Category Archives: Controlled sharing

Facebook Privacy Settings – Part 2 Photos and Albums

One of the best parts of Facebook is the photos that users post. Did you know that there are several different types of photos and albums on Facebook? Did you know that these photos and albums have different privacy settings? Well, after you read this post, you’ll know all about it. Stay with us, you might be surprised.

Types of Photos and Albums on Facebook

1. Timeline Cover Photos – These are the photos at the top of your timeline, the ones behind your profile photo. They are wider and taller than your profile photo. Timeline cover photos are public. They can only be public. Anyone who can see your profile, friend or enemy or stranger, can see that photo. Do not use any kind of compromising photo for these. Always use a generic ‘nice’ photo, one that describes you but doesn’t reveal anything about you.

Photo of Facebook Photos and Albums  1
Timeline cover photos are always public. Remember that.

2. Profile pictures –  This section of photos is broken up into two smaller sections. The first is the photo itself. You control who can see the full photo, the one that comes up when someone clicks on the thumbnail. The problem is the thumbnail itself. That is public. Again, anyone who can see your profile, basically anyone you have not blocked, can see that photo. Don’t use a profile photo that reveals too much about you, that should be obvious. If you’re really trying to hide, try to rearrange the photo when you are choosing the thumbnail so the thumbnail doesn’t show your face. We’ll explain how to do that in a future post.

Photo of Facebook Photos and Albums  2
A pair of feet and a pool, nothing revealed here.
Photo of Facebook Photos and Albums  6
Change the privacy for the photo but not the thumbnail. Remember that.

 

3. Photos of You – In spite of the name of this album, photos in it may or may not be ‘photos of you’. Every photo in this album is one that your or your friends have tagged you in. If you tag one of your friends in one of your photos, that photo will be in their ‘Photos of You’ album. Get it? The photo may be of a rock, a tree or a kitten but if you are tagged in it, it’s in your ‘Photos of You’ album. The privacy of that photo is controlled by the person who posted it. How can you delete a photo from this album? You can’t…well, not directly. What you want to do is  remove the tag. Click on the thumbnail and the picture will open. Down at the bottom click on Options then Repot/Remove tag. Choose ‘I want to untag myself’ then click Continue. All done!

Photo of Facebook Photos and Albums  3
Just tags here. You can remove the tag easily.

4. Your Photos – This is a mish-mash or your profile photos, your videos and your albums. You can pretty much ignore the settings for this ‘album’ because it’s not really an album and you can’t control the privacy for it. Each photo is controlled individually or by the album it’s in.

Photo of Facebook Photos and Albums  4
Everything in one place but totally useless because you can’t do anything from this page.

5. Mobile Uploads – Here’s where the fun begins. Mobile uploads are photos that you’ve sent to Facebook from a mobile device. That’s kind of obvious right? What isn’t obvious is that the privacy settings for each photo must be set individually. We will explain how to do that in our next post, the explanation is too long for this one. Just remember that when you upload a photo from a mobile device, that photo may possibly be seen by everyone, not just your friends. Please keep that in mind a guide yourself accordingly.

Photo of Facebook Photos and Albums  5
Click on a photo and change the privacy settings one by one.

6. Timeline Photos – What the heck is a Timeline Photo you ask. We were surprised to see this album too. Anything that you upload to Facebook that isn’t in any other section listed here, is a Timeline Photo. Let’s say you come across a cool image on the Internet. You save it to your computer and upload it to Facebook. You don’t add it to an album and you don’t upload it from your mobile device, you just upload a single picture. Each of these photo’s privacy has to be set individually when you post it. When you post a single pic, make sure you set your privacy level at the time you post it. Otherwise you have to go back and reset it later, you can’t change the settings for the whole album since this isn’t really an album. Confusing, right?

Photo of Facebook Photos and Albums  7
Timeline Photos looks like an album but it isn’t. Each pic has its own privacy setting.

 

7. Albums – This means any album that isn’t one of the above. All of these normal albums have blanket privacy settings. You control who can see the photos and the album itself all at the same time.  You can set it so one friend or one group of friends can see it, all of your friends or everyone on Facebook who views your profile, pretty much whatever you want. If you set the album to ‘Your Friends’, however, once you tag someone in it, all the privacy for that photo goes out the window. A tag opens the photo up to the tagged person’s friends. Remember that. Tags are a whole new ballgame that we will explain in another post. Tagging is complicated, too complicated to outline here.

Photo of Facebook Photos and Albums  8
“Albums” includes Videos and actual photo albums that you have created.

 

That’s all there is, folks. Every type of album on Facebook is here and now you know how to control the privacy for each one, at least those that you can, in fact, control. There’s lots of information here; we hope you find it useful. If you’re still stuck, don’t be shy! Ask us a question in the comments down at the bottom of this page.

Thanks for reading! Here’s a link to our Facebook page: Computers Made Simple on Facebook

 

 

Facebook Safety Tips

We were adjusting a few things on one of our accounts last week using the ‘View As’ feature. It must have been the first time we had used this tool because this message popped up:

Photo of Facebook's View As warning
Seems like nothing is really private, right?

 

Read that carefully folks. We’ve said it before but it’s worth repeating here: Don’t put anything on Facebook that you’ll regret later on, even if you hide it. Someone will almost certainly find it.

At about the same time, we discovered that your group affiliation is very visible, even if you hide everything about your groups from your profile. We checked one of our profiles from a different browser and there they were, all of our groups at the bottom of our profile. We’re pretty sure we weren’t signed into Facebook on that browser and had clicked on one of the facepiles on a site that we use. If we ever duplicate that glitch, we’ll be sure to save some screen captures.

Although we have written many posts about how to hide this and how to control access to that, there is one main point to keep in mind. A simple glitch on Facebook’s site has the potential to reveal anything or everything about you. That’s something to remember every time you use the site. You must also remember that Facebook itself has access to your material. Any employee with the right type of credentials could sift through your private photos, notes and messages. You may not know this but Facebook uses offshore workers to control its censorship policies. Offshore here means ‘not in North America’. Think about that the next time you post something that you think is shared only with a few friends.

We’re convinced that Facebook’s privacy controls are weak and, in many cases, ineffective. Facebook wants you to feel warm and cozy when you are on their site, using their seemingly effective privacy controls but, as we have discovered in the photo above, the controls are meaningless.

Here some safety tips that we’ve come up with. From time to time, we may add more to this list.

1. If you access the Internet on a shared computer, which is a bad idea at the best of times, make sure you remember to sign out from Facebook and, of course, don’t allow any browser to remember your password.

2. Don’t join any groups that may cause problems for you or your family. The group privacy controls are independent of your own settings and are needlessly confusing. If you feel the need to join a sketchy group, read number 3.

3. Create a second profile using a nickname or fake name and, above all, don’t use your real photo. Tell Facebook that you’re in Zimbabwe or Timbuktu, lie about your age and/or gender and access whatever scandalous groups, pages, people that you want, all in complete privacy. Use a new email address from Outlook or Gmail, not your ISP’s email setup, and only use that for the fake Facebook account. Don’t use your real name for the email account, either. Just remember that the authorities can always trace your IP address so keep all of your activities aboveboard, right?

4. Only add people that you know or have been recommended by friends. You don’t have to accept invitations from strangers. If you don’t know someone, don’t confirm the friendship. If they really persist, just block them.

5. Keep track of how your cell phone or tablet interacts with Facebook. Are you sharing your location every time you post something? Is Facebook accessing your contact list? Are you sharing more than you think you are? You have to ask yourself if Facebook is so important in your life that you might risk your own personal safety to use it. What about your children? Do they access Facebook through their cell phones? How much are they sharing? Start a dialogue with them and get some answers.

6. Create a Facebook account just for your family. If you’re going to share family pics, complete with details of your home, cars and location, make sure they are only seen by trusted family members. Once you get family mixed up with friends, you lose control of your privacy. Your family already knows where you live so you don’t have to draw a map to your house, right? Don’t share that information on Facebook . Share the cute, cuddly dog/cat/kid pics but don’t share everything!

7. Weed out your friend list, keeping in mind number 4. If there is someone you don’t know or don’t remember how you added them, get rid of them. Keep your friend list to just that, friends. If you take our advice in number 3, you can add whoever the heck you want, they won’t any danger to you.

8. This is important so read it carefully. If you are sending a message to someone that includes any personal information or is on a topic that could potentially cause problems for you, don’t send it. Use a proper and secure email system for those messages. Facebook messages may seem like email but they really aren’t. Think of them more like an interoffice memo. Facebook itself is not secure, right? How could its email system be any different?

9. If you are a teacher, don’t even think about using your real name or photo for your Facebook profile. Use a nickname, one your students don’t know, and restrict your profile photo and cover photos to ones that reveal nothing about you. You can’t hide your profile photo or any of your cover photos. Remember that.

10. If you are not a teacher, read number 9. Profile and cover photos cannot be hidden.

11. We’ve left the best till last. Here’s what a facepile looks like:

Photo of Facebook Facepile
Is your face here? Is your child’s?

These are real and clickable Facebook profile photos. Anyone, anywhere in the world can click on those photos and be taken directly to a Facebook profile. Depending on how much information that person shares, in the blink of an eye a stranger could find out a city, a street and, sometimes, an address. Go back and read number 3 again. Can you see how this facepile relates to that suggestion? If you’re going to like a page, in this case Songza, why use your real profile photo? Use your fake account and go crazy liking this and that, knowing that no one can ever connect you to anything you do on Facebook. Think about it, OK?

Those are eleven suggestions to keep safe on Facebook. There are probably at least as many more but we’ll leave those for another post. Facebook is fun, addicting but, unfortunately, very deceptive in its practices.  The nice folks there want you to share everything, like everything and toss your privacy to the wind, just so they can make money selling your profile to advertisers. Don’t let them sell you out.

Thanks for reading! Comments and suggestions are welcome, as always.

 

How to Stalk on Facebook and Google +

Warning: This post is NOT a guide to stalking. It’s a warning to everyone who doesn’t take the time to adjust their privacy settings. Facebook and Google +, thanks to their interest in making a buck for their shareholders, don’t care about your privacy. The more you reveal, the more they know. Both can adjust their ads specifically to your particular demographic, your pattern if you will, hoping you will buy something from one of those ads. If you click on something, they know about it and they remember it. As you travel around the Internet with your accounts open, they will know everywhere you go and, to a certain extent, everything you do. You’ve been warned.

Here is a step by step, do-it-yourself, stalking manual.

1. Pick a magazine, any magazine. Better yet, pick a magazine that appeals to the type of person you are looking for. Here are a couple of examples, straight from the Internet:

Photo of Stalking 1
This is from Google + but the idea is the same.

 

In the above example from Seventeen Magazine, hovering over the Google + icon brings up the ‘Follow’ button. Clicking on any profile photo brings up their Google + profile. Believe it or not, and this is the scary part, Google + seems worse than Facebook on this issue because we do not have a Google + account yet we were still able to view the profiles. It gets worse. On one of the profiles we clicked on, we were able to see two important maps. One was of the school that the person attended, the other was a map to their home, complete with street name and number,  believe it or not.

Here’s another:

Photo of Stalking 2
This is a Facebook facepile.

 

We weren’t able to find a facepile on a North American magazine site in time for this post but a magazine from Singapore had one. If you hover your mouse over a photo, the person’s name pops up. If you click on any profile photo, you are taken to that person’s Facebook page. Depending on your privacy settings, a complete stranger, even one who does not have a Facebook account, can see everything that you haven’t bothered to hide. Here is an example of someone who didn’t hide very much at all. (We were able to see this without being logged into Facebook):

Photo of Stalking 3
It’s all there, isn’t it?

 

Her school, her city, lots of photos…it’s all here. Remember, this information is available to anyone,whether they have a Facebook account or not, simply by clicking on a tiny profile photo.  Here’s what we think a stranger should see when they click on a link in a facepile:

 

Photo of Stalking 4
Still some information but not much.

 

In the example above, we can see this person’s school but not much else, other than her name. We are not signed into Facebook, by the way. This person’s profile photo is good, too. It does not reveal too much about the person. Think about your profile photo. What does it show about you? What information are you revealing to the public?

We don’t use Google + (we are in the process of figuring it out) so we can’t advise you on your privacy settings yet. With Facebook, remember that you can hide everything except your profile photo, your timeline covers and any mutual friends you have with the person who is viewing your profile, provided that you have any and that the person is signed into Facebook. There is no need to make any information public, it’s not a requirement. Choose your own level of privacy, one that you feel is secure and, most important, make sure your young friends and relatives have their privacy set to reveal the absolute minimum.

We hope this post has made you think about what information you are putting out for the world to see. What information are your children sharing with the world? What about your friends who are less comfortable with computers and/or social networking? Maybe you can refer them to us or, better yet, help them lock down their privacy using our guides.

Thanks for reading!

 

When Facebook Privacy Settings Don’t Work – Part Two (May 24, 2013)

In our last post, we discussed some facepiles that we found on a website. To catch up with us, here’s the link to that post:   When Facebook Privacy Settings Don’t Work 

In the comment section at the bottom of the Songza page, each comment has a photo and a name attached. This is how it looks:

Photo of Songza Facepile
Comments with photos and a name on the Songza site.

 

As you can see, we get a bit of information from each commenter, always a photo and a name. Why is that? Because you cannot keep your Facebook name and profile photo private, they have to be shared as part of your agreement with Facebook. Just about everything else can be hidden. Just about, those are the key words.

Yesterday, we decided to play with the settings. First, we commented, then we checked the site from another browser, just to see what we could find out from the link to the Facebook profile. Turns out the comment had the name of the poster AND his location.

We headed back to our Facebook profile and hid where the poster was from, simply by setting Location (under Privacy, then About, then Location and Edit) to ‘Only Me’. Back to Songza to refresh the page and see what the comment looked like after the change. We were shocked to see that instead of the commenter’s location, we were now able to see the commenter’s age! Knowing full well that this person had hidden their age, we headed back to Facebook in another browser to check. Sure enough, the year of birth was set to ‘Only Me’. Yes, the day and month were there for friends to see but the person’s actual year of birth was set to ‘Only Me’.

Unfortunately, we cannot duplicate this error today. The point of this post is  to show you that, while you think your privacy settings work the way Facebook tells you they do, sometimes they don’t. If you have any piece of information on Facebook that you think is completely private, there are times when it isn’t. In our next post, we’ll offer a solution, one that we’ve suggested before. Stay tuned!

Thanks for reading!

Why not Like us on Facebook? Here’s the link: Computers Made Simple on Facebook

 

 

When Facebook Privacy Settings Don’t Work – May 24, 2013

Just when you think that you’ve got your Facebook privacy settings perfectly tuned, a snag pops up. No matter how private you think your Facebook profile is, something always comes up to prove you wrong. This post is about an incident that occurred yesterday so it’s current and, to be frank, it’s troubling. See what you think.

TIP: This post might seem a bit convoluted, maybe confusing, but the point of it is this: Don’t assume that your privacy settings are locked and secure. Facebook treats its users as commodities, not individuals. You’re simply a means for them to make money. Don’t expect fair or even honest treatment.

Yesterday, May 23, 2103, one of our staffers was listening to music on Songza.com. Here’s the site: Songza – Listen to Music

To save time, he signed in with Facebook. That was a mistake, as it turns out. After choosing his playlist, this user noticed that Songza made use of  Facebook facepiles. Here is what a facepile looks like:

Photo of Facebook Facepiles    1
Technically, this isn’t a Facebook facepile but every user here is from Facebook.

You’ve seen these everywhere around the Internet, right? A box of faces from people who use or like the site. This particular facepile is a bit different from most. When you click on one of the faces, you get the user’s Songza profile, not their Facebook profile. Seems safe enough, right? We clicked on one user. This is what we found:

Photo of Facebook Facepiles    2
This is the user’s profile on Songza.

 

So far, this seems pretty straightforward, fairly innocuous. It’s not. This person’s profile name is cheryl.hatten.3  as you can see at the top. Is this that person’s Songza name or is it her Facebook name? We typed that name into the Facebook search slot and came up with this:

Photo of Facebook Facepiles    3
What’s this? A Facebook profile? Sure as hell is.

 

What do we know about Cheryl? We know her maiden name is Colley, that she probably lives in Lethbridge and that she most likely works for the Alberta Child Care Association. We also have a picture of someone who may be her daughter. Most likely Cheryl knows nothing about this. All she did was sign up for Songza by linking her Facebook account to a fairly popular and, supposedly, reputable website. Songza, in their defence, may not be fully aware of how this particular part of Facebook is being used. These websites are designed and run by professional webmasters who simply follow instructions and, as we all do, fight for their share of visitors.

Not to get too technical here, these facepiles are all part of what is called ‘Social Plugins’. If you want to know more about all of this, here is a link to the Facebook developer’s site: Social Plugins  Songza seems to have found a loophole here since their facepile is linked initially to their Songza account, not to the user’s Facebook profile. The only way you can track down the user is to do what we did, search for the user’s name on Facebook. But wait, there’s more to this than meets the eye.

Farther down the playlist page, there is a comment section. Every comment shown on the page is from a Facebook user. Here is one:

Photo of Facebook Facepiles     5
Comments with photos. No big deal here, right? You’d be surprised.

 

Let’s click on one of the photos or names to see where we are lead:

Photo of Facebook Facepiles     6
A direct link to Katherine’s Facebook profile.

Here we go again. You can see for yourself what information we can glean from this profile. If you actually go to Songza and click on any photo in the comment section then click on various parts of the profile that comes up, you’ll most likely discover all kinds of things about the person, things that they didn’t feel were worth keeping private. In several cases we found maps which indicated where they lived, what groups they were members of, what networks they were in,  who they were following and so on. Honestly, you would be surprised and probably shocked at what bits and pieces of personal information you could glean from all of this. You’d be even more surprised to find that information that you have essentially hidden by making it available to ‘Only Me’,  is wide open to the world.

Stay tuned for the next post which examines one particular flaw in the system. This flaw reveals information about you even when you have your privacy settings set to ‘Only Me’. Believe it or not, it’s true.

Thanks for reading!