Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

Facebook tip: Enable encryption to avoid privacy glitch

Yet another reason to take extra precautions while browsing Facebook arose today as reports surfaced that traffic destined for Facebook from AT&T's servers took a misguided loop through China and South Korea this week.

Generally, data from AT&T customers go directly to Facebook's network provider, but due to a routing mistake, traffic first went through China Telecom followed by SK Broadband in South Korea before routing to Facebook, IDG News Service reported.

This means that if you were among the customers affected and you did not have encryption enabled, it's possible that network operators in China and South Korea could see your Facebook data.

Such data possibly includes session ID information, personal information, e-mail, photos, chat conversations and an idea of who a person knows via their Facebook profile, the IDG News Service report stated. Security experts do say that it is unlikely that those countries did anything with the data, however.

One way to prevent this from happening to your account: Enable HTTPS.

In January, Facebook rolled out the HTTPS feature to all browsing done on the site, but it's opt-in an not automatic setting. Previously, Facebook used HTTPS only when you entered in your password. You can see you're browsing securely by the green address bar that appears.

To enable this security feature, visit your Account Settings page, then choose "change" next to Account Security. Click the box next to "Browse Facebook on a secure connection (https) whenever possible. Do note that encrypted pages take longer to load in this mode, and that not all third-party apps support https just yet.

[Want more tips, tricks and details on Facebook privacy? Check out CIO.com's Facebook Bible. Facebook Privacy: 10 Must-Know Security Settings]

Kristin Burnham covers Consumer Technology, SaaS, Social Networking and Web 2.0 for CIO.com. Follow Kristin on Twitter @kmburnham. Follow everything from CIO.com on Twitter @CIOonline and on Facebook. Email Kristin at kburnham@cio.com.

Read more about security in CIO's Security Drilldown.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: China Telecom, etwork, Facebook, IDG, SK, Technology
References show all

Comments

1

Ash

Sun 27/03/2011 - 00:51

Too bad the facebook HTTPS feature disables itself when you use certain facebook applications. e.g. The LinkedIn App

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: encryption, Facebook, Facebook security, facebook settings, facebook tip, internet, Internet-based applications and services, privacy, security, social networking, Technology Topics, Technology Topics | Security
Latest Blog Posts
Whitepapers
  • Miercom Report - Plug and Play Switches
    Avaya engaged Miercom to evaluate the plug and play features and ease of configuration of the ERS 4548GT- PWR Edge Switch. The energy efficiency of the ERS was compared to similar switches and is discussed in this report as well. Read on.
    Learn more »
  • IDC Insight: V-Ray Gives Symantec NetBackup a Competitive Advantage Today and into the Future
    Over a decade ago, Veritas software announced NetBackup FlashBackup to address the millions of small files problem, which had been and often remains the nemesis to fast and efficient backup of large file servers. Today, the FlashBackup technology is used to provide a logical understanding of what is stored with a VMDK- or VHD-image-level backup, without the necessity to install an agent inside each virtual machine. Read more.
    Learn more »
  • BPM Basics for Dummies
    This book helps you understand what BPM is really all about. We wrote it because BPM is so useful and so powerful — and because it is also very accessible. We wrote this book for you — the individual. You may be a business manager, or an Information Technology practitioner, or maybe an ambitious career individual who wants to know what BPM is all about and how to apply it.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments