Users are tricked into clicking links such as “World Cup 2010 in HD” or “Justin Bieber’s phone number” that their friends appear to have “liked”.

Once clicked, the site is recommended on Facebook too, and could pose danger of potential malware, even though currently there’s no such content on these sites. It also works across all computer operating systems.

The link generally takes the user through to a page containing an instruction, such as asking them to click a button to confirm that they are over 18.

However, wherever they click on the page it adds a link to their own Facebook profile saying they have also “liked” the site.

‘Clickjacking’ for now, is harmless, and does not actively result in any malware or phishing attacks, said Graham Cluley, senior technology consultant at Sophos.

“At the moment the attacks which we’ve seen are more like old-school viruses – written for the heck of it to see how many fans they can get.

“But our feeling is that it would be fairly easy for the bad guys to introduce some revenue generation for themselves,” BBC News quoted him as saying.

A free plug-in called NoScript, built for the Firefox web browser, includes pop-up warnings about potential clickjacks, but will also query clicks on Flash videos, commonly used on many websites, and it is not easy to install, said Mr Cluley.

During an onstage interview at the D: All Things Digital conference, a week after Facebook reversed some policies that had been spreading Facebook user information on the Web, Mr Zuckerberg said that the company had learned from the feedback but would make future changes without users actively choosing to participate.
He said that it would be “pretty crazy” to require users to “opt in” to every new function, such as photos and mail, and he drew no distinction between those and systems like the “instant personalisation” that provide information on Facebook users as soon as they visited partner sites including Yelp and Pandora.

“My prediction would be that a few years from now, we will look back and wonder why all these sites weren’t personalised in some way already,” Mr Zuckerberg said. “The world is moving in this direction.”

Other relationships with partner sites, such as buttons that let Facebook users broadcast what they like there, have doubled traffic from Facebook to those pages, and Mr Zuckerberg said such statistics would increase adoption of the mechanism.

Just 26, Mr Zuckerberg said he would still be CEO whenever Facebook goes public. The top social networking site and one of the most visited places on the Web, Facebook is approaching 500m users.

Many of those users have objected to steady expansions in the amount of data about them Facebook makes public or more widely seen by default, unless the users change those settings. Zuckerberg said part of the recent outcry that “resonated” with him were the complaints about the complexity of those controls, which were simplified last week.

Some of the privacy concerns were exacerbated by publication of instant messages from Mr Zuckerberg during his college years, when he called Facebook users stupid for trusting him. On Wednesday, he said he regretted such exchanges. “I’m really sorry”, he said.

He said Facebook would continue to add staff and try new things instead of slowing down as the company grows. One of his goals, he said, was to try to make sure Facebook doesn’t make the same mistakes other companies have made.

“We try to make different mistakes” he said to laughter.

It might have even happened to you, that you got into trouble or an embarrassing situation when someone who was not meant to read an update or a remark on your Facebook profile, read it… Well, it has happened to me and trust me, you don’t want to be in a spot like that EVER.

Well, here is a piece of good news for all those who had a similar experience in the past, as I did. Now, more privacy controls are making their way to Facebook, allowing 200 million users to choose who all should see their personal updates.

New & Improved Privacy Controls

Facebook has been testing new privacy controls on the social networking site that will enable users to customize their postings for specific groups of friends. Yesterday, Facebook launched a beta version of an improved Publisher with new Privacy Controls.

Publisher is the main place where you post your photos, videos, and status updates on your home page and profile.

According to Facebook’s blog post:

“The new Publisher Privacy Control gives you the opportunity to answer the question, “Who do you want to tell?” as easily as you answer the question, “What’s on your mind?… You may have some posts you want to share with a wide audience, such as whom you voted for or how great the weather is today. Other times you may have more personal updates like your new phone number or an invitation to join you at your favorite restaurant for dinner that are meant for only close or nearby friends… If you have access to this beta version, every time you publish content into your stream you are able to control which people can access that specific piece of content.”

Beta Access – Limited

For now, the additional privacy controls are only available to a select number of Facebook users.

In case you are amongst the few with access to this beta version, then upon publishing content on Facebook, you will have control over who accesses that piece of update.
How does it work?

• Write a status, upload a photo or create content from the Publisher on Facebook.

• Use the lock icon in the lower-right corner of the Publisher to access the drop-down menu.

• From the menu, choose the people you’d like make the post visible to.

Simple!

Options available:

• Everyone: This means anyone, be it a Facebook user or not, can view the content.

• Friends and Networks: Only confirmed people who you added as friends and others in your network will have access to the content.

• Friends of Friends: Anyone who is friends with a friend of yours can see it.

• Friends: Only people you have confirmed as friends can see it.

• Custom: You could choose anyone from your Friends List allowing them to view the content.

You could create a photo album and restrict certain friends from viewing it and those people will never see that photo album in their stream. You could even talk about a crazy night of partying with your college friends, at the same time keep your family on Facebook at bay… Yay!

Share your comments on what you think about the new controls and do let us know if you are amongst the select few with access to this beta version.