Ignoring Facebook’s privacy options–some of them fairly new and not well known–can trip up the social-networking site’s users in a number of ways. Here are some that everyone who has a Facebook account should be aware of.
Note: Take a look at this Privacy Watch column for another discussion of privacy on Facebook. And if you have a Facebook account, you may have a Twitter account as well. See our companion article on avoiding Twitter disasters.
Oversharing With the Boss
The disaster: Ann played hooky from work, calling in sick, and spent the day sunbathing, updating her Facebook status on her laptop all the while. The next day, her boss confronted her with the evidence that she wasn’t really ill, causing severe embarrassment and a reprimand (plus a day of docked pay).
The solution: In this day and age, professional and personal lives often become intertwined, and Facebook can be ground zero for this. You might momentarily forget that you have “friended” your boss, and that he has the same access to your ramblings on Facebook as do your real-life drinking buddies. But you can change that.
Using Facebook’s Lists settings might have made the most sense for Ann. Lists, one of the newer features of Facebook, allow you to organize people into groups and then assign each group different levels of access to your information on Facebook.
To work with Lists, click the Friends button (top bar) and +Create in the left column under Lists-or just put people on any list by using the ‘Add to list’ drop-down menu next to their name.
Next, you need to specify how much of your information on Facebook members of each list can see. To do this, visit the Privacy Settings page (hover over ‘Settings’ in the top right of the screen, and click Privacy Settings inside the box that pops up; or go to www.facebook.com/privacy), then select Profile. Here, select Customize… from the drop-down menu next to whichever section you’d like, and type the name of the list in the box under ‘Except These People’. For Ann, dropping her workmates into a “work” list and dialing down that group’s access to the bare minimum would have saved her a lot of trouble. Specifically, she should change the ‘Status and Links’ setting so as to exclude the Limited Profile list. (Note, however, that updates to your profile from third-party applications are generally not blocked by these privacy settings.)
UPDATE (4PM 6/24): With Facebook’s just-announced status publisher upgrade (now in beta), you will (or will soon) see an option (a gray lock with a dropdown menu) letting you control who sees these updates on an individual basis. For broad posts, “Everyone” will let the whole world (including Google and other off-Facebook locations) see the update. For more sensitive posts you can change the setting to “Friends” – or use fine-grained control through “Custom,” restricting the post to be visible only to certain friend lists.
He Knows Where You Live
The disaster: Getting far away from ex-boyfriend Bob wasn’t the main reason Mary moved to Pittsburgh, but it was one of the main benefits. So when Bob showed up at her new job, she was naturally disturbed. How did he find out where she was, she asked. “It was on your Facebook profile,” he replied.
The solution: All users have extremely fine-grained control over what gets on their Facebook page, but few take full advantage of these features.
‘Profile’ lets you choose whether to block people from seeing anything beyond the most basic information (name and network) on your profile page, while ‘Basic Info’ allows viewing of gender, birthday, relationship status, and the like. ‘Personal Info’ opens the door a little wider-to your “about me” section, interests and favorites, and so on; ‘Status and Links’ controls who can see your latest status update. Most of the categories are self-explanatory (just click the question-mark icon if you need help) and can get pretty detailed. But this is also an advantage: If, like Mary, you don’t want to advertise where you work, you can turn off that detail here.
Also, click Save Changes at the bottom of any Facebook settings screen, or your settings will not be updated.
What should you change these settings to, then? Facebook offers numerous choices for each category: Everyone, My Networks and Friends, Friends of Friends, Only Friends, and Customize. Everyone is self-explanatory; My Networks and Friends is less inclusive, limiting profile viewing to anyone you’re friends with or with whom you share a network; Friends of Friends essentially gives you two degrees of openness instead of one; and Only Friends is exactly how it sounds.
The Stalker Problem
The disaster: Jessica is worried about the creepy messages and Wall posts being left by some guy she doesn’t know but whose friend request she accepted. She doesn’t want to delete her account, but she does wish to get rid of the stranger and set her profile to be discovered only by those people she allows.
If the person persists in friend requests, you can block the stalker altogether by going to the Privacy page and typing their name in the search box in the ‘Block People’ region. Standard Facebook-style search results will pop up; just click Block Person next to their name, and they won’t find you in a search, or view any part of your profile.
For a stronger level of privacy and security, you can temporarily “go dark” by making your profile virtually invisible. Go to the Privacy settings page and click Search. Set the Search Visibility drop-down selection to Only Friends. This tells Facebook not to show your profile in public searches on the site.
The Search Result Content section lets you choose whether to show photos or lists of friends and links. If you don’t want to be contacted at all, remove the check marks by both options.
You can also use the Public Search Listing option to allow or prevent your profile from appearing in major search engine results such as those of Google.
Too Many Pieces of Flair
The disaster: Donna has accepted one too many gifts of Star Wars figurines and cutesy buttons–and now her profile page is stuffed with enough frivolous junk to embarrass a fourth-grader. That page didn’t go over well with the hiring manager at the job she was applying for. She heard through the grapevine that she didn’t get the gig because he found her page and thought she wasn’t serious enough to merit an offer.
The solution: Paring down the digital clutter isn’t as tough as cleaning out the garage, but it does take some effort. However, if you allowed, say, a trivial quiz to drop a box into the left column of your Info page, it’s relatively easy to get rid of. Just click the pencil icon located in the top-right corner of the box and then select Remove Box.
Next, turn an eye toward locking down what applications-whether they appear on your page or not-are permitted to post to your account. On the Privacy Settings page, click News Feed and Wall, and you can start paring down the amount of junk that Facebook uses to automatically populate your Recent Activity. What you choose here is a matter of personal preference, and how spare you want your page to appear. Unchecking boxes on this page means fewer items on your profile. The selections are largely self-explanatory, so tweak at will.
But just removing an application box on your Profile page does not remove the app from your profile completely. To do that, you have to go behind the scenes a little. Click the Applications button at the bottom left of the page, and then click Edit Applications in the menu that pops up. Change the ‘Show’ drop-down to ‘Authorized’, and you’ll see every application that you have given access to your profile. If you’re like me, you’ll have dozens and you won’t remember most of them.
First, delete anything you no longer use (or want to use) by clicking the X, then Remove at the pop-up. For the apps you wish to keep, you can make them less chatty by clicking Edit Settings. Click Additional Permissions and uncheck Publish recent activity to my wall, and you’ll no longer see updates when you play a Facebook game or send a goofy “gift” to your girlfriend.
Shoulda Been Working
The solution: Putting aside whether he should have been playing the game, Dylan would have been better served by turning off the ability for third-party Web sites to post to his profile, a feature known as Facebook Beacon.
To disable this, visit Privacy Settings, then Applications. Click the Settings tab. Scroll down and check Don’t allow Beacon websites to post stories to my profile, under the Facebook Beacon header.
The Tell-Tale Heart
The disaster: Nancy broke up with her boyfriend and changed her relationship status to ‘single’. Now a giant red heart is announcing her newfound availability to the world. An item in the right-hand ‘Highlights’ column announces the fact to all her friends. The trouble is, the thing looks like a singles ad.
Smile for the Camera
The disaster: Someone tagged Ben in a photo on Facebook, and he hates the shot, taken at a party–his eyes are closed, and he’s clearly inebriated.
The solution: While you can’t delete someone else’s photograph (try asking nicely), it’s easy to remove a tag of yourself from any picture, which will remove it from Facebook’s ‘View Photos of Me’ pages. To do so, just find the offending picture and click remove tag next to your name in the caption. Once the tag is removed, you won’t be able to be retagged on that particular photo.
You’re Not an Advertisement
The disaster: Bruno was horrified to discover that his name was attached to an ad that was spammed to his friends without his permission. What gives?
Spam Central
The disaster: Kris woke up one morning to discover that her Facebook friends had been spammed with a message, “Check out mygener.at.” She didn’t send the message, and is reasonably worried that her account was hacked.
Indeed, Facebook is becoming a popular target for scammers, phishers, and spammers. The method typically used involves a phishing site (often with ‘.at’ in the URL) that looks just like Facebook and thereby tricks you into giving up your password and user name. The site then takes control of your account and begins spamming your contacts with the phishing site’s URL in the hopes of obtaining even more log-ins.
The solution: Conventional security software won’t help much with attacks like this–though antiphishing add-ons can help to some extent–so using common sense is our best advice. Keep your password private, and make sure the site you’re visiting really is Facebook and not a malicious knock-off.
Get a Vanity Facebook URL
You wouldn’t host your personal Web site on a Tripod account with a randomly generated URL. So why should you settle for a Facebook page whose URL is indicated by nothing but a numerical ID?
Memorable Web Address (apps.facebook.com/webaddress/) gives you a vanity URL that redirects to your Facebook profile (or any page or group); for example, ‘http://profile.to/null’ instead of ‘http://www.facebook.com/profile.php?id=718386140′. If you would like to put your Facebook link on your business card or e-mail signature, this is a convenient way to de-uglify things considerably. (Of course, you can also use your favorite URL-shortening service to do a similar job, too.)
Set Facebook’s E-Mail Permissions
