Hot on HuffPost Tech:

See More Stories
AOL Tech

Facebook API Hole Displays User Events to the World

Shortly after Facebook unveiled its expansive, Internet-swallowing Graph API system last week, people began raising questions about how the social networking site would weigh its grandiose ambitions against persistent concerns over user privacy. One curious engineer took it upon himself to investigate the new system more carefully, and, as it turns out, Facebook flunked.

Google software engineer Ka-Ping Yee discovered the lapse while toying around with the Graph API search query system. As Yee found out, searching for a given person in the system will often bring up a full list of the events that he or she is planning to attend, or has already attended. Most worrisome to Yee, though, was the fact that he couldn't figure out a way to keep his event information from leaking out. "I didn't opt in for this," the engineer wrote on his blog. "I even tried setting all my privacy settings for maximum privacy. But Facebook is still exposing the list of events I've attended, and maybe your event."

It's important to note that not everyone's social calendar slips through Facebook's cracks (although, as Yee made clear, Mark Zuckerberg's definitely does). And the list of events you're planning on attending may not be as confidential as, say, the contents of your message inbox. Yee, however, argues that your events calendar can reveal a lot more than you may think, including "your home address, your friends' home addresses, the names and groups of people you associate with, your hobbies, or your political or religious activities, for example."

How can you get around it, then? Yee thinks everyone should just click the 'Not Attending' box next to every invitation they receive. But before driving a stake through the heart of your online social calendar, it's worth heading over to zesty.ca/facebook, where you can search for your profile and see exactly what information is made public. Even if none of your vital data pops up, though, it's still pretty troubling to think that it does for some people. If the social networking site truly wants to realize its lofty goals, it must first acknowledge its ultimate reliance upon user confidence and trust -- both of which will only erode if Facebook doesn't plug its holes. [From: TheGuardian and ZestTyping]

Tags: api, engineer, events, facebook, FacebookApi, google, privacy, security, socialnetworking, top, web

Comments

11