There has been a recent new change to the Facebook Connect system that concerns me greatly.
On sites with Facebook Connect implemented, that you have not given permissions to yet, you will see this popup.
Innocuous at first glance, this popup allows you to activate the Facebook Connect feature with that site, bridging your with their systems.
This change is a result of a backend change made by Facebook as noted on their
developer blog.
There are two major issues with these changes. First is in the wording of this modal. "This site REQUIRES that you Connect with Facebook."
For a less experienced user, this looks like a warning of an action they must take. To them, they MUST use their Facebook account to use this site.
The reality is that this is not true. It retains the same function as before when Facebook Connect "asked" if you'd like to link your Facebook account.
The second issue is the fact that Facebook is using the javascript system to bypass user popups. Currently, many less honorable advertisers are employing a lot of javascript floating div based popups that circumvent current popup blocking. Having an automated Facebook popup in this similar fashion runs the risk of training users that modal popups are just a fact of life and are safe. In reality, these modal popups are just as dangerous as the previous window popups.
Related to the first issue, having the Facebook Connect popup appear automatically with the current message could lure a user into giving Facebook access to a less than reputable site....an obvious security risk.
Though I think Facebook Connect is a useful system, the idea of forcing your users to use it, even implied, is against the freedom of choice of the internet and poses a risk to all users.
As a developer, (ironically developing a Facebook Connect based application) I would like to see Facebook remove this automatic popup, or at least change this form to something less...dire.
Software developer
Comments 1 Comment