Employer Facebook Password Requests Suspended 209
Hugh Pickens writes "The Washington Post reports that Maryland's Department of Public Safety and Correctional Services has suspended a roughly year-old practice of asking prospective employees to voluntarily divulge their user names and passwords to social media Web sites such as Facebook. In a statement, the department said requests for user names and passwords had been voluntary, and had not been taken into account when evaluating job applicants. Nonetheless, 'in light of these concerns raised by the ACLU and because this is a newly emerging area in the law, the department has suspended the process of asking for social media information for 45 days to review the procedure and to make sure it is being used consistently and appropriately.'" We covered this story back when the ACLU took the case.
Sure! (Score:5, Insightful)
Re: (Score:3, Funny)
Re: (Score:2)
hunter2
Re: (Score:2)
That's because it's your password, all I see is stars. See: hunter2 hunter2 hunterfucking2
Re: (Score:3, Interesting)
Re: (Score:3)
Good thing we still have Bruce Schneier jokes. ;)
Why need the password (Score:2)
The information is out there publicly anyway.
Re: (Score:3)
Re:Why need the password (Score:5, Insightful)
Only friends and advertisers that facebook sell you to. Remember, at facebook, your information is the product.
Re: (Score:3)
Yes, in fact, they do sell your information to advertisers.
Re: (Score:2)
I didn't say any of that. Try a little reading comprehension.
Re: (Score:2)
That's true. Might as well make it wikifacebook, edit your friends wall, upload embarrassing photo, revert status.
Would this really be any less secure or private than facebook?
Flashlight under a rock (Score:2)
Lesson: governments and corps never give up power unless forced to.
If they had their way, each citizen would be assigned a "minder" in addition to electronic ankle bracelets and GPS.
Re:Flashlight under a rock (Score:5, Insightful)
It is unfortunate, but a lot of the worst abuses of the rights and freedoms that Americans are supposed to have are widely supported by the people themselves. Try telling someone that the War on Drugs may not be constitutional, or that too many people are in jail, or that prison sentences are too long, or that the police have too much power, or that there are just too many laws, and see the sort of reaction that you will get; with the exception of my libertarian friends (I am not a libertarian), I am almost exclusively met with expressions shock when I make any such statements. The concept of a society in which our freedoms are not curtailed further with each passing year seems to make people uncomfortable; that is why the government gets away with it.
Re: (Score:2)
Re:Flashlight under a rock (Score:5, Insightful)
"The best argument against democracy is a five minute conversation with the average voter."
Re:Flashlight under a rock (Score:4, Insightful)
"Democracy is the worst possible political system. Except for all the others."
Re: (Score:2)
Yup. Representative government isn't about being the "best," it's about legitimacy. It ensures that people get the government they want, for better or for worse, rather than having it rammed down their throats with no consent. In the end, a democracy is only as good as its voters make it. Voters being idiots isn't a fault of democracy but of the system that produced such voters.
Re: (Score:2)
Re: (Score:2)
In Winston Churchill's defense he also said:
"It has been said that democracy is the worst form of government except all the others that have been tried." -- Winston Churchill
It's not very hard to find flaws with democracy. The trouble is finding something that has less flaws. Most people act in their own interest, and if not then in the interest of their friends, family or some other group they belong to - I don't necessarily mean organized groups but that pot smokers have an obvious self-interest in legali
Re: (Score:2)
Not sure what country you're from, but the US is not a democracy--it is a representative republic.
Democracy is four wolves and a sheep voting on what to have for dinner.
Re:Flashlight under a rock (Score:4, Insightful)
The U.S. is a Representative Democracy -- a type of democracy -- and a Republic -- a nation whose leader is not a hereditary monarch. These are two orthogonal properties of nations.
We are not a Direct Democracy, which is what people saying "the U.S. isn't a Democracy" usually mean. But we are assuredly a Democracy. And the same comments, issued by Winston Churchill (who was in part describing his own country, which is a Representative Democracy as well), apply.
A Representative Democracy is four wolves and a sheep voting on who is going to decide what's for dinner. :)
Re: (Score:2)
Re: (Score:3, Insightful)
You say "they" as if the people who run the government are an entirely different species than everyone else. In the USA, "they" derive their power from the consent (albeit a rather apathetic consent) of the people "they" govern.
I apologize in advance for being that guy that invokes Godwin's Law [wikipedia.org], but I think that the same result of governance-through-apathy could be shown to be a major part of most [wikipedia.org] antagonists [wikipedia.org] of human rights. [wikipedia.org]
I just wanted to point this out in the defense of other Americans like the OP, to show that it's nothing the Americans have done differently or worse - in fact I might argue that it's human nature. It doesn't detract from your point at all, I completely agree with you - but it's unrealistic at this poi
Re: (Score:2)
Apathy Party! Just remember, No Vote is a Vote for us!
Re: (Score:2)
Well and I'm sure they just don't want to be embarrassed by all the glowing reviews of what a great place the correctional facilities/DMV is to work!
The only problem with your argument is your or anyone's drug use DOES affect me. If you go out and get stoned (or drunk) and run over my kid, that affects me. And there's no way I want to see you running around naked and crazy after you drop some PCP! ;-)
But I agree that people do give up their freedoms. For instance, letting the police seize large sums of mone
Re: (Score:2)
Re: (Score:3)
Lesson:Never give government more power than it barely needs to function. Stop voting with (D) or (R) who use Government to usurp the power of the people for their own greedy desires.
A better policy.... (Score:5, Interesting)
Here is how I would implement a policy like that. I would ask, all applicants for their facebook username and password up front.
Then, everyone who gave it to me, would get a polite letter informing them that they did not get the job because they so easily violated the TOS of facebook, with whom they had a standing agreement before they applied with us. Thus, there is no way that we could trust them with access credentials on our system.
You failed the test, you are the weakest link, goodbye.
Re: (Score:2)
Oh how I wish I had a mod point to give to this post. That is a perfect response.
Re:A better policy.... (Score:5, Informative)
You would be co-conspirators. Don't forget to punish yourself!
Facebook Statement of Rights and Responsibilities:
3.5:You will not solicit login information or access an account belonging to someone else.
3.12:You will not facilitate or encourage any violations of this Statement.
Re: (Score:3)
Where did TheCarp state that he had agreed to those terms?
Re:A better policy.... (Score:5, Insightful)
Those clauses only apply if you are a facebook user. Anyone who is not a facebook user is more than welcome to solicit all the login information they want. Just make sure your hiring board are all non-facebookers. Heck, make sure your entire company is non-facebookers. If the response to the facebook login info request is anything but "the requested information does not exist" then the potential hire is a no-go. It's a self-reinforcing process!
Re: (Score:2)
You would be co-conspirators. Don't forget to punish yourself!
Facebook Statement of Rights and Responsibilities: 3.5:You will not solicit login information or access an account belonging to someone else. 3.12:You will not facilitate or encourage any violations of this Statement.
That's absurd, if the boss never agreed to the Facebook TOS then he has in no way shape or form violated that agreement.
Re: (Score:2)
How did the boss get the job without turning over his facebook username and password?
Re: (Score:2)
It's a very, very weak contract. The employer in this case has not explicitly agreed to anything. It's very likely a court would find it non-binding if you didn't actually have a Facebook account since there would be next to no consideration on Facebook's part.
Re:A better policy.... (Score:5, Insightful)
Here is how I would implement a policy like that. I would ask, all applicants for their facebook username and password up front.
Then, everyone who gave it to me, would get a polite letter informing them that they did not get the job because they so easily violated the TOS of facebook, with whom they had a standing agreement before they applied with us. Thus, there is no way that we could trust them with access credentials on our system.
You failed the test, you are the weakest link, goodbye.
And anyone who passed the test, by refusing to divulge such information, should immediately turn down any job offer you give them.
No one with a brain would work for a company that dicks them around with "tests" like that.
They get enough of those mind games from their girlfriends.
Re: (Score:3, Funny)
They get enough of those mind games from their girlfriends.
Sorry, as a Slashdotter, I have no experience with that. Could you repeat your post in the form of a car analogy?
Re:A better policy.... (Score:5, Insightful)
You know how when there's a problem with your car, any part of it, that engine light comes on? And then you can't figure out what the hell is really wrong, because all you got is the engine light? And then you start second guessing every little noise or bump, in your rush to get it to a garage to get it resolved, only to find out three hours later and $500, that a screw was loose?
That's a mind game.
Re: (Score:2)
You know how when there's a problem with your car, any part of it, that engine light comes on? And then you can't figure out what the hell is really wrong, because all you got is the engine light? And then you start second guessing every little noise or bump, in your rush to get it to a garage to get it resolved, only to find out three hours later and $500, that a screw was loose?
No, because I know how to diagnose a check engine light ;). Do yourself a favor and pick up one of these [google.com], and you won't have that problem anymore. Or, if you have a smartphone, you can usually get a cheap OBD-II bluetooth adapter to read this stuff on your phone directly. It takes a lot of the guess work out of trying to figure out whats wrong.
Re: (Score:2)
I always just go to Autozone. They have the fancy computers and will tell you why the light is on for free.
Re: (Score:2)
> No one with a brain would work for a company that dicks them around with "tests" like that.
I used to think this myself. But a lot of companies do it, and some of them quite purposefully. My response would be to get quite hostile in the interview, but that may not be the clever thing to do.
Instead you should ask yourself what would do to the company over the long run. The effect may be less than you think (a lot of people are very desperate to get a job!). Anyway, you should make a rational decision
Re: (Score:2)
You also know too little about computer security to be trusted with important information our organization stores on a computer.
Re: (Score:2, Funny)
"Aha ha ha. Oh, gosh that's funny. That's really funny. Do you write your own material? Do you? Because that is so fresh. You are the weakest link goodbye. You know, I've never heard anyone make that joke before. Mmm. You're the first. I've never heard anyone reference, reference that outside the program before. Because that's what she says on the show right? Isn't it? You are the weakest link goodbye. And yet, you have taken that and used it out of context, to insult me in this everyday situation. God what
Re: (Score:2)
Wow, flamebait mod for a Stewie quote. Mod isn't a Family Guy fan, I guess.
Re: (Score:2)
So the people who understand security will refuse to fill out the application and leave in disgust at their perception that you are a clueless idiot who knows nothing about security, and the people who fill out the applications and apply are all proving to you that they are clueless idiots who know nothing about security (or they fill out false credentials proving that they are liars).
You'll never get any applicants you want to hire, unless someone writes PISS OFF in both the username and password fields, a
Re: (Score:2)
Yah but you are missing one important fact.... if I am hiring, they would have to deal with me, so having a normal attitude and personal temperament is actually not really a plus. Overall, I think the guy who writes "piss off" or "decline" in there, and insists on coming in to tell me why its a bad idea and why they wont work for me because of it.... well shit, that guy is the perfect fit, I might offer him the job on the spot.
Oh, it was Voluntary! (Score:2)
Re: (Score:2)
Yeah it's "voluntary" like wearing 37 pieces of flair.
Re: (Score:2)
Re:Oh, it was Voluntary! (Score:5, Insightful)
Re: (Score:3)
I think giving your employer your passwords is a brilliant idea..
Well you see your honor, I am not the only one that could have done that.. I had to surrender my account information to my employer, the state, in order to be employed. Any state employee could have accessed that information.
Re: (Score:2)
Re: (Score:2)
> that will be disclosed under torture or immediate threat of death
You are a potential traitor to our great country. Therefore, you constitute a high risk threat and you should be terminated immediately.
-Chuck Norris.
Here's what I'd say (Score:3)
Here's what I'd say:
User name: Fuck
Password: You
Re: (Score:3)
Or simply that you don't have any of those types of account?
Re: (Score:2)
Most people refuse to believe that I don't have a FB account ... LinkedIn is the only "social" media account I have, and that is for business purposes only.
Re: (Score:3)
Here's what I'd say
The thing is, it's very easy for educated Slashdotters with lots of job options to formulate a response like this. Very different story if you've been unemployed for a long while, benefits are running out and you've got mouths at home to feed - In that scenario it's pretty tough to flip off a prospective employer with whom you've gotten as far as an interview...
Bullshit statement (do they think we're stupid?) (Score:5, Insightful)
If their statement is true then this raises even more serious questions about what this information was used for. If it was a lie then we need to ask why they feel they need to lie about this program (hint: it is illegal either way).
Re:Bullshit statement (do they think we're stupid? (Score:5, Insightful)
do they think we're stupid?
They don't think you are stupid. They think the people they're hiring are stupid and have a passion for yielding/wielding command as part of a hierarchy with no regard to the consequences of their actions.
Considering they're hiring prison guards, that's a fair assumption.
Re: (Score:2)
But hey, lets just let all those child molesters, murderers, thieves etc, out and see how safe you feel.
Re: (Score:2)
You mean drug users, right? Cause the number of arrests for drug abuse has risen dramatically, while all other crime has dropped (in some cases just as dramatically) in the last 15-20 years. http://bjs.ojp.usdoj.gov/index.cfm?ty=kftp&tid=3 [usdoj.gov]
Re: (Score:2)
Re: (Score:3, Interesting)
They're hiring people to guard people who have either fucked up, either big time, like murder, or small time, like shoplifting. Either way, most of those people are going to get out eventually, and whether or not they fuck up again depends partly on how they are treated during their time in prison. Do they learn job skills that expand their econ
Re: (Score:2)
Re: (Score:3, Interesting)
Lets face it, They say it has no bearing on the process but we all know it is BS.
Heck, 20 years ago I worked for Pinkerton. The hiring process had a list of "Optional" questions. Things like
What church do you attend?
Do you believe in the second coming of Christ?
Are you gay?
Are you the type of person to drop the hanky?
etc, etc
They make sure to state that it did not effect the hiring process, however, those that did not answer the questions were let go within 30 days of being hired. For me, I was asked to wor
Re: (Score:2)
http://www.ehow.com/how_4532062_play-drop-hanky.html [ehow.com]
Re: (Score:3)
Thanks for the link, very instructive !
Previous posters that mentioned having something dirtier in mind while trying to figure out what the expression means probably imagined dropping something like this :
http://en.wikipedia.org/wiki/Mr._Hankey,_the_Christmas_Poo [wikipedia.org]
Comment removed (Score:5, Insightful)
Re: (Score:2)
The point is, they think we're too weak to do anything about it.
Re: (Score:2)
If they can't show the information wasn't used when provided, they've opened themselves up to serious legal liability.
Facebook profiles have entries for birthdays (and hence age) and religion, just to consider two potentially protected categories off the top of my head (age is only protected if it's 40-65). Facebook accounts are encouraged to have photos, which will normally show race.
This means that, if you applied for a job there that you were qualified for, provided your username and password as re
Yeah, right (Score:3)
Appropriately? (Score:2)
I am reasonably certain that what would be done in this case is to check everything you have ever done on Facebook. Also, all of those people should expect their security questions to have been changed just in case the passwords are changed someday.
Also, keeping the people working on this from fraping random people must be really hard, but they do it, right? Right?
I didn't think so either.
I wish I could tell you (Score:5, Funny)
that sounds familiar (Score:3)
"We're only asking about your religious preference because y'know, we're just *curious*. It has NOTHING to do with whether or not were going to hire you, really. So that's OK, right?"
Why expose yourself? (Score:2)
Re: (Score:2)
Fixed that for you
Re: (Score:2)
No, I don't have a Facebook page... which is exactly what anyone should answer when asked for their Facebook info.
Re: (Score:2)
Employer - Employee in title (Score:2)
"Employer Facebook Password Requests Suspended" should be "Employee Facebook Password Requests Suspended", no?
S
Re: (Score:2)
Re: (Score:2)
Total Bullshit (Score:2)
Total bullshit from top to bottom. That's all I've got to say.
How voluntary can this really be? (Score:2)
A little love for the ACLU? (Score:5, Insightful)
Re: (Score:2)
If the ACLU supported the Second Amendment, I'd be a big fan.
While you're at it (Score:2)
While you're at it, we'll need a key to your home. At your discretion, we'd also like a full copy of your personal diary for our records.
Okay, great. Now strip for the camera and bend over. This will only take a minute or two.
Soviet tactics (Score:3)
Because in The Day this type of behaviour was according to US politicians only expected from communist dictatorships.
This type of behaviour includes the ban on Unionisation in Wisconsin, 30 years ago US diplomats, politicians and the free press would have had a field day blasting such policies.
Would Barack Obama today be the same man he was during his presidential campaign he'd be drawing blood among the officials responsible for those infractions against general human rights.
Or just imagine how Ronald Reagan would have responded...
The bottom line is: the USofA does not have any useful privacy legislation.
Re: (Score:3)
The voters of WI got what they asked for. Sounds like you're a teabagger, and should be happy about this. You guys won. Go ahead, be happy. But don't lie. You know what this is really about.
Fizzle (Score:3)
They ought not to be allowed to ask at all. (Score:2)
Entirely aside from the direct attack on privacy that asking for social networking login info represents, this policy is an insidious way of 'un-levelling' the playing field in favour of ass-kissing suck-ups who would sell their souls for job advancement. Those who co-operate are likely to get preferential treatment come review time, while those who protect their privacy, (and by extension ours as well), are likely to be discriminated against in subtle or not-so-subtle ways. Such prying into individuals' pe
Re: (Score:2)
"In a statement, the department said requests for user names and passwords had been voluntary, and had not been taken into account when evaluating job applicants."
cough*bullshit*cough
A 45-day review is not a win...it's a stalling tactic! Making sure it more consistently asked in the interview or other process across the board is NOT acceptable.
Ah, bureaucracy. (Score:2)
What the hell...45 days to "review" a "procedure"? Pure bureaucracy. We need just one reasonable person to spend 10 seconds using a Sharpie to cross out this step in the "procedure" so life can go on.
hell no (Score:2)
Private passwords?
Hello?
No, you do not share your username and password with your boss, and your boss has no ****ing business even asking for it in the first place!
This sort of invasion of one's privacy is completely unacceptable. And any boss that asks for this stuff, let alone makes it a condition of employment, is either an oppressive snoop looking to play brain cop, totally clueless about technology and/or personal boundaries, or both.
This is the sort of information we hold a deathgrip on unless a warr
Facebook ... Security ... (Score:2)
Re: (Score:2)
Thinking is for the ruling class, peasant. Do what you're told.
Re: (Score:2)
Also, even if you handed over your user/pass, if you said you didn't want them logging on and they did, wouldn't that be a criminal hacking charge?
Someone recently got 5 years of prison for using the user/pass for his wife's email account that she had on a post-it next to the computer.
Re: (Score:2)
I'll be getting out of jail next month...
Re: (Score:2)
Re: (Score:2)