Securing Your Facebook Identity Nicholas A. Davis, CISA, CISSP UW-Madison Division of Information Technology 11/10/2015 UNIVERSITY OF WISCONSIN1

!!Advisory!! The content of today’s presentation is designed to help people protect themselves on Facebook. This is NOT a session on Facebook hacking. If hacking Facebook is your motivation for attending today’s session, please leave now 11/10/2015 UNIVERSITY OF WISCONSIN2

Overview Basic rules of Facebook security Unique situation on UW-Madison campus (academic research poses a unique Facebook chalenge) Why unauthenticated identity means “be careful” The dangers of Facebook photos Application settings and security preferences Facebook passwords Time and place concerns Roaming security Account cleanup and maintenance Tips and tricks Q&A session 11/10/2015 UNIVERSITY OF WISCONSIN3

Basic Rules of Security 1. Think before you post 2. Customize your privacy settings 3. Don’t accept friend requests from people you do not know 4. Keep sensitive information private 5. Remember, being on Facebook means that you are living like a rock star! (kind of) 11/10/2015 UNIVERSITY OF WISCONSIN4

Research Lab Example 11/10/2015 UNIVERSITY OF WISCONSIN5

Meet Flat Cow We will be using Flat Cow, known to his friends as FC, in a few slides 11/10/2015 UNIVERSITY OF WISCONSIN6

Wait, Cows Can’t Be On FB! Unauthenticated Identity 11/10/2015 UNIVERSITY OF WISCONSIN7

Organize Friends In Lists 11/10/2015 UNIVERSITY OF WISCONSIN8

Photos Tell Stories (Not Always Safe Ones) 11/10/2015 UNIVERSITY OF WISCONSIN9

Photos Tell Stories (Not Always Flattering Ones) 11/10/2015 UNIVERSITY OF WISCONSIN10

Keep In Mind Don’t get yourself into a situation in which such pictures can be taken You have little to no control over who takes your picture in public Think about the stories your photos tell about you Exercise control over pictures of you tagged by others 11/10/2015 UNIVERSITY OF WISCONSIN11

Automatic Updates Take Control! 11/10/2015 UNIVERSITY OF WISCONSIN12

Don’t Advertise Yourself 11/10/2015 UNIVERSITY OF WISCONSIN13

You Can’t Control Your Friends But You Can Control Their Applications 11/10/2015 UNIVERSITY OF WISCONSIN14

Don’t Let Your App Excitement Obscure Your Judgement 11/10/2015 UNIVERSITY OF WISCONSIN15

Keep The Stalkers At Bay Change Search Visibility 11/10/2015 UNIVERSITY OF WISCONSIN16

Get Your Facebook Profile Out of Google 11/10/2015 UNIVERSITY OF WISCONSIN17

Tips To Keep You Safe On Facebook Change your Facebook password often 11/10/2015 UNIVERSITY OF WISCONSIN18

Facebook Is a Prime Target For Password Hackers Never use the same password for Facebook as you use for your bank access 11/10/2015 UNIVERSITY OF WISCONSIN19

Examine Photos Before You Post Avoid posting photos with identifying information, such as addresses, license plates, etc. 11/10/2015 UNIVERSITY OF WISCONSIN20

Don’t Advertise Your Absence Post vacation pictures AFTER you get home 11/10/2015 UNIVERSITY OF WISCONSIN21

Browse Facebook Securely When at Starbucks (HTTPS) 11/10/2015 UNIVERSITY OF WISCONSIN22

Remove Facebook Apps Which You Do Not Use 11/10/2015 UNIVERSITY OF WISCONSIN23

Use Privacy Settings To Block People 11/10/2015 UNIVERSITY OF WISCONSIN24

Check the Facebook URL Often 11/10/2015 UNIVERSITY OF WISCONSIN25

Know The Difference Between Deactivating and Deleting Your Facebook Account Deactivating your account leaves all posts and pictures intact Deletion is supposed to remove everything Don’t login after you request deletion 11/10/2015 UNIVERSITY OF WISCONSIN26

The Facebook Doppelganger Spy “But Flat Cow is already my friend” 11/10/2015 UNIVERSITY OF WISCONSIN27

Three Strikes and You’re Out! Don’t Be a Friend Pig 11/10/2015 UNIVERSITY OF WISCONSIN28

How Liking Things Could Take Advantage of You 11/10/2015 UNIVERSITY OF WISCONSIN29

Facebook Security Best Practices news-trends/best-practices/facebook.aspx 11/10/2015 UNIVERSITY OF WISCONSIN30

Carnival Cruise Scam Just One Example Message purporting to be from "Carnival Cruise" claims that Facebook users can win an all-expenses-paid vacation package by liking and sharing a promotional image and clicking a link to apply for the free tickets. 11/10/2015 UNIVERSITY OF WISCONSIN31

Enable Login Notifications Login notifications are an extra security feature. When you turn on login notifications, we'll send you an alert each time someone logs into your account from a new place. 11/10/2015 UNIVERSITY OF WISCONSIN32

A Note About UW NetID Your NetID is like your toothbrush, only you should use it UW-Madison will NEVER ask for your NetID and/or password via Report any such requests to 11/10/2015 UNIVERSITY OF WISCONSIN33

Q&A Session Nicholas Davis facebook.com/nicholas.a.davis 11/10/2015 UNIVERSITY OF WISCONSIN34