Fetlife has been in the news recently for all the wrong reasons. Somebody scraped a bunch of user data off it and published it on the open web. This wasn’t a hack. They simply created a normal free account, which just takes a few seconds, and then ran a script to browse the site and download user profiles accessible to all fetlife users. They claimed that this was to demonstrate the lack of security in Fetlife. That position was undermined somewhat by the fact that they only took data from female users under 30 years old and published it in a file called ‘The Fetlife Meatlist’.
Understandably this pissed a lot of people off leading to articles like this and this. While the person who did it is obviously an asshole, I can’t say I was particularly surprised. There have been numerous articles over the years highlighting this potential attack, as well as previous technical demonstrations of the approach. Of course that doesn’t much help the 99% of Fetlife users who are busy getting kinky rather than reading techy sex blog articles.
It’s tempting to say that you should expect anything published online to be public. That’s both true and missing the point. Privacy is not a binary concept. At one extreme you have things like password protected accounts for storing private cellphone photographs. At the other you have sites like reddit and blogs like this one. To access the former you need either a hacker or a security flaw in the storage system. To access the latter you just need a web browser and an internet connection. Neither provides guaranteed privacy, as a lot of celebrities recently found out. Yet expectations of the two are clearly different.
Social media sites like Fetlife and Facebook fall someone between those two extremes. The problem is that their business model of eyeballs and advertisers pulls them towards the openness of a reddit or a blog. The expectation of their users, particularly for a content sensitive site like Fetlife, pulls towards greater privacy and protection. To date it seems that Fetlife has biased towards its advertisers over its users. So yes, you should always work on the assumption that anything stored online may become public. But that doesn’t absolve Fetlife of the responsibility to strike the right balance between its business model and its users privacy.
In the meantime, if you do take kinky selfies, be careful how you share them. Although if anyone wants to send me some, I promise to be careful with them!
This is by the Belgium artist Benoit Feroumont, who posts his erotic work under the handle Gracy Gimp.