Posts Tagged: myspace


4
Jun 08

Huge Data Breach at Myspace

I’ve not personally verified this, but Valleywag is reporting on a massive data leak from Myspace via Yahoo. From VW:

Want to see Paris Hilton’s MySpace profile? How about Lindsay Lohan’s? Don’t worry about those pesky privacy settings. Thanks to “data portability,” a faddish technology movement that the Valley has been buzzing about for months, you can see any profile you want on MySpace. Byron Ng, a Canadian computer technician with a knack for finding Web security holes, has discovered that Yahoo’s integration with MySpace makes it easy to view photos for any profile.

The instructions for the hack are presented in a separate article. We should note this isn’t the first time Myspace has been breached, and while privacy nuts get all worked up over this, I’m not sure how much this registers with the mass audience. The takeaway in this episode is summed up nicely by writer Owen Thomas:

This points to a flaw in the notion of data portability, a movement which seeks to have personal information shared between social networks and other websites. Data portability was borne out of a wrongheaded assumption: That data needs to be shared. Most consumers, I believe, aren’t particularly interested in the concept; they belong to a few social networks at most, and don’t find managing their online personas to be a particular challenge.

Indeed. And the reason big companies have “signed on” to DP isn’t because they want to make the web easier for us, it is because DP is personal, monetizable data sharing taken to the nth level.


24
Jan 08

Myspace’s data disaster

Earlier this week, a student in my class pointed us to this story, describing a security vulnerability in Myspace that allowed private pictures to be viewed by anyone. It’s not the first time Myspace has been exploited in this manner, but it was certainly creepy. A followup story reveals the staggering impact of the vulnerability. Wired’s Kevin Poulsen writes:

A 17-gigabyte file purporting to contain more than half a million images lifted from private MySpace profiles has shown up on BitTorrent, potentially making it the biggest privacy breach yet on the top social networking site.

By then, DMaul, a denizen of the online forum TribalWar.com who declined to reveal his name, used an automated script to run nearly 44,000 MySpace user profiles through one of the ad-supported sites, MySpacePrivateProfile.com — a process he says took about 94 hours. He rolled those images into a single file and seeded it to The Pirate Bay, a popular BitTorrent tracking site, on Sunday, advertising it as “pictures taken exclusively from private profiles.”

The scope of this breach is staggering, especially when one considers the method of distribution. Like in other data breaches, once the data hits a torrent network, there’s simply no way to recover or erase the leakage. Individuals who had their data compromised can hope for security through obscurity, but they can never hope to reclaim their images from the hard drives they now inhabit.

This episode is frightening on a number of levels. As a system can’t be hacker-proof, there will always be individuals seeking to exploit and gain access to private information. In this attack, we see a basic crawling/caching – but what if it had been deployed as an open proxy, where individuals interested in seeing private pictures fed the system with id’s, and the proxy simply cached and shared everything? Social network sites seem especially vulnerable to the proxy attack, and I shudder to think what might have happened if this attack was the work of more than one determined individual.

This also reinforces the false, trivial nature of privacy on these sites (as Valleywag says, “your privacy is an illusion”). The only thing separating one’s private content from public content is an if/else loop, and if it fails once, that’s enough for a massive incident. Of course, this doesn’t apply only to social network sites – think of anywhere you’ve stored mass amounts of private information: your web-based email, your friends-only journal, your photo-sharing account. Any and all of it may be public one day, all it takes is a vulnerability and determined screen-scraper.

And so it seems the only option is to disappear from the grid, or to adopt Hasan Ali’s radically transparent approach. If it were only that simple. It seems that a critical new literacy is audience control – being able to understand the population to which you are projecting, as well as the costs and benefits of data leaks. This is not as simple as it seems, and it certainly takes some a joy out of the seemingly boundary-less web. At the same time, it is hard to discount the triviality of these attacks; in 19 hours, 500,000 pictures were collected and seeded to torrent networks. That is a harsh reality.

Update: Terrell posts his informed opinion here.
Update 2: Privacy expert Michael Zimmer shares his opinion.


1
Aug 07

ComScore on Social Network Growth

Yesterday, comScore released some new numbers on social network site growth over the past year. The numbers are interesting, yet expected. Comparing unique visitors from June of 2006 and 2007, Facebook shows tremendous growth, along with significant movement for Bebo and Tagged. Myspace and others continue to grow at a remarkable pace, but the story of the stats is Facebook. Of course, comparison at a one-year interval can be somewhat misleading, especially in the fast-moving world of SNS, so to have these broken down quarterly would have been a lot more interesting.

In fact, the most interesting statistic comScore produced was a breakdown of SNS visitors by geographic region. While there isn’t anything too surprising – Facebook is huge in the US, Bebo large in Europe, and Orkut dominates Latin America – I was interested to see Tagged’s fairly even distribution among a number of geographic areas.


2
Jul 07

On Class and Social Network Transitions

Last week, danah boyd generated significant discussion with her piece Viewing American class divisions through Facebook and MySpace (comments here). After reading it this morning (I was offline last week), and then exploring some of the controversy surrounding the piece, I thought I’d share some of my thoughts.

In the essay, danah draws on her ongoing ethnography to explore class distinctions between Facebook and Myspace. Using frank language, she divides the representative “classes” of users – Facebook’s users are more systematically mainstream, whereas Myspace has become the catch-all for the second-class and minority cliques oft thought of as non-elite. As one might imagine, this argument created uproar, especially after it was grossly genericized in the press. While I think dichotomizing an audience as large as Facebook’s or Myspace’s is inherently problematic, danah’s essay was a meditation, meant to be thought-provoking and controversial.

danah’s work often draws the parallels between physical spaces and so-called “networked” or “digital” publics. As young people spend more of their lives interacting socially online, the expectations, norms and cultural baggage of our offline existences often show up in these online places. As a result, our online spaces become political and value-laden, and certainly the press and public-opinion treatment of Myspace is a prime exemplar.

How Myspace became a “scary” place is beyond the scope of this article; however, I’ve cataloged enough press clippings about social networks to clearly see an editorial slant. This is no surprise, as the “social networks as dangerous spaces” narrative has been a dominant theme for years now. But as we pull the layers back, I think danah brings up an interesting point for analysis – was Myspace easier to stigmatize because its userbase wasn’t the elite? Certainly, if we look at a Myspace/Facebook split in coverage, you’ll see differences in the volume and tone.

As we go down this path, one could argue that the systematic bias that pervades coverage of Myspace is a artifact of how the audience/userbase is generally covered; and if you buy danah’s characterization, this makes sense. I mean, when is the last time you read a positive mainstream press article about goths? And while I certainly don’t trust the press enough to throw away any of these possibilities, I think the larger effect we see in differences of coverage is due to access. That is, reporters/parents/schoolteachers have always had access to Myspace, whereas open access to Facebook is a fairly recent phenomenon.

Social networks as scary places is a media narrative that lasted longer than it should have. It played on parent’s worst fears (sexual exploitation) and turned teenage technical sophistication into a bad thing (i.e. savvy teens vs. clueless parents). I think the only reason the narrative is burning out is because the stories have been written so many times. Now, Facebook is emerging as an alternative – and it is being cast in the light of the “good alternative.” It is the anti-Myspace, which is a sentiment echoed up and down the food chain. Of course, in being the anti-Mypsace, we see a good/bad dichotomy between the two services. Those who use Facebook are good, advanced, self-respecting – while those who continue to populate Myspace – ouch.

As with anything boiled down into headline or paragraph, the nuance and complexity of the issue often overlooked. If Facebook is “good”, why doesn’t everyone just switch? And are those who don’t switch “bad” or second class? Of course not. I believe a good deal of this confusion can be explained by social network switching, or transition, costs.

If you’re reading my blog, it is likely you’ve heard of the network effect. In a nutshell, network effect means that as more people join a network, the network becomes more valuable. Imagine if you have 125 friends on Myspace, but you only know 10 people on Facebook; since you can get more social information from your 125 friends on Myspace, that network is much more valuable to you. Make no mistake, social network sites are social information hubs – the value of these hubs are directly related to the relevance of the network to the consumer. If you get more value out of your Myspace network, are you going to switch? Of course not – at least for now.

For the past three years, however, Facebook’s network has been growing amongst college and high-school students. Even though hundreds of thousands of people are joining Facebook each week, the strong ties and large networks in Facebook are generally populated by the students – they are the first-class network in Facebook, without a question. Because those who attend college can be grouped into secioeconomic classes, there’s certainly an effect for this self-selection. However, the reason one class can leave Myspace easier than the other is simply because switching costs are lower. If you’re of a “class” where many of your peers attend or have attended college, it is likely that you’ll have a rich network to join once you make the leap to Facebook. If you don’t, well – you’re a first adopter, and we know what that portion of the curve looks like. Does this mean that these “second-class” users can’t or won’t join – absolutely not – they will simply wait until Facebook’s network becomes valuable enough for them to join. In this sense, rational economic judgement (value of information networks) is keeping some users in situ, while others depart.

Of course, this analysis neglects a reality that some Facebook users do look down on Myspace (just as some Myspace users look down at Facebook). Are the Facebook users the kids with the new sneakers? Can we make this argument about digital publics? And perhaps having the social capital to be able to make the leap from Myspace to Facebook is a class statement. I think the problem here is that we’re overvaluing the tastemakers.

In 2004, students joined Facebook just because – not because it was the anti-Mypsace. Facebook grew from this point, and became the college social network. Yes – we consider this bloc to be the tastemakers (largely a function of their lifetime spending potential), but simply because they’re on Facebook – does that make it better? I think that’s the question we have to ask ourselves – because there are plenty of people who are perfectly happy on Myspace. Will the transition? Sure, I think transition is inevitable. Just as bars and restaurants go in and out of popularity, so will online social places. And just when those places become popular, the tastemakers will depart for new opportunities. But those who are left behind – do we need to worry about them? Honestly, I can’t really say – but my gut tells me they’ll fend for themselves just fine. There’s just too many parallels between this and everything else in life for me to believe that’s not the case.


24
Apr 07

The Myspace Report – Never Ending Friending

Today, Myspace released a snazzy market intelligence report (PDF download) to some of its top media clients. Forbes’ Rachel Rosmarin has the most-blogged coverage, though I’ve seen many media outlets covering the press release as well.

Let’s get the obvious out of the way – this survey was constructed to glorify Myspace, which is actually not that hard of a thing to do. That said, I didn’t find any major red flags – I actually found it somewhat interesting (as long as you take it for what it is). Here are two nuggets I enjoyed.

The first question examines the effect of social networking on alternative media consumption. Assuming a margin of error of 3.5%, there are significant negative effects for video games, but significant positive effects for the internet, email (weird? possible misleading wording leading to conflation of ‘messaging’ with email), IM and cell phone (also a little surprising, seems spurious). Put simply, this means that social networking leads us away from a solitary activity like video games, but it makes us engage more with social technologies such as a cell phone.

I’m most interested in the significant negative effect for video games. Assuming that most video game play is not a social experience (in gross hours played), it is interesting to see social engagement winning out over non-social engagement (in the time-wasting space). Not that this is surprising, but, cool to see.

This is reinforced by another question “If you had 15 minutes of time, which activity would you most like to do.” This was interesting to me because I think it illustrates our complicated relationship with social networks (especially Myspace). Again, assuming a 3.5% margin of error, social networking is significantly preferrable to video games, IM, and listening to an MP3 player or the radio (mostly solitary experiences, exception IM). It is not significantly preferable to chatting on a cell phone, generally surfing, or watching TV. With the exception of TV, which is a pseudo-social experience, those other experiences were social.

Let’s not demean the value of social networking – I think it’s incredible that social networks are as favored a time waster as TV or talking on a cell phone. I just think that we’re seeing a canary in a cave mine here – given a choice, we are ultimately more interested in engaging in social experiences in our time wasting than non-social experiences. We’re social beings, and the technologies we use allow this engagement – and we prefer them.

If I were a marketer reading the tea leaves from this report, I’d pay very close attention to the value of social engagement. As technology allows us to interact with each other, we’re seeing a halo effect carrying over to other social technologies. Myspace (and social networking) is currently the most important place because it enables social serendipity, but there are certainly other innovative ways to spread the effects of a social networking campaign to other media.

Download the report here.


17
Jan 07

The panopticon in the SNS: Zephyr

In the upcoming months, Mypsace plans to release a product named Zephyr that will enable parental tracking of teenagers in Myspace. The Wall Street Journal, the Register, CBS News and Mashable have coverage.

From what I’ve pieced together, Zephyr will work like spyware. Parents will install Zephyr on their home computer, which will then capture the Myspace identities of those who use the computer to log into Myspace. It will then remotely track those identities, notifying parents of access, changes to some profile information, or movement of account names. For example, a teenager who signs on to a Zephyr-enabled computer will have their profile tracked if they later log in from a school computer via a proxy.

In some respects, a system like Zephyr sounds useful – parents have a notoriously hard time finding the profiles of their children, and this could aid them in this process. However, when the ability to spy on and track each other becomes a fundamental part of the system, what prevents abuses? For example, what prevents someone from installing Zephyr on a public computer, capturing and subsequently tracking the profiles that appeal to him/her? I see no safeguard in this process, unless Zephyr limits the amount of profiles someone can track.

Zephyr walks a fine line with regards to privacy, as it does not record all elements of the teenager’s profile. However, the tracking of “actions” such as log in/out, location of access, changes to profile information is a substantial privacy challenge. I see this type of surveillance as similar in nature to the government’s illegal surveillance of our cell phone networks – while they were not recording our calls, they were recording all accesses, dials, etc. This is very valuable information, especially in the hands of those who wish to do harm.

Is Zephyr a bottom-line-pleasing, media-friendly “solution” for parents, or does it simply introduce new privacy concerns into the system? Do we really need to track our children, monitoring their logins on computers around the world? And what does it really get us? In a sense, this is just an escalation in the Myspace arms race. The question becomes: What will the young people do to get around Zephyr?

Also interesting is that 33 state attorneys general are pressuring Myspace to integrate its account system with identity verification databases. From the WSJ article:

But a group of 33 state attorneys general led by Connecticut’s Richard Blumenthal are investigating taking legal action against MySpace if it doesn’t raise the age limit to join the site to 16 (from 14 currently) and begin verifying MySpace members’ ages against public databases.

Unfortunately, they’ve got it backwards. Myspace is the public database.


31
Oct 06

Why They Are Leaving Myspace

A number of newspapers have taken up analysis of Myspace attrition – the growing meme that young people are leaving Myspace and other SNS. Here’s coverage by the Wall Street Journal, the San Fransisco Chronicle, and the Washington Post. This coverage follows the recent Comscore and Nielsen surveys that “found” a growing number of SNS users are much older adults (“Even the audience for Xanga.com, a less-heralded online social networker, is stumbling toward middle age, with 20 percent of its population over 45.” breathlessly states the Chronicle.)

With all this coverage, you might find yourself wondering what exactly is going on with the SNS sites – are the populations aging upwards? Are young people committing SNS suicide en masse? Indeed, while these two questions seem strongly linked, they actually aren’t. Let’s analyze them separately.

First, with regards to the aging population of SNS, danah and I have conducted analysis that sheds a lot of light on those numbers. In a nutshell – while it is entirely possible that people from all age ranges are visiting SNS, the core user demographic absolutely still skews young. As SNS goes mainstream, of course a growing number of adults will check out the sites to see where their teenagers are hanging out – but these adults are not the users of the site, they are not making friends in the SNS. Unfortunately, a number of media outlets and blogs (The AP, GigaOM) erroneously reported on the data, so the meme that SNS is “graying” is unfortunately and erroneously in the wild.

More interesting, however, is the phenomenon of established users leaving SNS. The WSJ reported on Jenny Thompson, a MySpace native with 4,000 friends who deleted her profile. Indeed, SNS attrition is real, but it is hardly as alarming as the media makes it out to be? Why? Because social circles are fundamentally dynamic. Think back upon your life – how many social circles you’ve joined or left, the friends you’ve gained or lost over time. Our social networks are always in-flux, we are constantly joining and leaving social circles. An SNS is simply another one of these social circles – it is bound by the same rules as offline circles, so it is natural that individuals will join and leave.

In this analysis, there is a complicating factor. In the “real world”, our social networks are not publicly articulated. When we decide to stop attending our book groups, we do not suddenly dissapear from all of our other social groups. When we delete our Myspace profiles, we do remove ourselves from all of the in-system groups with which we affiliate. Because SNS suicide represents a shunning of all groups, we commonly overattribute value to this action.

Users in an SNS are primarily concerned with how the SNS helps them negotiate the primary contexts in which they wish to articulate their identity. In more human terms, while there are many secondary social networks in the SNS, we are largely concerned with the primary social network that is relevant to our lives. As situational relevance shows, this primary social network changes throughout our lives – and our needs change accordingly. Once a social networking site stops addressing those needs, it becomes less valuable to us, often to the point it becomes a burden. Then we leave.

They key point here is not that the social network sites are changing, but that we are changing. For people in different contexts, social networking sites serve very valuable purporses. The Facebook is invaluable to the young college student struggling to remake their identity and negotiate the world around him or her. Myspace is invaluable to the young relocated professional looking to find friends and dates. (Cliched exampes yes, but also true). However, as we age, our needs change – the college student solidifies his or her group of friends, the young professional settles down. Once the website stops serving our needs, we naturally leave.

The bar or pub provides a good analogy for the SNS. Bars are social places where we interact, meet and display our identity. Bars also have context – think of singles bars, music bars, wine bars. In these bars, there is a natural social evolution. For example, think of a singles bar. The people in the singles bar frequent it at a point in their lives; eventually, they meet a mate and the context becomes less valuable to them. Of course, the singles bar doesn’t go out of business – a new crop of singles replaces those old boring hitched folks. This is an important lesson for social networking sites – social places cannot be abstracted from their context, no matter how broad the appeal. Users will leave and move on – however, just like a good bar, they must constantly attract new clientele.

Indeed, the new clientele are coming. Young people are becoming technically socialized on SNS, and SNS serve valuable social needs. However, just as a bar would fail if it tried to be all things to all people, SNS sites must realize their value is dictated by their context. As such, they must consistently be thinking about new ways to bring audience in to this context, rather than just adding new additions designed to trap clientele that wishes to move on. That we wish to move from place to place is entirely natural, and generally technologists fail rather miserably when they try to break human nature for economic reasons.