Avoiding Social Networking Scams (page 2)

Some Facebook users don't seem to be aware of the difference between private messages and wall postings. I have a friend who is posting personal messages to family members' walls, unaware that those messages are seen by all of the person's Facebook friends.

Ferguson says to beware of applications that don't seem to have any purpose other than to spread themselves. Some of these applications automatically send notices to all your friends, telling them that you're using the applications and encouraging others to install them as well. In addition to spamming your friends, these applications could be gaining access to your profile information and displaying unwanted advertising to all who sign up.

Company spokesperson Simon Axten said Facebook has a team of people and software tools working to enforce rules for application developers. MySpace, according to a spokesperson, also employs a robust security team and tools, including software to block outgoing and incoming spam and to warn users about potential phishing sites.

Facebook's application development process, said Axten, "is relatively open to stimulate innovation and allow people to develop quickly." But he said developers must agree to a set of rules which, among other things, prohibit them from sending messages on the users' behalf.

Developers are now required to disclose what information they collect during the installation process, and Axten recommends that users "pay attention to those notices." He said developers are allowed to collect only the information that they need to run the application, but that can sometimes include profile information and the profiles of your friends.

On all sites, be cautious about clicking on any links, especially those shortened ones that are commonly used on Twitter. If a link is shortened by bit.ly or tinyurl, you have no idea where it will lead you until after you click. Most security suites can warn you before your browser opens potentially dangerous Web sites.

There are other threats, including the Koobface worm, that can steal your password and send spam from your account. Most Internet security programs will protect you against this and other malware.

Users should also be careful about links that appear in posts and messages that could lead to phishing or malware sites. And put on your thinking cap before responding to a friend's plea for money, even if it comes from your friend's Facebook account and includes a horrendous story such as being stuck in an overseas jail. Try to reach your friend some other way before responding, because it's likely a scam.

Disclosure: I am co-director of the nonprofit Internet safety organization, ConnectSafely.org, which receives support from Facebook, MySpace and other social networking companies.