Category Archives: Privacy

Facebook, Privacy, Security, Timeline

Facebook Timeline Privacy Settings – Part 1

Leave a comment

On January 31st, 2012, you’ll be forced to accept Facebook’s new timeline profile. There are some new privacy settings that you might want to adjust. In the change from the standard Facebook interface to the new timeline interface, your previous settings won’t survive the transition. You’ll have to adjust them again.

Why is this important? For me, it’s not. For you, if you are a teenager or a single woman, for example, there are dangers to having all of your activities past and present open to the world. Ex-partners, teachers, prospective employers can now access all of your past information very easily. There isn’t much danger of me being stalked but for many people, that is a very distinct possibility.

TIP: The best thing about the new timeline interface is that you can see immediately how your profile looks to strangers or to any of your friends. See the little arrow just to the right of the gear icon on your profile page? Here it is:

The View As menu on the timeline
Click on the View As line.

Once you click on the ‘View As’ line, your profile will change to show how strangers will see it. You can then change the view to show how your friends will see it, depending on your settings for each of them. You may want to hide things from some friends. In that case they will not see the same profile as everyone else.

Step 1 – Hide Your Past from Strangers: Follow these steps to ‘Limit the Audience for Past Posts: https://brianmahoney.ca/2011/09/facebook-control-your-old-post-privacy/ You must do this again, even though you may have done this in the past. Once you have done this, take a look at your profile as I have described just above this to ensure that your past is hidden from strangers/people who aren’t your friend.

Step 2 – Hide Your Friend List From Everyone: If you have family members on your friend list, it might be a good idea to hide your list from them. If you have your privacy settings wide open, everyone can see your list, allowing them to troll through it for ways to contact you. Whatever the reason, I think it’s a great idea to hide your list of friends from everyone. Here’s how you do that:

1. See the photo up above this? Click on the ‘Update info’ section. This will bring you to a page that allows you to edit virtually any part of your personal information. It also provides a link to your other personal settings. Click on the arrow beside the word ‘About’ and you’ll see this:

Settings Menu
This has links to all of your personal settings, including your friend list.

When you click on ‘Friends’, you’ll see a complete list of your friends, of course. What you are looking for now is the Edit button up on the top right. Click it and you’ll see this little menu:

Menu for your friend list
See the padlock on the right? Click it.

Once you click on the padlock you will see this menu next:

Locking your friend list
I would choose 'Only me' here but it's up to you.

As you can see, I have chosen ‘Only me’ for my friend list. Any friend who has a mutual friend will be able to see a list of mutual friends but that’s it. See the tip below but for now, no one can see your whole list except you.

TIP: The new timeline will not allow you to hide mutual friends from anyone on your list. Keep that in mind.

Everyone has different levels of security that make them feel safe online. I’m pretty open about most things but I don’t see why my friends have to see who I am friends with. I can further adjust these settings by grouping my friends into smaller groups. More on that in a future post.

Thanks for reading! Comments are welcome.

Facebook, Privacy

Facebook Data Download

Leave a comment

Yesterday I downloaded all of my data from Facebook. It’s a relatively new feature and it’s very easy to do. Head over to General Account Settings, then click on ‘Download a copy of your Facebook data’. You will have to re-enter your password at that point, just in case you’re not the owner of the profile. Facebook will then collect some of your data, zip it up and email you when the download is ready.

My 576 megabytes of data took about half an hour or so to collect. When I got the email, I dutifully went back to my account and downloaded the data that Facebook had collected. I was, needless to say, disappointed when I discovered that the data was far from complete.

As far as I can see, all of my photo albums are there, even the ones I have deleted in the past. My notes are all there, too. What’s missing? Well, my wall is missing two years of status updates. My messages are very incomplete. The string of messages that I wanted most is totally missing. I tried to archive that set of messages to see what the effect of that would be, thinking that maybe I could download them after archiving. No luck.  The only thing I can do is to forward the messages one by one to my email address. Frustrating, to say the least.

It seems that Facebook has tried to allay some people’s fears about privacy. From the looks of the data collection system that they use, Facebook hasn’t really made me feel any better at all. Sure, I’ve got my photos, videos and notes but what happened to hundreds and hundreds of my messages? Where did the missing two years of my status updates go? Lost in a server change?

TIP: Depending on where you live, this feature may not be available to you. I’m in Canada and our government has taken Facebook to court a couple of times on issues of privacy. I know that this data download is available in Europe also but I can’t guarantee that this post applies to everyone who might read it.

I will wait another month or two before I try again. Maybe the next data download will be more complete. I am not the only one that this problem has affected. Other users have discovered the same thing as I have. What was your experience? Did you manage to get all of your data?

Thanks for reading. I’d love to read your comments.

Internet, Privacy, Security, WordPress

Secure WordPress Login

Leave a comment

Since the default WordPress username is ‘admin’, did you ever think that maybe it’s time to change it to something a bit more secure? Any hacker worth her or his salt can probably gain access to your WordPress installation quite easily. The only thing they need is a password generator of some type if you have left the default WordPress username as admin.

Besides changing the default setting, you should also do something else. If you are a single owner/poster, you should change your posting name to something other than your username. If you want to post as “Jane”, for instance, you can login in as kentucky or anything else that suits you. Why should you do this? It seems obvious but in case you missed it, if you post as “Jane” and your username for logging in is “jane”, maybe a hacker could easily guess your username. Simple, right?

Head over to ‘Users’ on the left side of your WordPress Dashboard. For the default installation, there will only be one Username, by default it is ‘admin’. Here’s what the default setting looks like:

Admin user settings
Admin is the default user. No 'Role' is listed as there is only one user.

The default username can’t be changed but what you want to do is to add another user then switch the Role of Admin to ‘no role’. In other words you can’t get rid of the admin user but you can take the administrative power away from them in order to secure your WordPress site. You’ll notice from the photo above that there is no place to choose the Role of this user.

Update: I forgot to mention that you can’t change the default username’s role  until you set up a new user as admin, log out and logo back in again. Set up new user, make that user admin, log out then log in again and change the default admin’s role to ‘no role’.

Tip: You can’t change the role of the current administrator until you have another administrator lined up. Create another user, use whatever name and nickname you want, then make the Role of that new user ‘Administrator’. Once you do that, go back to the original admin user and define its Role as ‘None’. This screen shows you what to look for:

New User Menu for WordPress
This is where you can choose the Role for the new user.

In this window, make note of two things. First, the Role menu is visible since you are adding a new user. Any new user must have a role, even if it is no role at all. Next, make sure the username and the display name are totally different. The Username is the name you use to login to the site. The Display name is the name that shows on each of your posts. Make sure they are different. Anyone can try to login with your display name and guess your password but if your username is different, your site is more secure.

TIP: Whatever your role is on any WordPress site, make sure that your username for logging in isn’t the same as your posting name. If you’re an administrator, make sure of this small but very important detail for every user of your WordPress installation.

Once you have a second administrator set up, go back and remove the administrator role from the default admin username. Once you do that, your WordPress site is a lot more secure than it used to be.

Thanks for reading!

Email, Encryption, Privacy, Security

Hushmail Email Security

If you’re concerned about email security, my next few posts will discuss some aspects that you might want to consider. My feeling is that email is far less secure than it used to be, even compared to five or ten years ago. Whether or not anyone is reading your email, you might want to think about some way of securing your private and/or business communications from prying eyes. If you are already involved in illicit activity, you are likely more advanced in this area than I am. All of this is new territory for me. We’ll learn together.

My first stop on this journey is a Canadian web-mail site, Hushmail. Hushmail advertises itself as a ‘free secure email’ provider. It is free and somewhat secure. There is a pro version for use on your own domain but we’ll stick with the free version for now.

Hushmail encrypts your email to other Hushmail users, plain and simple. Once you are logged in, Hushmail provides an encrypted connection. The key to this connection is your password. If, for some reason, your Internet connection is being watched, logging-in to Hushmail will protect everything for you. Your emails are stored on the Hushmail site in encrypted form. Your passphrase isn’t stored anywhere by Hushmail. If you lose your passphrase, you can’t recover it…at least not through Hushmail. It all sounds quite secure, right? It is but Hushmail is very open about its limitations.

I don’t think anyone really reads the EULAs or FAQs that abound in the computer world. Hushmail’s FAQ was both incredibly easy to read and extremely honest.  Take some time to read it and you’ll start to understand the limitations of a web-based email security system. Here’s a link to Hushmail’s FAQ: http://www.hushmail.com/about/technology/security/

Hushmail is perfect for the average person who wants a bit of privacy and simplicity with their free web-based email. There are ways to encrypt a regular email on Hotmail or Gmail and I’ll get to those later but for now, Hushmail is worth investigating.

The key to Hushmail is the passphrase. Sure, the email and the connection to Hushmail are encrypted but how can you keep your passphrase secure? That’s the problem, right? If you can manage to come up with a mnemonic passphrase, something that is easy for you to remember but ridiculously hard for anyone else to crack, you’re fine. If you have to write the passphrase down, things get substantially less secure. That’s for you to work out but I’ve got some tips here in another post.

Lastly, if you think that you’re immune to all of this and that no one really cares about your email, check out this PBS documentary. It’s an eye-opener: Nova: The New Thought Police 

Thanks for reading!

Email, Internet, Privacy, Security, Spam

Hotmail or Gmail?

Hotmail has been around since 1997, at least in its present form with Microsoft. Somehow, it doesn’t have the same cachet as Gmail, even though it’s been around for a lot longer, 2004 compared to 1997. Many of my contacts use Gmail for business, pretty much shunning Hotmail for reasons that I don’t quite understand…other than the sense that Gmail is sounds better. Here’s why I stick to Hotmail.

1. Easier Access – Over the years I’ve gotten used to using MSN chat. Sure, Gmail has Gmail chat but most of my friends around the globe use MSN and/or Skype (or QQ). Since I have my MSN chat open when I’m online, I get instant updates when I get an email from a contact. Additionally, I can access up to five of my Hotmail accounts from one account using the link feature. One sign-in lets me access my business account, my anonymous account (the one I use when I’m signing up for some sketchy-sounding freebie on the ‘net) as well as accounts that are linked to different websites that I own.

2. Sharing – I used to share music on Gmail using the Gmail Drive feature, mentioned here. Gmail gives you over 7 gigabytes of storage. Cool huh? Hotmail gives you 5 gigs of storage in your actual Hotmail account but they also give you 25 gigabytes in your Skydrive section. Cooler, huh? With my 25 gigs of storage, I can share music, videos, epubs, etc. In Gmail I would have to share a password with a trusted friend. In Hotmail all I have to do is send an email to share a folder. I can even allow someone to edit the files if I want. Personally, I find the Skydrive setup much simpler and easier to use than the substantially smaller Gmail storage.

3. The Cachet – If the name Hotmail doesn’t turn your crank, you could choose the ‘live.com’ option when signing up for an account there. Unfortunately you can’t switch your Hotmail to a live account. I think the biggest mistake that Microsoft made was choosing the Hotmail name but that’s done, can’t change it now. At that time, everything was new and fresh and, yes, hot on the brand new Internet. Things that you take for granted now weren’t even thought of then. When you actually think about it, the name Hotmail is no different from Gmail except that each is associated with what some consider the black and white of the computer world. While most of us use Windows, do we actually trust Microsoft? Somehow, Google is considered the white knight of the Internet, despite being just as monopolistic as Microsoft.

4. Spam Blocking – I’ve written here before about using the excellent spam blockers in Hotmail. Personally, I don’t see much of a difference between the Hotmail or Gmail spam settings. I get spam in each, lots of it. Blocking spam in Hotmail is much easier. Select the messages in the junk folder, choose Block at the top and poof, they’re blocked. You can block a whole domain or a single account just as easily. With Gmail you have to set up a filter. Finicky, in my opinion, and time consuming. Give me ‘click and block’ any time.

5. Finding an Email – Both Hotmail and Gmail have superb search features. It’s a tie there. However Hotmail allows you to arrange your emails in five different ways. If you click the ‘Select’ button over the email date, you can arrange your whole inbox by date, by who the emails are from, by the subject, by size or by conversation. I use this feature all the time. If I can’t remember any key word in an email, I can find what I’m looking for by arranging the emails in another way. It sounds strange but it happens. Order something online from Amazon but you can’t remember the title of the book? See all of the Amazon emails instantly by choosing ‘from’. You can then find the email quickly if you have a vague idea of the date of the order. If not, you can go through them one by one. I can’t do that in Gmail. (If I’m missing this, please let me know.)

6. One Gmail Plus – I’m sure there are perfectly good reasons to choose Gmail over Hotmail, other than the name, but I can think of only one. Choosing a series of messages in Gmail is much easier, choose one then hold down the shift key while choosing another one down the line. All messages in between will be chosen. That’s it!

What Do You Think? If I’ve missed something, let me know. Both Gmail and Hotmail are secure. I really prefer having my email left on the server instead of having it come into my home computer before I read it. I’m always online anyway so what’s the point of downloading all of my messages to work offline? If there is something on my site server or my ISP’s server, as soon as I open Outlook or Thunderbird, that bit of virus or malware gets sucked into my computer. Give me web-based mail any day. If you change ISPs, you have to go through the change of address motions which might or might not get to all of your clients or email contacts. I’ve had Hotmail since 1998, same account, and I’ve never lost an email.

Thanks for reading! Comments are very welcome.