Facebook Security

04/10/2023 UNIVERSITY OF WISCONSIN 1

Securing Your Facebook Identity

Nicholas A. Davis, CISA, CISSPUW-Madison

Division of Information Technology

04/10/2023 UNIVERSITY OF WISCONSIN 2

!!Advisory!!The content of today’s presentation is designed to help people protect themselves on Facebook. This is NOT a session on Facebook hacking. If hacking Facebook is your motivation for attending today’s session, please leave now

04/10/2023 UNIVERSITY OF WISCONSIN 3

OverviewBasic rules of Facebook securityUnique situation on UW-Madison campus (academic research poses a unique Facebook chalenge)Why unauthenticated identity means “be careful”The dangers of Facebook photosApplication settings and security preferencesFacebook passwordsTime and place concernsRoaming securityAccount cleanup and maintenanceTips and tricksQ&A session

04/10/2023 UNIVERSITY OF WISCONSIN 4

Basic Rules of Security1. Think before you post2. Customize your privacy settings3. Don’t accept friend requests from people

you do not know4. Keep sensitive information private5. Remember, being on Facebook means that

you are living like a rock star! (kind of)

04/10/2023 UNIVERSITY OF WISCONSIN 5

Research Lab Example

04/10/2023 UNIVERSITY OF WISCONSIN 6

Meet Flat CowWe will be using Flat Cow, known to his friends as FC, in a few slides

04/10/2023 UNIVERSITY OF WISCONSIN 7

Wait, Cows Can’t Be On FB!Unauthenticated Identity

04/10/2023 UNIVERSITY OF WISCONSIN 8

Organize Friends In Lists

04/10/2023 UNIVERSITY OF WISCONSIN 9

Photos Tell Stories(Not Always Safe Ones)

04/10/2023 UNIVERSITY OF WISCONSIN 10

Photos Tell Stories(Not Always Flattering Ones)

04/10/2023 UNIVERSITY OF WISCONSIN 11

Keep In MindDon’t get yourself into a situation in which such pictures can be takenYou have little to no control over who takes your picture in publicThink about the stories your photos tell about youExercise control over pictures of you tagged by others

04/10/2023 UNIVERSITY OF WISCONSIN 12

Automatic UpdatesTake Control!

04/10/2023 UNIVERSITY OF WISCONSIN 13

Don’t Advertise Yourself

04/10/2023 UNIVERSITY OF WISCONSIN 14

You Can’t Control Your FriendsBut You Can Control Their Applications

04/10/2023 UNIVERSITY OF WISCONSIN 15

Don’t Let Your App Excitement Obscure Your Judgement

04/10/2023 UNIVERSITY OF WISCONSIN 16

Keep The Stalkers At BayChange Search Visibility

04/10/2023 UNIVERSITY OF WISCONSIN 17

Get Your Facebook ProfileOut of Google

04/10/2023 UNIVERSITY OF WISCONSIN 18

Tips To Keep You Safe On Facebook

Change your Facebook password often

04/10/2023 UNIVERSITY OF WISCONSIN 19

Facebook Is a Prime Target For Password Hackers

Never use the same password for Facebook as you use for your bank access

04/10/2023 UNIVERSITY OF WISCONSIN 20

Examine Photos Before You PostAvoid posting photos with

identifying information, such as addresses, license plates, etc.

04/10/2023 UNIVERSITY OF WISCONSIN 21

Don’t Advertise Your AbsencePost vacation pictures AFTER you

get home

04/10/2023 UNIVERSITY OF WISCONSIN 22

Browse Facebook Securely When at Starbucks (HTTPS)

04/10/2023 UNIVERSITY OF WISCONSIN 23

Remove Facebook Apps Which You Do Not Use

04/10/2023 UNIVERSITY OF WISCONSIN 24

Use Privacy Settings To Block People

04/10/2023 UNIVERSITY OF WISCONSIN 25

Check the Facebook URL Often

04/10/2023 UNIVERSITY OF WISCONSIN 26

Know The Difference Between Deactivating and Deleting Your

Facebook Account

Deactivating your account leaves all posts and pictures intactDeletion is supposed to remove everythingDon’t login after you request deletion

04/10/2023 UNIVERSITY OF WISCONSIN 27

The Facebook Doppelganger Spy

“But Flat Cow is already my friend”

04/10/2023 UNIVERSITY OF WISCONSIN 28

Three Strikes and You’re Out!

Don’t Be a Friend Pig

04/10/2023 UNIVERSITY OF WISCONSIN 29

How Liking Things CouldTake Advantage of You

04/10/2023 UNIVERSITY OF WISCONSIN 30

Facebook SecurityBest Practices

http://www.sophos.com/en-us/security-news-trends/best-practices/facebook.aspx

04/10/2023 UNIVERSITY OF WISCONSIN 31

Carnival Cruise ScamJust One Example

Message purporting to be from "Carnival Cruise" claims that Facebook users can win an all-expenses-paid vacation

package by liking and sharing a promotional image and clicking a link to apply for the free tickets.

http://www.hoax-slayer.com/facebook-related.html

04/10/2023 UNIVERSITY OF WISCONSIN 32

Enable Login Notifications

Login notifications are an extra security feature. When you turn on login

notifications, we'll send you an alert each time someone logs into your account from

a new place.

04/10/2023 UNIVERSITY OF WISCONSIN 33

A Note About UW NetIDYour NetID is like your toothbrush, only you should use itUW-Madison will NEVER ask for your NetID and/or password via emailReport any such requests to abuse@wisc.edu

04/10/2023 UNIVERSITY OF WISCONSIN 34

Q&A SessionNicholas Davis

ndavis1@wisc.edufacebook.com/nicholas.a.davis