My Facebook profile

In the technology section of today’s globeandmail.com, there is an article about the landmark ruling against a Canadian spammer that awarded Facebook $873 (US) million in damages.

In a landmark ruling Monday, U.S. federal Judge Jeremy Fogel awarded Facebook $873-million (U.S.) in damages after finding Mr. Guerbuez was in violation of the CAN-SPAM Act (Controlling the Assault of Non-Solicited Pornography and Marketing) which prohibits the distribution of mass e-mail messages that contain false or misleading information.

How was Mr. Guerbuez able to send four million messages before being shut down by Facebook? He sent messages to people’s email and got them to click on a link that looked like it was from Facebook and told them to enter their username and password.

“Spam has gone Web 2.0,” said David Poellhuber, president of Montreal-based Zero Spam.

“The social networks are really the new spammers playground. … Tech savvy young people are new, fresh targets for spammers.”

But Mr. Guerbuez gained the usernames and passwords of a number of Facebook accounts through more traditional means: He spammed countless e-mail accounts with a message purporting to be from Facebook that requested the recipient follow a link and then enter their login information. It’s one of the oldest tricks in the spammer’s book.

For many students I know Facebook = Internet.

People need to be careful online and less trusting of messages they receive. Just because a message looks like it from Facebook asking you for your username and password, it doesn’t mean that it actually does. Facebook uses the @facebookmail domain to send email messages to you (e.g. notifications).

I have been on Facebook since 2005 and absolutely love it as a place to socialise with my real world student friends, comments on their walls, share photos, and RVSP to various events taking place on campus that I ordinarily might not know about. Like most of my student friends, my Facebook friends are real-world students, not people I know only from the Internet or that are interested in networking.

So, when a message comes from my best friend Sam telling me to click a link because it’s a cool photo of us, then my trust level is higher and I’m more likely to do it than if it’s Steven, who added me as friend because they heard me on the radio or liked my photos on flickr. That trust factor is what spammers are using to exploit Facebook accounts. I have received a number of messages either on FB or on my wall that were spam because that friend had clicked on a spammer link, that had also been sent by a trusted friend.

Spammers will continue to exploit the high level of trust that students have for Facebook. Be careful, think before you click.

Relevance: I’m in ur Facebook, spamming ur friends.