Trust and Impersonation in social networks

[A quick meta-note upfront: I haven’t been posting much lately, because I started a Real Nearly-Full-time Job a few weeks ago.  I’m continuing both CommYou and Art of Conversation, but my time is now much more limited.]

My friends mindways recently posted a link to an interesting but not surprising article about the growth of fraud in social networks.  The idea is quite simple: since Facebook verifies nothing but your email address, it is terribly easy to pretend to be someone else.

I’m not talking about fancy high-tech breaking of security here — it’s simply that, if I was to claim to be Bill Gates, how do you know that I’m not?  (In practice, a quick search turns up a bunch of them.)  More to the point, how do you know whether or not I’m your buddy Jim?  If I have Jim’s picture, and a little of the right biographical information on my profile, I sure look like Jim.  Do you vet your Facebook friends carefully, to see if they are who they say they are?  Would you even really have a way to do so, short of calling Jim and asking if he friended you on Facebook yesterday?

This is all the flipside of the “pseudonymity” question that comes up from time to time.  If you have a lot of persistent information online, that is all strongly linked together in a secure way, that counts as a fairly clear identity — perhaps not an identity linked back to the real world, but an identity.  OTOH, if all you have is a bunch of information about a real world identity, but no secure relationship between that and the online one, you don’t really have anything meaningful.  But most people are still used to thinking in terms of real names and faces, so the gut reaction is to believe the latter more than the former, even though it’s actually much easier to fake.

Curiously, I suspect that LiveJournal is actually less prone to this problem than Facebook is, precisely because it does not use your real name as your handle.  (And many/most people don’t use their picture for their icon.)  This preconditions people to be just a hair more suspicious: there isn’t the knee-jerk, “Oh, look — it’s Jim’s picture so it must be Jim.”  And on LJ, Who You Are is mostly determined by What You Say.  If you post a lot of things that only Jim would say, you’re probably Jim.  But just asserting your identity and friending people is more likely to make them suspicious: there is more burden of proof.

At least, that’s my guess.  I don’t know that anyone’s really studied the matter yet — it would be interesting to see what came out of such a study.

What do you think?  Have you found yourself more apt to simply friend someone on Facebook than on LJ, because they have the right user name and photo?  Do you think the rise of OpenID and other online-identity-linked mechanisms will gradually reduce this threat, by raising expectations of a deeper, richer and more consistent online profile?

One Response to “Trust and Impersonation in social networks”

  1. Monica Says:

    I don’t use Facebook, so I can’t compare it to LJ, but on LJ I never post “friends-only”. Rather, I have a custom filter that is almost everybody, but people I’m not yet sure about don’t get onto it. If someone who appears to be an old friend appears on my radar and what he writes is interesting, I’ll add him to my reading list and contemplate giving him access. If what he writes isn’t interesting, I don’t care if he’s an old friend — I’m unlikely to add him, because to me the “friends list” is first and foremost about aggregating content. I have given access to a couple people who never post, but they’re people I already know IRL and who independently confirmed their LJ identities. I wouldn’t give such access to someon out of the blue.

    I should probably mention one thing about myself that I gather is unusual: I do not give any special status to someone just because he’s a relative or we were in 7th grade together. A lot of the point of Facebook seems to be reconnecting, but past connection is not a predictor of current common interest, so I don’t care. Statistically, I am more likely to find interesting people to get to know via friends of friends than via past involuntary associations. I’ve gotten enough cross-eyed looks when trying to explain this that I know I’m some sort of mutant.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: