Mayo Clinic Facebook Page Highlighted

I was interviewed earlier this month for an article in 1to1 Media about Mayo Clinic’s Facebook page. Here’s an excerpt:

Like any Facebook user, the Mayo Clinic’s page allows the not-for-profit organization to post information about itself, link to its three websites (for patients, consumers, and research and education), display “wall post” messages and photos, offer video and audio podcasts, provide updates on news and events, and connect with friends. Beyond that, Aase says, “what we really hope to have it be is all about people telling their own stories—describing what their experience was like here and connecting in that way.”

The opportunity for patients to directly tell their stories online is an important word-of-mouth component for Mayo Clinic. “Social networking sites like Facebook are one means by which people stay in touch and share experiences,” says Ed Keller, CEO of the word-of-mouth research and consulting firm Keller Fay Group. “Allowing people to express themselves—telling their stories in their own voice to their friends, family, and other members of their social network—is proving to be a powerful way for brands and organizations to join the consumer conversation and to help improve their own brand position as a result.” Consumer self-expression brings authenticity and impact, Keller adds. “If consumers are happy with their experience with the Mayo Clinic, and they tell others, it will undoubtedly help Mayo to grow its reputation and market presence.”

That’s certainly Aase’s hope. “When [patients] are telling their stories, their friends will see that and may be likely to check [us] out,” he says. “That’s like the word of mouth that happens over the back fence.”

Check out the rest of the article here, and thanks to Jason Alba at FacebookAdvice.com for his favorable review.

Update: The Rochester Post-Bulletin picked up this blog alert and published a story today.

SMUG Week in Review 2-24-08

It was a full week for Social Media University, Global (SMUG) students, of whom there are now 49 (up from 34 just a week ago!)

The Facebook Hacker Challenge was updated and expanded. Then a commenter raised the issue of whether encouraging someone to try to hack the group would constitute a violation of Facebook’s Terms of Service. Your Chancellor decided it may be worth up to $200 to find out how secure Facebook’s secret groups are, but it’s not worth getting his Facebook account suspended, so I brought the challenge to an end.

Which is, I guess, a way of saying Facebook (even though it’s free), is worth more than $200 to me. That got me thinking that maybe a $15 billion valuation for Facebook isn’t all that outlandish; if you multiply 65 million active users by $200 each, that’s $13 billion. I may not be typical; there may be lots of users who would walk away from Facebook forever if you offered them five bucks. But I suspect many others wouldn’t trade their access to Facebook for $500 or even $1,000.

In one way, this back-of-the-envelope calculation doesn’t mean much. The fact that I perceive Facebook as being worth more than $200 to me doesn’t directly put money in Mark Zuckerberg’s pockets. But it does suggest that there will be a reasonable tolerance for Facebook trying to monetize its service, even if it means some minor annoyances, because users find Facebook so personally valuable anyway. Of course, the best scenario is one in which the targeting of relevant advertising actually enhances Facebook’s perceived value to users.

In other developments this week, SMUG got a great new URL: social-media-university-global.org. This is part of growing up from a blog that started on a whim about 19 months ago to an on-line higher education institution (even if it’s not accredited). The process was pretty painless on my end, and the total cost was $19 (although I did spend another $10 for the .com version of the domain, too.) I hope it’s not too painful for those who had subscribed to the original feed from leeaase.wordpress.com, or the one that had been burned through Feedburner. I would appreciate any feedback from anyone for whom this has caused a problem (but then, if it has cut off their feed they wouldn’t know about this request, would they?)

We also added two new courses, for which there are homework assignments:

Remember, SMUG is built on the principle of self-paced, hands-on learning. Don’t worry if you get behind. The Curriculum section will always have an up-to-date listing of available courses in sequential order. Complete the coursework as you have the time and inclination.

Unlike traditional colleges and universities that offer degree completion through cohort programs, you don’t have to work at the same pace as everyone else. The SMUG cohort is always growing and accepting new students (15 in the last week alone). So you can’t get behind, because there’s no pace you’re expected to match.

Of course the other major difference between SMUG and other universities is they actually give you a real, accredited degree. And even the cheapest public universities charge tens of thousands of dollars for it.

At SMUG, the B.S. degree you earn has a double meaning. But since it’s free, and since you’ll be gaining a lot of practical knowledge and experience through the process, I’m confident you will find it an exceptional value.

Happy studies!

Ending the Facebook Hacker Challenge

It’s time to bring the SMUG $100 Facebook Hacker Challenge to an end. No one has been successful (and I don’t think they would be), but in a comment today, Erik Giberti raised a good point that I hadn’t fully considered.

Lee, I’m not a lawyer, but I think you’re violating at least the Facebook Terms of Use and possibly the DMCA  (although that’s a tricky moving target) by encouraging this generally considered illegal activity; that is cracking Facebook vulnerabilities.

My purpose in issuing the Hacker challenge was to counter the FUD (Fear, Uncertainty and Doubt) being spread about Facebook’s secret groups. “Can you really trust that the data you put in a secret Facebook group would be safe? What about trade secrets, or marketing plans? Aren’t you putting those at risk by using Facebook instead of having them securely behind your firewall?”

I was comfortable enough with Facebook’s security that I was willing to risk $100 that no one would be able to get into the secret group I set up for purposes of testing. But while I thought the risk of losing $100 was worth taking to prove a point, the risk of having my Facebook account suspended isn’t.
So here’s my advice for people who are thinking about using Facebook groups for business discussions:

  • A secret Facebook group should be at least as secure as e-mail. Everyone uses e-mail to discuss business issues, even though e-mail messages can be forwarded to an unintended party, or possibly intercepted in transit. By contrast, it’s relatively harder to get into a secret Facebook group.
  • Create a legal warning notice for your secret Facebook group. Lots of companies put legal notices on the bottom of their e-mail messages or on faxes (remember when you used to send those?) saying that the information is confidential and intended only for its recipients. I’m sure a good lawyer could develop the same kind of language to post in the descriptions of secret Facebook groups.
  • A secret Facebook group will be even more secure if you keep it, well… SECRET. For someone to hack into your secret group, they first need to know it exists! I put out a challenge to the world, saying that if anyone could find out what was in the recent news section of my secret group, I would give them $100. Then I published not just the name of the group, but its URL. No one was successful, although one person talked big about being willing to do it for $1,000. If you don’t tell anyone other than your intended participants about your secret group, it would be that much harder to hack.
  • Be Smart. If information is truly critical, so that disclosure would have serious negative ramifications, don’t put it in a secret Facebook group. You wouldn’t put your Social Security number, your bank account PIN, credit card numbers or the launch codes for nuclear missiles in an e-mail. Don’t put them in Facebook, either. But lots of less-critical information could be shared within Facebook secret groups with relatively low risk.
  • The calculation should always be risks vs. rewards. If a Facebook group enables you to collaborate more effectively than you can using your current methods, and if an information leak wouldn’t bring financial ruin or global thermonuclear war, the reward probably makes the risk worth taking.

I’ve done my own calculation of risks vs. rewards based on Erik’s comment and Robert Scoble’s experience in being kicked off Facebook, and that has led me to declare that the SMUG challenge has ended, as of 12:01 a.m. CST on Wednesday, Feb. 20, 2008. I am not encouraging anyone to hack Facebook’s security. The $100 offer to get into my secret group, and the $200 offer for posting a photo to it, is withdrawn.

I find Facebook too valuable that I would not want to risk an account suspension on the grounds that I had encouraged others to violate the Facebook TOS. A rock star like Scoble can get his Facebook reinstated quickly. For the rest of us, it might take longer.

My challenge was meant to be supportive of Facebook as a place for business interactions. And I think it has accomplished its purpose, if it has helped to banish the FUD.

SMUG Facebook Hacker Challenge Update

The SMUG $100 Facebook Hacker Challenge, which I conceived in response to a question during this podcast interview, has attracted some interest.

Anthony at AllFacebook put out the all-points-bulletin for hackers to give it a shot. And Goob said

Frankly, I think it’s just a great publicity event. Promise some money if people can do something you’re confident is impossible, let a ton of other sites write about it and link back to you, and sit back and relax. I can [sic] the same thing though. I’ll give $1 million dollars to anybody who can figure out the number I’m thinking of between 1 and 78 gazillion. See, it’s that easy.

And Justin Flowers added, while misspelling my name,

While reading the post, I suddenly realized that I had a similar challenge that I wanted to make, and that, in fact, I was willing to offer more money for mine.

You see, I, Justin Flowers, trust the security at the US treasury so much that I’m willing to offer a $1000 dollar reward to anyone that can break into the US Treasury, and steal $1,000,000 US. If you show me the 1 million, I’ll pay up. I’m willing to double my payout if you bring me a picture of you in a vault at the Treasury.

In their rush to sarcasm, they both Goob and Justin missed the point. The security of the US Treasury isn’t in question, and this isn’t about mind reading. No one doubts whether the banking system is safe from being hacked (even by Danny Ocean and his 10 friends).

But data security for business information is precisely the issue with Facebook. I get the question a lot, as I did on the MindComet podcast:

“If I use a secret Facebook group for business planning, can I feel confident that my data will be secure?”

And that’s the reason for the SMUG Facebook Hacker Challenge. I’m betting $100 that the answer is “yes.”

Do I hope lots of people link to the hacker challenge and spread the word? Yes, because that will help us find the answer to our question about data security in Facebook secret groups. This is a real academic research project.

Unlike Goob, I’m not thinking of a random number for someone to guess. I have a real answer for someone to find on this secret Facebook group, if they can beat Facebook’s group security. It’s right there, in the recent news section of the group. And the information itself is worth a lot more than the $100 bounty.

Yet in the blog discussions of the hacker challenge, one question that’s been raised is whether the $100 prize is lucrative enough to attract the attention of a really proficient hacker. In fact, in the comments on the post announcing the challenge, the mysterious jmprei offered to do it for $1,000. I guess the $100 isn’t enough for her or him.

As a professor at SMUG, I do have the security of tenure (after all, I’m the Chancellor), but since

  • we don’t charge any tuition for our online university, and
  • our University Endowment is…well…zero, and therefore
  • My SMUG salary also is nonexistent…

I’m not ready to raise the ante on my own. (In fact, my wife says the current hacker challenge prize has to come out of my Christmas money.)

So if anyone else thinks it’s worth raising the payout to find out how safe your business-related data would be in a secret Facebook group, here’s an opportunity for you to provide some extramural research funding for SMUG.

I’ve established a PayPal account for the SMUG Research Fund, and have transferred $100 into it. Whoever meets the SMUG Hacker challenge first gets whatever is in the account at the time of the hack.

So it becomes a fun little game of chicken for any hackers who think a $100 prize (and worldwide fame) isn’t worthy of their time and talents. As SMUG students or any interested bystanders make their $1, $2, $5, $10 or larger contributions to the SMUG Research Fund, I will update this post to indicate the new prize level.

I think it may eventually reach the point at which Greed and Fear will intersect for some hacker. They would then have the Deal or No Deal decision to make: Do I wait for the prize to go up and increase the payoff, or do I claim it now to avoid having someone else snipe it?

Please note: None of our 40 students (cool!) should feel any obligation to contribute.  Social Media University, Global is a free university. Also, contributions to the SMUG Research Fund are not tax deductible. But if anyone does want to help advance our practical knowledge of whether Facebook is safe for business data, click here or in the SMUG Research Endowment widget at the bottom of the right sidebar.

smughackerchallengenophotos.jpg

SMUG Extension Classes

leehasvisited.jpg

Social Media University, Global (SMUG) is built on the distance-learning paradigm. And unlike traditional universities with on-line programs, we don’t have a requirement that some of the credits be taken on campus in a group setting.

Frankly, we don’t have room for all y’all. (I understand that’s the plural for the singular Texas “y’all.”)

Don’t get me wrong, we’d love to have you visit… one at a time. While you’re here in Austin, Minn. you can also see the world-famous SPAM museum. People have been known to come from as far as Hawaii and Guam to visit the birthplace of the canned meat that saved Western civilization during WW II.

So if they’ll travel that far for SPAM, maybe you’d want to do it for SMUG, right?

If not, and if you’d like to organize a group to have SMUG’s Extension Service bring an intensive session of classes to your community or company, let’s talk. Face-to-face dialogue is still the most effective way to learn.

We can do a Blogging Bootcamp. A Facebook Forum. A Wiki Workshop. A Twitter Tutorial. A Podcasting Program. Or we could tie it all together into a Social Media Summit.

Then you can continue your SMUG education through our on-line courses.

The map above, which is from my Facebook Cities I’ve Visited application, is useful in three respects:

  1. If you see a pin on the map for your city, I’ve been there before. Not for SMUG classes, but I know how to get there. I’d be glad to visit again.
  2. If you don’t see a pin for your city (or if your continent isn’t even shown!), it would be a new adventure for me. That would be fun, too.
  3. All blog posts should have a graphic or video of some kind to make them more interesting. Having the map accomplished that for this post.

If you’re interested in SMUG Extension, see the “Contact the Chancellor” box on this page.