Page 24 - PCWorld (September 2019)

NEWS FACEBOOK PRIVACY RESTRICTIONS

still asking for your
phone number for

2FA without
disclosing that it was

also providing it to
advertisers.
The FTC doesn’t

say much here, so we
don’t know whether
the ruling will bar this

behavior going
forward, or attempt

to undo past actions
as well.

Finally, how up-front will Facebook be with HOW FACEBOOK WILL BE
“material” new uses for facial recognition, that REQUIRED TO MANAGE
you’ll need to opt in to? YOUR PASSWORDS

FTC: Facebook must encrypt user
HOW FACEBOOK WILL BE passwords and regularly scan to detect
ALLOWED TO USE YOUR whether any passwords are stored in plain

PHONE NUMBER text. Facebook is prohibited from asking
FTC: Facebook is prohibited from using for email passwords to other services

telephone numbers obtained to enable a when consumers sign up for its services.
security feature (e.g., two-factor In April, Facebook disclosed that

authentication) for advertising. hundreds of millions of passwords (go.
Between 2015 and 2018, Facebook pcworld.com/xpos) were stored in “a
encouraged users to sign up for two-factor readable format” within its servers, and

authentication (2FA), including texting a accessible to its own developers. The FTC
code to your phone number. What wants to put an end to it.

Facebook didn’t tell you is that the phone The FTC settlement also requires
number was also being handed over to Facebook to “establish, implement, and
advertisers, according to the DOJ. As maintain a comprehensive data security

recently as November, 2018, Facebook was program.”

24 PCWorld SEPTEMBER 2019