






According to the Wall Street Journal, Facebook (and other sites like MySpace and Xanga) provided to advertisers data "that could be used to find consumers' names and other personal details," in violation of their own privacy policy. This information was the address of the page on which a user clicked a specific ad. The address led directly to a profile, meaning advertisers could easily identify the name (and whatever other data they could see) of the person from whose profile their ad was being clicked. Facebook went furthest, "in some cases signaling which user name was clicking on the ad as well as the user name of the page being viewed. By seeing what ads a user clicked on, an advertiser could tell something about a user's interests."
The Journal's report jumps off a 2009 study that suggested just this kind of personal data "leaking" might be occurring. But this is the first time Facebook actually acknowledged that they shared personally identifiable data with advertisers. Shortly after being contacted by the WSJ, Facebook revamped their code to hide the usernames in URLs.
We already knew that Mark Zuckerberg knows when you're going to break up with your girlfriend. Now imagine that the last time you clicked on that Papa John's Pizza ad, some bored Papa John's advertising exec was looking at a picture of you all flabby on the beach and laughing his ass off.

The whole "cyberterorrism" fear mongering is being taken to even more extreme levels. At the Strategic Command Cyber Symposium, William Lynn III, the deputy defense secretary apparently told the audience that companies who operate critical infrastructure need to let the US install monitoring equipment or it puts everyone at risk. The NSA has apparently developed a monitoring system called Einstein (I wonder if they paid the license fee), and want to let companies "opt-in" to installing the gov't's system on their own systems, or face the "wild west" and put everyone at risk. This sounds like blatant fear mongering to let the government tap into all sorts of private infrastructure systems. After all, the government has shown, time and time again, that once it gets access to information, it doesn't take those whole "oversight" or "privacy rights" issues particularly seriously.