“Over the Top and Unworkable”

Well, that’s good news, isn’t it? πŸ™„

Facebook, Bebo and MySpace ‘to be monitored by security services’

The private correspondence of millions of people who use social networking sites could be tracked and saved on a β€œbig brother” database, under new plans being drawn up by the UK government.

Ministers revealed yesterday that they were considering policing messages sent via sites such as MySpace and Facebook, alongside plans to store information about every phone call, e-mail and internet visit made by everyone in the United Kingdom.

There was immediate uproar from opposition parties, privacy campaigners and security experts who said the plans were over-the-top and unworkable.

Yeah. Maybe so.

Your Stuff on Facebook

So you have a Facebook account.

What rights do you have regarding what you post (comments, photos, and such)?

I don’t know.

But according to what this fellow found in their terms of use…

…putting any of your work up on Facebook you are giving them carte blanche to use your photos, artwork or writings for anything they want including, advertising, promotion etc…

So they’re excluded from any copyright protections, eh?

In my view, chalk up another negative in the Facebook column.

HT: Dunker Journal

Facebooker, Beware

At least be careful.

Well, at least, make sure you have up-to-date anti-virus software on your computer(s).

Destructive Koobface virus turns up on Facebook

Facebook’s 120 million users are being targeted by a virus dubbed “Koobface” that uses the social network’s messaging system to infect PCs, then tries to gather sensitive information such as credit card numbers.

It is the latest attack by hackers increasingly looking to prey on users of social networking sites.

[…]

McAfee warned in a blog entry on Wednesday that its researchers had discovered that Koobface was making the rounds on Facebook.

[…]

“People tend to let their guard down. They think you’ve got to log in with an account, so there is no way that worms and other viruses could infect them,” Boyd said.

[…]

McAfee has not yet identified the perpetrators behind Koobface, who are improving the malicious software behind the virus in a bid to outsmart security at Facebook and MySpace.

Alternate solution: Cease and desist from using Facebook.

And that’s my best offer. πŸ˜†

WWW: Wild Wild Web

I use the Internet.

I depend on the Internet.

But I’m very wary of it. Or if not of it, of the way it can be used and is used by people (as individuals, as corporations, as governments, as other people groupings).

So three headlines caught my attention earlier this morning:

Congress studies how people track your online use

Executives from major Internet players β€” Microsoft Corp., Google Inc. and Facebook Inc. β€” are due for a grilling about online privacy in a Senate committee Wednesday, but the company likely to get the most scrutiny is a small Silicon Valley startup called NebuAd Inc.

NebuAd has drawn fierce criticism from privacy advocates in recent weeks for working with Internet service providers to track the online behavior of their customers and then serve up targeted banner ads based on that behavior.

[…]

“This is analogous to AT&T listening to your phone calls all day in order to figure out what to sell you in the middle of dinner,” said Robert Topolski, a technology consultant to Public Knowledge and Free Press, two other public interest groups that have raised concerns about NebuAd.

[…]

Besides NebuAd, Wednesday’s hearing in the Senate Commerce Committee may also examine Facebook’s “Beacon” monitoring tool, which tracked online purchases made by Facebook members and sent alerts to their friends on the site.

For the record: Congressional hearings don’t rank highly with me either. πŸ™‚

Anyway, I’ll say it again: Trusting the Web to maintain privacy requires the willing suspension of disbelief.

OK, on to Story Number Two:

Internet flaw could let hackers take over the Web

Computer industry heavyweights are hustling to fix a flaw in the foundation of the Internet that would let hackers control traffic on the World Wide Web.

Major software and hardware makers worked in secret for months to create a software “patch” released on Tuesday to repair the problem, which is in the way computers are routed to web page addresses.

“It’s a very fundamental issue with how the entire addressing scheme of the Internet works,” Securosis analyst Rich Mogul said in a media conference call.

“You’d have the Internet, but it wouldn’t be the Internet you expect. (Hackers) would control everything.”

The flaw would be a boon for “phishing” cons that involve leading people to imitation web pages of businesses such as bank or credit card companies to trick them into disclosing account numbers, passwords and other information.

Attackers could use the vulnerability to route Internet users wherever they wanted no matter what website address is typed into a web browser.

[…]

On Tuesday the US Computer Emergency Readiness Team (CERT), a joint government-private sector security partnership, issued a warning to underscore the serious of so-called DNS “cache poisoning attacks” the vulnerability could allow.

[…]

“Consequently, web traffic, email, and other important network data can be redirected to systems under the attacker’s control.”

[…]

Automated updating should protect most personal computers. Microsoft released the fix in a software update package Tuesday.

[…]

Hackers using the vulnerability to attack company computer networks would also be able to capture email and other business data.

And “they” want me to trust the Internet for data storage and data back-up?! Ha!

And “they” think I’m paranoid for warning even about plain ole email communications?! Hmph!

And “they” still think I’m a TechnoPetriefied Kook. Fine. Here’s Story Number Three:

Google ventures into virtual reality with ‘Lively’

…Google Inc. hopes to orchestrate more fantasizing on the Web.

[…]

Google thinks Lively will encourage even more people to dive into alternate realities….

The Lively application already works on Facebook, one of the Web’s hottest hangouts, and Google is working on a version suitable for an even larger online social network, News Corp.’s MySpace.

[…]

Lively’s users will be able to sculpt an avatar that can be male, female or even a different species. An avatar can assume a new identity, change clothes or convey emotions with a few clicks of the mouse.

The service also enables users to create different digital dimensions to roam, from a coffeehouse to an exotic island. The settings can be decorated with a wide variety of furniture, including large-screen televisions that can be set up to play different clips from YouTube.com, Google’s video-sharing service.

Lively users can then invite their friends and family into their virtual realities, where they can chat, hug, cry, laugh and interact as if they were characters in a video game.

As a precaution, Google is requiring Lively’s users to be at least 13 years old β€” a constraint that hasn’t been enough to prevent young children from running into trouble on other social spots on the Web.

“As a precaution…” — oh, please!

Anyway, Lively is further good news for those wishing to exploit and expand the depravity of man. Stay away from it!

OK, now you may virtually stick your virtual head back in the virtual sand.

Another Security Lapse

This time at Facebook — Security Lapse Exposes Photos:

A security lapse made it possible for unwelcome strangers to peruse personal photos posted on Facebook Inc.’s popular online hangout, circumventing a recent upgrade to the Web site’s privacy controls.

The Associated Press verified the loophole Monday after receiving a tip from a Byron Ng, a Vancouver, Canada computer technician. Ng began looking for security weaknesses last week after Facebook unveiled more ways for 67 million members to restrict access to their personal profiles.

But the added protections weren’t enough to prevent Ng from pulling up the most recent pictures posted by Facebook members and their friends, even if the privacy settings were set to restrict the audience to a select few.

After being alerted Monday afternoon, Facebook spokeswoman Brandee Barker said the Palo Alto-based company fixed the bug within an hour.

So how many millions of lines of code does it take to run Facebook? And how many more bugs might there be, waiting to be discovered?

Here are a few more paragraphs from the above story:

The latest lapse serves as another reminder of the perils of sharing sensitive photos and personal information online, even when Web sites pledge to shield the information from prying eyes.

Before the fix, Ng’s computer-coding trick enabled him to find private pictures of Paris Hilton at the Emmy awards and of her brother Barron Nicholas drinking a beer with friends and photos of many other people who hadn’t granted access to Ng.

[…]

Despite the risks, more people than ever — especially teenagers and young adults — are publishing personal photos and other intimate details about their lives on the Internet.

News Corp.’s MySpace.com, the only online social network larger than Facebook, suffered a security breach that exposed its members’ private photos earlier this year.

And don’t forget about the security breach an Gmail. And plenty of other sites. (I wonder how long till we hear of a breach at Carbonite or some other online storage site.)

My urgent advice: Use the Internet (Web, email, chat, IM, storage, etc) as though it weren’t private and secure.

Above all, love God!