"Call us paranoid or prudent -- we're paid to worry about this -- but for 99% of people, the danger doesn't even cross their mind," said Wisniewski.
In an unscientific survey Sophos ran on its website today, nearly 50% agreed that the Facebook Timeline worried them, while about 17% said they liked the idea or would get used to it.
Wisniewski admitted that the poll probably doesn't reflect most Facebook users' opinions. "They're doubly self-selected," he acknowledged, "first for taking the survey and second because they're concerned enough about security to go to our website."
Sign up for CIO Asia eNewsletters.