Facebook email poses 'risks'
2010-11-18 14:12
Singapore - Facebook's new online messaging service makes users of the social networking site more vulnerable to identity theft by cyber criminals, computer security firm Sophos warned on Thursday.
It urged users to be aware of the security risks before signing up for Facebook's next-generation online messaging service that blends online chat, text messages and other real-time conversation tools with traditional email.
"Users need to realise that these new features increase the attack surface on the Facebook platform, and make personal accounts all the more alluring for cybercriminals to break into," said Sophos senior technology consultant Graham Cluley.
"Facebook accounts will now be linked with many more people in the users' social circles - opening up new opportunities for identity fraudsters to launch attacks," he added in a press statement.
Sophos noted that fraudsters are increasingly using hacked Facebook accounts to send spam messages - compared with traditional emails - because they are more likely to be opened by recipients lured to think the messages came from friends.
Critical
"Users also need to be aware that Facebook will be storing a complete archive of all their communications with one person. This raises concerns as to how this data could be misused if it fell into the wrong hands," Cluley said.
"With this in mind, it will be critical for Facebook to implement more effective filtering mechanisms to prevent fraudsters from manipulating Facebook users into falling victim to new spams, scams and phishing attacks."
Sophos called on Facebook users to take greater vigilance in securing their accounts, including installing hard-to-crack passwords, updating their computer security systems and being careful about which applications link to their profiles.
Facebook's new messaging system was launched on Monday and includes facebook.com email addresses.
Referred to inside the firm as "Titan", the service will be slowly rolled out in coming months to users.
Recently, some Facebook users have complained that their accounts have been disabled by a bug designed to eliminate "inauthentic" accounts.
"Earlier today, we discovered a bug in a system designed to detect and disable likely fake accounts. The bug, which was live for a short period of time, caused a very small percentage of Facebook accounts to be mistakenly disabled.
"Upon discovering the bug, we immediately worked to resolve it. It's now been fixed, and we're in the process of reactivating and notifying the people who were affected," the social networking site said.
Free
But the problems continue for some, mainly female, users. Facebook has asked for a "government issued" identity picture to verify accounts. Understandably, users are unhappy despite Facebook's assurances that it will delete the image once verification has happened.
Approximately 350 million of Facebook's more than 500 million members fire off messages using its existing service, with more than four billion digital missives sent daily, Facebook founder Mark Zuckerberg has said.
Market watchers say that with such a large user base, a free personalised facebook.com email service lays down a powerful challenge to the established email giants - Microsoft's Hotmail, Yahoo! Mail and Google's Gmail.