Facebook rejects calls to tighten up app loopholes
By John Lister
Facebook says it will not change its policy on third-party applications despite recent rogue apps spreading on the system. The comments from creator Mark Zuckerberg come despite arguments that the system is too open and puts users at unnecessary risk.
Speaking after two applications in the space of a week attempted to trick users into installation, Zuckerberg told the BBC that restricting app creators would go against the aims of the site.
“There will occasionally be some applications that people don’t like,” Zuckerberg said. “Our philosophy is that having an open system anyone can participate in is generally better.”
According to Arstechnica, the rules on producing an application for Facebook are remarkable lax: supply a valid email and you’re in. You don’t even have to provide any details to users about who is behind a particular application.
Users are warned that installing an application can give the developer access to some of the information you have stored with the site, but it appears that because these warnings appear on every app – even ones from highly respected organizations – they lose any effectiveness. The warnings also seem to fail to make clear exactly what details are made available.
Facebook does operate a verification program where developers are allowed to display a ‘verified by Facebook’ badge if they give a valid business name and contact details, details of the data the application requests, and screenshots of the application in action, .
Without wanting to fall into the trap of believing my own experience represents all Facebook users, I have to say I’d never heard of this program before today and don’t recall seeing the badge. If other users are also unaware of the scheme, it might explain why many developers don’t bother stumping up the $375 fee for the verification process.
Perhaps the best compromise would be to set user accounts to not be able to access unverified accounts by default, but allow users to change to an ‘all apps’ setting once they click an agreement reminding them of the potential risks of using unverified apps. That would allow the creative freedom to continue while hopefully prompting users to exercise more caution.

Related:





Stumble It!
