Facebook Quizzes: Sharing Your Private Data

Do You or Your Friends Take Facebook Quizzes?
Have you ever taken one of those ridiculous and inane quizzes on Facebook that tell you which color you are ("I'm Orange! Now what do I do?"), which Harry Potter character you are (see above), or which superhero your dog resembles?
Maybe you hate these quizzes and avoid them completely, but do your friends on Facebook take them? If so, all your private info is likely being shared with the quiz developers - whoever they may be. This access to your personal information has alarmed many groups, including the ACLU. Here is a warning from the ACLU of Northern California:
Even if your Facebook profile is “private,” when you take a quiz, an unknown quiz developer could be accessing almost everything in your profile: your religion, sexual orientation, political affiliation, pictures, and groups. Facebook quizzes also have access to most of the info on your friends’ profiles. This means that if your friend takes a quiz, they could be giving away your personal information too.
The ACLU of Northern California has heard from thousands of concerned internet consumers using the popular social networking software, Facebook, about privacy issues. The ACLU went digging and found there is good reason for concern: as it stands, quiz developers have access to just about everything in your profile and postings and those of your Facebook Friends.
Here are a series of screenshots where we show exactly what happens when you take a quiz or run other applications on Facebook:
Asking for Permission - For You and Your Friends

As you can see, Facebook tells you specifically that it will let the application developer "... pull your profile information, photos, your friends' info, and other content that it requires to work.
This is the privacy problem. Your friends are agreeing to share your information without your knowledge or consent. Not good.
Exactly What is Shared?

These, I believe, are the default privacy settings for applications. As you can see, you or your friend are agreeing to share a lot of personal information with a completely unknown party.
The ACLU Creates Its Own Quiz
Even if you are careful about your privacy settings in Facebook, quiz developers probably will be able to access your profile and your postings through the accounts of your Facebook Friends. To drive the point home the ACLU created their own short, instructional Facebook quiz. (And no, according to their privacy policy, the ACLU will not collect or sell your information from their Facebook quiz.) Even though I was expecting some kind of revelation it was a bit creepy to suddenly see my Facebook profile information and photos start scrolling on the screen.
What You Can Do
- Be aware that fraudsters dig through Facebook and other social networking sites looking for information to about you. Creating quizzes - any lame quiz appears to spread rapidly across Facebook - are one of the simplest methods they have to collect data.
- Adjust your Facebook privacy settings to project yourself. From the Facebook menu bar choose Settings > Privacy Settings > Applications > Settings. You should see a screen similar to the screenshot earlier in the article. Deselect anything you don't want shared without your permission (I'd suggest deselecting everything).
- Choose your Friends wisely. Many people are excited at the possibility of gathering hundreds if not thousands of Facebook Friends—many of whom are friends of friends instead of people they actually know. Anyone you accept as a Facebook Friend will be able to view your profile and postings unless you say otherwise.
- Sign the ACLU’s petition urging Facebook to tighten up their privacy policies.
- Say ‘no’ to those playful/stupid Facebook quizzes - and any Facebook applications.
More on this story from the San Jose Mercury News.
We invite you to become a fan of Fight Identity Theft or just join in the discussion. You can find us on Facebook or Twitter.
Fight Identity Theft Newsletter
Enter your email address and keep up to date. More info | Unsubscribe
Recent Blog Entries
- February, 2010 (1)
- January, 2010 (3)
- December, 2009 (1)
- November, 2009 (5)
- October, 2009 (6)
- September, 2009 (2)
- August, 2009 (3)
- April, 2009 (2)
- February, 2009 (3)
- January, 2009 (8)
- December, 2008 (8)
- March, 2008 (1)
- January, 2008 (1)
- December, 2007 (3)
- November, 2007 (2)
- October, 2007 (3)
- May, 2006 (1)
- March, 2006 (4)
- February, 2006 (4)
- January, 2006 (10)
- December, 2005 (7)
- July, 2005 (3)
- June, 2005 (4)
- May, 2005 (5)
- March, 2005 (1)
- Credit (12)
- Fraud (38)
- Government (21)
- Identity Theft (39)
- Junk Mail (5)
- Phishing (13)
- Privacy (19)
- Scam (32)
- Technology (52)
- Telemarketing (2)
- Viruses (11)
- Visitor Stories (1)
- Worms (11)




9 Comments
Anonymous
Yup, this happens, I never thought it's true till I read your research paper!!!
Squeekytoy
I have always believed that a way to stop a bad practice was to make it so unactractve that the practice will be off limits.
I think that JAIL TIME WILL DETER THESE CROOKS.
Develope ways to identify them. NOW
Squeekytoy
stolen property
A partner and I developed a website earlier this year in order to track stolen items worldwide. It doesn't help with identity theft obviously, but you can report virtually anything which has been stolen with a manufacturer, make, and serial number. It's good for stolen cars, stolen computers, stolen motorcycles...and over 100 other stolen property categories.
The site is http://www.stolen-property.com/
Deen
this just happen to a client of mine. wow
Dave
Common sense is essential. I think the additional issue is around trust, since most people either don't know how to read actual links (place your cursor over the link - DON'T CLICK - and look in the status bar to see where the link is pointing) or are duped because of the increasing use of link shortening services (thanks to Twitter) where you have no idea where the link will send you.
In the end, social media will be a growing breeding ground for dirty tricks.
Mike
Sorry - find more info about Facebook scams here - http://www.identitytheftblog.com/17/facebook-twitter-scams.
Mike
It’s unfortunate that Facebook scams like this are becoming more prevalent. In fact, security firm Webroot notes that three in 10 people have experienced some type of scam on a social networking site like Facebook.
Luckily, many scams can be avoided by simply not clicking on suspicious sounding links. Do you really think that someone messaging you on Facebook (or Twitter) has top-secret information about the death of Michael Jackson just for you? Really?
Common sense is oftentimes our best weapon.
Dave
I can't stand those stupid quizzes and just hide them so I only have to see them once. However, it was shocking to find that my information was being shared even if I hadn't even taken a quiz. It feels a lot better now that I've changed my Facebook settings to know that my private information sharing on Facebook is over - hopefully.
STR @ surviving therecession . net
I never really thought about how that information may be shared by the quiz developers. It seems that all those inane quizzes and games are finding some underhanded way to grab the personal information of easily entertained facebook users. Sad that they would do that. Identity theft is a big problem, so we were just researching some ways that this is happening. Great post.
Post new comment