Tate reports: "When Australian programmer Nik Cubrilovic first blogged on Sunday about how Facebook logout didn't seem to actually, uh, log out, the company went into damage control mode, insisting that 'Facebook does not track users across the web,' which was pretty funny given that Facebook has a tracking feature its CEO literally calls 'Facebook Across the Web.'"
Facebook uses a cookie that continues to report your Facebook user ID even after you have logged out. (photo: Getty Images)
Why You Never Really Log Out of Facebook
28 September 11
acebook admits it went too far. The social network is quietly retracting a cookie that continued to report your Facebook user ID even after you "logged out" of the site. But it's not sorry about five other cookies that persist after you sign off. What, you didn't think Facebook would ever let you actually for real seriously 100 percent sign out, did you?
When Australian programmer Nik Cubrilovic first blogged on Sunday about how Facebook logout didn't seem to actually, uh, log out, the company went into damage control mode, insisting that "Facebook does not track users across the web," which was pretty funny given that Facebook has a tracking feature its CEO literally calls "Facebook Across the Web." The company also said, "logged out cookies ... are used for safety and protection ..."
Except it turns out one cookie wasn't used for "safety and protection," as a Facebook engineer has admitted to Cubrilovic now that the press storm is subsiding. One cookie, "a_user," continued to report your user ID back to Facebook after you logged out, until you shut down your browser entirely. The cookie was only visible to Facebook, but the site could have used it to track your visits to other sites if it wished, since a great many websites feature "Facebook Connect" widgets that load content from facebook.com - transmitting cookies to Facebook each time they do so.
The social network, to its credit, now destroys "a_user" on logout.
But there are five other cookies that still remain after you "log out" of Facebook, and that stick around even after you restart your browser. Cubrilovic runs down what each of them is ostensibly for; Facebook says they, variously, track failed login attempts to thwart hackers, track new account creations to thwart spammers, track total logins to identify computers in internet cafés, remember your browser language, remember your device dimensions, and report the time, to the milisecond, of you last few browser requests, for performance reasons.
The problem is that, whatever it says about the intent behind these cookies, Facebook could be using - or decide in the future to use - some of them to track us for less noble reasons. The milisecond request log, for example, could be trivially traced back to a specific Facebook user using the company's server logs, as Cubrilovic points out. And given its long history of rolling back user privacy, do you really trust the social network? Cubrilovic:
These cookies, by the very purpose they serve, uniquely identify the browser being used - even after logout. As a user, you have to take Facebook at their word that the purpose of these cookies is only for what is being described.
Trust is nice, but concrete protections are nicer: Log in to Facebook using something like incognito mode, install a privacy plugin like disconnect.me to minimize the power of Facebook's cookies, and/or manually clear Facebook cookies in your browser preferences. Isn't social networking fun?!
|
THE NEW STREAMLINED RSN LOGIN PROCESS: Register once, then login and you are ready to comment. All you need is a Username and a Password of your choosing and you are free to comment whenever you like! Welcome to the Reader Supported News community. |











Comments
We are concerned about a recent drift towards vitriol in the RSN Reader comments section. There is a fine line between moderation and censorship. No one likes a harsh or confrontational forum atmosphere. At the same time everyone wants to be able to express themselves freely. We'll start by encouraging good judgment. If that doesn't work we'll have to ramp up the moderation.
General guidelines: Avoid personal attacks on other forum members; Avoid remarks that are ethnically derogatory; Do not advocate violence, or any illegal activity.
Remember that making the world better begins with responsible action.
- The RSN Team
The game of Deception runs deep and wide. We all suffer to the extent this proliferates
And why the Hell does anyone USE Facebook as it is today? They've proven themselves to be insidious...ya gotta be a dope to think a tiger will change its stripes. That is, they'll fix anything they get CAUGHT doing, but they'll move on to the next insidious thing on their agenda.
_____________
The vast majority--if not everyone--using (being used by?) Facebook doesn't care if Zuckerberg is selling them out to the highest bidder, wsh, because they're "connected", thus seemingly relevant. If you think the voting population today is apathetic and-or ignorant, then just wait another generation.
Seriously, however, although I'm annoyed by Facebook's duplicity on the cookie matter, and their constant interface changes (most of which seem not to add features so much as just change them), I don't find this threatening.
When I view a site I don't want tracked by Facebook and other "cookie monsters" (my expression), I use my browser's private browsing feature. (Chrome calls the feature "incognito" browsing; Internet Explorer calls it "In Private".) To the extent that we can trust the browser to do what it's supposed to do, that hides my browsing history from other sites.
If I want an extra layer of privacy, I get on the net through an open wireless connection (library, school, Starbucks, etc.), or use a free "anonymizer" site.
My main pleasure on "F.B" is sharing my current state, thoughts and views with friends and fellow nutcases, musicians, artists, architects, engineers, food lovers and so on all over the world with whom I have interacted, gone to school, college, jail, before boards and agreed or conflicted with.
I've expressed some pretty fierce and even controversial opinions on F.B. and hope somebody is listening.
I'm actually pretty combative by nature and even RSN has not published some of my more pragmatic posts, especially responses to seemingly right-oriented ignoramus statements, which I JUST had to kick-back at, whether knee-jerk on my part or otherwise.
So if they "come for me" or are building a file on me, so be it! It's a miracle (if you believe that stuff) that I ever got into this country anyway with my political history (and I was given quite a grilling by seemingly McCarthyite-shill-types in both London and Seattle, and later what seemed like a John Birch subscriber in Portland, OR).
So I really don't give a shit what Facebook does with my stuff. Possibly like Keith Richards and George Galloway, I'm too old and ornery now, have nothing to hide and if they don't like it -well, let's see!
I'm not that important anyway!
I'm not that paranoid either.
I hate to say it, but my own wife is on facebook. It bothers the hell out of me and I tell her about it, but she just can't get over the concept of telling everyone she went to high school with how cute our kids are. I guess doing the exact same thing with email just isn't as exciting. I tell her that's like saying, "I hate going through airport security, but the gropers' hands feel petty good". That approach obviously gets me nowhere.
So, just because you're not on facebook, doesn't mean other people won't talk about you and even upload pictures of you on it without your approval.
For the record, my wife is just as liberal as I am about everything except this one strangely "acceptable" intrusion into our personal privacy.
DO I ACTUALLY NEED FACEBOOK FOR ANYTHING?
I keep wondering; What's the endgame here?
I said, exactly.
When I first signed up Mr Z swore they didnot rape your privacy, but he lied, lawyers set it up to keep the Internet being 'freespace' as his over ride, probably why a lawsuit would no longer hold up.
I am trying to set up Fundraising for my Cat who has lymphoma. 4 sites will help me, but I cannot collect a cent, and spouse doesnot nor wants FB yet it is on all four to use your account. I wrote to the sights and will see what I can do
Many grants, funders are out of money bacause USA is out of money and jobs. So I wrote for 8 weeks to no avail it seems Now I will try to get help thru these sites, what I raise can be later used for other animals because like me too many others cannot afford simple neutering no less Chemo. Now I want the drug Company names to see if they will help, Animal Food Companies. After being on treatment, getting a second chance, you just do not think not to try.
I have three pets in this MASH unit here, one gastro patient, her sister Lymphoma and we are waiting to see if young Lab has Lyme that is another story, thought protected/tested
only good cookies are toll house
why I cancelled my facebook & myspace
accounts
I have done so and have not noticed any Facebook interferences - though that may mean little.
Also, I notice that many sites encourage the use of Facebook or Google profiles.
RSS feed for comments to this post.