Social Privacy, Geolocation, Augmented Reality: Implications for Librarianship
Privacy Implications of Privacy Settings and Tagging in ...zannone/publication/... · Privacy...
Transcript of Privacy Implications of Privacy Settings and Tagging in ...zannone/publication/... · Privacy...
Privacy Implications of Privacy Settings and Tagging in Facebook 1
Privacy Implications of Privacy Settings andTagging in Facebook
Stan Damen, Nicola Zannone
Eindhoven University of Technology
10th VLDB Workshop on Secure Data Management
COMMIT/
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 1
Privacy Implications of Privacy Settings and Tagging in Facebook 2
Motivations
Social Networks
Increasingly popular
I millions of users across the world
Benefits
I Finding old friends
I Building communities around commoninterests
I Gaming
I ...
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 2
Privacy Implications of Privacy Settings and Tagging in Facebook 3
Motivations
Information Sharing
I Posting
I Sharing pictures
I Profile (partially) publicly available
I Third party applicationsI games, online marketplace
I Tagging
Huge amount of personal information available on social networks
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 3
Privacy Implications of Privacy Settings and Tagging in Facebook 4
Motivations
Privacy Issues
I Social network privacy practices: related to the collection andprocessing of personal data by the social network and theirdisclosure to third parties.
I user tracking (e.g., Facebook “Like” button), user profiling foradvertisement purposes, secondary usage of data, and storinginformation after it was deleted by the user.
I Information disclosure to contacts: misuse of personal informationby other users in the social network.
I e.g., cyberstalking, identity theft, discrimination
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 4
Privacy Implications of Privacy Settings and Tagging in Facebook 5
Motivations
Privacy Paradox
“There is only one thing in the world worse than being Facebook stalked,and that is not being Facebook stalked”
Atwan and Lushing (2008)
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 5
Privacy Implications of Privacy Settings and Tagging in Facebook 6
Motivations
Privacy Regulations
I Privacy legislation imposes stringent requirements onthe collection, processing and disclosure of personal data
I Upcoming European regulation on data protectionI user empowerment in controlling own dataI easier access own dataI right to be forgottenI right to data portability
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 6
Privacy Implications of Privacy Settings and Tagging in Facebook 7
Motivations
Empowering Users
I Social networks provide control toolsI Privacy settingI Facebook “View As” functionalityI Google Dashboard
I False confidence of being in control of data
Goal
I Understand exiting privacy controls for collaborative systems.
I Focus on privacy impact of privacy settings and tagging in Facebook.
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 7
Privacy Implications of Privacy Settings and Tagging in Facebook 7
Motivations
Empowering Users
I Social networks provide control toolsI Privacy settingI Facebook “View As” functionalityI Google Dashboard
I False confidence of being in control of data
Goal
I Understand exiting privacy controls for collaborative systems.
I Focus on privacy impact of privacy settings and tagging in Facebook.
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 7
Privacy Implications of Privacy Settings and Tagging in Facebook 8
Outline
Facebook Profile
Privacy Issues
Proof-of-Concept
Conclusions & Future Work
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 8
Privacy Implications of Privacy Settings and Tagging in Facebook 9
Facebook Profile
Profile Model
Profile
Image
Post
Tag
Profile Information
Comment
Posted_By
User
Data Provider
Tag TargetData Host Tag Issuer
Owns
1
*
1
1
1
Made_By
Album
1
1Group
Belong_To
1
Uploaded_By
*
Issued_ByRefer_To
1
1
*
11
1
*
1
*
*
1*
1
*
1
1
**
*
1
* *
Defined_By*
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 9
Privacy Implications of Privacy Settings and Tagging in Facebook 10
Facebook Profile
Privacy Settings
I Settings for visibilityI Specify who can view an objectI Defined in terms of groups (only me, friend, friend of friend, custom
groups)I Defined for each object (album, photo, post, etc.)
I Settings for posting (define who can post)I Settings for the visibility of new objects
I User friendlyI By default, more permissive settings
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 10
Privacy Implications of Privacy Settings and Tagging in Facebook 11
Facebook Profile
Tagging
I Tagging allows users to share information faster and easier
I A tag is an unambiguous link to another user
I Additional “features”I Modify visibility of tagged objectI Create a copy of the tagged object in the profile of the tagged user
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 11
Privacy Implications of Privacy Settings and Tagging in Facebook 12
Facebook Profile
Permissions
I Permissions: view, delete, post, comment, tag
I Depending on the roleI Data host: all permissionsI Data provider: delete his post (if still in visibility of the post)I Tag target: delete tag
I Depending on privacy settingI users can see a post if they are in the visibility of the post
I Privacy settings can only be seen by data host
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 12
Privacy Implications of Privacy Settings and Tagging in Facebook 13
Privacy Issues
Scenario (1)
1. Alice posts on Bob’s profileVisibility: Bob’s FoF
2. Eve becomes Alice’s friendEve in the visibility of the post on Bob’s profile
I Eve can see contents on Bob’s profile without Bob knowing itI Facebook’s “View As” functionality does not help
I Bob can restrict visibility to only me or friend
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 13
Privacy Implications of Privacy Settings and Tagging in Facebook 14
Privacy Issues
Scenario (2)
1. Alice posts some content on her profile and tags BobVisibility: Alice’s FoF ∪ Bob’s FoFVisibility (copy): Bob’s FoFEve in the visibility of the post
2. Alice changes the visibility to friendVisibility: Alice’s friend ∪ Bob’s friendVisibility (copy): Bob’s FoFEve in the visibility of the post
3. Alice changes the visibility to only meVisibility: Alice ∪ BobVisibility (copy): Bob’s FoFEve in the visibility of (the copy of) the post
I Alice cannot remove Eve from the visibility of the post withoutremoving the tag
I Alice depends on Bob’s settings
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 14
Privacy Implications of Privacy Settings and Tagging in Facebook 15
Privacy Issues
Scenario (3)
1. Bob uploads a picture of Alice and tags EveVisibility: Bob’s friends ∪ Eve’s friendsVisibility (Eve copy): Eve’s FoF
2. A tag of Alice is added to the pictureVisibility (Eve copy): Bob’s friends ∪ Eve’s friends ∪Alice’s friendsVisibility (Eve copy): Eve’s FoFVisibility (Alice copy): Alice’s FoF
I Alice (data subject) cannot influence visibility of the post
I Alice can only remove the tag
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 15
Privacy Implications of Privacy Settings and Tagging in Facebook 16
Privacy Issues
Issues
I User(s) in control of informationI data host in controlI privacy concerns data subject
I Object-centricI copies are treated as independent objects
I Business-drivenI Personal data (and their sharing) are a business assetI By default, more permissive restrictions
I TaggingI visibility difficult to controlI can be used to identify data subject(s), but not main goalI additional risk of data exposure
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 16
Privacy Implications of Privacy Settings and Tagging in Facebook 17
Proof-of-Concept
Proof-of-Concept
I Implementation of privacy settings in FacebookI Actual view on information (vs. object view)
I LimitationI Need access to privacy settings of usersI Can only be deployed as a functionality of the social network
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 17
Privacy Implications of Privacy Settings and Tagging in Facebook 18
Conclusions & Future Work
Conclusions & Future Work
I Privacy issues mainly caused by design decisions
I Need for novel access control model for collaborative systemsI able to consider role of users wrt dataI able to support novel modalities of social communication (e.g.,
tagging)
I Need for user-friendly transparency toolsI visualize who can see informationI notify when own policy is not enforced
S. Damen & N. Zannone Privacy Implications of Privacy Settings and Tagging in Facebook 18