When a Web site is as popular as LinkedIn, it's easy to get caught up in the excitement of posting a profile page without considering the level of information you're sharing. Unfortunately, by posting too much personal and business information on a site like LinkedIn, you could make yourself vulnerable to social engineering hackers.
Social engineering is the practice of using psychological techniques to persuade people to give up sensitive information like passwords or corporate secrets. Social engineering is an effective way to hack a business network because it targets the weakest link in the system: human beings [source: SearchSecurity.com].
An example of a popular social engineering scam is to call the IT department of a company posing as a frantic, angry executive who has lost his network password and needs it immediately for an important meeting. The IT worker will be so frazzled by the call that he'll give up the password without taking the necessary security precautions [source: Security Focus].
You might think that the information you post on LinkedIn is secure because only members of your network can see full profiles. But LinkedIn is different than some other popular social networking sites like Facebook because it allows search engines like Google to access a version of your profile page called the "public profile." When you create a profile page on LinkedIn, you also create a public page that can be seen by anyone who conducts a relevant Web search.
LinkedIn allows you to adjust your privacy setting for that public profile page, including an option to remove the public profile altogether. You can choose to limit your public profile to your name, location and job, or post the "full view," which is your full profile minus recommendations and contact information. Even in "full view" mode, the public profile page will never list your connections.
Only your direct connections -- one degree away -- can see your list of connections. Ultimately, that puts users in control of their privacy. This is why it's so important to accept LinkedIn invitations only from people you know and trust. If a social engineering hacker knows your name, where you work, where you worked, where you went to school, as well as names of current and former colleagues and classmates, it's much easier for him to come up with a convincing scam. He can use all of this information to win your confidence (where the word "con" comes from) and subtly persuade you to give up information you wouldn't have otherwise shared with a complete stranger.
LinkedIn allows users to adjust their privacy settings anytime by clicking on the "Accounts & Settings" link at the top of every LinkedIn page. On that page, you can make your name and location invisible to other LinkedIn users. You can control how and if your connections are notified when you make changes to your profile or add new connections. And you can control whether even your direct connections can browse your connections list.
That just about takes us to the end of our HowStuffWorks tour of how LinkedIn works. For more information about LinkedIn, social networks and related topics, check out the links on the next page.