Michael Kaiser is the executive director of the National Cyber Security Alliance (NCSA), a U.S.-focused nonprofit organization that works to keep people secure online. The organization focuses its efforts on cyber security education to provide information and tools for people to take control over preventing cyber crimes and attacks. As October and National Cyber Security Awareness month come to a close, we asked Michael to share his thoughts on precautions people should take online.


Many people believe they know their way around the digital world as well as or better than the physical world. Everything from paying bills to phone calls to distant relatives can now be done online. People store some of their most important documents, photos and financial information electronically — and seem to be more organized than ever. Yet while people may be cyber savvy and on the cutting edge of digital culture, they may not be cyber secure.

It turns out that we are only as protected as the weakest link in our network, so if you don't take precautions, you're not just endangering yourself. You also are impacting your friends and family. For instance, a "cyber criminal" can leave his entire network at risk by using an easily guessed password like the word "password" for his email account. This innocent person inadvertently becomes an enabler of cybercrime by not being cautious.

With a growing number of people online for a significant portion of every day, it's not surprising that more people are particularly visible and vulnerable targets of cyber criminals. Often, a healthy dose of common sense and knowledge about threats are the first step. Keep these 10 tips in mind as you get on the path to becoming cyber savvy.

1. Protect your personal information. Know who is going to see it and understand the value of it and why the other party needs it before you share.
2. Create complex and lengthy passwords that include letters, numbers and symbols. Be sure to change them often, and keep in mind "password1" doesn't make the cut.
3. Don't use public networks to conduct private business.
4. Set your security software, operating system and browser to update automatically.
5. Conduct transactions only on secure sites. Look for "shttp" or "https" in the URL.
6. Use privacy, safety and other settings on social networks.
7. Understand threats and learn more at the NCSA website and the Facebook Security Page.
8. Back up important information regularly to keep your music, photos and work protected.
9. Physically protect your computer, too. If you wouldn't leave your credit card unattended in a public location, you shouldn't leave your computer either.
10. Report cyber crimes.

Remember it is our shared responsibility to stay cyber secure. Keep updated on how you can help yourself, your friends and family by becoming a fan of the Facebook Security Page and the National Cyber Security Alliance Page.


Michael hopes you'll check out the NCSA cyberskits to learn the do's and don'ts of cyber security.

UPDATE on Thursday, Oct. 29: Today, a San Jose, Calif. court awarded Facebook $711 million in damages against Sanford Wallace, one of the spammers who accessed people's accounts without their permission and sent phony Wall posts and messages. While we don't expect to receive the vast majority of the award, we hope that this will act as a continued deterrent against these criminals. Most notably, the judge referred Wallace to the U.S. Attorney's Office with a request that Wallace be prosecuted for criminal contempt, which means that in addition to the judgment, he now faces possible jail time. This is another important victory in our fight against spam. We will continue to pursue damages against other spammers.

Published on Friday, March 6
We hate spam just as much as you do, and we're always working to stop it. Last week, we won a ruling in this ongoing fight. A court in San Jose, California issued a temporary restraining order against three spammers—Sanford Wallace, Adam Arzoomanian and Scott Shaw. They broke the law by sending unwanted messages and wall posts to people on Facebook, which in the United States violates the Computer Fraud and Abuse Act, the California Anti-Phishing Act and the Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM). Now, any contact these spammers have with you or anyone on Facebook could land them in jail.

This isn't the first time we've gone to court to battle spam. Last November, we also told you about our first victory—an $873 million judgment made against Adam Guerbuez and Atlantis Blue Capital for sending sleazy messages to people on Facebook. This was the largest judgment ever for an action brought under CAN-SPAM. We continue to work on collecting as much as possible from Guerbuez and Atlantis Blue (likely far less than the full amount) and have hired a firm to help with this. We're hopeful that this kind of persistent pressure will act as a deterrent against those attempting to trick and annoy people on Facebook.

Of course, this fight requires a team effort. In addition to our dedicated legal team, Facebook also has security experts and engineers focused on the integrity of the site. We're continuing to build systems to prevent and respond to spam attacks. Our User Operations team also works around the clock to identify problems and assist people who've been affected.

We will continue bringing spammers to justice, but we need need your help, too. Report spam by using the links located throughout the site.

UPDATE on Thursday, Nov. 5: The comment period for the proposed privacy policy is now complete. While the total number of comments did not reach the threshold to hold a vote, we did receive a lot of good feedback. In the coming days, we'll be reading your comments more closely, and we'll keep you informed on our next steps through status updates from the Facebook Site Governance Page. Thank you all for your participation.

UPDATE on Monday, Nov. 2: The proposed privacy policy now includes the TRUSTe certification seal, which reflects TRUSTe's approval of the policy. Please comment on the proposed policy here by 12:00 p.m. PST on Nov. 5.


Starting today, Facebook's privacy policy is available for your review and comment. This is the next step in our ongoing effort to run Facebook in an open and transparent way. In April, we launched a new system of governance for the Facebook site and became the first company to our knowledge that invites users to both comment and vote on proposed changes to its governing policies.

At the time, we also introduced a new policy document — our Statement of Rights and Responsibilities. This document avoids the legal jargon that most sites typically put in their "terms of service." It articulates the mutual relationship and shared obligations between Facebook and its users as clearly and plainly as possible. We received excellent feedback from many of you over the course of a two-week comment period.

We now are doing the same with our privacy policy. Our primary goals remain transparency and readability, which is why we've used plain language and included numerous examples to help illustrate our points. For example, here is how we explain users' options for modifying or deleting information or content in the current privacy policy on the site:

When you update information, we usually keep a backup copy of the prior version for a reasonable period of time to enable reversion to the prior version of that information. ...
... Even after removal, copies of User Content may remain viewable in cached and archived pages or if other Users have copied or stored your User
Content. ...
Access and control over most personal information on Facebook is readily available through the profile editing tools. Facebook users may modify or delete any of their profile information at any time by logging into their account. Information will be updated immediately. Individuals who wish to deactivate their Facebook account may do so on the My Account page. Removed information may persist in backup copies for a reasonable period of time but will not be generally available to members of Facebook.

Here is the clearer and more comprehensive version from the new proposed policy:

Viewing and editing your profile. You may change or delete your profile information at any time by going to your profile page and clicking "Edit My Profile." Information will be updated immediately. While you cannot delete your date of birth, you can use the setting on the info tab of your profile information page to hide all or part of it from other users. ...

Deactivating or deleting your account. If you want to stop using your account you may deactivate it or delete it. When you deactivate an account, no user will be able to see it, but it will not be deleted. We save your profile information (friends, photos, interests, etc.) in case you later decide to reactivate your account. Many users deactivate their accounts for temporary reasons and in doing so are asking us to maintain their information until they return to Facebook. You will still have the ability to reactivate your account and restore your profile in its entirety. When you delete an account, it is permanently deleted. You should only delete your account if you are certain you never want to reactivate it. You may deactivate your account on your account settings page or delete your account on this help page.

Limitations on removal. Even after you remove information from your profile or delete your account, copies of that information may remain viewable elsewhere to the extent it has been shared with others, it was otherwise distributed pursuant to your privacy settings, or it was copied or stored by other users. However, your name will no longer be associated with that information on Facebook. (For example, if you post something to another user's profile, and then you delete your account, that post may remain, but be attributed to an "Anonymous Facebook User.") Additionally, we may retain certain information to prevent identity theft and other misconduct even if deletion has been requested.

Backup copies. Removed and deleted information may persist in backup copies for up to 90 days, but will not be available to others.

We also have restructured the document — providing key points and easy links to jump to the different sections. We've added sections further explaining our current practices and introducing a new concept around Facebook Ads that we hope you'll take the time to review.

Clarification of Current Practices

In this revision, we're fulfilling our commitment to the Privacy Commissioner of Canada to update our privacy policy to better describe a number of practices. Specifically, we've included sections that further explain the privacy setting you can choose to make your content viewable by everyone, the difference between deactivating and deleting your account and the process of memorializing an account once we've received a report that the account holder is deceased.

We also have explained in greater detail how Social Ads work on Facebook. Social Ads are sponsored promotions that include relevant information about you and are shown only to your friends. For example, if you become a fan of a Page for your favorite new movie, your friends may see an ad that includes that information.

Advertising on Facebook

Over 300 million people around the world now use Facebook. More join every day. To support this growth and continue providing a free service that connects people and lets them share with whomever they choose, we've built a business that allows advertisers to selectively share their messages. Our goal is to make the ads you see on Facebook relevant and interesting. Period. We're constantly working to improve our systems to make sponsored material compatible with people's needs and curiosity.

As we do this, we remain committed to protecting your privacy. The information we provide to advertisers is "anonymized," meaning that it can't be traced back to you as an individual in any way. For example, we won't tell an advertiser that you clicked on an ad, but we might report that, of the 100 people who clicked on the ad, 63 percent were female.

Improving the Quality of Facebook's Ads

In this update, we also have explained how we might use information from other sites to improve the quality of our ads. This information allows advertisers to do what is commonly called "conversion tracking," which helps them measure the effectiveness of their ads and make them more relevant. Most advertisers already do this in other places on the web. Should Facebook provide this, we'll continue to respect your privacy by not sharing your information with advertisers, and we'll anonymize any information we receive.

In the past, we've provided a redline version of the new policy document we're proposing to make clear what's new. Unfortunately, in this case, the revision is so different from the current policy that this wasn't possible. You can read the proposed update in its entirety and post comments to the Facebook Site Governance Page before the comment period ends at 12:00 p.m. PST on Nov. 5. After the comment period is over, we'll review your feedback and update you on our next steps. We appreciate and strongly encourage your participation in this process.


Elliot, Facebook's vice president of communications and public policy, thanks all of the privacy experts who informed the drafting of Facebook's proposed privacy policy.

Here at Facebook we can't build all the features for the site that you want to use to connect with your friends. That's why in 2007, we opened up a platform for people outside of Facebook to create experiences directly on the site for you to interact with.

Since that time we have seen over 350,000 applications built on Facebook Platform, in areas ranging from sports and games to family and education. These applications were built to accompany our core Facebook applications like photos, events and groups. Our goal is to offer you a smooth experience regardless of what applications you're interacting with on the site, which is why in the next couple of months we're going to roll out some improvements to Facebook Platform.

Here's what the changes will mean for you:

Easier Access to Applications
Soon, the applications menu will move from its current location on the bottom left-hand side of any page on Facebook to the navigation menu on the left-hand side of your home page. This way, you always can rely on seeing applications in the same place and easily interact with your favorites, in addition to discovering new ones. You'll have the option to bookmark applications on the home page so that your favorite applications are only a few clicks away. You'll also be able to see instant alerts from applications that you've bookmarked.

We will be introducing a new Games Dashboard and an Application Dashboard that can be accessed from the home page and will serve as destinations for you and your friends' application activity. These will make it easy to view the latest applications you've interacted with, as well as discover new applications based on what your friends are using. You can also receive updates directly from applications here. For instance, if you're playing a game of Scrabble with your mother, you can visit the Games Dashboard to find short messages about when it's your turn to play, as well as interesting activity from games your friends are playing.

Michelle Boykins is the director of communications and marketing at the National Crime Prevention Council (NCPC), a U.S.-focused nonprofit devoted to helping people keep themselves, their families and their communities safe from crime. The organization is best known for McGruff the Crime Dog, who has been helping people "take a bite out of crime" for over 25 years. In honor of October being National Crime Prevention Month in the U.S., we asked Michelle to share her thoughts on how to prevent cyberbullying on the web.


Words can be weapons if people are not careful about how they use them. They can pierce our hearts and hurt just as much as any punch. Today, as all of us interact and engage with people on the web with greater frequency, we need to be even more aware of how we use our words. We also need to understand how we can respond to others who use harmful words or take abusive actions toward us.

Cyberbullying is defined as abusive or harassing behavior online, which includes sending or posting text or images that are intended to hurt or embarrass another person. A common misperception of cyberbullying is that it only affects teens. In fact, adults adopt cyberbullying behavior just as easily as young people. The problem transcends age and is due to a lack of respect for another person. Healthy friendships and relationships, at any age, are built on mutual respect, and a person who resorts to cyberbullying or asks you to participate is being disrespectful.

Already, Facebook allows you to easily report abuse on the site by selecting the "Report" link located near photos, videos, notes or other content you find offensive or inappropriate. This is just one step in discouraging people from behaving poorly online and potentially hurting other people. It's up to you to address cyberbullying if it occurs to you or people around you.

While October is National Crime Prevention month in the U.S., cyberbullying happens throughout the year. Here are some ways you can prevent and address it if you ever experience a problem.

Three years ago, we launched Facebook Share to make it easy to instantly share content back to Facebook with just a couple clicks of a mouse. From news articles to photos and videos, people now share more than 2 billion pieces of content on Facebook each week, many of which are through Facebook Share. Beginning today, we're making that experience richer by keeping count of the popularity of what people are sharing.

You now will begin seeing a new version of the Facebook Share button that includes a live counter, which shows the number of times that a particular article, video or piece of content has been shared.

I'm facing an anniversary soon: I will have worked at Facebook for four years. I was originally drawn to the company for the opportunity to help build a technology that enables people to model their social network and interact with it online. Equally as important, it was my first opportunity to work alongside my best friend of nearly two decades. Together, we threw ourselves into the task of building something we both believed in, working 18 hours a day, seven days a week with a small team of 40 people at the time.

About six weeks after we both started, my best friend was killed in a tragic bicycling accident. It was a big blow to me personally, but it also was difficult for everyone at Facebook. We were a small, tight-knit community, and any single tragedy had a great effect on all of us. I can recall a company-wide meeting a few days after his death, where I spoke about what my friend meant to me and what we had hoped to do together. As a company, we shared our grief, and for many people it was their first interaction with death. To this day, I still have strong emotions when I think about that gathering.

The question soon came up: What do we do about his Facebook profile? We had never really thought about this before in such a personal way. Obviously, we wanted to be able to model people's relationships on Facebook, but how do you deal with an interaction with someone who is no longer able to log on? When someone leaves us, they don't leave our memories or our social network. To reflect that reality, we created the idea of "memorialized" profiles as a place where people can save and share their memories of those who've passed.

We understand how difficult it can be for people to be reminded of those who are no longer with them, which is why it's important when someone passes away that their friends or family contact Facebook to request that a profile be memorialized. For instance, just last week, we introduced new types of Suggestions that appear on the right-hand side of the home page and remind people to take actions with friends who need help on Facebook. By memorializing the account of someone who has passed away, people will no longer see that person appear in their Suggestions.

When an account is memorialized, we also set privacy so that only confirmed friends can see the profile or locate it in search. We try to protect the deceased's privacy by removing sensitive information such as contact information and status updates. Memorializing an account also prevents anyone from logging into it in the future, while still enabling friends and family to leave posts on the profile Wall in remembrance.

If you have a friend or a family member whose profile should be memorialized, please contact us, so their memory can properly live on among their friends on Facebook.

As time passes, the sting of losing someone you care about also fades but it never goes away. I still visit my friend's memorialized profile to remember the good times we had and share them with our mutual friends.


Max is weary of eucalyptus trees.

Do you know any friends that could use a little help on Facebook? For example, maybe they recently joined the site and are having trouble finding their friends. Or maybe they've been on the site for awhile but never completely filled out their profiles or uploaded a profile picture.

Today, we're introducing new Suggestions in the right-hand corner of your home page so you can easily help those friends. Facebook is only useful and relevant if you can connect with friends that matter to you, and so we already use this space to show you other people that you may know and want to share with. Now you also will begin seeing new Suggestions about people with whom you are already friends, including those who are new to the site. For instance, we may suggest that you help a friend by suggesting friends for him if he's only connected with a few people so far.

At Facebook, one of our main priorities is helping you stay on top of what is going on with the people and things you care about most. That's why today we are beginning to roll out some changes to the home page that simplify your experience by offering two views of News Feed: a summary view of the most interesting activity that's happened in the last day and a real-time view that shows you what is happening right now.

You will be able to catch up on what you may have missed while you were away from Facebook and then easily switch to the real-time stream when you want to see posts as soon as they're shared. Here's how it works:

News Feed
When you log into Facebook, you'll see the most interesting things that happened in the last day in the "News Feed" view. News Feed picks stories that we think you'll enjoy based on a variety of factors including how many friends have liked and commented on it and how likely you are to interact with that story.

Live Feed
Once you've caught up on what you missed, you can click through to "Live Feed" to see what's happening right now. As long as you remain logged into Facebook, you'll continue to see posts and activity from your friends in real-time. You can edit what appears in this view by clicking "Edit Options" at the bottom of the home page.

We're continuing to enhance the Facebook Gift Shop so you have more ways to express your appreciation for the people in your life. A couple months ago, we took a first step by testing new types of gifts created by developers, including e-cards, charity donations and even real-world gifts where you can buy a friend a physical gift along with a virtual one.

We now are unveiling a newly stocked and redesigned Gift Shop, with new categories of gifts and additional gifts for charity, music and sports from developers. With so many gifts available, we also introduced a new design to make it easier for you to browse and purchase gifts with different gift categories. We will be rolling these changes out to everyone in the coming weeks, so don't worry if you don't see them just yet.

Remember, in order to buy Facebook Gifts, you must purchase credits on the site using a major credit card. Credits cost 10 cents in U.S. currency, and they are available for purchase in 15 currencies. After you select your gift, click "Buy," and we'll walk you through the rest.