Tag Archives: identity theft

Smartphone Apps and Bullying

Article posted by in November 5, 2012 at 11:12 am.
1 Star2 Stars3 Stars4 Stars5 Stars (18 votes, average: 4.11 out of 5)
Loading ... Loading ...

I’ve been chatting with Canadian cyberbullying educator and speaker Lissa Albert about various apps for cell phones and their potential for misuse, and it has been one fascinating conversation.  As such, she volunteered to write up a summary for our blog – which really paints a comprehensive picture as to what is available out there for potential cyberbullies.  Please let us and her know your thoughts based on your experiences and observations!  Note: We have decided not to directly hyperlink to each problematic app so as not to give them more traffic and accessibility than already exists.  Here we go.

 

We all know that cyberbullying takes place using technology-driven communication tools. Smartphones allow for access to social media platforms as well as texting, and provide a host of benefits to their users in the realms of communication, education, ecommerce, and entertainment. However, some misbehaviors are also enabled through these devices.  But with smartphones, in addition to being able to access the Internet, email and social media platforms such as Twitter, Instagram, Pinterest, and Facebook, there are downloadable applications – known as “apps” – which are user-friendly mechanisms to enable easy interaction with the site from the device. The apps market has soared with every incarnation of smartphone, and the Apple store boasts over 600,000 different apps. Apps are created by both phone manufacturers and by independent developers. There are yearly conferences for app developers, much online collaboration, and exponential growth in this industry.  Some apps are freeand some run from $0.99 to $4.99.

 

Besides Facebook and Twitter apps, other popular social networking platforms – such as Formspring and the seemingly innocuous Club Penguin – have apps readily available for smartphones. These apps allow the user to connect directly to the service without having to go into the browser, and have therefore made it easier to engage in wrongdoing.  With these possibilities, it is not surprising that someone would either invent new apps, or find a use for existing apps to facilitate various forms of cyberbullying. Below are some examples of how smartphones are actually, and actively, contributing to online cruelty.

 

Ugly Meter has gained a lot of popularity. After being mentioned on the radio show of a popular “shock jock” who found it amusing, this app began selling and has, to date, been downloaded over 5,000,000 times. The way it works is to scan a photo and using facial contours and patterns, allowing it to then rate  the subject on the “ugly scale” of 1-100. While the developers of the app stress it is only a game, it has many experts concerned that it will be used to lower the self-esteem of already-insecure kids.  Inexplicably, many mainstream talk-show personalities (Anderson Cooper, for one) have mentioned and demonstrated the app without mentioning its potential for hurtful uses.  This, by the way, is very discouraging because Anderson has always been such a strong anti-bullying advocate.

 

Enemy Graph is an app that allows the user to take Facebook friends and add them to a list of their enemies.  As soon as a user has declared someone an enemy, that declaration appears on their profile, visible to everyone. (“John has declared Jane his enemy”)  It also gives the user the ability to declare one “Archenemy”. The developers defend its use, primarily stating that it is used to separate those “friends” on one’s list who have differences with the user, instead of the “likes” or similarities users share. They claim the app was created to “explore social dissonance on Facebook.”

 

In a test of the app, trending “enemies” listed included “Farmville” (a game-simulation as maligned as it is lauded), Justin Bieber, and various politicians and media personalities. However, it gave statistics at the top of the page, which declared the user’s number of enemies as well as how many have listed him/her as their enemy. These “enemies” are culled from the user’s member list, and this is where the danger comes into play. A disagreement or falling out between friends can easily lead them to list one or both as enemies, and with youth, we have seen that become a fast-spreading sentiment that can lead to isolation, ostracizing, and further ridicule/humiliation.

 

The developers do not think this will result in cyberbullying; in an interview, Dean Terry believes it will simply lead to conversation. However, it is more likelythat cyberbullying would almost naturally arise from use of this app, and the developers seem to defend it when they state: “In a way we are misusing the word “enemy” just as much as Facebook and others have misused “friend”.

 

If this app were used the way the developers picture it (fun, social, used only to list the “things” users dislike), there would be no risk. But as with any tool, it has both positive and negative potential. when tools make it easier.  Denise Restauri, in an article for Forbes magazine, states: “EnemyGraph gives bullies and people with a sick sense of humor a great way to bully and attack.”

 

To be sure, this seems an  an understatement – the app can lead to tragic consequences such as depression and suicide. No chances can be taken, and there is currently a movement by psychologist Dr. Barbara Lavi to try to get Facebook to remove the app.

 

Bully Block is promoted as a way for targets to block, report, and record the bully in action. There is a feature to block intrusions from those one feels is bullying them (by having the bully get a busy signal, or pre-recorded message). But it also employs an audio recorder – billed as a “stealth recorder to capture bullies in action”. This app secretly records the bully (ostensibly) and with one touch of a button, forwards the audio as an email or text message to authorities (again, ostensibly). A third feature captures what the developer calls “inappropriate texts, pics or videos” via text message or email. It is intended for teens to forward these to their parents or authorities. It is also intended for employees to forward those types of missives to their HR departments.

 

The inherent problem in this app is that it has the strong potential to be misused. It is not a huge leap of the imagination to think that a savvy bully would download this app in order to use the recorder to capture compromising audio of his/her victim, or use the forwarding feature to engage in  online bullying or even sexting behavior.

 

It can never be assumed that any tool will be used precisely as intended, and that is a primary concern with such apps that allow for surreptitious photography capture, audio recording, or one-touch forwarding of material.

 

As an aside, apps that claim to prevent bullying are not as effective as taking action in the situation. As Internet Safety expert Nancy Willard has stated often, teaching kids to swim is a lot more effective than putting up fences around swimming pools. Just as filters don’t prevent users from accessing certain websites, apps don’t effectively prevent cyberbullying. Teaching youth, as well as adults, to understand and embrace a respectful digital society is a lot more effective than entrusting safety and well-being to an app. Why resort to an electronic application to do what people can do more effectively, and more potently? Smartphone apps have their place, but should never replace the interaction people have enjoyed for centuries.

 

There is more. Secret Camera bills itself as a camera to take photos of “friends and pets” with no shutter sound or visible thumbnail. Devil Camera does the same. Using the front-facing camera, users can take photos of people behind them and with no thumbnail or displayed capture on the screen, the subjects have no idea they have just been photographed.

 

In researching these apps, I found a forum user asking for such an app, saying he wanted it to take “amusing pics on the bus”. At best, this is an invasion of privacy. At worst, it is blatant cyberbullying. A respondent provided links to a camera app (TubeCrush) as well as a site where those types of photos can be posted. He says, “It was designed it to be perfect for …people wanting to play pranks on their friends, but it’s also great for taking shots in museums and galleries, or for street photography which relies on candid images. (All perfectly legal so don’t worry)!” The various apps found ostensibly promote the user’s safety while capturing video or photos; as such, those prone to cyberbullying behavior will see it as their protection while harming others with furtive photography. The fact that this poster felt it necessary to add a disclaimer of legality shows that there even s/he is aware of the more deceptive uses of the app.

 

Some other types of apps are worthy of mention.  These are listed below.

 

Anonymous Texting There are a number of apps available for Android as well as iPhone platforms that allow the user to send text messages anonymously or with randomized numbers that mask their identity. There is at least one website that acts as a web-based anonymous texting app. There are even websites to instruct users how to send anonymous texts, with the disclaimer:  “Please don’t use this information to stalk, harass or threaten anyone.” The problem is that no disclaimer will deter someone intent upon doing just that. And as technology evolves, cyberbullies are coming up with more inventive and insidious ways to harass their victims.

 

Demeaning, insulting, pranking apps A search for apps using the keyword “insult” yielded an alarming number of various apps, most free to download, that not only provide insults but the platform to deliver them. For example, there is an insult generator that allows the user to have their cell phone “say” the insult aloud, or text it to someone. There is now a “re-text” button on this app which allows the user to send newly generated insults to the most recent recipient, which could lead to a barrage of insults to one identified victim. As well, there were apps that manipulated  available digital photos to ridicule the subject. Under category headings “lifestyle” and “entertainment”, the apps are readily available to anyone seeking vicious comments or graphics to hurt the feelings of another person.

 

Overall, though most users participate on social media sites in responsible and procial ways, these apps do provide  opportunities for those so inclined to cyberbully others. Facebook used to have an app called “Honesty Box” – which encouraged its members to tell others what they thought without being identified. Not only did it encourage negative messages, many of them were filled with inappropriate sexual notes. The app was shut down in 2008, but replaced with one called “Everyword”. Signing in with Facebook or Twitter, users submit one word to other users, to describe that person. There is a box at the bottom of the dialogue box to be checked if the submission is to be made anonymously. It is still an active app, though it took a search to find it as it is not overtly publicized on either social media platform. It also has the potential to encourage a devastating deluge of humiliation and abuse.

 

It is obvious that as smartphones and social media apps continue to evolve, the means and methods to inflict harm online will remain. How do we combat it? How do we stop misuse of apps or the development of those with the potential to cause harm? Speak up. Speak out. Inform developers that their apps are objectionable with regard to how they are either blatantly or more furtively enabling hateful and humiliating behaviors. Inform people talking about the app, or using it, that they are contributing to a culture tolerant or even supportive of cyberbullying . Write blog entries, articles, media personalities utilizing or publicizing the apps, and emphatically point out that we must be very sensitive to the ways in which certain smartphone apps can wreak emotional and psychological havoc in the lives of others.

Tags: , , , , .
Subscribe to this blog via RSS or Email.

Email This Post Print This Post

Help With Fake Facebook Profile Pages

Article posted by in July 25, 2012 at 11:42 am.
1 Star2 Stars3 Stars4 Stars5 Stars (21 votes, average: 4.10 out of 5)
Loading ... Loading ...

Imagine you receive an email from a friend that includes a link to a Facebook profile.  You click on the link and see your name and picture on the profile.  But you didn’t create it.  And some of the information included isn’t exactly flattering. In fact, it’s embarrassing, and malicious, and ruining your reputation.  Now what do you do? We regularly receive requests from people who find themselves, their kids, or their friends in this situation. The key in responding is to move quickly to gather information and to inform the proper authorities.

If you know who created the profile, ask them to remove it. Facebook has a social reporting tool that allows you to convey your disapproval, and ask that the content be removed, in a respectful way.  (You can read Larry Magid’s recent interview with Facebook’s Arturo Bejar where they discuss these options.)

If you don’t feel comfortable with that, or do not know who created it, you can report it to Facebook and it will be disabled while they investigate. If you do not have a Facebook account, you can report imposter profiles here. If the creator of the fake profile attempts to log into the account after it has been reported, Facebook will require the user to prove their identity and display a map that shows where they are at (thereby removing the veil of complete anonymity).  I think that is pretty cool! Facebook also educates the user about the consequences of identity theft. The company has developed numerous other tools to help you protect your information and reputation, including a form that allows you to request the records of an account that was impersonating you. Learn about and take advantage of all of these resources.

It is important that you collect as much information about the profile as you can before reporting it to Facebook.  Take screenshots (see our fact sheet here) or simply print out the profile and any related information.  Note the URL (web address) of the page because it includes the user ID (http://www.facebook.com/profile.php?id=1000000XXXXXXXX) or username (http://www.facebook.com/username).  Try to identify all of the people who are connected to the profile (friends or followers).  Collect as much information about them as you can.  It might help in determining who was behind the creation of the profile.

Overall, the more information you can gather, the more easily it will be to identify who is responsible, and hold them accountable, if necessary. Once the account has been disabled by Facebook, it will be more difficult for you to get the evidence you need.  And if the account creator deletes the account before you have a chance to report it to Facebook or collect the evidence, it can be impossible to obtain information about who created it. So move quickly to capture what you can.

If you believe that what was said or posted about you on the fake profile is of a criminal nature (e.g., a threat or a hate crime) or violates your civil rights (e.g., defamation of character or libel), contact local law enforcement so that they can investigate.  This is particularly important if you feel that your safety (or the safety of someone else) is in jeopardy.  The police are trained to determine whether information contained on the site could be viewed as a “true threat,” or if it violates the law in any other ways.  The first thing the investigating officer should do is complete a formal request to Facebook to preserve the page details and accompanying account information before they are deleted by the user who created the page.  Officers can do this even before a formal investigation has begun.  The sooner this is done, the better. There are more guidelines for law enforcement officers here.

Law enforcement can also assist you in obtaining a subpoena, which is a legal order that requires a person or entity named to show up at court or to produce documents or other information specified (that could be used as evidence in a trial).  While the specific procedures can vary by state, law enforcement officers can obtain a subpoena from a judge, county or state prosecutor, or other qualified attorney, once an investigation has begun.  Facebook regularly assists law enforcement in responding to subpoenas by providing information about the creator of the account, including their name, email address, date of birth, and some other account identifiers provided by the user when they signed up. Lawyers can also obtain a subpoena for the purposes of obtaining evidence to be used in a civil case.

With a court order (which can only be issued by a judge), law enforcement officers can get additional information from Facebook, including transactional logs such as intra-session IP addresses.  The IP address is the unique identifier that every online device is given.  With the IP address, law enforcement will be able to determine the Internet Service Provider (ISP).  Again using a court order, the officer will be able to obtain from the ISP the billing address and other subscriber information of the person involved.

If during the course of the investigation the officer determines that criminal charges are appropriate, they may obtain a warrant from a judge for the purpose of collecting even more information from Facebook, including the content of the pages (e.g., photos and comments). A warrant is another court order issued by a judge, but it must be accompanied by probable cause that the information requested is necessary for the purposes of investigating a crime. According to the Stored Communications Act: “A governmental entity may require the disclosure by a provider of electronic communication service of the contents of a wire or electronic communication…only pursuant to a warrant issued using the procedures described in the Federal Rules of Criminal Procedure…” So without a warrant, Facebook has no obligation to provide the content of the pages. This is a good thing for those of us who use Facebook and other online environments appropriately and legally: Only when we are implicated in a crime should the content of our profiles be turned over to the government.

The differences described above between what information can be obtained through a request, a subpoena, a court order, or a warrant is determined somewhat by the company (Facebook in this case) but mostly by federal and state law. It largely depends on whether the information requested is the property of the company, the Internet Service Provider, or the customer. Technically, everything you post on Facebook is your property, though you give Facebook permission to use that information for certain purposes as a condition of using the site.

Some states include electronic communications in their impersonation or identity theft laws.  For example, it is a class A misdemeanor in New York if someone “Impersonates  another  by communication  by  Internet  website  or electronic  means  with  intent to obtain a benefit or injure or defraud another, or by such communication pretends to be  a  public  servant  in order to  induce another to submit to such authority or act in reliance on such pretense.” Consult with law enforcement or a local attorney to learn more about the specific laws in your state.

In many cases, however, fake profiles are created for a laugh and the persons responsible perhaps do not fully understand the consequences of their behavior.  This is especially true in incidents involving adolescents.  So if there is no clear threat or other evidence of criminal behavior, resist contacting the police and try to work through the problem informally, involving parents, schools, and other adults as appropriate.

That said, there have been many incidents where students have created profiles about educators or their classmates that have ended up in court.  Try to avoid this by proactively educating your children and students about these issues, and by creating a positive climate at school.  In that way, hopefully they will not participate in these behaviors and if someone else does create a fake profile about them, they will know what to do and will feel comfortable turning to an adult for help.

Email This Post Print This Post

Identity Theft from Facebook and Twitter use?

Article posted by in October 21, 2009 at 10:46 am.
1 Star2 Stars3 Stars4 Stars5 Stars (2 votes, average: 5.00 out of 5)
Loading ... Loading ...

Justin and I study and work to reduce various forms of deviance and crime on social networking sites, and this recent article on CNN.com prompted me to talk about some of the issues therein.

The main thrust of the story is that cybercriminals are now using Facebook and Twitter to victimize unsuspecting individuals through “phishing” techniques, where targets click on a link and are taken to a site that convinces them to reveal personal information.  This parallels the phenomenon of email phishing, where people receive what appears to be legitimate communication from their bank, cable Internet company, or an e-commerce site like eBay asking them to follow a link to fix a time-critical password/account/payment problem by typing in their private data.

The criminal usage of these links (and the convincing content that surrounds them) can be characterized as social engineering, which often involves some amount of emotional pressure to lead an individual to make a quick online decision based on invalid or unvalidated information.  Undergirding these schemes is the promotion of urgency – basically saying that if you don’t click on this link and do the needful immediately, you’ll lose online access, or your reputation may be damaged, or you’ll suffer from other serious consequences.

The bottom line is that we need to make sure that we cautiously evaluate the legitimacy of the sites we visit from links within Facebook and Twitter.  If you think you might actually have a password/account/payment problem on a site, go to that site directly (i.e., type the URL into your browser’s address bar) rather than clicking on a link to get there.  Secondly, use your browser’s (Firefox, Safari, Internet Explorer, Opera) built-in anti-phishing features to verify the legitimacy of sites that you visit (whether directly linked from a social networking or microblogging site, or accessed another way).

Web 2.0 sites have provided us with many benefits, but are now being exploited to perpetrate identity theft and fraud.  Carefully think about what you’re doing – and the validity of the information being presented to you – as you follow links across the WWW from these online environments.

Tags: , , , .
Subscribe to this blog via RSS or Email.

Email This Post Print This Post