Skip to main content

Vanity for Privacy

Before the location services of Facebook was launched, there was a neat little option in your Facebook app that could lookup your Facebook account and download and set photos of your friends on your phone.

Before Facebook had location services, this is an outright privacy concern.
At first I thought, "Hey, thats pretty neat!" then surprisingly as you switch on that Synching tab it will prompt another message regarding privacy concerns.

Clicking I Agree would send your whole contact list to Facebook. Scary.
This kinda creeped my out. All my contacts details are going to be sent to Facebook!? This is insane! All that information just to get my contacts corresponding Facebook picture? No thanks. I backed out when I saw this message but perhaps, people would just skip through this message and hit 'I Agree' immediately.

Looking at another perspective, Facebook could have done it in a less privacy invasive way. Instead of sending out your contacts information to their servers, why not download your contacts to your phone temporarily and look up if the phone number is existing.

For example, if John Doe is my friend, and he has a mobile number +63917 123 4567 stored on his Facebook profile the only thing I need to download is his current profile picture and the number associated with him. Or, a 2-tier query would be lighter instead of downloading all of your friends pictures and numbers. First step is to download all the numbers and compare it with the numbers stored on your phone, second step is to remove all numbers not present on your phone and send back the trimmed list to Facebook to retrieve the corresponding profile picture and store it on the phone.

So why did Facebook opt to pull data from your phone rather than doing it the other way around? We cant say for sure, but given the track record of Facebook when it comes to privacy, they'd probably want to keep a whole lot of phone numbers through this approach.

Despite my selection to disagree with Facebook's contact syncing, I really couldn't say if one of my friends already sent out his/her entire phonebook content to Facebook along with my number.

Privacy as a trade off for vanity? No thank you.

Comments

Popular posts from this blog

Self Signed SSL Certificates

Ever wondered how to enable SSL or HTTPS on your site? If you dont want to pay for commercial SSL certificates, you could create self signed certificates for your site by following the instructions here: https://www.digitalocean.com/community/articles/how-to-create-a-ssl-certificate-on-apache-for-ubuntu-12-04 The instructions in the site above will make your default site HTTPS enabled. If you prefer having a commercial SSL, save your certificate files and key files in your server and edit the location on the /etc/apache2/sites-enabled/default to point to the directory where you stored those files.

Moving to a New Linux Web Based Torrent Client

For years, I have been using TorrentFlux (url here) as my primary torrent client situated in my Ubuntu download server. But as time went on, the developers completely abandoned the development of TorrentFlux which led to several forks which I think is still insufficient for my needs. Main GUI of TorrentFlux Ive checked several options which runs on a GUI-less environment. Since my Ubuntu server is just running on command line to save precious memory, I needed something bare, simple and is packed with features. Installing uTorrent Server is pretty straight forward. Download. Uncompress. Run. This is better than the approach of TorrentFlux which you need to setup LAMP server and create a database. More often than not, it happens to me that some of the data in the DB gets corrupted. I normally just reinstall the whole thing again. Main GUI of uTorrent Server To further elaborate on the setup process, I've gotten an excerpt from this thread which, quite simply discusses ho...

Modernizing Qwtlys Database Part 1

Its been years since I have last updated Qwtly and I was given the opportunity to play around and modernize the database for my application. I wanted to try the cloud offering of MongoDB called Atlas being that its free for a small database.  With this in mind and considering that Qwtly doesn't get traffic after I have disabled the add, edit and delete quote function along with the login, I don't see the application getting to that limit of 5GB anyway. Well, that is considering if I can even get this to work.  The first order of business was to see if we can import the MySQL export painlessly to MongoDB Atlas. I have searched for MongoDB tools, external tools, scripts, only to find old abandoned projects which would not be ideal given my situation. I have considered writing a PHP script to do it but that too would cost time. I was looking for something that consists of using existing tools or features I am familiar with along with some manual eyballing and checking. Luckily, ...