(Edited for the pedantic)
http://github.com/mjpizz/reclaimprivacy/blob/master/javascri...
The only compressed stuff is jQuery javascript, all other Javascript is uncompressed and commented. Hope that helps.
[edit: updated line number]
You might also want to put comments on slightly scary things like PARTNER_APPS to be sure people don't believe Yelp are YOUR partners or something crazy like that.
Some of these things sound paranoid, but I'd like people to feel 100% comfortable using your bookmarklet.
It worked great for me and identified some things I missed somewhere. Nice work.
Sorry for being paranoid. I very much like your initiative, but people are going to ask questions about these sort of things.
Looks like spreading distrust is a double-edged sword (not that I don't share authors pov on Facebook; I do)
I also checked out this link on your homepage: http://finance.yahoo.com/family-home/article/109538/7-things...
It says leaving your full birth date is not recommended (identity theft). So I went to the info page and clicked "edit information" but instead of having edit boxes on the Info page facebook recommends me to convert are my movies, music, colleges itc. into a pages (so they can track it better.. or make it more unified?). It's very hard to navigate away from that page (for a normal user anyway) and when you select nothing and click save they threaten you there's going to be none of the information in those sections on your profile (wow! now I'm scared!). Seriously --- it's becoming worse and worse, how can they be so disrespectful to their users, how can they not fear losing them??
------
Our privacy policy is not long:
* we never see your Facebook data
* we never share your personal information
Simple. The scanner operates entirely within your own browser.
Happily, it seems the only requests made are to fetch the javascript that does the scanning, and to various Facebook pages and associated content such as Facebook's CDN and "channels."
luckily AppEngine made it really easy to spring back, so it should be fine now (hopefully donations cover costs)
Haven't decided about other things that might make money in the future (maybe a Diaspora node?), but I fully intend to leave the current Javascript scanning functionality open and free :)
Those photos are indexed by Google and contain my name, even if I have chosen not to share photos I've been tagged in. I want to be able to see the list of public ones so that I can manually untag myself. Similarly, it would take too long for someone with thousands of wall posts to find the ones that might have accidentally been set to "everyone".
I think that it might have been better to wait until these were included before officially launching the tool, because the photo issue affects almost everyone on Facebook, and if people use this tool and everything checks out ok, they probably won't return again if you update it later.
Facebook is constantly changing this stuff though, so I'm hoping that the Facebook page and Twitter announcements will keep people up-to-date and re-running new privacy checks.
Source code is open, think you might have free time to help add some of those checks in tonight?
My only suggestion is the "auto-fix" button, can you give me a preview as to what settings your application is going to change?
Originally I made the scanner walk through each step and show what was happening, but it was too flaky.
Thanks for the great external links on your site. A very interesting application that I immediately told all my Facebook friends about.
P.S. Friendly general advice for web developers who use JavaScript elements that display on webpages: TEST those for users who have different font size settings or zoom settings to favor their own vision issues, lest links or other elements of your design overlap and become unreadable.
There might be trademark or other issues though. I'm glad it's opensource ( in case they get a take down notice ).
edit: It's mostly the htmlContent array and lines with the word "message" in them, correct? I don't know Javascript.
Basically, it was too hard to use. :-) I had to post very simple, step-by-step instructions as a comment to walk them through it, even down to the "click on the link and hold, then drag the mouse to the toolbar and let go" level. Several of them also didn't realize you needed to be on facebook.com to use it -- they tried just clicking the bookmarklet link on the original page.
The kind of people who can most benefit from a tool like this -- i.e., not the elite geeks who probably already have awareness of FB's privacy issues and how to address them -- need extremely straightforward, "don't-make-me-think" instructions to gain value from it.
These people aren't stupid -- they just don't have the same intelligences we have or assume others to have.
One question - when I run it on my account there are 2 scans that never seem to return (it keeps saying "scanning"). The scans are:
- scanning personal information...
- scanning friends, tags, and connections information...
Is there something on my end I need to do? (I tried running the scanner multiple times and its on Mac firefox 3.5.9)
That bug seems to be a problem periodically, looks like somebody already filed it on the issue tracker:
http://github.com/mjpizz/reclaimprivacy/issues/#issue/2
if you know any Javascript pros who could help, point them at the source code :) Hopefully get some patches tonight.
I'd also suggest that you post a human-readable list of the assumptions that the tool makes, since providing source code isn't particularly user-friendly for non-programmers.
cheers... -Adam C. Engst, TidBITS publisher
Facebook is not a necessity or a utility, it's still just a free service. I disabled my account years ago for privacy reasons. Unsurprisingly, I haven't lost a single connection or friendship that mattered to me. Facebook is not what facilitates relationships, its people. I'm really baffled by the extent to which people go to stick with this service when they clearly are concerned about what FB is doing to their privacy.
as a thought game; I foresee facebook coming up with their claim-n-search-your-privacy app, which they would use to strengthen the privacy game. :)