File Sharing Securely on Facebook: a Pipe Dream?
May 22, 2012 | John P. | Comments (0)
Facebook is now jumping into the cloud computing fray with file sharing capabilities being built into Facebook Groups, according to Mashable in an exclusive report. Facebook users will be able to upload files up to 25 MB in size, including music videos, small movies, comics and e-books but excluding music files and executable (.exe) files. Facebook’s Groups for Schools has already started using the file sharing feature with other Facebook users being added over the next few days.
Facebook’s file sharing service is becoming part of the Facebook experience. Consequently, Facebook users do not have to sign up for a separate file sharing service which could dampen interest in file sharing services such as Dropbox or Box. However, security is a concern for several reasons: Facebook is not policing file swapping but is relying on users to report dangerous and pirated content; No security controls exist to allow for full or limited access as is the case with Dropbox; and, Facebook Groups are rather easy to start so cybercriminals would be able to upload PDF files or Word documents that are infected with malware. Businesses and organizations should be concerned about security if they have their own Facebook Groups or their employees access Facebook during mealtime on company equipment or even on their own devices.
A German company named Pipe has developed a Facebook app that allows users to transfer files of up to 1 GB in size in a P2P (peer-to-peer) fashion by using Adobe’s Real Time Media Protocol Flow by placing the file into the recipient’s browser cache (provided that there is sufficient memory) without using server space on either Facebook or Pipe. All Pipe file transfers use the 128-bit advanced encryption standard so no record exists of a file transfer. The amount of bandwidth accessible to users will affect the speed of downloading and uploading files. A Facebook user can install the application on their Facebook account. The user can choose the recipient of a shared file but the recipient must also be online and have the Pipe application activated on his/her web browser.
The encryption standard does not prevent someone from determining which users had uploaded Pipe on their Facebook profilesand who communicated with whom on a regular basis. Proposed communications legislation in the United Kingdom will permit the following of online activity and interactions but not content on email, Skype, and closed conversations.
The jury is out as to how much that internet service providers will identify and possibly throttle (or regulate) P2P data activity by slowing connection speeds. Stay tuned…
