I originally published this blog at http://community.ca.com/blogs/securityadvisor
Published Dec 03 2007, 07:43 PM by Benjamin Googins
In addition to the statement we received this past Friday, we have received further communications from Facebook’s privacy department, this time directly addressing the silent data transfer to facebook.com.
Thanks for clarifying your concerns. You can prevent stories from being generated for actions you take on external websites, but this is different from the data that is shared between Facebook and the external site. If you prevent a certain partner site from publishing stories about you through Beacon, the information about the action is still sent to us. Please note that it is sent for the purpose of generating the notification on the partner site. However, if your options are set such that the story won’t be published, we discard that information almost as soon as we receive it. While we do receive this information, we do not store it in our system. Let me know if you have any further questions or concerns.
[name removed – Stefan] Customer Support Representative Facebook
At the present, continuing testing of the Beacon affiliate sites kongregate.com and epicurious.com reveals no change in its operation. We still observe the data being sent when not logged in. If a machine has never been used to access facebook, or has not been logged in with “remember me” selected, then the affiliate data will be sent, but no facebook ID will accompany it. Otherwise, both a facebook ID and the affiliate data will be sent. While logged in to Facebook, user actions taken on epicurious.com continue to be sent to Facebook, including (but not necessarily limited to) saving a recipe, rating a recipe, and reviewing a recipe. This test was repeated 4 different times with different recipes.
By: Benjamin Googins
Benjamin Googins is a senior engineer working on CA’s Anti-Spyware product. His primary functions include analyzing spyware and privacy breaches, fielding press inquiries, blogging and drafting documents. He has been a significant contributor to the User Permission document , Spyware Scorecard , Threat…