Facebook Does It Again, Silently Sending GPS Coordinates with Every Message

Tags: , ,

Yes, they’ve done it again.

The most-recent update of the Facebook mobile application (Android and iPhone) reverses and resets the default settings for “Location Services”, so that every single Facebook message you send, also sends your exact GPS coordinates to the recipient (and to Facebook’s own messaging servers), even if you have your GPS disabled on your phone. When the GPS is disabled, they fall back to AGPS to determine your coordinates with incredible accuracy.

Yes, even if you’ve had it disabled before, a recent update of the mobile app resets these preferences to expose your location when you’re using their Messenger app to send or receive messages through the app.

This is so specific, it actually revealed that I was in my kitchen (in the rear of my house), and not just my approximate street address on my road. Zooming into the map they helpfully provide, shows where inside my house my phone is when I sent the test messages that revealed this issue.

To prevent your phone from exposing your location with every message, go into your Facebook mobile application settings, and disable “Messenger Location Services”, as below. When you disable it here, your messages will just show “Sent from Messenger” or “Sent from Web” inside the app, instead of showing a map and GPS coordinates.

Click on the images below to see them full-size.

Facebook Mobile Messaging PrivacyFacebook Mobile Messaging Privacy GPS Maps

They may still be sending GPS coordinates with each message to their messaging servers, but not exposing it to the recipients when you disable this feature, but there’s no confirmed way to tell.

I don’t use the native Facebook mobile app to send or receive messages, opting instead to use Trillian Mobile for Android, which does not pass the GPS coordinates with each message. In addition, I can use all of my IM and chat services at once, in one interface, including Facebook, seamlessly. They have desktop apps and a web interface also, for those who wish to use those natively on any platform. Highly recommended.

Facebook, I’m not impressed with your complete lack of understanding of core security and privacy issues. This is 2013, and no application should be sending GPS coordinates to message or email recipients. Imagine what would happen if a random, unknown person were to message me, and I replied back to them. I’ve now exposed my personal location, which could include my home address, to a level of accuracy that includes where inside my home I am when I’ve responded.

In a word: Disgusting.

HOWTO: Block “SongPop” game updates and events on Facebook

Tags: , ,

Facebook logoI’m a big fan of keeping my Facebook feed, news and wall clean and filtered, no junk and no noise that I don’t need or want to read.

On Google Chrome, I use the “Social Fixer” extension to block ads, drop columns and other unnecessary items from the pages, but this doesn’t work on Firefox Nightly builds because of a Javascript Sandbox change that the Social Fixer author hasn’t been able to find and fix yet.

But “Social Fixer” can only block some of the noise that Facebook renders, not all of it. Firefox is my preferred browser, so I needed to find a better solution here. Even SongPop’s own Support Page misunderstands the need of hundreds (nigh, thousands?) of Facebook users.

Most-recently, some of my friends have been playing a game called “Song Pop” on Facebook, and their status updates fill up my news feed on the right side. Last year it was Farmville, and this year it’s SongPop.

Here’s how to stop the noise from taking over your Facebook feed.

  1. First, search for “SongPop”, no spaces, in the Facebook search box at the top. Make sure you pick the Game page, not the App page. If you search for “Song Pop” with the space, you’ll get the wrong page.
    Search for SongPop on Facebook
  2. Now you should see the SongPop page, which looks like this:
    Facebook SongPop page
  3. Down on the lower-right side of that page, is a link labeled “Block”, and looks like this:
    Facebook block SongPop link
  4. Click that link, and you’ll get a popup to confirm your choice:
    Facebook block SongPop confirm
  5. Click “Confirm” on that link, and you’ll see the following success dialog:
    Facebook block SongPop successful
  6. Now to confirm this, go to your “Privacy Settings” in the upper-right corner, scroll down to “Blocked People and Apps” and click “Manage Blocking”. Scroll down again to the bottom and you’ll see:
    Facebook BlockApps SongPop

That’s it. Now if you go back and reload your Facebook Feed, you’ll see that the SongPop posts that were there moments ago, are now gone, stripped from your feed. If you want them back, just go back into the “Blocked People and Apps” and click the “Unblock” link shown in the image above.

Good luck!

Bad Behavior has blocked 873 access attempts in the last 7 days.