeg.typepad.com/perceptions/2008/05/data-portabilit.html

    Like

  23. Wow. You can say this and not feel like a jerk?

    ” You can see him at the end of the event where I shoved my cell phone in his face and tried to get him to comment. He refused.”

    Of course he refused. You SHOVED A CELL PHONE IN HIS FACE.

    Like

  24. Wow. You can say this and not feel like a jerk?

    ” You can see him at the end of the event where I shoved my cell phone in his face and tried to get him to comment. He refused.”

    Of course he refused. You SHOVED A CELL PHONE IN HIS FACE.

    Like

  25. Facebook is well within its rights to block FriendConnect from harvesting friend lists/contacts. The question is definitely about privacy.

    On the other hand, minggl takes a users choice into consideration, as a user will install it if he is open to having his contact list shared. Flock does the same. And by installing Flock and then allowing it to access my Facebook, I choose to allow my data to be available in the way I wish it would be.

    The concept of privacy has 2 major parameters:: whose privacy and who controls what is to be shared…my 2 bits… its the users privacy which is important, and its got to be the users choice…

    On the other hand, if users want to import their contacts/friend lists across Social Networking Platforms, the platforms should provide tools to allow the same…but these should be used by the users, and not by other platforms …

    Like

  26. Facebook is well within its rights to block FriendConnect from harvesting friend lists/contacts. The question is definitely about privacy.

    On the other hand, minggl takes a users choice into consideration, as a user will install it if he is open to having his contact list shared. Flock does the same. And by installing Flock and then allowing it to access my Facebook, I choose to allow my data to be available in the way I wish it would be.

    The concept of privacy has 2 major parameters:: whose privacy and who controls what is to be shared…my 2 bits… its the users privacy which is important, and its got to be the users choice…

    On the other hand, if users want to import their contacts/friend lists across Social Networking Platforms, the platforms should provide tools to allow the same…but these should be used by the users, and not by other platforms …

    Like

  27. This is a highly thoughtful post. I also love Minggl. I like the fact that with Minggl you can message people at the same time across social networks (e.g. Facebook, Twitter), that means if you have different friends on different services that you want to reach in one message you can. I think that’s pretty neat – the integration is important (I don’t know if other services besides Minggl offer that yet, maybe they do but haven’t seen that). Anyway, I think Facebook stopping their data from Google Friend Connect is a major blow to Google Friend Connect. How social is your site if your Facebook friends are not included in your friends list? BTW, I think John Furrier is a great guy, I know him fairly well.

    Like

  28. This is a highly thoughtful post. I also love Minggl. I like the fact that with Minggl you can message people at the same time across social networks (e.g. Facebook, Twitter), that means if you have different friends on different services that you want to reach in one message you can. I think that’s pretty neat – the integration is important (I don’t know if other services besides Minggl offer that yet, maybe they do but haven’t seen that). Anyway, I think Facebook stopping their data from Google Friend Connect is a major blow to Google Friend Connect. How social is your site if your Facebook friends are not included in your friends list? BTW, I think John Furrier is a great guy, I know him fairly well.

    Like

  29. Robert—thanks for the love!! And I’d like to reword your “privacy is dead” to “privacy is portable”. Although we didn’t show you our “Privacy Filters” during our last demo/visit (still testing and polishing it), any content you put in Minggl will have the most granular, end-user specified privacy controls that you can imagine. And these privacy controls will follow your content (in the Minggl meta-layer) from site to site. In one example, privacy on your Facebook profile could use tags applied to your friend(s) on linkedin — http://www.minggl.com

    Like

  30. Robert—thanks for the love!! And I’d like to reword your “privacy is dead” to “privacy is portable”. Although we didn’t show you our “Privacy Filters” during our last demo/visit (still testing and polishing it), any content you put in Minggl will have the most granular, end-user specified privacy controls that you can imagine. And these privacy controls will follow your content (in the Minggl meta-layer) from site to site. In one example, privacy on your Facebook profile could use tags applied to your friend(s) on linkedin — http://www.minggl.com

    Like

  31. You can go around screen scrapping with RIAs. In fact I see this happening in the near future. With RIAs the information can be secured and visualized only by your RIA. The Minggl plugin would have to sniff at the VM level and break the encrypted content.

    Welcome to the DRM of social networking 🙂

    I think the solution is http://www.mesh.com. You should own your data and share it easily. It is in my devices, therefore I own it. And it is easy to share, but I own it and share what I want and use any application I want.

    Like

  32. You can go around screen scrapping with RIAs. In fact I see this happening in the near future. With RIAs the information can be secured and visualized only by your RIA. The Minggl plugin would have to sniff at the VM level and break the encrypted content.

    Welcome to the DRM of social networking 🙂

    I think the solution is http://www.mesh.com. You should own your data and share it easily. It is in my devices, therefore I own it. And it is easy to share, but I own it and share what I want and use any application I want.

    Like

  33. Data Portability… Sigh.
    I’m not agreeing or disagreeing with anyone here I’m just voicing my own opinions.

    If having data portability is such an important thing to someone then the simplest most effective way of doing so is using your own service to collect that data. Whether it is by having your own blog, personal website, forum or something similar that you own and have full access to. When you want the data, you simply open up your Database and pull out what you want. Quick and easy.

    You want more than 5000 friends, build a blog that supports more than 5000 friends, want a service that has reliable uptime, build a blog that sits on a good server, want to update your information about yourself in one location, login to your blog admin panel and update your information in one location. Simple

    Having the same discussion in 10 different places? Here’s an idea, start the discussion on your blog and discuss it there. The goal of almost all websites is to have visitors on your site and on remain on your site as long as possible, so having the discussion on your site in one location creates lots of traffic to those ads which your sponsors like to have on your site which equals more money for both. (Money isn’t everything so just having visitors would be worth it too even if not trying to increase revenue)

    But how do I get people to my site if I am not networking on Facebook, or MySpace, or twitter or all the hundreds of other social networks? Well it works the same way any other site does it like Digg.com, TechCrunch.com, Engadget.com etc. They write articles, they voice opinions, they engage their customers, it’s interactive, they have discussions they have enough quality content that people come back for more.

    Personally I don’t want someone to share my information from one site to another site, especially without direct permission from me, it’s just asking for trouble no matter how you look at it. Remember how when you sign up on different websites and they say “We do not sell or redistribute your information”? Well the reason for that is because I don’t want my information going places where I didn’t ask it to go. By sharing information through different social networks with or without permission throws the whole idea of protecting your information out the window.

    It’s plain and simple, you want data portability, you have to setup a location that you control, Facebook, Myspace, etc. are never going to give you full access to your information just like I can’t go to the bank and ask for everyone’s account numbers even though we are all in the same “social banking network”.

    Websites are businesses; businesses need traffic to increase revenue, releasing data to other services releases customers from sticking around your site which decreases traffic which decreases revenue.

    (Directed at everyone) Instead of spreading yourself across 50 different social networks where 90% of your followers are probably following you on the same 50 different social networks, how about focusing on your own blog or website where you control the data, the users, the information and the discussion and build it into a successful portal to share ideas and information on?

    Like

  34. Data Portability… Sigh.
    I’m not agreeing or disagreeing with anyone here I’m just voicing my own opinions.

    If having data portability is such an important thing to someone then the simplest most effective way of doing so is using your own service to collect that data. Whether it is by having your own blog, personal website, forum or something similar that you own and have full access to. When you want the data, you simply open up your Database and pull out what you want. Quick and easy.

    You want more than 5000 friends, build a blog that supports more than 5000 friends, want a service that has reliable uptime, build a blog that sits on a good server, want to update your information about yourself in one location, login to your blog admin panel and update your information in one location. Simple

    Having the same discussion in 10 different places? Here’s an idea, start the discussion on your blog and discuss it there. The goal of almost all websites is to have visitors on your site and on remain on your site as long as possible, so having the discussion on your site in one location creates lots of traffic to those ads which your sponsors like to have on your site which equals more money for both. (Money isn’t everything so just having visitors would be worth it too even if not trying to increase revenue)

    But how do I get people to my site if I am not networking on Facebook, or MySpace, or twitter or all the hundreds of other social networks? Well it works the same way any other site does it like Digg.com, TechCrunch.com, Engadget.com etc. They write articles, they voice opinions, they engage their customers, it’s interactive, they have discussions they have enough quality content that people come back for more.

    Personally I don’t want someone to share my information from one site to another site, especially without direct permission from me, it’s just asking for trouble no matter how you look at it. Remember how when you sign up on different websites and they say “We do not sell or redistribute your information”? Well the reason for that is because I don’t want my information going places where I didn’t ask it to go. By sharing information through different social networks with or without permission throws the whole idea of protecting your information out the window.

    It’s plain and simple, you want data portability, you have to setup a location that you control, Facebook, Myspace, etc. are never going to give you full access to your information just like I can’t go to the bank and ask for everyone’s account numbers even though we are all in the same “social banking network”.

    Websites are businesses; businesses need traffic to increase revenue, releasing data to other services releases customers from sticking around your site which decreases traffic which decreases revenue.

    (Directed at everyone) Instead of spreading yourself across 50 different social networks where 90% of your followers are probably following you on the same 50 different social networks, how about focusing on your own blog or website where you control the data, the users, the information and the discussion and build it into a successful portal to share ideas and information on?

    Like

  35. I am not sure why people give up on privacy so fast. I think right now is the best time to discuss this and propose solutions! Of course there will always be some way to connect the dots about people but it shouldn’t be that trivial.

    Where is the problem to come up with protocols which allow only those data exposed to those people I wish it to be exposed to?

    I would like people to collect some use case examples where you want to share data in a controlled way. One example would be those many people in Second Life who want their identities being separate from their RL. That’s of course possible in that you simply have 2 facebook accounts, 2 twitter accounts etc. It just does not make sense. Behind the scenes you still would like to copy data over in an easy way. You need to authorize access of course.

    So I would rather like to see the start of a debate on how we can preserve privacy instead of seeing statements like “privacy is dead”. The main problem I see more is that right now most data is publically viewable on most systems and this has to change. Put OAuth in front etc. and give the user control.

    Like

  36. I am not sure why people give up on privacy so fast. I think right now is the best time to discuss this and propose solutions! Of course there will always be some way to connect the dots about people but it shouldn’t be that trivial.

    Where is the problem to come up with protocols which allow only those data exposed to those people I wish it to be exposed to?

    I would like people to collect some use case examples where you want to share data in a controlled way. One example would be those many people in Second Life who want their identities being separate from their RL. That’s of course possible in that you simply have 2 facebook accounts, 2 twitter accounts etc. It just does not make sense. Behind the scenes you still would like to copy data over in an easy way. You need to authorize access of course.

    So I would rather like to see the start of a debate on how we can preserve privacy instead of seeing statements like “privacy is dead”. The main problem I see more is that right now most data is publically viewable on most systems and this has to change. Put OAuth in front etc. and give the user control.

    Like

  37. “privacy is dead” – but if you look at google webmaster guidlines it’s alive and well.
    as soon as you remove the personal aspects name, addy, you become a stat.
    privacy is not ‘dead’, it’s had a boob job and a face lift and is probably selling more units than ever
    🙂

    Like

  38. “privacy is dead” – but if you look at google webmaster guidlines it’s alive and well.
    as soon as you remove the personal aspects name, addy, you become a stat.
    privacy is not ‘dead’, it’s had a boob job and a face lift and is probably selling more units than ever
    🙂

    Like

  39. I agree about privacy being a good cause to fight for, even if it might be a losing battle at this point. Maybe part of the reason Facebook is trying to do this is to protect its customer base. Maybe the reason they care is because many customers, like the founders once were, are in college. There’s a lot of things posted that aren’t necessarily great for other people in the future to see.

    Like

  40. I agree about privacy being a good cause to fight for, even if it might be a losing battle at this point. Maybe part of the reason Facebook is trying to do this is to protect its customer base. Maybe the reason they care is because many customers, like the founders once were, are in college. There’s a lot of things posted that aren’t necessarily great for other people in the future to see.

    Like

  41. What you is missing is that the end user is who should choose to control his data, not Facebook. And this choose should also be given to all his friends.

    The approach that Facebook should have with Friend Connect is to ask the user and his friends if he wants to make his data portable. If he wants, who is Facebook to stop it?

    Like

  42. What you is missing is that the end user is who should choose to control his data, not Facebook. And this choose should also be given to all his friends.

    The approach that Facebook should have with Friend Connect is to ask the user and his friends if he wants to make his data portable. If he wants, who is Facebook to stop it?

    Like

  43. I find this all ridiculous.

    1. Facebook got its start by ripping personal content from other web sites. It’s hypocritical if they really think others shouldn’t try to do the same thing to them. Far more likely it’s just an effort to protect mindshare and revenue that’s behind their complaints.

    2. Minggl shows just how futile it is for Facebook to complain.

    3. Of course Facebook isn’t private. Duh!

    4. We’ve known for a good long while now that e-mail and other Internet traffic isn’t private.

    There’s no news here. Let’s all move along now.

    Like

  44. I find this all ridiculous.

    1. Facebook got its start by ripping personal content from other web sites. It’s hypocritical if they really think others shouldn’t try to do the same thing to them. Far more likely it’s just an effort to protect mindshare and revenue that’s behind their complaints.

    2. Minggl shows just how futile it is for Facebook to complain.

    3. Of course Facebook isn’t private. Duh!

    4. We’ve known for a good long while now that e-mail and other Internet traffic isn’t private.

    There’s no news here. Let’s all move along now.

    Like

Comments are closed.