Home  »  Blog  »  Facebook Beacon: Two Weeks Later
November 22nd, 2007
Comments (34)

Facebook Beacon: Two Weeks Later

Nate Weiner - Posted in Blog, ,

It’s been two weeks since my post about how to block Facebook Beacon and a lot has happened.

  • Newspaper and networks are beginning to cover the response to Beacon.
  • Om Malik called for a protest of all participating companies.
  • MoveOn.org has created a petition demanding a blanket opt-out system.
  • The post has been viewed over 80,000 times.

So I felt that with all that is being said that I needed to make my stance on the matter clear.

I think people in general are missing the point.

Asking for a blanket-opt-out feature is as effective at protecting your privacy as covering your eyes to hide from a charging bear. Just because you can’t see it, doesn’t mean the bear is not there. Likewise, just because you say ‘don’t show this data’, the mere fact that you can switch it back to ’show this data’, means that it is still in Facebook’s database.

Compare it to this. When you read articles on most news websites, such as the New York Times, alongside the article there is an icon to share the story you are reading on Digg, Newsvine, Del.icio.us, Facebook, etc. The Beacon system should be no different than how that functions. Right now, Beacon simply is clicking that share button for you.

And that is what should be the real concern here. Especially with the number of growing stories about Facebook releasing user’s data upon request without permission or a warrant.

Currently, the system is employed on only 44 partner sites. But as indicated on Facebook’s website, they have every intention of allowing any site be a Beacon partner. And as the system expands, Facebook will be able to collect data about you from more and more sites.

The question you should ask yourself is this: Would you find it acceptable for someone to stand behind you while you surf the internet, write down everything you look at, and then keep those notes for themselves? Would you trust that person to safeguard your data?

Facebook’s Response vs. User Response

Facebook has brushed off the response over Beacon as “fairly muted”. And they are probably right….so far.

Facebook users will remember the outrage in 2006 when Facebook first introduced the mini-feed. Groups were made, petitions were filed, fists were raised. Users were upset because their activity inside the Facebook site was now made visible to all of their friends. And within days Facebook had made changes to privacy settings and Facebook had publicly apologized.

But the response over Beacon will be slow and gradual. This is because, unlike the mini-feed, which every user was presented with immediately upon logging in, users will only slowly begin to interact with Beacon over the course of the coming weeks and months.

But if I were Facebook I wouldn’t so casually brush aside the growing response. Because if Facebook users freaked out when the mini-feed shared their internal Facebook activity, how are they going to react when they find out their activity from outside of Facebook is being stored and shared?

Some Solutions

Well with everything that I do on this site I try to offer solutions to problems, so this scenario shouldn’t be any different.

First off, for the user, they can block Beacon until Facebook gets it together.

Now for Facebook, they have a number of solutions. I don’t think they should scrap Beacon. As I said before, I think it’s a great idea and a boon to advertising. Unfortunately, this is another example of Facebook implementing a new feature without an initial consideration for their users feelings of privacy.

Most importantly, sign-ups to the system need to be reversed. No data should be transferred, requested, or stored until a user has verified that they are cool with it. That should be the clean slate that they start with.

They could offer a blanket opt-out system, if and only if, they were able to prove that when you said ‘don’t show this data’ it also meant ‘don’t store this data’. So that when a participating site sent a request to Facebook to see if the surfer was a Facebook user, Facebook makes no log of that transaction what-so-ever.

If they aren’t willing to do that, then there should be an additional step made in how the transaction between a user, a partner site, and Facebook occurs.

An example of the current process as is:

  1. User goes rents a movie from Blockbuster online
  2. Blockbuster Online asks Facebook, is this person a Facebook User?
  3. Facebook says yes (log could be made of transaction)
  4. Blockbuster sends the movie user rented to Facebook.
  5. Facebook stores data

This could all go away by simply adding a first step on Blockbuster’s end that says: ‘Are you a Facebook user? And if so, would you like to share the movie you rented with your Facebook friends?’

And if you choose to, THEN the transaction to Facebook could be made. And if not, Facebook hears nothing and everyone is happy.

Compare it to this. When you read articles on most news websites, such as the New York Times, alongside the article there is an icon to share the story you are reading on Digg, Newsvine, Del.icio.us, Facebook, etc. The Beacon system should be no different than how that functions. Right now, Beacon simply is clicking that share button for you.

For the merchant, adding a ’share’ button alongside your user’s transactions would also let you expand your influence past Facebook. Just sayin’.

Comments (34)


  1. I really hope Facebook doesn’t become corrupt. It’s simplicity was such a heaven compared to myspace but now with the advertisements and beacon, I don’t want it to be just a haven for advertisers.

    On another note, Facebook is starting be a lot like Google in the fact that they like to index anything and everything about its users. Google’s recent partnership with 23andme brings up the idea that Google even wants to index people’s DNA O.o

    November 22nd, 2007 Kevin X
  2. I think people in general should be far more carefull when posting anything online about their personal life. Like someone pointed out in the first part of this article, FB can promise you the world (or any site for that matter) all it takes is one bad luitenant of security hole and all you data is out there.

    Also, lets presume a site has lots of users, and really respects their privacy. Users appreciate the sites sturdy privacy policy and keep on posting more and more (personal) stuff. Then one day suddenly the site gets bought by some investmentgroup, now ofcourse, they want the data and will use it! So in short, whenever you search on google, or post anything to any site, you are giving away data from which the site profits, it’s how the internet works. Last I’ve checked FB is free of charge to use, this is where “the problem” lies I think, that sounds almost too good to be true, then it usually is..

    Other then that the whole social 2.0 mushroom is ofcourse one of the last revolutions on the internet. And big-up to people like Nate for helping out!

    November 22nd, 2007 LJ
  3. I’ve loved facebook for awhile now but this shows nothing but pure GREED. Facebook has the arrogance to act like they’re doing the user a favor by shoving beacon down our throats. This whole thing has convinced me to adjust settings on my browser to stop accepting cookies.

    November 22nd, 2007 Chris
  4. [...] Up: Two weeks after this post, I’ve written a follow-up about the response.  Facebook Beacon - Two Weeks Later All / General / Reviews / Support / Suggestions curCommentType = ‘all’; function [...]

    November 22nd, 2007 the Idea Shower » » Block Facebook Beacon
  5. A very good post that brings up a serious concern. Keep it up.

    November 23rd, 2007 Chebab
  6. You make good points, and thanks for the how-to on blocking Beacon!

    November 23rd, 2007 Molly
  7. Thanks for bringing this up. I have followed your lead and blocked beacon.

    I think this is really a bad development of a good tool. I even thinking f deleting my profile with facebook, because of this programme.

    November 24th, 2007 Jake
  8. I think you bring up a very good solution. It’s definitely a great tool - which seems to have derived from Google’s log-all mentality - but definitely approached from the wrong angle. Google have millions of users who are signing up for their gmail, knowing that their activities are logged - but the point is, the consumer knows and willingly opt-in.

    Thanks so much for the post - I think it’s fantastic!

    November 24th, 2007 HN
  9. I’m always careful to not post on my Facebook, or anywhere else, anything that I’m not happy for the whole world to know. That does NOT include my shopping and web-surfing habits. Thanks for alerting people to this, and showing us how to block the beacon.

    November 24th, 2007 Sarah
  10. Your example of how the process works is actually a little off based on my experimentation…at least with the site I was using, the data got sent to Facebook regardless of whether or not the person was a Facebook user. So, 3 and 4 should be switched, or 3 could even be eliminated…

    November 24th, 2007 Tom
  11. Question, is the fact that Facebook is part of Truste.org being ignored? It seems this whole controversy is to beatup facebook, scare people off the internet, while boosting the profile of MoveOn. Any concerns about that?

    http://www.truste.org/ivalidate.php?url=www.facebook.com&sealid=101

    November 24th, 2007 Drew
  12. For those who want multi-browser blocking, or a log of activity, the “privoxy” proxy software at Sourceforge can also be configured to block traffic to beacon very easily. It’s similar to Firefox Adblock, but supports any browser and supports considerably more complex rules for conditional blocks, cookie modification, etc.

    November 25th, 2007 rjh
  13. Interestingly enough, I tried to link to your previous post in a Note on Facebook and the website would not render into a link. Hmm…

    November 25th, 2007 Brahm
  14. Do a search on Facebook and CIA funding and you will see who is behind the Facebook corporation.

    November 26th, 2007 Mark
  15. Is Facebook being too social on your behalf a prob

    I was catching up on some blogs this morning and came across the whole Facebook Beacon/Kongregate thing (a little late) via Brian Oberkirch

    November 26th, 2007 View from W6th
  16. When are people going to learn that Facebook is just a marketing engine that absorbs tons of personal data (which people willfully supply). Facebook wants to make money. Advertisers pay Facebook, not the unwitting masses who fork over every detail about their life. So whose interest do you think Facebook will ultimately serve?

    November 26th, 2007 Steve
  17. Thanks for keeping on top of this. As you said, this is bigger than Facebook publishing the info on a user’s profile. The fact that they are storing this data is troubling. Sure, you could argue that it’s only a movie rental here or an Amazon purchase there… Until you step back and see the possible picture of Facebook storing info about your latest travel reservations, job site searches, and more. Your analogy to a person watching over your shoulder as you browse, writing everything down, is a good one. We don’t know where this data is being kept, for what purpose, or for how long. That is is or isn’t displaying on your profile is not the issue. The issue is that this information is being collected and stored for future use.

    November 26th, 2007 techcommdood
  18. Thanks Nate, I never had the opportunity to be notified of the impending news feed post to FB. Facebook needs to correct this privacy violation!

    November 27th, 2007 Blake
  19. Drew, TrustE doesn’t have particularly stringent requirements to “earn” the seal. They require you to tell people what data you are collecting and what you will do with it. There are absolutely no restrictions on what you do with it, you could write people’s social security numbers on billboards as long as they gave you “permission” and you’d still be TrustE compliant.

    November 27th, 2007 m3
  20. Where’s the DIGG button on this article??

    PS. As far as the Beacon Blocker is concerned, it does nothing for those who, for good reason, use a browser other than FireFox.

    November 27th, 2007 MacSmiley
  21. “Likewise, just because you say ‘don’t show this data’, the mere fact that you can switch it back to ’show this data’, means that it is still in Facebook’s database.”

    That’s a valid point. Not showing it still removes one privacy problem, but I would also expect that Facebook not use the data for anything else either.

    November 27th, 2007 Matthew Flaschen
  22. Thanks for the update & tips, I just added it into our original Shaping Youth post, “FB Peepin’ is Creepin’ Me Out!” (HASTAC just picked it up too)

    I’ve disabled the beacon, albeit w/several ‘restarts’ which begs the question, what about the poor neophytes (kids/youth/or more likely, ADULTS) that can’t even find your handy how-tos & screenshots and are stuck as opt-in hostages until they get rescued by a cybersavior?

    FB is forcing a time sink using indiv. opt-outs (disrespectful, intrusive) while still storing the behavioral profiles (invasive, illegal)and they incredulously, arrogantly pooh-pooh the whole thing?

    There’s a REASON 40,000+ FB users have rallied to petition in a week’s time! If FB chooses to brush this off w/’there, there, you don’t understand’ style, they’ll have underestimated the social media movement’s viral capacity to bring about their own digital demise. How ironic is that?

    btw, re: Kids/teens, etc. I wrote a piece earlier in the month called Behavioral Profiling: Collecting Digital Data on Kids: http://www.shapingyouth.org/blog/?p=746, so I was peeved as a parent even BEFORE this whole beacon backlash brouhaha; now my incredulousness has amped up and doubled…

    November 28th, 2007 Shaping Youth
  23. I’ve blocked Beacon on my home computer, but what if I use another computer to do things on the net? Laws need to be passed about companies hording personal data.

    November 29th, 2007 Simon
  24. [...] eller ej, vil Facebook ligge inde med de uvurderlige oplysninger. Som det fremgår af bloggen The Idea Shower er netop dette helt [...]

    November 29th, 2007 Den nye offentlighed = den totale offentlighed? « Always exploring…
  25. Dear

    do you remember the outcry (justified) when doubleclick attempted to follow users activity across sites using permanent cookies ?

    This capturing of data without the consent of the user is an invasion of the his/her privacy of the same level.

    I have little doubt on the other hand that facebook, its business partners and their advertisers would still benefit from providing the “share it with your facebook list of friends” button.

    Unless they adjust their policy, I’ll use a blocker and warn of others.

    Hell I would even build different group of friends just fior the sake of sending books boughts to group A and video games to group B

    November 30th, 2007 Nicolas
  26. [...] I said previously, just because we can’t see the data (by opting out), this doesn’t necessarily mean that [...]

    November 30th, 2007 the Idea Shower » » Facebook, I’m Still Watching You Watch Me
  27. Are you sure your block beacon actually works? Does it block the beacon pop-up only, or does it actually block your data from moving from the third party site to facebook?

    November 30th, 2007 gr
  28. [...] tried a few years back with Passport and Smart Tags before it was beaten back like a rabid dog. Is Zuckerberg actively attempting to become the most hated person on the internet? Maybe. This blog explains how you can block Facebook’s spying while maintaining an account [...]

    December 2nd, 2007 meehawl » Blog Archive » Facebook Spying - Just Say No
  29. [...] Facebook Beacon: Two Weeks Later:You should not miss how Nate Weiner keep track on Facebook. He has some interesting points and he provides more insightful information about the system. [...]

    December 3rd, 2007 Virtual Assistance For Business : Outrages against FaceBook – Is it exposing the downside of Social Network Marketing.
  30. thanks for this info :-D it’s just the nature of the game that internet companies are only worth mega-bucks if they have credible ways of collating vast amounts of personal data for advertising purposes. i wonder which will be the first one to go bust because of a user backlash at hidden technology / practises that made them worth investing in… ;-)

    December 3rd, 2007 sparky
  31. Thanks for the Beacon blocker info. Is there a way to block Facebook from publishing news feed stories within FB? The fact that they publish a story every time someone does _anything_ is just a bit overboard, not to mention creepy.

    December 3rd, 2007 Sissy
  32. [...] here and here - and how to block Facebook Beacon as I have done. I’ve just posted this link over at [...]

    December 5th, 2007 Radio Clash Mash Up Podcast - a weekly podcast of mixes, mash-ups, and more since November 2004! - one of England's longest running podcasts! » Blog Archive » Block Facebook adware
  33. Thank you for an excellent article. As you’ve said, the mere fact that such data collection is going on is disturbing. Facebook should not be collecting data on people at all unless they authorize it. It sounds like the petition on MoveOn is geared toward merely blocking the notifications of your actions to your friends, not toward the prevention of the data collection in the first place.

    December 9th, 2007 m
  34. Perhaps people want to look at the java source , it seems to use an iframe to log you in and then pass the parameters back to the js, if your facebook login is not saved in your browser perhaps it will not track you.

    toast_inner.innerHTML = ”; see the code there

    December 19th, 2007 Anon

Leave a Reply