Wednesday, November 16, 2011

Facebook tracking is under scrutiny

Far added quietly, addition agitation is brewing over a altered ancillary of online privacy: what Facebook is acquirements about those who appointment its website.


Facebook admiral are now acknowledging that the amusing media behemothic has been able to actualize a active log of the web pages that anniversary of its 800 actor or so associates has visited during the antecedent 90 days. Facebook additionally keeps abutting clue of area millions added non-members of the amusing arrangement go on the Web, afterwards they appointment a Facebook web folio for any reason.

To do this, the aggregation relies on tracking cookie technologies agnate to the arguable systems acclimated by Google, Adobe, Microsoft, Yahoo and others in the online announcement industry, says Arturo Bejar, Facebook's engineering director.


Facebook's efforts to clue the browsing habits of visitors to its armpit accept fabricated the aggregation a amateur in the "Do Not Track" debate, which focuses on whether consumers should be able to anticipate websites from tracking the consumers' online activity.

For online business and amusing media sites, such advice can be decidedly admired in allowance them clothier online ads to specific visitors. But aloofness advocates anguish about how abroad the advice adeptness be used, and whether it adeptness be awash to third parties.

New guidelines for online aloofness are actuality hashed out in Congress and by the Apple Advanced Web Consortium, which sets standards for the Internet.

If aloofness advocates get their way, consumers anon could be empowered to stop or absolute tech companies and ad networks from tracking them wherever they go online. But the online announcement industry has dug in its heels, aggravating to absorb the accepted self-regulatory system.

Online tracking involves technologies that tech companies and ad networks accept acclimated for added than a decade to advice advertisers bear added accordant ads to anniversary viewer. Until now, Facebook, which makes best of its profits from advertising, has been cryptic in accessible statements about the admeasurement to which it collects tracking data.

It contends that it does not accord in the aforementioned affected as Google, Microsoft and the blow of the online ad industry's above players. Facebook CEO Mark Zuckerberg fabricated this point to accuser Charlie Rose on civic TV aftermost week.

For the accomplished several weeks, Zuckerberg and added Facebook admiral accept approved to analyze how Facebook and others use tracking data. Facebook uses such abstracts alone to addition aegis and advance how "Like" buttons and agnate Facebook plug-ins perform, Bejar told USA TODAY. Plug-ins are the all-over web applications that accredit you to tap into Facebook casework from millions of third-party web pages.

Facebook agent Andrew Noyes says the aggregation has "no affairs to change how we use this data." He additionally says the company's intentions "stand in abrupt adverse to the abounding ad networks and abstracts brokers that advisedly and, in abounding cases, surreptitiously clue bodies to actualize profiles of their behavior, advertise that agreeable to the accomplished bidder, or use that agreeable to ambition ads."

Conflicting pressures

Rather than allay its critics, Facebook's accessible explanations of how it advance and how it uses tracking abstracts accept affected off a battery of questions from technologists, aloofness advocates, regulators and assembly about the world.

"Facebook could be tracking users after adeptness or permission, which could be an arbitrary or ambiguous business practice," says Rep. Ed Markey, D-Mass., co-sponsor with Rep. Joe Barton, R-Texas, of a bill aimed at attached online tracking of children.

The aggregation "should be covered by able aloofness safeguards," Markey says. "The massive accession of claimed advice that Facebook accumulates about its users can accept a cogent appulse on them — now and into the future."

Noting that "Facebook is the best accepted amusing media website in the world," Barton adds, "All websites should annual users' privacy."

After Zuckerberg appeared on the Charlie Rose TV appearance aftermost week, Markey and Barton beatific a letter to the 27-year-old CEO allurement him to explain why Facebook afresh activated for a U.S. apparent for technology that includes a adjustment to associate tracking abstracts with advertisements. They gave Zuckerberg a Dec. 1 borderline to reply.

"We apparent lots of things, and approaching articles should not be accepted from our apparent application," Facebook accumulated agent Barry Schnitt says.

Facebook is beneath intense, adverse pressures.

It charge prove to its all-around banking backers that it is aces of the hundreds of millions of dollars they've caked into the company, banking and tech industry analysts say. Those investors accommodate Microsoft, Goldman Sachs, the Russian advance close Digital Sky Technologies, Hong Kong financier Sir Ka-shing Li and adventure backer Peter Andreas Thiel.

The success of the company's antecedent accessible alms of stock, accepted ancient abutting year, hinges in allotment on Facebook's adeptness to move above the bread-and-butter argument ads that arise on members' home pages and arise as a key amateur in graphical affectation ads and accumulated cast business campaigns, says Rebecca Lieb, announcement media analyst at the Altimeter Group.

In advertising, alive added about consumers' preferences is key. "More abstracts agency added good targeting, which agency added revenue," says Marissa Gluck, managing accomplice of the media consulting close Radar Research.

To accommodated ascent expectations, Facebook charge access its anniversary revenue, now estimated at about $4 billion, by double-digit allotment credibility for years to come, Gluck says. The aggregation is appetite to accumulate its options accessible to do this. In accomplishing so, it is bumping into burden from critics who are anxious that abrogation online aloofness standards absolutely in the easily of corporations adeptness not be the best idea.

Ground rules needed

Companies are accumulation tracking abstracts into fresh business models "without necessarily affectionate the abiding and aggregate consequences," says Craig Spiezle, controlling administrator of the non-profit Online Assurance Alliance.

Last week, customer anchorman Ric Romero of base KABC in Los Angeles showed how allowance companies adviser Facebook and Twitter, attractive for affidavit to accession premiums and abjure claims. Previously, ABC News anchorman Lyneka Little arise on how administration use Facebook advice as allotment of the application process.

Meanwhile, advisers at AT&T Labs and Worcester Polytechnic Institute accept accurate how tracking abstracts adopted from Internet searches and surfing can be meshed with claimed advice that Internet users acknowledge at websites for shopping, travel, bloom or jobs. Claimed disclosures fabricated on amusing networks, forth with alternative abstracts aggregate by fresh apps for smartphones and book PCs, are actuality tossed into this mix, too.

Privacy advocates anguish that afore long, corporations, government agencies and political parties could commonly acquirement tracking abstracts from abstracts aggregators.

"Tracking abstracts can be acclimated to amount out your political bent, religious beliefs, female preferences, bloom issues or the actuality that you're attractive for a fresh job," says Peter Eckersley, technology projects administrator at the Electronic Frontier Foundation. "There are all sorts of means to anatomy amiss judgments about people."

So far, it does not arise that this array of abstracts alternation is actuality done, at atomic not on a advanced scale. But in the absence of arena rules, technologists, regulators and aloofness advocates anguish that companies complex in accession tracking abstracts could accede to the allurement to banknote in.

Says Michael Fertik, architect and CEO of Reputation.com: "We can alone brainstorm that an announcement aggregation with a richer accession of abstracts will advertise added and added of that data."

Facebook's accession of data

Facebook for the aboriginal time appear accommodation of how it compiles its accession of tracking abstracts in a alternation of buzz and e-mail interviews conducted by USA TODAY with Bejar, Noyes and Schnitt, as able-bodied as engineering administrator Gregg Stefancik and accumulated backer Jaime Schopflin. Here's what they disclosed:

•The aggregation compiles tracking abstracts in altered means for associates who accept active in and are application their accounts, for associates who are logged-off and for non-members. The tracking action begins back you initially appointment a facebook.com page. If you accept to assurance up for a fresh account, Facebook inserts two altered types of tracking accolade in your browser, a "session cookie" and a "browser cookie." If you accept not to become a member, and move on, you alone get the browser cookie.

•From this point on, anniversary time you appointment a third-party webpage that has a Facebook Like button, or added Facebook plug-in, the constituent works in affiliation with the cookie to active Facebook of the date, time and web abode of the webpage you've clicked to. The different characteristics of your PC and browser, such as your IP address, awning resolution, operating arrangement and browser version, are additionally recorded.

•Facebook appropriately compiles a active log of all your webpage visits for 90 days, always deleting entries for the oldest day and abacus the newest to this log.

If you are logged-on to your Facebook annual and surfing the Web, your affair cookie conducts this logging. The affair cookie additionally annal your name, e-mail address, accompany and all abstracts associated with your contour to Facebook. If you are logged-off, or if you are a non-member, the browser cookie conducts the logging; it additionally letters a different alphanumeric identifier, but no claimed information.

Bejar accustomed that Facebook could apprentice area specific associates go on the Web back they are logged off by analogous the different PC and browser characteristics logged by both the affair cookie and the browser cookie.

He emphasized that Facebook makes it a point not to do this. " We've said that we don't do it, and we couldn't do it after some anatomy of accord and disclosure," Bejar says.

Bejar additionally accustomed "technical similarities" in the cookie-based tracking technologies acclimated by Facebook and the added online announcement industry. "But we're not like ad networks at all in our administration of the data, in the way we use it, and the way we lay aggregate out," Bejar says. "We accept a actual bright and cellophane access to how we do announcement that I'm actual appreciative of."

Even so, Facebook's accessible descriptions of its tracking systems accept not annoyed some critics — decidedly European aloofness regulators. Ilse Aigner, Germany's abbot of customer protection, aftermost ages banned Facebook plug-ins from government websites and brash clandestine companies to do the same.

And Thilo Weichert, abstracts aegis abettor in the German accompaniment of Schleswig-Holstein, bidding anxiety at how Facebook's technology could potentially be acclimated to body all-encompassing profiles of alone Web users.

"Whoever visits Facebook or uses a constituent charge apprehend that he or she will be tracked by the aggregation for two years," Weichert said in a statement. "Such profiling infringes German and European abstracts aegis law."

Adding ammunition to such concerns, Arnold Roosendaal, a doctoral applicant at Tilburg University in the Netherlands, and Nik Cubrilovic, an absolute Australian researcher, alone accurate how Web pages absolute Facebook plug-ins agitated out tracking added all-encompassing than Facebook about accepted to.

Noyes says Germany doesn't accept how the company's tracking technologies work. And he blames "software bugs" for the aimless tracking apparent by Roosendaal and Cubrilovic.

"When we were fabricated acquainted that assertive accolade were sending added advice to us than we had intended, we anchored our cookie administration system," Noyes says.

However, researcher Roosendaal says Facebook's tracking accolade absorb the accommodation to abundantly clue non-members and logged-off associates alike. "They accept been confronted with the aforementioned affair now several times and every time they alarm it a bug. That's not absolutely accidental to earning trust."

Some accumulated aegis admiral accept become anxious about cybercriminals accepting authority of tracking abstracts relayed by Like buttons, again application that intelligence to abduct bookish property. They've asked firewall supplier Palo Alto Networks to analyze and block cartage from Facebook tracking cookies, while enabling their advisers to abide application added Facebook services.

"The affair is that Facebook has affluent claimed information, which Google doesn't have," says Nir Zuk, architect and arch technology administrator for Palo Alto Networks. "Combining that claimed advice with Web browsing patterns could be revelatory.

No comments :

Post a Comment