Facebook users call for application "walled garden" to protect against attacks

Filed Under: Apple, Facebook, Malware, Rogue applications, Social networks, Spam

What many folks don't realise is that Facebook is much more than a social networking website, it's a platform with over half a million active applications running upon it.

Inevitably some of these third-party applications are written with malicious intent - designed to steal information, spread virally, or spam unsuspecting Facebook users. Anyone can write a Facebook application, and it can be made available to the site's over 500+ million users without any vetting by Facebook's security team.

So, it's no wonder we see so many malicious attacks by rogue Facebook apps every day.

Last week, I asked a simple question of our blog readers

Should Facebook follow Apple's example, and have a "walled garden", verifying all apps?

and the response was a resounding "Yes".

Poll on whether Facebook should verify all apps

I'd love to see Facebook to follow the example set by Apple when governing the iOS App Store. Apple checks every app submitted to its store, but Facebook does nada preferring things to be relaxed, free and easy. It would certainly make life much harder for those scammers, identity thieves and con artists who are actively exploiting users via rogue applications right now if a rigorous verification system were put in place.

Or, at the very least, Facebook could do what some members of the Sophos Facebook community suggested, and give users a security option meaning they would only be able to install Facebook apps that had been verified - and not be pestered by apps that hadn't bothered to go through the process.

The question now is - are Facebook brave enough to take the step for the benefit of their users? Let's not forget - this is people's personal identities and information that are at risk.

,

2 Responses to Facebook users call for application "walled garden" to protect against attacks

  1. Spammyboy says:

    The screening should be security-based only. The problem with Apple is that all apps are vetted to make sure they fit Jobs's very restrictive values.

  2. Akash says:

    Yes, I already knew about this nice fearute for enterprise products users, but unfortunately my employer still prefers to sell Trend Micro WFBS to our customers, although it causes many troubles regularly. :-| (New WFBS 7.0 is even more nasty than 6.0. We had to remove it.)

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title="" rel=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <pre> <q cite=""> <strike> <strong>

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.