Starting today, I’m going to remove all my personal information from Facebook and “unfriend” everyone. I’m responding to a pair of status messages that appeared on my profile over the last few weeks, though I didn’t put them there. (John calls them “phantom status messages.”)

According to the site itself, the messages were both submitted “via Text Message”, which is odd because I haven’t authorized the Facebook Texts service. I submitted a bug report to Facebook Support, but so far they’ve done nothing aside from ask me to resubmit my request if I’m “still experiencing security issues.”

Just to be clear:

• My account hasn’t been “hacked”. I changed my password as soon as the first phantom status appeared, and that didn’t stop the second message two weeks later. Since the phantom messages came from the Facebook Texts service, they didn’t require my authentication anyway.
• My computer doesn’t have a virus. (If you know me at all, you’re chuckling at the idea.) Even if by some magical circumstance it did, the virus would have to send Facebook a text message somehow, and they’d still have to accept it.

That leaves two possibilities that I can see:

1. It’s a bug. Some bit of Facebook code is misrouting another user’s text messages to my profile by accident.
2. It’s a security exploit. A malicious user is exploiting some crack in Facebook’s text-message-handling code to drop messages in other users’ accounts. This is less likely, but not impossible; it would probably start with innocuous messages to test the exploit.

Either way, I no longer trust my Facebook account. The phantom messages have been benign so far, but all it would take is one generic hurtful statement to become a real nightmare. (Not to mention what this implies about Facebook’s security in general.)

I still plan to keep the account itself open, because I need it for work (to develop Facebook apps) and for space advocacy (as a page admin). I just won’t be posting to it, and it won’t be “friends” with anyone. I’ll miss the easy keeping-in-touch it provides, but that’s not worth the potential hassle.

In 1998, Apple came out with an all-in-one computer. At the time, all-in-one computers were stripped down CPUs crammed onto a monitor case. The term made people expect something ugly, cheap, and difficult to upgrade. What they got instead was the iMac. It was revolutionary, and it inspired copies all across the industry.

In 2001, Apple came out with a portable MP3 player. There were plenty of MP3 players on the market, but none of them were particularly impressive. Initial reviews told people to expect an Apple offering that was too big, lacked features, and was way too expensive. What they got instead was the iPod. It was revolutionary, and MP3 players were never the same.

In 2007, Apple came out with a smartphone with an integrated iPod. By this time, people realized they should expect something revolutionary, but revolutions are tricky to predict. Rumor sites and pundits worked themselves into a frenzy telling people to expect an iPod with phone capabilities crammed in, or a phone with an iPod tacked on. What they got instead was the iPhone. It was revolutionary, but not the way anyone expected.

In 2009, Apple might come out with a tablet computer. As before, everyone and their dog is trying to guess what it might be like. We’re being told to expect a big iPhone, or a web tablet, or some kind of ebook reader. What I expect instead, based on all that’s gone before, is the unexpected.