Facebook Offers Security Guide

(click image for larger view)
Facebook on Thursday began promoting a guide designed to help users participate in its social network with less risk, a need that has grown as the service has.

Co-authored by Linda McCarthy, former senior director of Internet safety at Symantec, Keith Watson, a security research engineer at Purdue University, and Denise Weldon-Siviy, a teacher and editor, the Guide to Facebook Security offers both well-worn security advice and surprising recommendations.

More Security Insights

White Papers

• 
  Windows 7 Security and Compliance
• 
  Best Practices When Enabling Smart Card Authentication in a KVM System

Analytics

• 
  Will IPv6 Make Us Unsafe?
• 
  Database Defenses

Webcasts

• 
  Outsourcing Security: What Every Potential Cloud Security Customer Should Know
• 
  Effective IT Inventory and Asset Management: From Quagmire to Quick Fix

Videos

Though some Facebook users question the wisdom of presenting the guide as a downloadable PDF–a common vector for malware–those averse to PDFs are probably sufficiently sensitized to Internet security issues that they wouldn’t benefit from the advice. Those unaware of the potential pitfalls of file downloads, however, will almost certainly find something of value in the 14-page document.

The guide opens with the most common online security recommendation in recent years: choose a good password, one that’s at least eight characters long, contains one or more numbers, and at least one special character. It goes on to reiterate other conventional wisdom, like not reusing your Facebook password on other sites, not sharing it with friends, and changing it regularly.

You’ve probably heard this before. But many Facebook users probably haven’t or have ignored this advice previously, which is why it bears repeating.

What might not be expected is advice like making sure you log out of Facebook. “Logging out of Facebook when you’re not using it is a simple and effective way to protect your account,” the guide states. “Many people think that if they close the webpage or exit the browser that also logs them out of Facebook. It doesn’t. The next person who goes to Facebook.com on that computer will find themselves [sic] already logged in–to your account.”

Facebook has a vested interest in keeping users logged in: It could log users out after a period of inactivity, the way online banking sites do. But the company wants users to remain logged in when they visit other websites, particularly sites that have integrated Facebook APIs, like Social Plugins. That’s because social features provided by Facebook won’t load on third-party sites when a Facebook user visits but isn’t logged in to Facebook.

The authors of the guide appear to be aware of this tension, because they qualify their advice. The guide specifies that you should log out of Facebook when using the service away from home. Even so, the guide also advises logging out of Facebook when a home computer is shared. Those serious about security might consider logging out at the conclusion of a Facebook session, even if that de-socializes third-party websites.

The guide also advises Facebook users to only friend people they know. Anyone with more than several hundred Facebook “friends” has probably violated this suggestion many times over.

This is particularly important because Facebook operates under the assumption that you know your friends. When attempting to access Facebook from abroad, Facebook will attempt to verify your identity by asking you to identify your friends in tagged pictures.

The security guide also provides valuable recommendations about things like how to obtain a one-time password–text “otp” to 32665 (FBOOK) from a phone that you’ve registered with Facebook–and how “Like” buttons can be trapped for clickjacking attacks.

If you’re the least bit unsure about how to navigate the world of social networking securely, take a look at the Guide to Facebook Security.

Attend Enterprise 2.0 Santa Clara, Nov. 14-17, 2011, and learn how to drive business value with collaboration, with an emphasis on how real customers are using social software to enable more productive workforces and to be more responsive and engaged with customers and business partners. Register today and save 30% off conference passes, or get a free expo pass with priority code CPHCES02. Find out more and register.

Share and Enjoy

Getting good travel advice from the online crowd

Looking back at my favorite vacation spots, several have one vital thing in common: They were suggested by friends.

It’s no surprise that travelers tend to trust the advice of people they know. Now, several new travel websites are trying to put those inclinations to use by allowing travelers to use social media sites for targeted trip advice.

Take Gogobot.com and Afar.com, which both made their debuts last year. Each allows users to post specific questions about upcoming trips to both Facebook friends and users of the sites.

“It’s not who you know, it’s who you need to know,” said Derek Butcher, chief technology officer of Afar Media, which also publishes the travel magazine Afar.

Gtrot.com, which focuses on users’ immediate network of Facebook contacts, operates on the premise that 10 recommendations from friends you trust are better than 100 suggestions from people you don’t know.

Planning a trip to Ecuador, I signed up with these three sites to see what kind of travel insights I could glean. For the most part, they offered advantages to simply posting a question on Facebook or Twitter. Below, an overview.

Afar.com: This social networking site offers personalized recommendations from travelers, locals who share your interests, and editors and writers at Afar.

An initial travel personality quiz is designed to connect you with people with similar tastes. Based on my answers, I was dubbed an “active adventurer” who likes to get outside as much as possible, avoids tourist haunts and doesn’t mind roughing it a little. (Not too far off.)

I then filled out a profile with a Facebook-like layout that allowed me to post previous trip highlights with photos and ask questions about my coming trip. The site sends your queries only to members who are familiar with the destination at issue. (You can also link your account to Facebook, which allows you to send the same question to your contacts there.) .

By the next day, Jeremy Saum, an editor at the magazine, posted a response to my questions about where to stay and eat in Quito, offering ideas from an article that ran in Afar magazine, with some very specific tips. “Ask for the room on the first floor with the claw-foot bathtub,” he noted about Cafe Cultura, a Quito B-and-B.

For more tips, a nifty feature aggregates previous recommendations from members and automatically files them under a tab with the name of the city right above your question.

Bottom line: A clean, simple layout makes navigating this site a breeze. But while you get good personalized advice, it’s up to you to search out phones, addresses and other details in order to put the advice to use. And like the magazine, the site seems to tend toward off-the-beaten-path destinations; if you’re looking for more mainstream recommendations, Afar might not be your best resource.

Gogobot.com: This trip-planning site also taps your social networks (Facebook and Twitter) for advice, but provides a few added layers. Unlike Afar, it will supply photos, phone numbers and addresses, if available, for the recommendations users make. It also includes tools to help you build an itinerary that you can adjust as you go.

I chose not to query my Facebook friends or Twitter followers, just to see what advice might surface from Gogobot users. Within a day, I received a response from a well-traveled member. It was only one response, but it included six insightful recommendations about where to go in Ecuador. His description of the Mitad del Mundo, a monument that marks the equator, which I knew from past visits, was dead on: “The one and only reason to go here is for the novelty of taking your picture spread eagle across the Northern and Southern hemispheres.” (Turns out he is such an avid user of Gogobot that the company now pays him on a freelance basis to help cover some obscure destinations.)

Gogobot can also sync with Foursquare and Facebook so your public check-ins on those sites show up on your Gogobot profile. . Members can review or rate hotels, restaurants and activities, earning stamps in their virtual passport which can then be shared with friends.

Bottom line: An efficient way to build an itinerary based on recommendations from friends and other travelers. The site makes it simple to record where you’ve been so that you can easily share your favorite places with friends.

Gtrot.com: Essentially a travel companion to Facebook, Gtrot was created by Harvard students in 2009 as a way for college students to keep track of friends while on school break. Now anyone can link their Facebook accounts to the site to share their plans and get travel advice.

The first step is to search for the city you are headed to and plug in your travel dates. You can also email your itinerary to trips@gtrot.com to add it automatically to your planned trips. The site will then pull up a list of Facebook friends who have visited, lived in or are planning a trip to those cities at the same time.

You can ask your friends for tips or invite them to meet up by typing a message into Gtrot, which posts to your friends’ Facebook page. Gtrot then pulls all the related comments back into the site and files them with your trip.

The more active you and your Facebook friends are, the better Gtrot works. It didn’t work so well for me. For my trip to Ecuador, I sent a Gtrot message to nine of my relatives who live there. Only two responded. Also, because Gtrot determines which friends may have advice on a place based on what they make public in their Facebook profiles, not all of my family members who have been to Quito showed up.

Gtrot says it plans to address this glitch by allowing users to add Facebook friends who they know have visited a region but may not have indicated so on their profile to trip queries. By the end of August it plans to offer lists of hotels, restaurants and things to do that have been crowd-sourced from Gtrot’s 10,000-member base.

Bottom line: Until that happens, when it comes to travel advice, Gtrot is only as helpful as your Facebook friends.

Share and Enjoy