Facebook's privacy controls are seriously broken

Want to make your Facebook profile only visible to your friends? Good luck with that. It may not even be possible.

By Dan Tynan  12 comments

I've spent a fair amount of time lately messing about with Facebook's privacy settings, which is almost like having a life, but not quite. Then I discovered something odd and disturbing: I cannot make all of my "likes and interests" private so that only my friends can see them. Even when I tell Facebook to do it, it won't -- they're still visible to anyone who looks up my Facebook profile.

Is it a bug? Was it something I said? Was it all those jokes about Facebook causing venereal disease or because I published a nude photo of Mark Zuckerberg? I dunno. But whatever the reason, even with every single Facebook setting turned to "friends only," anyone on Facebook can still see the 128 groups I have joined on the site. To wit:

Tynan's facebook likes aren't private

To see if this was a fluke, I tried the same thing with the lovely but entirely fictitious Eve Sarcasta, an account I created so I could test out Facebook apps and quizzes without getting slime all over my personal account. (Yes, I know, I'm not supposed to create fake accounts on Facebook. Sue me.)

Here's Eve's public profile using Facebook's default settings:

eves facebook profile public version

Here's Eve's account after I changed all of her settings to "friends only" and removed access to her information from her friends' apps, Google search, etc:

eves private facebook profile

As you can see, I was able to make Eve's account pretty (though not entirely) private, listing just her name, gender, photograph, and extreme hotness. (That photo is the luscious, and very real, Claudia Lynx, if you're interested.) So there's clearly something different about my account, possibly because it's older and contains information Facebook's privacy controls no longer can address. Or possibly something else. It's a mystery.

Here's the bigger point. Want to know how many clicks it took me to get Eve almost totally private? 50. Yes, the big Five-O.

In other words, to tweak your account so that only your friends can see it (which, if I recall correctly, was how Facebook started out), it requires sifting through roughly a dozen menus and clicking "Friends Only" 50 times. Fifty clicks. Even more if you count the various clicks to go up and down Facebook's hierarchical privacy controls and to confirm my changes.

Fifty (50) times.

That's not just ridiculous; it's obscene.

I have a proposal for Facebook, one I think they should consider very seriously. Instead of making you click 50 times so that only your friends can see your information, I suggest a smaller number: 1.

One-click privacy, just like Amazon's one-click shopping. One button that instantly reduces every sharing option to the bare minimum. And then put that button right on the accounts page so people don't have to go looking for it.

Call it The Power of One. I think I heard that somewhere. Call it FaceOne or OneBook. Call it whatever you like, I don't care.

Of course, from their perspective, Facebook wants to make it hard for you to opt out. They need you to share as much information as widely as possible if they're going to make Google-like money on targeted ads. So if half of their 400 million subscribers clicked that one-button opt out I am lobbying for, it would probably make Mark Zuckerberg cry.

Too bad. Until Facebook makes privacy as easy as its "Like" button, any claims that it "takes your privacy very seriously" cannot be taken very seriously.

I'm going to ask the Facebook press folk to respond to this post; I'll let you know what they have to say.

When not busy not-having a life, award-winning journalist Dan Tynan tends his garden of snark at eSarcasm, the Web Site That Gives and Gives and Gives and Asks Nothing in Return (tm).

Follow Dan on Google+

Author Dan Tynan has been writing about Internet privacy for the last 3,247 years. He wrote a book on the topic for O'Reilly Media (Computer Privacy Annoyances, now available for only $15.56 at Amazon -- order yours today) and edited a series of articles on Net privacy for PC World that were finalists for a National Magazine Award. During his spare time he is part of the dynamic duo behind eSarcasm, the not-yet-award-winning geek humor site he tends along with JR Raphael.

12 comments

    Anonymous 1 year ago
    hey just want , you are ****, because 1st of all people come facebook only to share things and make new friends, if you dont like the way it is, 1st you deactivate your profile from facebook, and start your own networking busines(talkinh nonsence)..... Before wrighting article get approved from your seniour
    Anonymous 1 year ago
    I have limited my Facebook information to a minimum. I even altered my year of birth. Yesterday after opening a new window (Facebook window was open too) and I surfed to CNN. To m pig surprise I found some familiar faces on the CNN site - my friends from Facebook who had shared their CNN pages ond Facebook. I still don't get it how could CNN know that they were my friends. I have never subscribed to CNN.
    Anonymous 1 year ago
    I deleted every one of my groups and pages, so if someone were to find me via the search engines, nothing save for my friends shows. If someone "within FB who is not my friend" sees me, they can still see the "mutual friends." As far as I can tell, the only solution to this is to delete all friends who are mutual, and finally, deleting all of my friends, as I wouldn't want THEIR life exposed because of me. Then, only my pic shows. But, what would I do without any friends...
    Anonymous 1 year ago
    If all of you are so upset and whacked out about Facebook's privacy then just quit. Delete your account. Here's an idea, don't put stuff you don't want other to possibly see on Facebook. GASP! What a concept! This whole business about a "one-click" function to control your privacy settings is absurd. What one person wants private can be completely different from another. There is no such thing as being "completely private" in the world of social media/networking. Below is a link to a great article regarding Facebook and this privacy issue. Please try to direct the anger across multiple platforms, not just one.http://bit.ly/ckX4ho
    Anonymous 1 year ago
    I noticed the same exact thing when I was reviewing the new settings and trying to get it all private!!!
    Anonymous 1 year ago
    From the very beginning, I had my facebook profile locked up and private. There isnt really much about me that anyone would really want to know... until... I discovered Stalkers. Stalker might be a strong word, but there are some seriously BORED people out there who follow your every move. This is what concerns me most about Facebooks privacy issues. I also have a friendless "fake" account (i set up to check privacy settings long ago). I check it often lately. I discovered that my fake account could read an entire public conversation I had with one of my friends. It wasnt something I wouldnt want people to see, obviously, but the conversation was sent to the feed (as is MOST things lately- if not every thing you do on facebook). Before you had to be friends with both people to read Wall-to-wall. Not anymore! This is just ONE of the many issues I have with the New FEED system Facebook has implemented. In Facebooks defense - at least they brought back being able to hide our friends list. Now, if they would only let me set it so people couldnt add me as a friend...
    Anonymous 1 year ago
    What about our privacy outside of the internet? Seems like there are also real intrusions that we do not choose for ourselves. Compared to our own government and US corporations - Facebook is probably the lesser evil. If only we knew - if only there was a way we could find out who knows what about us and control that information. I think we may have lost this war long before the internet came into existence. Facebook at least has made us more aware of the ease with which real or artificial information is distributed. Maybe it's time to falsify everything about ourselves.
    Anonymous 1 year ago
    It would have been nice if you published something that gave a step-by-step instruction on the 50 clicks it took to hide Eve Sarcastica's personal information.
    Anonymous 1 year ago
    When I opened my face book account, I woundered about who and what might access the info. Becasue of this, I never put much data in. Friends have questioned that before, but now they wish they had done the same. I cant hepl but wonder. if you delete info, does FB delete it, or simply remove it from you visible profile only??
    Anonymous 1 year ago in reply to Anonymous
    You have to assume that whatever you put on the internet will stay there. A wired article used an anti-abortion group as an example - suppose a facebook user wants to join an anti-abortion group, but not show everyone. Tough, it's public. Say the user figured out it's public and unjoined. By that point, a few hundred advertisers have already got your facebook account, page, name, and probably email address, associated with "anti abortion". If you "delete" a post, it's probably still there somewhere. Google's made a point of logging every search, every IP it's from, and every result clicked, and they're unabashed about it. Facebook can and will have done the same. So again, don't post anything - pictures, comments, posts, groups, likes/dislikes - you don't want etched permanently onto the internet. Your boss/friends/family might find it, if you inadvertently click the wrong privacy setting. At worst, it's openly public if facebook decides to do away with privacy all together (or "modifies" settings again). My rule of thumb has been 'if I don't want to see it on cnn.com, it doesn't get posted.' Good luck in this brave new world.
    Anonymous 1 year ago
    I also can't hide my "other pages".
    Anonymous 1 year ago
    The way Facebook is going, I wouldn't be surprised in the slightest if they deleted your legitimate account and even took legal or other action for daring to create a "false" account. I am seriously considering dumping them, despite the real value of the service.

      Add a comment

      Post a comment using one of these accounts
      Or join now
      At least 6 characters

      Note: Comment will appear soon after you have activated your account.
      Obscene/spam comments will be removed and accounts suspended.
      The information you submit is subject to our Privacy Policy and Terms of Service.

      ITworld LIVE

      InternetWhite Papers & Webcasts

      White Paper

      Smarter Commerce is redefining value chain visibility

      Smarter Commerce is redefining the value chain in the age of the customer. It starts with putting the customer at the center of your operations - which of itself is not a new idea - however, truly operationalizing this strategy is not easy.

      White Paper

      IBM Synchronizes its Commerce 2.0 Strategy with 'Smarter Commerce' Initiative

      On March 14, IBM announced "Smarter Commerce", a strategic initiative that addresses the surging market for Commerce 2.0 solutions that take advantage of the convergence of a number of disruptive software and hardware technologies.

      See more White Papers | Webcasts

      Ask a question

      Ask a Question