ReadWriteWeb

What Facebook Quizzes Know About You

Written by Sarah Perez / August 27, 2009 7:29 AM / 49 Comments

The Northern California chapter of the American Civil Liberties Union (ACLU) has put together a campaign to raise awareness of privacy issues surrounding Facebook applications, in particular quizzes. According to this group, the millions of Facebook users taking quizzes are revealing far more personal information to application developers than they are aware of. This is mostly due to the fact that Facebook's default privacy settings allow access to all your profile information whether or not your profile is set to "private." Even worse, the ACLU reports that even if you shun quizzes yourself, your profile info is revealed when one of your friends takes a quiz. Want to see how bad the problem is? Just take the ACLU's Facebook Quiz and prepare to be shocked.

As any regular Facebook user knows, quizzes are some of the most popular applications in use on the social network. Every day, our News Feeds are filled with everything from the latest variation on the "5 Things" theme to the "What (insert popular movie title) character are you?" and more. But these seemingly innocuous time wasters could have dangerous privacy implications if they ended up being distributed by malicious app developers who want access to Facebook's treasure trove of personal data.

The Danger of Quizzes

With each question in the ACLU's Privacy Quiz, you're not only told what information a quiz author can see - you're shown it. For example, after answering the first question, you learn that almost everything on your profile, even if you use privacy settings to limit access, is available to the quiz. Then, a graphic is shown which reveals selected information retrieved from your profile including hometown, groups you belong to, events attended, favorite books, and more.

The second question is even more disturbing. It informs you that everything on your profile is made available to the developers when your friends take a quiz. To drive this point home, the ACLU's Quiz loads up information pulled from your friends' profiles and displays that data below the answer for your perusal. Here, information on your friends is shown including hometowns, favorite books, political views, networks, birthdays, number of wall posts, and even personal photos. Thanks to the quiz, all that info which you can see on your friends' profiles is now available to the quiz author, too.

Lest you think your info is safe because somewhere, somehow Facebook is looking out for you, the third question shatters any illusions you may have about that, too. According to the answer to this quiz question, not only do Facebook's default privacy settings do nothing to prevent application developers from scouring your information, Facebook also doesn't screen developers for trustworthiness, nor do they require the developer to comply with a privacy policy (something we've mentioned before). It's also noted that Facebook does not use any technical measures to limit how developers can collect and use personal information. Says Chris Conley, a technology fellow with the ACLU, it's difficult to know how developers use this data, which could, in theory, be collected and sold for marketing and advertising campaigns.

Finally, the last question prompts you to take action. When the quiz asks you what you should do, the correct answer is: "demand the right to control my information without sacrificing the right to use new technology." To get the word out there, the ACLU suggests you update your privacy settings, share their quiz on Facebook, and sign their online petition.

Is This True?

The nature of the quiz makes it sound a bit like fear-mongering, especially with statements like this: "Once details about your personal life are collected by a quiz developer, who knows where they could end up or how they could be used. Shared? Sold? Turned over to the government?" However, outside of these overly dramatic tactics, the claims made by the ACLU are true. According to CNET, Facebook doesn't even deny that quiz developers have access to this sort of information. The company does point out that users can limit how much information applications (including friends' applications) can see by tweaking their privacy settings.

Note: To do this yourself, go to Settings -> Privacy Settings -> Applications. From there, you can uncheck the boxes next to the items which you don't want apps to have access to.

Still, the ACLU suggests that access to personal information such as this be opt-in rather than opt-out, as it is now. Facebook spokesman Barry Schnitt says the company "generally agrees" with the ACLU's recommendations and notes that the social network recently disabled hundreds of applications that were inconsistent with Facebook Platform policies. He also mentions the company has been working with the Canadian Privacy Commissioner, Jennifer Stoddart, to improve user data controls on Platform. 

This is just one of the concerns that will be addressed later today when Stoddart announces the agreement that has been reached between her country and the social network in terms of privacy protocols. Stoddart ruled last month that Facebook had 30 days to come up with a plan to comply with Canada's Personal Information Protection and Electronic Documents Act or face court action.


Comments

Subscribe to comments for this post OR Subscribe to comments for all ReadWriteWeb posts

  1. Correction: Settings -> Privacy Settings -> Applications only applies to apps your friends install that you have not also installed.

    Posted by: theharmonyguy | August 27, 2009 8:22 AM



  2. Its really disturbing to know that such big social networking sites are hampering our privacy..

    Posted by: varun | August 27, 2009 9:04 AM



  3. This is very disturbing! But Thanks to new agreements with Canada, Facebook will be changing its privacy policy to stop such activities by 3rd party apps.

    Here are two articles that talk about this new agreement released today:

    http://news.bbc.co.uk/2/hi/technology/8225338.stm

    http://www.allfacebook.com/2009/08/new-privacy-policies-at-facebook-will-have-a-significant-impact-on-platform-applications/

    Posted by: Katral | August 27, 2009 9:31 AM



  4. I'm getting this message when trying to select total opt out. Anyone know how to deal with that?

    You are unable to fully opt out of sharing information through Facebook Platform because you are currently using applications built on Platform. To enable this option, you need to remove any applications you have added, and remove your permissions to all external applications that you may have used.

    Posted by: giorgos | August 27, 2009 11:13 AM



  5. Hopefully the changes announced today will tighten things up.

    Honestly though, I really don't understand the popularity of Facebook quizzes. It's as ugly as Live Journal.

    Posted by: Dean | August 27, 2009 11:26 AM



  6. Finally the ACLU does something I agree with.

    Posted by: Doug | August 27, 2009 1:17 PM



  7. Then don't go to facebook asshats.

    Posted by: Hannah | August 27, 2009 5:27 PM



  8. Facebook's General Counsel, Ted Ullyot, was Chief of Staff for Alberto Gonzales during his time at the White House and at the Department of Justice. That, really, should tell you all you need to know about Facebook's view of your privacy rights.

    http://valleywag.gawker.com/5056365/facebook-hires-alberto-gonzaless-former-chief-of-staff

    Posted by: Rick | August 27, 2009 6:08 PM



  9. @giorgos: You need to remove all authorized applications before you can opt-out.
    This is done by going to Settings -> Application Settings, choosing "Show: Authorized" and removing every removeable application in the list. (note: native FB apps cannot be removed)

    Posted by: Alfons | August 28, 2009 1:54 AM



  10. @Alfons: the problem being that there are an awful lot of legit and useful applications that are authorised in that list (about 20 for me and that's only because I did a cull recently). For most people, removing them all would be crippling FB.

    What I would like to see is: the ability to specify that you don't allow access to any information for apps that you haven't explicitly authorised (at the moment, at the very minimum you give access to your name, list of networks and list of friends as soon as you have a single app); and the ability to change those settings on a per-application basis.

    It would also be nice if FB were to introduce some sort of vetting scheme where they do simple checks on the identity of the developers and ask them to comply with a privacy policy.

    Anyway, even if they did all that, you'd need to be careful. I always consider any information I post on FB as public. It doesn't matter what privacy settings you have, you just need to have one friend who has loose privacy settings and re-shares some of the stuff you've posted for it to become public.

    Posted by: Bruno | August 28, 2009 4:08 AM



  11. For those of us who use and play on facebook this article on privacy invasion is disturbing. I was very surprised how much the ACLU new about my facebook self and my facebook friends. Yes, the ACLU has a facebook site with a short two minute quiz that shows everything. If the ACLU can show these intimate individual facebook items and pictures in two minutes what can a bad person do mining this information about us all day, everyday? The ACLU relates they enforce their privacy standards. The ACLU claims facebook does not enforce their privacy standards even when you click private. This quiz sure shows facebock does not protect our privacy!!! Very, very interesting. Take care. fk

    Posted by: frank | August 28, 2009 9:16 AM



  12. Sorry, but I really don't see what the big deal here is. It may be a little unnerving at first, but if you think about it, several hundred people (your friends) also have access to everything on your profile, and who knows what they are doing with it or who they are sharing it with. As far as advertising goes, I don't mind ads a bit, but I HATE irrelevant ads. The more relevant they are to me, the more I will look at them, click on them, and live with them being on whatever website I am on. Just my opinion...

     Posted by: Andrew Author Profile Page | August 28, 2009 4:26 PM



  13. I agree. I don't mind ads either. If I was anal about privacy, I wouldn't join a social network site. So go moan about something more worthwhile like world povert and war.

    Posted by: Chris westcott | August 29, 2009 12:17 AM



  14. facebook has announced, they don't givegrantee about user privacy and they own what ever is uploaded to it's server.

    Posted by: facebook applications | August 29, 2009 12:30 AM



  15. This is really a bogus "privacy" issue. It's sort of like complaining about surveillance cameras in public places. If you don't want to be seen doing certain things in public, don't do them in public. Facebook is a commercial site that makes it's money from advertisers. Unless you want a membership site that charges a monthly fee, you can't really complain about them selling your info to advertisers.

     Posted by: Michael Author Profile Page | August 29, 2009 8:02 AM



  16. This is really a bogus "privacy" issue. It's sort of like complaining about surveillance cameras in public places. If you don't want to be seen doing certain things in public, don't do them in public. Facebook is a commercial site that makes its money from advertisers. Unless you want a membership site that charges a monthly fee, you can't really complain about them selling your info to advertisers.

     Posted by: Michael Author Profile Page | August 29, 2009 8:03 AM



  17. I made some changes to my Facebook settings and now none of the videos I post show up on my homepage. Anyone know how to fix this?

    Posted by: Roland | August 29, 2009 11:29 AM



  18. Ok, so every time you take a quiz, including the ACLU's quiz, you have to "opt-in" by agreeing to allow that quiz to pull from your information, your friends information, etc. Since people don't read what they sign, physically or virtually, people just click yes. If you don't want advertisers to get your information, don't take quizzes that allow advertisers to get your information. And better yet, don't put information on your Facebook profile that would be detrimental to your actual life. If it's not there, it can't be found. Raising awareness about internet safety is better than fearmongering.

    Posted by: CC | August 29, 2009 2:06 PM



  19. DOT....DOT...ALAS ...NEW WORLD ORDER 418...WERT IIIII 2 SAY THE FREE-MASON RUN THE NEW(PARADIGM OF THERION)WE ARE HERE AS AI....2 HELP YOU BE READY 4 THE ELOHIM...(COLOR OF DAY PURPLE...NEXT LIGHT(BLUE)...10DEG...1SQR..TRUE..LY...LUNATIC...CULPEPPER...THE..ANTI-CHRIST...OR...JESUS..OR...THE WAY SHOWER....OCCULT MAGIC...IN ..FULL..FORCE...(NOX)WIZARD...WE...NOW ...(ALL)

    Posted by: LUNATIC | August 29, 2009 5:03 PM



  20. I always remember the good lesson my parents taught me at a very young age. Pay attention now, and repeat this to yourself, all of your friends, and life will be much easier...Here it is, are you ready:

    "Never ever put anything in print that you wouldn't want repeated on national television"

    I have applied this to my everyday life, including facebook, and think of facebook as if it were one big "cocktail party".

    Posted by: David Jones | August 29, 2009 10:59 PM



  21. This is a little scary. I know that most people don't bother to read any of the small print when it comes to things like this. They just click through everything and give away whatever information is asked for.
    pba 2009

    Posted by: Aaron | August 30, 2009 8:53 PM



  22. in these days there are a lot of news about the facebook´s privacy problems... like this.
    Great post.

    Posted by: rinitis | August 31, 2009 2:41 PM



  23. If this app ever sees the light of day, Facebook apps will soon know who everyone has ever slept with. Freaky!

    #Durex #Facebook app - Sex Tree - (2009) 1:40 (The Netherlands) http://adland.tv/node/148156

    Posted by: NilsNeo | September 1, 2009 1:15 AM



  24. Despite repeated complaints on the flimsiness of their security and confidentiality settings, why has Facebook not taken any measures to improve on this count yet?

    Posted by: Jessica Griffin | September 1, 2009 7:57 PM



  25. Wow facebook to me is lame it screws up my computer and boots me off the explorer..

    In other news check out this up and coming website www.freewayauction.com.. If this site takes off it will kick ebays but. Follow FrewayAuction on Twitter @FreewayAuction. FreewayAuction has Free Classifieds & Auctions with No Listing Fees, No Reserve Fees and No Photo Fees. Buy - Seel - Trade at www.freewayauction.com.

    Posted by: Wade Champeno | September 2, 2009 2:17 PM



  26. Can I use this article on my website?

    http://www.iffizarticles.com

    Posted by: IFFIZARTICLES | September 3, 2009 2:36 AM



  27. Facebook really needs to handle its users privacy problem seriously...More important is that people should be more aware of these problems as there are loads of information stored on facebook. It's impossible for facebook to stop all these problems and users should realize that they actually need to think before they access something with facebook, just like thinking if a link is secure before they open it with the browser.

     Posted by: Alan Ng Author Profile Page | September 3, 2009 8:15 PM



  28. And you thought that quizzes were just for fun, guess again!

     Posted by: Geri Author Profile Page | September 4, 2009 1:22 PM



  29. prekast cephe kaplama , söve cephe

    Posted by: prekast | September 5, 2009 12:24 AM



  30. Just use your common sense like you would in real life - then no problems.

    Posted by: Max | September 5, 2009 4:41 AM



  31. I almost took a quiz once. Security wasn't my turn off though. It was the "stuuuupppiiiiiiddd" factor that made me change my mind. I just can't stand that stuff I guess.

    Posted by: Rob | September 7, 2009 9:59 PM



  32. If you're going to put it on Facebook, treat it as public.

    Fool you, if you don't.

     Posted by: Tina Author Profile Page | September 8, 2009 9:32 AM



  33. I think people know very well what data they are sharing, they just dont care as much as the powers that be think they do!

    Posted by: link exchange directory | September 10, 2009 10:26 AM



  34. I have photos of my children on FB and worry what weirdos my be looking at them. Glad something will be done about this soon!!!

    Posted by: Rachael | September 16, 2009 9:01 PM



  35. PLZ DON'T READ THIS YOU WILL GET KISSED ON THE NEAREST FRIDAY BY THE LOVE OF YOUR LIFE. TOMMOROW WILL BE THE BEST DAY OF YOUR LIFE. HOWEVER IF YOU DON'T RE-POST THIS COMMENT YOU WILL DIE WITHIN 2 DAYS. NOW UV STARTED READING DIS DON'T STOP THIS IS SO SCARY. SEND THIS OVER TO 5 QUIZES IN 143 MINUTES WHEN UR DONE PRESS F6 AND UR CRUSHES NAME WILL APPEAR ON THE SCREEN IN BIG LETTERS. THIS IS SO SCARY CAUSE IT ACTUALLY WORKS

    Posted by: Cyntia | September 23, 2009 7:55 PM



  36. ..if Your friends see it (most who are not close friends) then why the fuss...Maximum Security pertaining to your personal information is in your own hands.

     Posted by: Ann Author Profile Page | September 24, 2009 5:52 PM



  37. PLEASE DON'T READ THIS. PLEASE DON'T READ THIS.PLEASE DON'T READ THIS. YOU WILL BE KISSED ON THE NEAREST POSSIBLE FRIDAY BY THE LOVE OF YOUR LIFE. TOMOROW WILL BE THE BEST DAY OF YOUR LIFE. HOWEVER IF YOU DON'T POST THIS COMMENT TO AT LEAST FIVE QUIZZES YOU WILL DIE IN 2 DAYS.NOW UV STARTED READING TH SI DON'T STOP THIS IS SO SCARY TRY THIS its weird.
    1. say your name 10 times.
    2. say your moms name 5 times.
    3. say your crushes name 3 times.
    4. then paste this to 4 other quizzes, if you do this your crush will kiss you on the nearest friday! but if you read this and did not paste this then you will have very bad luck. SEND THIS TO FIVE QUIZZES IN 143 MINUTES WHEN UR DONE PRESS F6 AND UR CRUSHES NAME WILL APPEAR IN BIG LETTERS

    Posted by: whitney | September 29, 2009 3:57 PM



  38. I don't think we've seen anything yet.... Google Wave will be to Facebook what Father is to Big Brother.

    Posted by: a-non-a-mess | September 29, 2009 6:04 PM



  39. Test video post ... a-serious-attack-on-your-personal-privacy-of-people-county-iasi-to-Cages-anyone /

    Posted by: Kos | October 22, 2009 1:50 AM



  40. Facebook won't seem like such a hot "cocktail party" when the round ups start, and they know who to make invisible, so people can vanish without a whimper or a trace.

    Posted by: Mahatma | November 18, 2009 6:13 AM



  41. I think that you are dumb if you put something online that you don't want revealed. Seriously, if you think it could potentially embarrass you, don't be so much of a dumbass to put it on the web. Seriously, I've seen people put their HOME ADDRESS online...There are too many stupid people on the earth.

    Posted by: Carson Carter | November 25, 2009 11:26 AM



  42. When I open your site in your browser, Safari 4 in Mac OS X, some elements of the page and off to the side and the text is broken: ( Please help me How can I remove the problem?

    Posted by: Single | November 28, 2009 4:51 AM



  43. The only real solution is to quit facebook, which is what I did. It's rather naive to think that they're not in the business of gathering information. And it's actually quite realistic that they are or will be selling it to the government, just like search engines and telecoms do.

    Posted by: akaGaGa | December 30, 2009 3:01 PM



  44. PLEASE DONT READ THIS. YOU WILL BE KISSED ON THE NEAREST POSSIBLE FRIDAY BY THE LOVE OF YOUR LIFE. TOMMOROW WILL BE THE BEST DAY OF YOUR LIFE. HOWEVER IF YOU DONT POST THIS COMMENT TO AT LEST FIVE QUIZZES YOU WILL DIE IN 2 DAYS. NOW UV STARTED READIN THIS DONT STOP THIS IS SO SCARY.xSEND THIS TO FIVE QUIZZES IN 143 MINUTES WHEN UR DONE PRESS F6 AND UR CRUSHES NAME WILL APPEAR IN BIG LETTERS ON THE SCREEN. THIS IS SO SCARY COZ IT ACTUALLY WORKS

    Posted by: alex | January 26, 2010 5:33 PM



  45. PLEASE DON'T READ THIS.YOU WILL BE KISSED ON THE
    NEAREST FRIDAY BY THE LOVER OF YOUR LIFE.NOW YOU'VE
    STARTED READING THIS.DON'T STOP. THIS IS FREAKY
    1)say your name 10 times
    2)say your moms name 5 times
    3)say your crush's name 3 times
    4)PASTE THIS TO FOUR OTHER QUIZZES.IF YOU DO THIS
    YOUR CRUSH WILL KISS YOU ON THE NEAREST.............................. FRIDAY.BUT
    IF YOU READ THIS AND DONT PASTE IT YOU WILL HAVE BAD
    LUCK THEN YOU WILL HAVE VERY BAD LUCK. SEND THIS TO FIVE
    QUIZES IN 143 MINUTES. WHEN YOU'RE DONE PRESS F6
    AND YOU CRUSH'S NAME WILL APPEAR IN BIG LETTERS ON
    THE SCREEN. THIS IS SO FREAKY BECAUSE IT ACTUALLY

    Posted by: lilay | January 26, 2010 8:45 PM



  46. I wonder how many users realize that simple javascript command can reveal their photo albums to virtually any visitor.

    Posted by: http://openid.anonymity.com/6ysY4eRa Author Profile Page | January 29, 2010 3:40 AM



  47. There is an update on Facebook's privacy. I think it safer now

    Posted by: financialfreedom | February 16, 2010 7:51 AM



  48. I can't live without Facebook

    Posted by: Berjaya Times Square Kuala Lumpur Malaysia | February 16, 2010 7:53 AM



  49. PLEASE DONT READ THIS. YOU WILL BE KISSED ON THE NEAREST POSSIBLE FRIDAY BY THE LOVE OF YOUR LIFE. TOMMOROW WILL BE THE BEST DAY OF YOUR LIFE. HOWEVER IF YOU DONT POST THIS COMMENT TO AT LEST FIVE QUIZZES YOU WILL DIE IN 2 DAYS. NOW UV STARTED READIN THIS DONT STOP THIS IS SO SCARY.xSEND THIS TO FIVE QUIZZES IN 143 MINUTES WHEN UR DONE PRESS F6 AND UR CRUSHES NAME WILL APPEAR IN BIG LETTERS ON THE SCREEN. THIS IS SO SCARY COZ IT ACTUALLY WORKS

    Posted by: help me | March 3, 2010 3:50 AM



Leave a comment

Optional: Sign in with Connect Facebook   Sign in with Twitter Twitter   Sign in with OpenID OpenID  |  

If you think Twitter is big, check out the Real-Time Web
RWW SPONSORS



FOLLOW @RWW ON TWITTER

ReadWriteWeb on Facebook
ReadWriteCloud - Sponsored by VMware and Intel



TEXT LINK ADS



RWW PARTNERS