Lately, EFF's work to protect rights and liberties in the online world has focused rather heavily on social networking sites and their policies. The logic is borne out by the numbers — Facebook and Twitter combined claim hundreds of millions of worldwide users, so advocating for stronger privacy and less censorship from these kinds of websites will mean a better Internet for lots and lots of people.

But ultimately, what we want to see in the long-term is for users to gain more control over their activity online. Unfortunately, giving facts, photos, locations, and other personal details to monolithic, company-owned social networking websites — whose business models are generally based on gathering, using, and monetizing data about you; and which may be vulnerable to government pressure tactics — will always be a trade-off. That's why there's a great deal of excitement around a new path for social networking online, known as "federated social networks" or "distributed social networks." Federated social networks (software like Status.net, Diaspora, and many others also in development) are a vital step towards fulfilling values often lacking in the existing social networking ecosystem: user-control, diversity of services, innovation, and more. While there is still plenty of active development taking place on these software projects, the possibilities of these systems make them worth thinking about now.

How does a federated online social network work?

To understand how federated social networking would be an improvement, we should understand how online social networking essentially works today. Right now, when you sign up for Facebook, you get a Facebook profile, which is a collection of data about you that lives on Facebook's servers. You can add words and pictures to your Facebook profile, and your Facebook profile can have a variety of relationships — it can be friends with other Facebook profiles, it can be a "fan" of another Facebook page, or "like" a web page containing a Facebook widget. Crucially, if you want to interact meaningfully with anyone else's Facebook profile or any application offered on the Facebook platform, you have to sign up with Facebook and conduct your online social networking on Facebook's servers, and according to Facebook's rules and preferences. (You can replace "Facebook" with "Orkut," "LinkedIn," "Twitter," and essentially tell the same story.)

We've all watched the dark side of this arrangement unfold, building a sad catalog of the consequences of turning over data to a social networking company. The social networking company might cause you to overshare information that you don't want shared, or might disclose your information to advertisers or the government, harming your privacy. And conversely, the company may force you to undershare by deleting your profile, or censoring information that you want to see make it out into the world, ultimately curbing your freedom of expression online. And because the company may do this, governments might attempt to require them to do it, sometimes even without asking or informing the end-user.

How will federated social networks be different? The differences begin with the code behind online social networking. The computer code that gives you a Facebook profile is built in a closed way — it's proprietary and kept relatively secret by Facebook, so you have to go through Facebook to create, maintain, and interact with Facebook profiles or applications.

But federated social network developers are doing two things differently in order to build a new ecosystem. First, the leading federated social networking software is open-source: that means that anybody can download the source code, and use it to create and maintain social networking profiles for themselves and others. Second, the developers are simultaneously collaborating on a new common language, presumably seeking an environment where most or even all federated social networking profiles can talk to one another.

What will that likely mean in practice? To join a federated social network, you'll be able to choose from an array of "profile providers," just like you can choose an email provider. You will even be able to set up your own server and provide your social networking profile yourself. And in a federated social network, any profile can talk to another profile — even if it's on a different server.

Imagine the Web as an open sea. To use Facebook, you have to immigrate to Facebook Island and get a Facebook House, in a land with a single ruler. But the distributed social networks being developed now will allow you to choose from many islands, connected to one another by bridges, and you can even have the option of building your own island and your own bridges.

Why is this important?

The beauty of the Internet so far is that its greatest ideas tend to put as much control as possible in the hands of individual users. And online social networking is a powerful tool for the many who want a service that compiles all the digital stuff shared by family, friends, and colleagues. But so far, social networking has grown in a way that concentrates control over that information — status posts, photos, and even your relationships themselves — with individual companies.

Distributed social networks represent a model that can plausibly return control and choice to the hands of the Internet user. If this seems mundane, consider that informed citizens worldwide are using online social networking tools to share vital information about how to improve their communities and their governments — and that in some places, the consequences if you're discovered to be doing so are arrest, torture, or imprisonment. With more user control, diversity, and innovation, individuals speaking out under oppressive governments could conduct activism on social networking sites while also having a choice of services and providers that may be better equipped to protect their security and anonymity.

The best way for online social networking to become safer, more flexible, and more innovative is to distribute the ability and authority to the world's users and developers, whose various needs and imaginations can do far more than what any single company could achieve.