An open letter to Facebook about safety and privacy

**sujay**

Dear Facebook,
As you know, for some years we have been discussing with your security team our concerns about safety and privacy on Facebook.
Every day, victims report to us numerous incidents of crime and fraud on Facebook. They have been personally affected and are desperate for advice on how to deal with the consequences.
A frequent refrain from users who contact us is, ‘Why doesn’t Facebook do more to protect us?’
We have identified three simple steps you can take to better protect your users:
1) PRIVACY BY DEFAULT
No more sharing of information without your users’ express agreement (OPT-IN). Whenever you add a new feature to share additional information about your users, you should not assume that they want this feature turned on.
2) VETTED APP DEVELOPERS
It is far too easy to become a developer on Facebook. With over one million app developers already registered on the Facebook platform, it is hardly surprising that your service is riddled with rogue applications and viral scams. Only vetted and approved third-party developers should be allowed to publish apps on your platform.
3) HTTPS FOR EVERYTHING
We welcome you recently introducing an HTTPS option, but you left it turned off by default. Worse, you only commit to provide a secure connection “whenever possible”. Facebook should enforce a secure connection all the time, by default. Without this protection, your users are at risk of losing personal information to hackers.
Why wait until regulators force your hand on privacy? Act now for the greater good of all.
Your users tell us that these are issues they want resolved. So our question is simple: when do you plan to act?
Sincerely,
Naked Security

http://nakedsecurity.sophos.com/2011...k-open-letter/

**INDRANIL**

Thanks for the info sujay bro. Good initiative by them

.

**Ceyfer √**

Amen...meanwhile on the other side, fb continuously giving people the power to share and make the world more open and connected. Vanity, privacy and insecurity are not on our priority list at this moment. LOL

.

**Bearcat**

Thanks Sujay. Lets see if FB implements some of these changes!

Vanity, privacy and insecurity are not on our priority list at this moment.

**JayCub** · 07:50 PM

Thank you Sujay for sharing the information, you would think with the size of FB and the money generated along with the amount of work going to set it up, that the most important part of FB is the users and their security...it's the young and naive i feel for most on FB as it's size is going to draw whatever can crawl from under any rock to it.