Dear Facebook, please burgle my house [BT broadband office]

Dear Facebook, please burgle my house

Posted 8 August 2007 at 8:35AM by Simon Dickson in Internet security

If you're using social sites like Facebook, be careful what you reveal - particularly as we enter the summer holiday season. Credit reference agency Equifax says fraudsters are cruising people's profiles, and you might not realise the significance of the information you're disclosing.

'We don't want to stop people using these sites, but we do advise them to limit the amount of information they make available to stop people stealing their identity,' says external affairs director Neil Munroe. 'Individuals should think twice before putting their full date of birth online. Announcing they're going on holiday could leave them open to burglary. Similarly, don't reveal the names of pets and children, as they're often used as passwords.'

It's a fair point. It's common practice to ask for a personal fact or two as authentication for online services such as banking: a memorable date, for example. And if your Facebook profile reveals the date you got married, or your first child's birthday, that's an obvious place for a fraudster to start guessing. You might not spell the date out on the page - but don't forget, digital photos often contain the time and date they were taken.

Equifax recommends that you check your privacy settings, to ensure only your friends can see potentially useful personal data. (On Facebook, click the 'privacy' link in the top right corner... and be prepared for a long list of options.) Think twice before including information which might be useful to an identity thief; and don't announce that your house will be empty for long periods.

Tags: confidentiality, crime prevention, equifax, facebook, ID theft, privacy, security

New feature: Rate this post!

Currently 4.4/5
1
2
3
4
5

Average rating: 4.4/5

Comments

1. At August 8, 2007 8:55 AM, Chris Hainey wrote:

Sound advice I suppose, but does reek of paranoia.

I suppose most of the time that when you're using sites like Facebook, bebo etc. then you don't even think of the possible implications with regard to potential identity theft, or worse... Especially with the likes of the Countdown timers available, which I have in the past used, to joyously announce when our holidays, birthdays etc are.

The downside to this is that since this has been pointed out, I will be more wary of announcing things on sites like Facebook... thanks Equifax, you've made me a bit more paranoid about social network sites.

2. At August 8, 2007 8:58 AM, Mark Thorpe wrote:

In my opinion, sites such as Facebook and bebo are much more secure when they are only accessible through approved "friends" or group members, ie that nobody can see your profile until you have approved them to do so.

I believe that systems like this are optional, yet think that they should be compulsory for preventing situations such as the one you mentioned above.

[PS, bebo and facebook....pfft....]

3. At August 8, 2007 10:02 AM, Patrick Coach wrote:

What a lot of nonsense!

I personally burgle houses for a living and never once have i researched someone i am about to 'Rob' by checking out their Facebook/bebo/myspace page.

I stick to the old fashioned way of following them around for a few days and watching their every move and preferably 'strike' after they've done a 'Big shop' at like ASDA or something...or M&S cos that means that you'll be stealing quality meals-for-one.

On a serious note though - thanks for the tips - I'll look into facebook tonight and see who's going on holiday!

Cheers Pal!

4. At August 8, 2007 10:51 AM, Ken Cox wrote:

Hey was it not you that introduced many people including me to this bum site. The next day the National press reveal the Owner of the site might be prosecuted and now this... Well Well well maybe you should do more research b4 putting such info on your site. Although I must admit I am not finding most of what you write of much use to a seasoned pro

5. At August 8, 2007 11:10 AM, Robert Currie wrote:

I entirely agree - in my line of work we require customers to validate with a security question and all too often people have them set to far too easily attainable answers: Postcode, street name, company name, and occasionally, "what colour is grass?"

These things are all obtainable to anyone in the public domain! As Equifax will know, security is so important these days - you can't afford to take these kinds of risks!

6. At August 8, 2007 11:58 AM, Alasdair McTavish wrote:

Unless it is time stamped on the actual photo or you state within the pictures caption how is it possible for someone to tell the date from an uploaded photograph? Unless of course it has like a big banner saying "Happy New Year 2003!"

The same can be said for any kind of community based online service including message boards and especially blogs! Maybe I should start using my alias when commenting on this blog instead of my real name, just incase!

7. At August 8, 2007 1:42 PM, Victoria Kelly wrote:

I do not use facebook but I do use similar sites, And I find it completely ridiculous that the information on these sites could be used for identity Fraud or even by a burglar. My address or telephone number my bank of any other such details that you would surely require for identity theft.

8. At August 8, 2007 4:29 PM, Simon wrote:

Just to respond to Alasdair's query... hidden inside each digital photo is what's called 'EXIF metadata'. This typically includes the camera make and model, the date and time, whether or not flash was used, etc etc. The specification includes scope for GPS coordinates, but you won't find many cameras with built-in GPS (yet). Look in the right-hand column of any photo at flickr.com to see the 'secret' information. (On top-of-the-range cameras, you'd be amazed how much detail it goes into.)

9. At August 8, 2007 4:32 PM, Chris Robb wrote:

Haha yet another way to make some computer users paranoid. My identity is there to steal. Hopefully someone will come along and steal my student overdraft from me! Nice and debt free :)

Really this is just a way of scaring some users into trying to protect everything. As Rob said people can use simple security phrases. I myself am one of them. If you know me then you can probably guess my 3 security questions I ever set because I am kind of forgetful.

Maybe one day Mulder and Scully will stop this paranoia!

10. At August 9, 2007 9:45 AM, Anjanesh wrote:

Mmmmm ...given the wealth of advice being posted i might follow Patrick Coach and try a career in burglary. Never cared a hoot about those 'social networking sites' though most find it useful. I might just too.............

11. At August 9, 2007 2:59 PM, Martin MacKinnon wrote:

Or alternatively you could just remember anything you post on the internet is like writing it on the back of a postcard. I'm also gunna cancel any papers/milk i get delivered in case there is any thieves in those services as well... you never know who is watching!

12. At August 9, 2007 3:15 PM, Robert Currie wrote:

Going by the comments here, I think we can establish that the only way to be completely safe on the internet ... is not to use the internet.

BT broadband office