Related Links

Related Stories

  • Editorial: Facebook Can’t Catch a Break
    Legend has it that the late West Virgina Senator Robert Byrd carried a copy of the US constitution in his pocket at all times while on the floor of the Senate. Infosecurity's Drew Amorosi shares his opinions as to why Facebook's Mark Zuckerberg should do the same, or at the very least a current text on civil liberties.
  • Facebook stands up to privacy coalition
    Facebook has insisted it is doing enough to protect users' privacy in response to an open letter from a coalition of privacy groups calling for more action.
  • How to protect your personal information on Facebook
    Facebook members can protect their personal information by following some basic guidelines, says security firm Symantec.
  • Facebook announces open privacy settings
    As widely reported by the media in the last 24 hours, Facebook has responded to the ongoing criticism regarding the privacy of its members and announced plans to develop a privacy interface for users.
  • Facebook to simplify privacy tools
    Facebook has announced that it will release simpler privacy options in the face of a growing storm over the company's drive to encourage more people to publish more information online by default.

News

Facebook rolls out new third-party app security policy

01 July 2010

Facebook is taking further steps to make good on its pledge to simply user privacy settings and increase security of personal information by requiring third-party developers to obtain permission when connecting to their applications and websites.

The latest move by Facebook to quell the uproar over its privacy settings requires third-party developers to request and receive permission from account holders for access to personal information stored in user profiles.

Henceforth, Facebook users attempting to access a new third-party application or website on the service will see a pop-up permissions box outlining the type of information to be shared.

“With this new authorization process, when you log into an application with your Facebook account, the application will only be able to access the public parts of your profile by default”, said Facebook CTO Brent Taylor in a blog posting. “To access the private sections of your profile, the application has to explicitly ask for your permission.”

Infosecurity notes that this opt-in data sharing feature has been advocated for by numerous privacy supporters, and is an apparent about face for a company that, just several weeks ago, said their privacy policies were “entirely proper” and little more than a “backlash to a public relations failure”.

Nonetheless, the Facebook CTO would go on to say that personal information, in the company’s view, belongs to the user and that sharing of that data should be easily controlled.

“If at any point you ask a developer to remove the data you’ve granted them access to”, added Taylor, “[then] we require that they delete this information.”

 

This article is featured in:
Application Security Compliance and Policy

 

Comment on this article

You must be registered and logged in to leave a comment about this article.