That is exactly the point I wanted to make. The default settings should be the ‘most private’ so users are assisted in thinking about what information to release to the general public.
As for employers who background check their potential hires on the Internet. I must admit that I too google every name before I interview them to see what info comes back. This sometimes gives insight in how involved a potential candidate already is in the online infosec community (indicates a sense of passion for the profession). However, this is not the decisive factor, interviewing someone face to face is still the most valuable part of our selection process.

Cheers,

Tom

Publishing private information on social networks is up to you, you have more control over WHAT to publish and WHEN. It’s a totally other matter then a third party publishing it, because you didn’t decide to. It’s all about CONTROL and CHOICE.

My LinkedIN only disclosed most information to my contacts. The public profile is a lot shorter and skips over the details. My twitter only discloses information only to those I accept. It’s my CHOICE who sees my tweeters.

But I do agree that a lot of people don’t take these steps and the default settings of those sites is allow all. User awareness is an option, but who is going to tell them? Educate your peers (blogging is a start). I know that 90% employers check the received CVs against the user’s LinkedIN page for inconsistencies. Even if it is because you failed to keep that page up to date, it makes you look bad. Ye be warned.