3 ms·
move across web sites and allow you to Like any page without logging in. It set off all sorts of privacy alarms Why would this set off privacy alarms? It's ju
by cmelbye 16y ago
move across web sites and allow you to Like any page without logging in. It set off all sorts of privacy alarms
Why would this set off privacy alarms? It's just an iframe. It's not like the site owner can see what's going on inside of it; they still have to follow the cross domain rules in the browser.
- natrius 16y agoNormal people don't know what iframes are. They just think Facebook gave CNN their information without their permission, which isn't the case.
- cmelbye 16y agoDo they really think that, though? Or is it FUD? I'm just playing devil's advocate here.
- natrius 16y agoI don't see how they could think otherwise. You pretty much have to have a deeper knowledge of the technology at work to come to the conclusion that no data is being passed to CNN. I think technical people underestimate how much people understand their privacy settings on Facebook, but I don't see how any normal person could understand this case.
- robryan 16y agoI've seen people mentioning instant personalisation is a privacy problem, but that's mainly people just copying and pasting those statues that do the rounds. Haven't had anyone on my facebook question the external like buttons, apart from the last few days when people discovered the title/ website had massive max name lengths, since fixed.
- steadicat 16y agoTo me it’s a privacy alert because Facebook now potentially knows every site I visit. I ended up adding "127.0.0.1 connect.facebook.net" to my /etc/hosts.
- cmelbye 16y agoOh, that's very true. I hadn't realized that at first, but the original site is probably in the Referer field... Now that I think about it, that is scary.
- steadicat 16y agoNot just in the Referer field. Facebook widgets need to know which site they're referring to, so the widget code that site owners include on their site contains the site id.