Risk
6/26/2013
12:41 PM
Kevin Casey
Kevin Casey
Commentary
50%
50%

Online Privacy: We Just Don't Care

Facebook leaked your data (again). Big Brother's watching everyone and everything. And Google is testing a "service" that sounds like you providing them a list of everything you own.

Maybe Mark Zuckerberg was right when he said, way back in 2010, that people just don't give a you-know-what about their privacy online.

The Facebook founder didn't quite put it that way. But he came close: "People have really gotten comfortable not only sharing more information and different kinds, but more openly and with more people," Zuckerberg said, soon after Facebook had drawn ire for making changes to its privacy settings.

The subtext, as U.K. newspaper The Guardian said at the time, was clear. It was also a bit of circular reasoning: The popularity of social sites like Facebook means that people no longer expect privacy on social sites like Facebook. "That social norm is just something that has evolved over time," Zuckerberg said.

"Devolved" would have been the better word choice.

Fast-forward to last Friday afternoon at 4:50 ET, when Facebook quietly copped to a previously undiscovered bug that may have publicly exposed the private contact information of 6 million users. The note begins: "At Facebook, we take people’s privacy seriously... ."

The announcement's timing is worth noting. Companies don't share news that they want people to pay attention to just before happy hour on a Friday -- and definitely not on the first day of summer.

The Huffington Post ran a thorough and rather entertaining dissection of Facebook's communications strategy. That strategy appears to have worked: On the grand and growing scale of online data breaches and privacy brouhahas, Facebook's prior episodes among them, this one barely generated a yawn.

[ Would you share information about your belongings with Google? Read Google Mine Wants To Track Your Stuff. ]

That might have something to do with bigger-picture timing: The latest data breach came right on the heels of The Washington Post's report that both the National Security Agency and FBI have direct lines to the servers of nine major internet companies -- Facebook among them. Hey, what's a few million leaked phone numbers and email addresses when the government has unfettered access to just about everything we do online?

Even with the Prism revelations, a funny thing happened: While there was a predictable amount of handwringing and media debate, the general response seemed more like a large collective shrug. In fact, I think that was my actual reaction -- a shrug. It was more unsurprising than unsettling. Hey, waddyagonnado?

Half of Americans actually approve of the practice, according to recent Pew Research polling. There was no mass exodus of users from Facebook, Skype, or any other technology company on the Prism list -- nor Dropbox, which got a "Coming Soon" pass in the story. We didn't all relocate to abandoned industrial parks and go off the grid like Gene Hackman in "Enemy of the State." (That movie and its fictional NSA paranoia came out in 1998, by the way.) We probably didn't even re-check our privacy settings in our favorite online services. We talked about it. Made jokes about it, even. But we seem more fascinated with Edward Snowden's catch-me-if-you-can flight than the actual implications of what he brought to light. We've already gone on about business and lives. Fuggedaboutit.

Is there any virtual line in the sand when it comes to online privacy? Is there any limit to what we'll share "openly and with more people" than ever before, as Zuckerberg put it? It doesn't seem so.

Previous
1 of 2
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
micjustin33
50%
50%
micjustin33,
User Rank: Apprentice
1/11/2014 | 4:54:34 AM
Online Privacy: We Just Don't Care
According to news by Forbes, teens in the US really care about their privacy, which comes as a surprise to many.

The web of social networking spun by Mark Zuckerberg has quickly spawned around the world to engulf a substantial majority of internet users.

I would also share 10 Things about Facebook That Affect Your Internet Privacy!
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2010-5075
Published: 2014-12-27
Integer overflow in aswFW.sys 5.0.594.0 in Avast! Internet Security 5.0 Korean Trial allows local users to cause a denial of service (memory corruption and panic) via a crafted IOCTL_ASWFW_COMM_PIDINFO_RESULTS DeviceIoControl request to \\.\aswFW.

CVE-2011-4720
Published: 2014-12-27
Hillstone HS TFTP Server 1.3.2 allows remote attackers to cause a denial of service (daemon crash) via a long filename in a (1) RRQ or (2) WRQ operation.

CVE-2011-4722
Published: 2014-12-27
Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation.

CVE-2012-1203
Published: 2014-12-27
Cross-site request forgery (CSRF) vulnerability in starnet/index.php in SyndeoCMS 3.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that add user accounts via a save_user action.

CVE-2012-1302
Published: 2014-12-27
Multiple cross-site scripting (XSS) vulnerabilities in amMap 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data_file or (2) settings_file parameter to ammap.swf, or (3) the data_file parameter to amtimeline.swf.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.