Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Facebook created a problem for regulated industries and Registered Investment Advisers (RIAs) by changing the default outgoing SMTP address for every contact to a @Facebook.com address.

This is an issue because RIAs are subject to external compliance auditing, usually though a 3rd party journaling target such as SMARSH or Proofpoint Archive.

For example, suppose an email addresses changes to @facebook.com, then that means all email protections that were in place by the company (such as encryption, AV, etc.) also bypasses the required any other journaling infrastructure that is required by law.

Questions

  • What are the exact circumstances that cause the default email address to change?

  • If the email address has changed, how does that affect liability?

  • If the email address changed on the mobile device, does it also change Outlook's default address (Exchange Server/OWA presumably as well)?

  • Does the scope of the SEC search or legal search now expand to a Facebook address as a result? (affecting privacy)

  • How does one mitigate the risk, and/or undo the changes?

share|improve this question
add comment

1 Answer

What are the exact circumstances that cause the default email address to change?

Facebook wants control.

If the email address has changed, how does that affect liability?

Just change it back?

How does one mitigate the risk, and/or undo the changes?

You change it, like you have always been able to do, Facebook even has a support article on the subject.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.