Using Friend Lists for Facebook Privacy

Facebook Security Logo - Source: allfacebook.comIn my previous post, I walked you through setting up your Facebook application security settings to prevent apps from taking your personal information, using it how ever they wanted, and even impersonating you on Facebook. Properly configured application setting will help prevent leaking your personal information behind the scenes, and properly configured Facebook profile security settings helps prevent it from being leaked to the public at large. But sometimes, there are certain things that certain people should not be allowed to see. Maybe you have some co-workers on your friend list, and you like to complain about work in your status updates; maybe you have a creepy ex and don’t want him/her or any of their friends to see any pictures of your new love interest; maybe you have an estranged family member you don’t wish to talk to any more, but not adding them as a friend would bring nothing but turmoil to family gatherings. There’s a way to segregate out those people and limit which services they have access to. It’s called Friend Lists.

Setting up a Friend Lists

Account > Edit Friends

First thing you need to do is get on the Edit Friends page by clicking on the Account menu in the top-right corner of the Facebook site, and then on Edit Friends.

Once there, on the left-hand side you may notice a list of menu items: Friends, Phonebook, Find Friends, Invite Friends. Right in the middle of that list is where your Friends Lists will appear…like the one for the-spot.net in this image.

When we’re all done setting them up, you could have a list similar to my actual Friends Lists in the image below. I’ve segregated all of my friends into various lists describing where I first met them or my relationship to me. I have avoided putting people in more than 1 list. If they are in more than one list, and you restrict one of those lists, the results of the restrictions could behave unexpectedly.

Creating a Friend List

In the middle of the page, you’ll find a list of all your friends (probably defaulted to “Recently Interacted”). Just above it you’ll find a drop-down menu to filter the friends based on certain criteria (all, by city, recently interacted, and lists). There’s also a dynamic filter search box – as you start typing a name in it, your friends list is automatically reduced to the names that fit what you’ve typed. Above those is the Create List button.

  1. Click the “+ Create a List” button.
  2. Type a name in the Enter a name box.
  3. Start selecting friends. Each one you click will turn blue. You can also type a name in the box to do a quick filter to find a particular friend.
  4. Click Create List.

In my example, I’ve created a list called “Fans of tsn.”

Do this for as many different types of segregation you want amongst your groups of friends. If you’ve forgotten someone while searching through your lengthy friends list, you can hover over them and click the Edit Lists button, and then add them right there (as in the image below). You will also be able to add people to your lists when you’re responding to or requesting Friend Invitations.

Using Friend Lists as Privacy Settings

Once you’re done and you’ve got your lists, let’s put them to work on your privacy. Go to your Account > Privacy Settings page, and then click on the Customize Settings link below the Sharing on Facebook section.

On the Customize Settings page you’re presented with drop-down menus for the features list that we set to Friends Only when we configured your Facebook Profile Privacy Settings, as well as some things that others share related to you, and your contact information.

To make use of your new Lists, click the drop-down menu for the feature, and choose Customize. We’ll do Status Updates and Posts, for example.

This will give you a popup window with two options:

  1. Who, in the world, should this be visible to…
  2. Within that group of people, who should not be able to see it.

You might also see something like the image below, asking you about your Networks as well…

That goes back to the original intention of privacy. We only want our friends, not people who live in the same town, or go to the same school…leave them unchecked.

In the blocking area, you can use the Lists you’ve made, or individual friends from your global friends list…just start typing the name of the list or friend, and choose from the dynamic drop-down.

One example for this type of setup would be “Friends Only” can see my status updates, unless they are also on my CoWorkers List. Another would be “Friends Only”, except for your ex, Blake Smith.

Do this for all the ones you wish to hide from certain people. If you find yourself blocking the same group in every single feature, you might as well unfriend everyone in that group, and if they ask about it, and let the chips fall where they may. Most people won’t bring it back up, or even notice, unless they are constantly checking your profile – which is creepy anyway.

When you’re done, your feature menu will look something like this:

You can also use these lists to edit your Photo Albums’ Privacy as well, by clicking the Edit Album Privacy for existing photos link at the bottom of the page…

Once there, you’ll see a list of all your photo albums, and a similar drop-down menu as the features. Just click on it, choose Customize, and change the visibility settings.

Completed Configuration Example

Below is my entire configuration on my personal account. I have a Work list with all my coworkers on it, and I have blocked them from seeing anything that I post on Facebook as a status update. They have access to things like these blog posts through Facebook Pages I’ve created for my instructional websites. But my personal updates and thoughts are only broadcast to my friends. If the time comes that I change jobs, I’ll swap all of my coworkers out to my DFW (new skool) list and put my new coworkers into the list. If I start having problems with some people not currently blocked, I just create a new list and block them…but that hasn’t happened to me personally.

 

Conclusion of Facebook Friend Lists

Now that you’ve learned how to segment your friend lists into groups, and assign those groups permissions or restrictions, there shouldn’t be a time when you think to yourself “man I wish I could block that person from seeing stuff about me, without unfriending them.” Keep in mind, though, the reality of the internet: nothing is private. There’s nothing to stop the one person who is blocked from going over to a mutual friends’ house and still seeing what was previously blocked from them. If you find yourself posting something that would be devastating for them to see, you probably shouldn’t post it online. If you think you have mutual friends or connections to any of the blocked person’s friends/family members, then you should either block them all, unfriend them, or just not post the material online.

In my case, I have blocked my coworkers and non-friends from easily seeing my updates on Facebook, but those same updates are available elsewhere online. The reason the coworkers are blocked is less about the content and more about the frequency and that I don’t sit on Facebook all day, but rather I syndicate my updates from Twitter. If they found the updates, it wouldn’t be that big a deal for them to read; it’s more of an image thing.

If you’re posting things online that could hurt your image (photos with red SOLO cups, alcoholic beverages, profanity, obscene language, bitching & moaning about individuals), and want to hide that, you probably shouldn’t post it online, due to the content. But if you’re posting photos of your family or things, and are trying to block people to avoid harassment, that is an acceptable use.

The next post I’ll cover how to tell if some Facebook application or link or post is a scam or phishing attack, what those phrases mean, and how to protect yourself.

Technorati Tags: , , , , , , , , , , , , , , ,

My favorite Google Chrome OS extensions

Google Chrome OS Logo - Source: doobybrain.comWith another round of Google Chrome OS laptops coming out today, I figured I’d compile a list of my favorite extensions from the past 2 months that I’ve had my Cr-48 in daily use. I don’t do a whole range of diverse things on the internet – I mainly keep on top of my facebook account and blog. I post my updates through Twitter and they get syndicated everywhere else. Meanwhile, I do web development, and store my files in the cloud using Mesh and DropBox. Hopefully some of these extensions seem useful to you.

Internet Browsing extensions

  • Adblock Plus for Google Chrome (beta) – Just like in Firefox, it blocks ads. There is the ABP stopsign in the omni-box next to the Favorite-Star that you can use to turn it on/off or create a filter.
  • Flashblock – Does what it says on the tin…and more. This extension blocks all types of Flash/Shockwave media files as well as Silverlight. There’s no visible toggle switch aside from turning the extension on and off or clicking the blocked flash object in question to activate it (as long as it’s visible). To whitelist a whole site (in the event that it is blocking invisible flash objects) press CTRL + SHIFT + F.

Communications

  • Google Talk – Allows you to chat with a fixed Google Chat window inside of the Chrome browser.
  • Meebo.com – A uber-service IM web-based app for any of your conceivable IMing needs.
  • Trillin.im – My favorite Multi-Service IM application, in web-based version, with cloud sync for contacts, logs, and other settings.

Social Networking / Sharing

  • Bit.ly – Adds a button to the browser that shrinks the active page’s url and puts it in a box ready for you to share. Social Account toggles appear on the window for granular sharing.
  • Facebook for Chrome – Adds a notification button to the browser, that shows a red number when you have new notifications (mail, reactions, invitations, etc). When clicked, it opens a tabbed view of your Wall, News Feed, Notification list, and Messages, as well as ability to update your status. Also includes Facebook Chat capabilities
  • Seesmic Web – A one-stop app for all your social networking needs. Switch to the Black UI to save some battery power.
  • WordPress Comments Notifier – Useful for bloggers who want to stay on top of their blog comments. I decided to install this in light of my intention to bring this blog back to life. Ironically, with the frequency I check my blog (out of SEO curiosity for traffic sources based on search terms) I don’t have to worry about many unapproved comments sitting around for very long. Plus it makes a handy shortcut to the blog.

Games

  • Entanglement – Included in the first version of the Google Chrome OS laptops, this is a fun, time-passing, connect the lines mental game.
  • Qbox – A challenging mental game where you have to unscramble the letters of an insightful quote from someone historic.
  • Sinuous – A simple, addicting game. Avoid crashing into the red dots by moving your mouse around the screen. The longer you last, the faster and more abundant the dots become. Pick up the power-ups along the way to last longer.

Living in the Cloud

  • Aviary – A layer-based, Photoshop-like web-based image editor/creator.
  • DeviantArt muro – Web-based paint-like graphics app that lets you draw right on the webpage, and save them to load for later. It’s a super-advanced graphics app, compatible with several types of hardware input devices.
  • DropBox – Adds a button to the browser that, when clicked & authenticated, shows you a directory listing of your DropBox shares and their contents. When you click on the interested file, it opens in the browser (provided it is allowed). Useful for text-based files, images, and media.
  • Full Screen Weather – Based on data from WeatherUnderground.com, this full-screen weather app uses the location-awareness built into Chrome to determine your location (if allowed) and then overlay current weather conditions on a scalable/movable full-screen Google Maps frame.
  • Google Calendar Checker Plus – If you’re all sync’d up in Google Calendar, this extension keeps it all in the forefront of your mind. On the browser button it shows the timeframe for your next appointment (5m, 2D, 1w, etc). On hover, it shows what/when the next appointment is. On click, it loads the actual calendar, based on the options you’ve set in the extension settings. The plugin also has toaster alerts for events, and the ability to create new events inside the popup-calendar.
  • Google Voice – The browser button shows the number of new items waiting for you. On click, the ability to send text messages or place calls right from your browser and view your inbox, where you can clear items from the notifications with a click their message body or archive/delete them.
  • Grooveshark – Similar to the late Anywhere.fm and iMeem, Grooveshark lets you listen to whatever song you can search for on the internet, create your own music collection, or stream their pre-made radio stations.
  • Picknik – Made popular as Flickr’s web-based photo-editing application of choice, you can get this photo editor as an app for your chrome browser as well.

Web Development

  • Firebug Lite for Google Chrome – Adds a browser button that creates a frame similar to the appearance of the Firefox extension, but with a little less functionality. Still helpful to see what files are being called, and viewing their contents/locations.
  • FTP Free – If you haven’t made the switch to a cloud-sync’d file storage, and rely on FTP access, then this is the extension for you. FTP functionality, right in your browser. Just configure the server connection/creds and go.
  • SourceKit – This was my solution from a previous post, that I mentioned I’d write more about when it was completed. The last time I checked, they had gone from a non-functional version, to one that works, but has some minor cosmetic issues that make it nearly unusable. Once it is finished though, it will be a powerful DropBox-syncing code editor, using the Bespin (now ACE) web-based HTML5 editor.
  • TextDrop – A simple web-based DropBox-syncing text editor. More details can be found here.
  • Web Development Toolbar – A popup window-based version of the toolbar extension in Firefox. Useful for web developers and designers in all areas of CSS, HTML, JavaScript, and anything else you can find in a webpage.

Technorati Tags: , , , , , , , , , , , , , , , , , , , ,

Configuring your Facebook Application Security Settings

Facebook Security Logo - Source: allfacebook.comAfter you have properly configured your Facebook profile privacy settings, the next hole to plug is one that most people forget about: Facebook Applications. If you’re not careful, you could easily wind up giving away permission to all your personal information on Facebook, or even your username and password itself. We’re going to put a stop to that, right now.

Configuring Facebook Application Security

One of the lures of Facebook that attracted people away from MySpace (aside from the lack of smiley ads and whoring out of everyone who ever picked up a musical instrument) is the applications. Whether you realize it or not, applications first appeared on Facebook around 2006, but didn’t take off until 2007. And if you didn’t realize it has been that long, then chances are you don’t realize you may have residual applications still sucking down your personal information. You may also be unaware that the application you just installed to “see how many people viewed your Facebook profile” or “see what my first status update was” or any of the “OMG you have to click this link to see [insert something outrageous]” were actually scams. Now it’s time to clean up all that crap you’ve installed on your Facebook profile.

Privacy Settings > Application Security Settings

Open up your Privacy Settings (as in the image above) and then locate the “Edit your settings” link in the Apps and Websites area…

Facebook Privacy Settings: Apps and Websites

Once you’re inside of the Applications Settings area, you should see something like the image below, which lists all the different application settings available to configure. We’ll start with the Red box, “Apps you use” > Edit Settings button…

Facebook Privacy: Applications and Websites settings

Facebook Privacy > Apps and Websites > Apps you use

Click on the Edit Settings button for the “Apps you use” section (the red box in the image above) and you should see a list of all the apps you’ve ever given access to your information in the past, and haven’t yet removed. It should look something like this…

If you want to see what information each individual application has access to, you can click the Edit Settings link for that application, and take a look. The Ping.FM app looks like this…

There are a couple rules of thumb you could use to figure out which applications to remove, and which ones to keep.

  1. Do I actively use this application, on a more-than-monthly basis? Basically, if you don’t constantly need this application in order for your Facebook experience to stay in tact (i.e. pulling your twitter updates, posting your RSS feed from your blog as notes, updating via Ping.FM, etc) then you probably don’t need to keep it installed. This will probably get rid of the majority of your applications that are just sitting there sucking up your personal information.
  2. Did this application complete its purpose? Was the app used to collect your status updates for the year, find out your Aura’s Color, or some other thing that you had to install it once, and got one result, and never touched it again? If so, you don’t need this application to linger around – it has served its purpose.
  3. Did this application fail to complete its purpose? Was the app originally for something like adding a Dislike button, or showing your profile views, or finding your biggest Facebook stalkers…but never actually gave you accurate information or came through with its end of the deal? Then the app was a phony, and was created for the sole purpose of collecting information about you, and you should have deleted it the day you installed it and it failed.
  4. Do you remember even installing this application? If you don’t even remember installing it, remove it. Don’t convince yourself of the fallacy “I don’t know what it is, so I better keep it in case I need it.” This isn’t like Computer Software – if you end up needing the app sometime in the future, then the app will make you reinstall it again.

To remove the applications:

  • Just click the little X icon for each one.
  • It will ask you if you really want to remove the app, and then click Remove.
  • It will take a few seconds, and then come back with a confirmation. Click Okay.
  • Then move on to the next one.

Once you’ve paired down all the applications to just the ones you want/need to keep, we can move on to the next Apps and Websites Setting, “Info accessible through your friends“.

Facebook Privacy > Apps and Websites > Info accessible through your friends

If you recall, in the Ping.FM application image above, there is a section called “Access my friends’ information“. This Settings page is where you limit the information that your friends’ applications can access about you. When you click Edit Settings for the “Info accessible through your friends” you will get a window full of check boxes where you can uncheck anything you don’t want your friends’ applications to be able to get. Personally, I only want them to know about my website – the more traffic it gets, the more people I can help with information like this. Here’s what I have set mine to…

In the early days of Facebook applications, some clever developers would take your friends profile photos, and then use some code to display their photo and claim they were using the app also, or that they scored X points on this game, or other false information to get you to continue using their application. Personally, I don’t want any of my information to be available to anyone other than my human friends, and only outside of applications.

Facebook Privacy > Apps and Websites > Game and App Activity

There really isn’t much to this section. Just set it to Friends Only to limit all your game playing and other activity (Youtube Favoriting, etc) to just your friends.

Facebook Privacy > Apps and Websites > Instant Personalization

This setting is directed at a particular set of websites. At the moment, according to Facebook’s Instant Personalization page, those websites include:

WARNING: Once you visit one of these websites, they will AUTOMATICALLY show up in your “Apps You Use” section.  You will have to go remove them if you do not want them to continue to have access to your information.

The purpose of this feature is to display the public activity of your friends, with respect to the particular website you’re visiting from the list. For example, if you visit Rotten Tomatoes, any of your friends’ public activity relating to the Rotten Tomatoes website will be displayed in the designated section. In order for this to happen, the website must automatically install their application as soon as you visit the site, assuming you’re enabled “Instant Personalization“. Conversely, if you have this feature enabled, any of your public activity on this website will be visible to your friends when they visit the site as well. According to the description on the Instant Personalization page, this is limited to only the information you have set to be visible to “Everyone“.

If you followed the instructions in the previous “Privacy’s a Joke” post, “Configuring your Facebook Profile Privacy Settings” then there is a pretty good chance that you do not have anything set to “Everyone“. As this is an exercise in privacy, we’re going to disable this feature.

  1. Click the “Edit Settings” button for Instant Personalization
  2. Close the popup video window.
  3. At the bottom of the page, uncheck the “Enable instant personalization on partner websites” checkbox.
  4. Click the Confirm button in the popup window
  5. Then click the Back to Apps button in the top left to go back.

Facebook Privacy > Apps and Websites > Public Search

The last setting to modify is the Public Search. If you followed the ”Configuring your Facebook Profile Privacy Settings” post, and didn’t leave anything set to “Everyone” then you’re set.

This feature tells search engines whether or not to show a preview of your profile in their search results. When you click the Edit Settings button, there is a See Preview link to see a preview of your information if the feature was enabled.

Generally, if you’re concerned about keeping your personal information private, then ensure that the checkbox is cleared for Enable Public Search and you’re all set.

Part 2 Conclusion

Hopefully you’ve gone through all the various sections described here, and prevented your personal information from leaking out behind the scenes and without your knowledge. Now that you’ve locked up your information from prying eyes on the outside, and from prying eyes behind the scenes, the next post will show you how to lock it up from prying eyes on the INSIDE.

Not everyone on your friends list is the friend you think they are. Do you really keep 200, 300, 500, 1000 different people at the forefront of your thoughts every day? Probably not. There’s a good chance that some people are just lurking around benignly watching what you’re doing. Other people you may have to work with every day, but can’t post updates on the internet because they’ll read it and you might offend them. Still others may comment on your photos, or updates, or notes and say stupid stuff all the time, and you just wish they couldn’t even see them in the first place. Grouping up these sets of people, and using these groups for more granular control of your information is what I’ll cover in the next post: Friends Lists.

Technorati Tags: , , , , , , , , , , , , , , ,

Configuring your Facebook Profile Privacy Settings

Facebook Security Logo - Source: allfacebook.comBy design, Facebook was created to let people share information with their friends. In the beginning, you had to have a school email address that was configured for the site, and so did your friends if they wanted to join. If you changed schools, you had to wait for that one to be added. If your friend changed schools, they had to wait. And the only way you could add friends from other schools is if one of the people you knew at that school had joined, so you could be linked together.

I found this was the case when I left ETBU and joined UT, and then had to wait for ETBU to be added to the Facebook list of schools…and then wait for someone I knew at ETBU to join Facebook, and then add based on their friends list, and that person’s friends’ friends list. One individual opened up my network from just a hand full of people, to several hundred, because I was able to view that person’s friend list and branch out from there. And that was back when privacy was at the forefront of the design of Facebook.

That is no longer the case today. Now, you have to take an active role in how you protect your information from people you don’t know, or who aren’t directly linked to you. This blog post will describe the steps I have taken to lock up my Facebook account so that my real information is not visible to anyone I don’t know in real life. So let’s get started…

Privacy Settings: Everyone

Before applying any settings, the default display of information is something like this…

Privacy Settings: Everyone

This is what your profile would look like if someone came upon your facebook.com/username or facebook.com/profile.php?id=###### page. Just take a look at the information it shows…all of your Likes, a listing of some friends, and the ability to contact you. And that’s just without logging in.

And if you take the time to log in, you’ll be able to see everything in this picture below, plus the likes/activities/interests, contact information, and personal biography.

Privacy Settings: Everyone

In addition to all this, they can also see your Wall, Photos, Friends List, and follow any links you’ve provided on your profile to your other personal sites.

So let’s start changing some things.

Privacy Settings Configuration

There are several different layers to the Facebook Privacy Settings: Connecting, Sharing, Applications & Websites, and Block Lists. We’ll go from the top-down on the Privacy Settings page. Log into Facebook, go to Account in the top-right corner of the page, and choose Privacy Settings. Once, you’re there, you’ll be presented with a list of privacy categories. We’re going to start with Connecting on Facebook. Click the View Settings link for this category.

Privacy Settings > Connecting on Facebook

Facebook’s page will tell you the following:

Your name, profile picture, gender, networks and username are available to everyone because this info is essential to helping you connect with your friends and family.

  • Name and profile picture help friends recognize you.
  • Gender helps us describe you (for example, “Add her as a friend”).
  • Networks are open to everyone so network members can see who they will be sharing information with before they choose “Friends and Networks” for any privacy settings.

Other information in this section, including hometown, activities and experiences, is open to everyone by default to help you connect with friends and get the most out of your Facebook experience.

And it is entirely true that this information is essential in helping you connect to people you know, it also connects you to people you don’t. We don’t need to have all this stuff available for the world to see. In fact, there is nothing that I want all the world to see. Unless I were a public figure, the furthest extent to which my information should be available is “Friends of Friends.” The image below is a screenshot of my settings that I find suitable for remaining private, and requiring that anyone who wants to add me or see certain information to aid in their decision to add me, must be a friend of one of my friends first.

Of course, you can restrict this even further to use the closest form of relationship available for each one (most have a “Friends Only” setting, with the exception of Send You A Friend Request). You can now take a look at how your profile will look to someone who is a.) logged into Facebook and b.) not currently your friend or a friend of a friend by clicking on the Preview My Profile link in the top-right of the settings page. If you want to see how it looks to someone specific on your friends list, type their name into the box on the Profile Preview page.

As you can see, my profile now looks much different from my profile above, using these exact settings.

As cleaned up as this looks, it’s still not where we want, since people can still see the Basic Information, Contact Information, and Birthday. And as I described in my previous post about how to find yourself online, all it takes to find you is your name and birthday. So let’s move on to the second set of privacy settings…

Privacy Settings > Sharing on Facebook

When you first visit the Privacy Settings page, these are the settings you’re immediately confronted with (most likely because they don’t deal with how your public information is displayed as effectively as the “Connecting” settings do). You’ll immediately notice that there are a bunch of dots on the chart, and some big bold words to the left of it all: Everything, Friends of Friends, Friends Only, and Recommended. Forget about the “Recommended” settings.

Sharing on Facebook: Everyone

Take a look at the list of all the features that have a dot. If you use the “Everyone” setting, your profile will have the same visible fields as mine does in the image above. People you know, people you might know, and people you don’t know at all will be able to see everything that is in one of the sections on my example profile. So really, we’re left with 2 settings at this point, and it’s all going to depend on what you want made available.

  • Friends of Friends: This setting will make available all of your actual personal info: status updates, photos, bio, family, relationships – but only to the people who are friends of your friends.
    • Let’s say, for example, you chose this setting, and have mutual friends with your boyfriend/girlfriend/wife/husband. Some months later, you two break up/divorce, unfriend each other, and move on. If you still have this setting chosen, your ex will be able to continue seeing everything you’re doing on Facebook.
  • Friends Only: This setting restricts all your activity to be visible only to your friends. Those who are “Friends of Friends” will not be able to see anything you’re doing.

Note: There are some more granular settings for these settings, and others, that I will describe in a post later this week.

For my settings, I have decided to go with “Friends Only.” I have also unchecked the box to “Share a tagged post with the friends of the friend I tagged.”

Sharing on Facebook: Friends Only, Unchecked "share tagged photos"

If you type @friendsname into the status box directly on the site, it will link the person in the post. If I’m out with @somegirl who has a boyfriend she’s unhappy with at the time, I don’t want my status update to show up on his News Feed. (More over, I’m smart enough not to make a post about sensitive situations in the first place).

Now that you have set your Sharing on Facebook settings, go back to the Connecting on Facebook page, and click the Preview Profile button again to see what you get. This is how mine now looks. Looks pretty good. No personal information – only the one profile picture, the Name, and the Facebook URL.

Conclusion of Facebook Profile Privacy Settings

Throughout this week I’m going to release a series of posts about Facebook Privacy Settings that will cover all the rest of the stuff. Now that you’ve got your profile locked up from prying eyes on the outside, the next post will show you how to stop the information leakages to people behind the scenes…via applications.

I’ve been seeing an increase recently in the number of people who are getting suckered into clicking on apps that claim to do things with your Facebook profile that you can’t naturally do inside of Facebook itself. There’s a reason that you can’t do them in Facebook: the functionality is not there to begin with. The claims the apps are making are bogus – and their real intention is to suck out your personal information, and get you to share the application with your friends so they can suck out their personal information as well.

The next post will cover Facebook Application Privacy and Security.

Technorati Tags: , , , , , , , , ,