Chris Peterson

Two days ago, Facebook rolled out new privacy tools in a blog post by Mark Zuckerberg.

On balance, the privacy revamp represents a net benefit from where we were in the last few months. For example, Facebook has finally returned to users the ability to control basic information such as whether or not complete strangers can see your hometown.

Additionally, their new privacy dashboard (as illustrated below with a picture from the site):

Is a helpful way for people to begin to visualize what is available to whom if they select one of Facebook’s settings.

But – as is so often the question in policy problems, from health care reform to financial reform to Facebook – the question is not whether the reform is better than what we had, but actually “good enough” to be truly praiseworthy. By way of analogy, of course it’s better to throw a rope to a drowning man than to not throw one at all, but if he is 10 feet from your boat and the rope is two feet long, the effort may not be as laudable as it initially appears .

What more could Facebook have done? It could’ve made Instant Personalization Opt-In. It could’ve integrated some of the great tools like the Facebook Privacy Scanner or Zesty.ca profile mirror. It could’ve shown people what they currently are sharing and tweak it from there on the Dashboard, as opposed to simply giving them four options to pick from (although the four options are good for simplicity’s sake). Finally, it could’ve announced these changes in a big box on everyone’s News Feed – or forced them to visit the new privacy page the next time they visited the site – rather than hiding it in plain sight on the Facebook blog, which almost none of its users read.

I’m not pointing these things out just to complain about Facebook – I’m pointing them out to demonstrate how much Facebook didn’t do in their privacy reform. That doesn’t mean I don’t approve of the changes they did make – I do. But to understand the full context of Facebook’s actions, one must understand what they did and didn’t do. And in that respect, it’s still the latter that is far more striking.

From his Op/Ed in WaPo today:

The biggest message we have heard recently is that people want easier control over their information. Simply put, many of you thought our controls were too complex. Our intention was to give you lots of granular controls; but that may not have been what many of you wanted. We just missed the mark.

…

We have also heard that some people don’t understand how their personal information is used and worry that it is shared in ways they don’t want. I’d like to clear that up now. Many people choose to make some of their information visible to everyone so people they know can find them on Facebook. We already offer controls to limit the visibility of that information and we intend to make them even stronger.

Here are the principles under which Facebook operates:

– You have control over how your information is shared.

– We do not share your personal information with people or services you don’t want.

– We do not give advertisers access to your personal information.

– We do not and never will sell any of your information to anyone.

– We will always keep Facebook a free service for everyone.

This is garbage. Facebook designs a confusing environment, intentionally removes the ability of users to make certain information private, and uses the power of the default to shoehorn users into “Instant Personalization” and other expansive programs – and then responds with a wide-eyed, “who, us?” denial and misleading protestations of innocence and earnestness.

These are crocodile tears.