Facebook image theft prevention

September 2009 Information Security

Five tips for protecting your visual identity

Web 2.0 applications in general and social networking applications in particular are no longer just some friendly platforms for sharing news about the most recent project one could have, but also the ideal place for data and identity theft.

These days’ attempts no longer focus to purloin valuable information about the user and his or her account. Pictures, e-cards and photo streams seem to be the preferred target of the e-larcenists, as proven by the hijacked family Christmas card employed for a grocery commercial or the stolen picture of a baby used in a fraudulent scheme for an alleged adoption.

A platform gathering a number of users that almost equals the US population, with about half of them logging in daily, Facebook is one of the most criticised social networks for its loose privacy policy. A loose policy that also applies for images, as you can read in the following excerpt of the second article in the Statement of Rights and Responsibilities (Revised 1 May, 2009):

“Sharing your content and information

You own all of the content and information you post on Facebook, and you can control how we share your content through your privacy and application settings. In order for us to use certain types of content and provide you with Facebook, you agree to the following:

* For content that is covered by intellectual property rights, like photos and videos ('IP content'), you specifically give us the following permission, subject to your privacy and application settings: you grant us a non-exclusive, transferable, sub-licensable, royalty-free, worldwide license to use any IP content that you post on or in connection with Facebook ('IP License'). This IP License ends when you delete your IP content or your account (except to the extent your content has been shared with others, and they have not deleted it).”

Technically, this opens the door to unrestricted/unpunished visual identity exploitation, as already shown by the abusive usage of photos lifted from users’ Facebook gallery involved in third-party advertisement campaigns.

To preserve your images and to protect your visual identity, follow the five tips below:

#1 Avoid uploading pictures – Although a picture is worth a thousand words, if one is not really necessary, you should refrain from posting it. This is probably the simplest way to avoid image theft.

#2 Check the privacy options – Facebook and other social networking platforms offer several options for restricting access to the content you post, including uploaded photos. You can choose whether the data and images in your albums are public or available only to a limited number of people. Also, a good idea would be to refrain from involving third-party services or options, especially those asking you to reveal your Facebook login credentials.

#3 Embed/add a watermark – Another simple method to protect your visual content is to embed or add a visible (digital) watermark, such as your name or logo. Although it alters the image (and thus, in some cases, impairs a bit its spectacular character), this practice will probably discourage any e-thief from stealing your photo and using it for a different purpose (ie, identity forging or cases that involve copyright infringement). Professional image editing applications include such option, but you could also search the Internet for freeware or on-line watermark creators with similar capabilities (it is also worth checking your digital camera CD for a similar utility).

#4 Use low quality/small size images – Keep your images at a resolution of 72 dpi and, if possible, do not exceed a size of 640 x 480 pixels. Although you will not look as sharp as a model on the cover of a glossy magazine, people will still be able to recognise you. Plus you will have more chances to keep your visual identity intact. Not to mention that you save quite a lot of the limited storage space, which social networking platforms provide.

#5 Try not to post individual, portrait images – as shown by two of the three previously mentioned cases of image theft, the photos of individuals (both adults and kids) have more chances to be lifted for nefarious purposes than those depicting groups, family or featuring subjects in nature or sets that are difficult to be otherwise removed from the picture.

For more information Daniella Hess, product manager, Holton & Associates, +27 (0)11 789 6181, [email protected], www.holton.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Compressing cyberattack timelines and targeting ungoverned AI identities
Information Security News & Events
Sophos AI Security 2026 report finds attackers are moving beyond experimentation and operationalising AI for attacks using identity as the primary initial access vector, rather than inventing new attack types.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
How ‘TikTok Brain’ is breaking legacy security training
Training & Education Information Security
Between doomscrolling, rapid-fire Slack notifications, and algorithmic video feeds, the average employee is trapped in an aggressive, highly engineered dopamine loop that automatically shuts down in traditional training situations.

Read more...
Quantum is coming
Infrastructure Information Security
The global cybersecurity landscape is approaching a turning point as quantum computing accelerates faster than most organisations realise; the shift is not a distant, theoretical concern, but a present-day business risk that demands immediate action.

Read more...
Outpacing cyberthreats in the age of AI
SMART Security Solutions Technews Publishing News & Events Information Security
SMARTpod talks to Fred Streefland, Global Field CISO for EMEA at Check Point Software Technologies, about framing modern cyber defence around adaptability, rapid decision-making, and the OODA loop adapted for cybersecurity.

Read more...
Prompt injection is the new phishing
Information Security Security Services & Risk Management
AI security is heading in an uncomfortable direction following Microsoft’s research showing how prompt injection can be chained to remote code execution vulnerabilities in AI agent frameworks, including work involving Semantic Kernel

Read more...
Cybersecurity needs actual intelligence before artificial intelligence
Information Security AI & Data Analytics
Cybersecurity depends on interpretation. A tool can tell you that something unusual has happened, but people need to determine whether it is a genuine risk, the business impact, and how to respond without causing unnecessary disruption.

Read more...
Duxbury Cybersecurity sharpens reseller offering
Duxbury Networking Information Security News & Events
Duxbury Networking has strengthened its Duxbury Cybersecurity business unit by adding WatchGuard and Cynet, giving South African resellers broader, more integrated coverage for the security risks customers are now asking them to address.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.