Facebook Tips: How to Stay Safe While Using Games and Apps

The maker of the popular FarmVille game has agreed to change its practices that subjected Facebook users to some scammy offers. But the more games and apps that you use on Facebook, the higher your risk for malware, phishing scams and hacking. Here are four tips for staying secure.

CONNECTIONS
Zynga
Facebook
Sophos
Thu, November 12, 2009CIO If you're one of the 63.7 million people playing the popular Farmville game on Facebook, you've probably noticed a change in how you earn points. FarmVille's parent company, Zynga, agreed last week to remove deceiving mobile subscriptions and "scammy" offers that lure players to register for services in exchange for game currency, which helps players to advance in the game.

The hope? To make Facebook a friendlier—and safer—place to play. But as more and more third-party apps are developed and downloaded—and as social gaming's popularity continues to increase—so do the chances that you're hit with malware, phishing scams and hackings. Chet Wisniewski, senior security advisor at Sophos, and Jon Erickson, vulnerability researcher at VMware and author of Hacking: The Art of Exploitation, shared four ways to play safe and stay safe on Facebook.

1. Limit the information in your profile.

When you agree to play a game on Facebook, you also agree to make all the information in your profile available to the game maker's company. In turn, the company uses your information for lead-generation, which is how it makes money. What most people don't realize, Wisniewski says, is that even if you don't play games or access applications on Facebook, your friends who do still put you at risk.

"With some games and applications, your friend can allow access to their profile, which also gives the company access to yours. There's this perception that you're only sharing your profile with your friends and family on Facebook," says Wisniewski. "You need to consider that anything you put in Facebook may as well be public, so don't include anything that would be good bait for identity thieves." This could include removing from your profile your birthday, hometown and high school or college—all of which are pieces of information that can be used to confirm your identity, Erickson adds.

2. Create a false profile.

Another option that nearly guarantees your safety is creating a new Facebook account with essentially no personal information, to use just for gaming and application purposes. "You can share this account with your friends if you are interested in social gaming or downloading applications, but because you'll have very little or no information in it, you reduce your likelihood of getting phished and having information stolen," Erickson says.

3. Monitor your privacy settings.

Facebook's privacy policy and privacy settings are ever-evolving, so stay up to date with its changes, says Wisniewski. Your privacy settings dashboard allows you to access who and what has access to your profile, who can search for you, the information that appears on your wall and news feed, and which information is available to the applications you use. As changes in Facebook's privacy policy are made, revisit your settings and change them as necessary.

4. Update your Web browser.

If you click a link on Facebook and your computer becomes infected—such as the new "Smart" worm infecting accounts—or view malicious Web content with an old version of a browser, it's likely that the updates won't contain bug fixes for these vulnerabilities, Erickson says. "If there are exploits in a banner ad, you're basically screwed if you're using an old browser," he says. "Usually when people are attacked like this, spamming or botnet software is installed, so you don't even know anything happened. In the world of computer security, you have to deal with both known and unknown exploits. At least in keeping your browser up to date, you can deal with the known exploits."

Kristin Burnham covers consumer Web and social technologies for CIO.com. She writes frequently on Twitter, Facebook, LinkedIn and Google. You can follow her on Twitter: @kmburnham.


Loading...
Applications MarketSpace
Practical Approaches for Securing Web Applications
Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle. Learn more »
An Executive's Guide to Web Application Security
Since so many Web sites contain vulnerabilities, hackers can leverage a relatively simple exploit to gain access to a wealth of sensitive information, such as credit card data, social security numbers and health records. It's more important than ever to examine your Web application security, assess your vulnerability and take action to protect your business. Learn more »
Web Application Vulnerabilities
Security managers may work for midsize or large organizations; they may operate from anywhere on the globe. But inevitably, they share a common goal: to better manage the risks associated with their business infrastructure. Increasingly, Web application security plays a significant role in achieving that goal. Learn more »
Using ERP To Gain Competitive Advantage in a Tough Economy
For midsize enterprises, now is the perfect time to invest in a significant IT expansion - despite the economic climate. Learn more »
Why BI is Ripe For Businesses of Any Size
Oracle's range of offerings to mid-size and emerging companies reflects its vision that BI and EPM solutions can be embraced by companies of all sizes. Learn more »
Oracle Accelerate
Ovum has been following Oracle's Accelerate program over the last couple of years because they thought it is a smart strategy for penetrating the upper mid-market. Learn more »
The New Age of ERP
Not only can small and mid-sized companies reap the renowned ERP benefits of greater agility, increased business visibility and measurable ROI. Learn more »
 
SPONSORED LINKS
 

CRM Built for IT: The Executive Guide to Selecting CRM that Meets IT Needs

ROI of Application Delivery Controllers

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

Removing the Barriers to IT Governance: How On-Demand Software Changes the Game

Cloud Computing--Latest Buzzword or a Glimpse of the Future?

A Balanced Approach to an Application Development Platform

Adobe® LiveCycle®solutions for intuitive user experience

10 Ways Excel Drives More Value from Your SAP Investment

What's New in SOA Suite 11g?

Unleash the Power of Java with Oracle JRockit Real Time

SOA Best Practices and Design Patterns

Application Grid: Ideal Platform for IT Consolidation

Ready to virtualize tier one applications? Check your virtualization maturity.

Learn how to provide complete Business Service Management.

Increase ROI of Your Application Portfolio

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

See how AT&T can help protect your network.

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

What's Next for Enterprise Resource Planning?

Gartner Magic Quadrant, Application Delivery Controllers 2009

White Paper: Managed Security for a Not-So-Secure World

SharePoint - Unchecked growth of content is unsustainable.

Focus Under Pressure: Why IT Governance Becomes Mission-Critical in a Down Economy

Should Your Email Live In The Cloud? A Comparative Cost Analysis

Adobe® LiveCycle® solutions for business process automation

Architecting Business Intelligence Applications for Change: The Open Solution

Increase UPS efficiency without sacrificing protection.

Unlocking the Mainframe: Modernizing Legacy System to SOA

State of the Data Integration Market

Enhance Customer Loyalty through Higher Responsiveness

Achieving Business Agility with Application Grid

Seven Ways ITIL Can Help You in an Economic Downturn

Four steps to populate your CMDB.

"Enterprise-Proven" is the Prerequisite for Enterprise SaaS Portal Solutions

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

 
 
RESOURCE CENTER