Facebook’s one-click identity theft option…

In a rather peculiar and, what I can only assume to be, a haphazard move, Facebook has made it possible for apps to read your home address and mobile telephone number.

Now in the “Request for Permission” window (the standard thing you have to accept before using an app on the Facebook platform) keep your eyes out for “Access my contact information”, with the subtitle “Current Address and Mobile Phone Number” (see above). I’d've expected such direct details to be much bolder, stressing their importance instead of the usual faded gray.

There’s an interesting post on the Naked Security blog, explaining how such details available, especially in a social-network that is already rife with rogue spam and con applications, puts users at an even greater risk. Can you imagine the SMS spam that awaits the unlucky and unsuspecting Facebooker that gives his phone number to the wrong app developer? Not to mention the increased possibility of identity theft with your full name and home address.

Still, as I’m sure the more cautious of you aren’t, even  if you’re not bothered by this (after all, it’s fairly simple to delete your profile details), you have to wonder what Facebook will do next. If access to sensitive data can be reduced to a small-print subtitle in a cluttered permission box, it’s only a matter of time until you accidentally click “Allow” and siphone your entire life story to a random rogue.

*UPDATE* Facebook’s made a sharp U-turn after such criticism of privacy.

You can leave a response, or trackback from your own site.