Friday, December 11, 2015

Privacy VS Security, First in government, now in Social Media



I have an acquaintance that recently sent me some transcripts of some emails sent back and forth between them and social media giant, LinkedIn. I was, needless to say, not surprised yet still disturbed by what I read. He went on to explain how he was trying to reset his password, and that the site provides an option to have a reset link sent to his email. You simply input your email address, and hit submit. If you have entered an email that is not associated with your account, the system will notify you. If you enter your email you registered with, it will say that an email has been sent. However, when you click that, no email is sent. LinkedIn, instead, offers this option:

We'll need to verify your identity. To do this, we use a technology that scans your government-issued ID so that we can help get you back into your account as quickly and securely as possible.
 
To get started you'll need:
 
• A smartphone or computer with a webcam
• Your driver's license, state-issued ID card, or passport
• An email address where we can reach you
 
Once you begin the identity verification process, you'll be asked to take a photo of your ID with a smartphone or webcam. Follow the onscreen instructions after clicking the link below. Once you're finished, we'll process your information.
 
Click the link below to begin verifying your identity:
 
 
You'll receive a confirmation from our Trust & Safety department once they've reviewed your information.
 
Please know that member privacy is a top priority and any identification you provide will be deleted once you have successfully re-gained access to your account.
  
Sincerely,
XXXXXX
LinkedIn Customer Experience Advocate
 
Essentially, what they are asking for is your government issued ID to verify your identity. They also specify using a computer with webcam or a smartphone. Now our former LinkedIn user told us that he felt uncomfortable doing this and that he advised the LinkedIn Customer Experience Advocate that he would not be sending this information. He instead requested that the account be closed. Now, although they did end up closing his account, they did this without him providing ANY additional information to prove his identity. This left him to conclude that they did have enough information to send a reset link, but would rather close his account if he did not provide more of his private personal information. After his account was closed, this exchange took place on Linkedin's Facebook page:
 
Former Linkedin Customer:  Why does your reset email link not working? I requested an email sent to my account and the button shows it sent but I never receive it. Your support team agent, XXXXXX, has taken me on a three day circle of BS ending with a canned response email offering the same solution we began with. ALL other companies have a reset link, yet you all seem to be phishing for my government issued ID.
Like · Reply · 20 hrs
LinkedIn: Hi Former Linkedin Customer:  - This is definitely not the experience we want you to have. What's your ticket number?
Like · Reply · 37 mins
Former Linkedin Customer:  lol You're a bit late on that. I was messaged by this page yesterday notifying me that my account was deleted per my request. I told them if they could not send me a reset link, to delete my account. I found it funny that they would rather delete my account than deal with me any longer. Mind you, I did not provide ANY additional information to have them close the account. They had just as much proof it was me when they denied me access. Here is that ticket number anyway, Password Reset [151208-005156]
Like · Reply · 15 mins
Former Linkedin Customer:  Sad, because I had full intention of utilizing my Linkedin account and was looking forward getting it updated. I understand your company's concern with how this may look on your public page, and I am not here to troll you. In fact, I have no intention on dealing with linkedin. I will, however, be sharing this experience with EVERYONE I can because this country does not need more big corporation or government telling them they have to compromise their privacy for security. Linkedin chose their side on that matter. by asking for my government issued ID. Like it or not Linkedin, you have chosen your political stance on privacy VS security here. Maybe, the public should know that.
Thank you Mr. Former LinkedIn Customer. They do now.