Recently in Privacy Category

CNN.com had an article today that, while in no way dispensing any new information, is something that could be pretty useful for people who a) are brand new to social networking sites or b) have kids who are on or want to be on one.

"I don't want to have to worry about all the different online scandals and problems," says Brown, an education major at St. Joseph College in Connecticut. She'd like to control her personal information and keep it out of the hands of identity thieves or snooping future employers. "It's just common sense."

It sounds like her info is locked down and airtight. But is it?

Turns out, even the privacy-conscious Sarah Browns of the world freely hand over personal information to perfect strangers. They do so every time they download and install what's known as an "application," one of thousands of mini-programs on a growing number of social networking sites that are designed by third-party developers for anything from games and sports teams to trivia quizzes and virtual gifts.


The rest of the article is here, and if you fall into either of the categories I mentioned, you should totally check it out.

I feel the need, again, to make the point that nothing is free.  Not entirely.  If you want the neat applications and you don't want to pay for them they need to be supported by ads.  The ads are more effective and therefor more profitable if they are targeted based upon assumed interests and patterns of behavior.

So should you be careful?  Sure.  Should you whine and moan because your online activity is being tracked?  No, you should just stay away from sites and applications that do the tracking.
Posted to All | Facebook | Internet | MySpace | Privacy
Reuters has a story about how two major consumer groups want to have a "Do Not Track" list created by the FTC.  The list would let you tell the Web at large not to track your information for advertising purposes.

Two consumer groups asked the Federal Trade Commission on Tuesday to create a "do not track list" that would allow computer users to bar advertisers from collecting information about them.

The Consumer Federation of America and the Consumers Union also urged the FTC to bar collection of health information and other sensitive data by companies that do business on the Internet unless a consumer consents.

The call echoed those of other privacy advocates who filed statements with the FTC on Internet companies' use of "behavioral advertising." That is the practice of tracking a computer user's activities online, including Web searches and sites visited, to target advertisements to the individual consumer.


The main concern, and one we would agree with, is that certain, sensitive information not be tracked.  In fact, Andrew wrote an awesome post back on the 10th about a preemptive strike by members of the National Advertising Initiative.  They came up with a list of categories of information that would not be tracked by their ads.

I understand that people find having their digital purchases tracked.  I posted on it myself last week.

Seeing the article made me angry.  I actually got angry.  The sites that (usually) use the targeted ads (or any ads) are usually free to use.  If they aren't charging you a fee and they don't have ads on the site, how in the hell are they supposed to keep the lights on?  If you can tell me how someone is supposed to operate a service for free without advertising, let me know.  Ok, I know some of you are going to say "I don't mind ads but why do they have to track my activity?"  It's all about effectiveness.  A lot of sites get paid by the number of ads that are clicked.  That's why targeted ads are so popular.

If you don't want an advertising firm to see your information you have options -

1) As I mentioned in my post, DON'T VISIT SITES THAT USE TARGETED ADS!!!  No one is making you go to a website.  If you don't like a site's content do you have to go there?  No.  If you don't like the ads do you have to go there?  Same answer!

2) Clear your cache.  If you don't want your history tracked, how about you clear it out every once in a while?  It's like the goddamned V-Chip.  The tool is there, but because people don't want to learn how to use it they'd rather bitch and moan and have the F_C handle it for them (FCC in the case of V-Chip stuff, FTC if it has to do with our current topic).


It's just so maddening that people can't just grow up and take responsibility for themselves.  I feel like we're wasting tons and tons of time and money for something that people can take care of on their own if they'd take about a minute and a half to think about it.

Ok, sorry for ranting.  I'm going to go read about drunken celebs and see what's going on on the Twitter to try and bring back happy thoughts.

Posted to Advertising | All | FTC | Privacy

So I was looking at the Reuters this morning and saw an article that kind of annoyed me.  Not because of the reporting (top-notch) but because the article highlighted a lack of personal responsibility and a certain sense of entitlement that really bugs me.


Many people are uncomfortable with Web sites customizing content to people's personal profiles, according to a new survey.

"There's a creepy factor and a fear of the unknown that people don't want to deal with," said Michelle Warren, senior research analyst at Info-Tech Research Group in London, Ontario.

"The notion that there's a privacy issue in someone's email account hits a little too close to home for some," she added.

Nearly 60 percent of 2,513 people in the United States questioned in a Harris Interactive poll said they were uneasy when Web sites use information about personal online activity to tailor advertisements or content.

 

In a nutshell, the story related how a lot of people are uncomfortable with websites tracking their activity for the purposes of targeted advertising.  I understand that some people find it creepy, but it's nothing new. 


Posted to All | Internet | Privacy | Technology
In an ideal world, they could only hold your data for six months, according to recommendations of a European Commission advisory board, as noted by the BBC.


Search engines should delete personal data held about their users within six months, a European Commission advisory body on data protection has said.

The recommendation is likely to be accepted by the European Commission and could lead to a clash with search giants like Google, Yahoo and MSN.

Google and Yahoo anonymise user data after 18 months, while MSN does the same after 13 months.

The body said search companies were not clear enough on data protection.

...because they don't have to be. They also aren't clear on how data is aggregated, collected, and packaged for sale either.

Google said its privacy policy "strikes the right balance" between privacy, security and innovation.

Do they mean innovation in search, or innovation in selling ads? 


Peter Fleischer, Google's global privacy counsel, said in a statement: "Google takes privacy incredibly seriously; protecting our users' privacy is at the heart of all our products.

Is that why you index your users' email to provide them keyword-based ads, Mr. Fleischer? You mean security, not privacy. Privacy would mean that your systems don't scan every piece of mail to serve up contextual ads that have to do with the messages they're viewing. Privacy would mean that Google probably couldn't monetize nearly as much as it has. Privacy is the opposite of revenue for an operation like Google.


"It is the reason we were the first company to commit to anonymising our search logs, and also why we dramatically shortened our preference cookie lifetime."

Can we please stop using cookies as the be-all and end-all of privacy? Cookies are benign. You can set a short lifetime, but collect incredible loads of data with it. You can also collect cookies from other sites to see what your users are doing when they aren't on your pages. 

Red herrings all around. Six months should be good enough to satisfy privacy advocates and people who scream about terrorism and child pornography. Compromise works, eh?

The report also says that search engines should allow users to " access, inspect and correct all the personal data about themselves held by search engines, including their profiles and search history. "

I'm a bit confused as to what that means. Wouldn't law enforcement hate it if you could sanitize your search history? But, wouldn't there be a record of the correction? How would the company handle those records? The phrase "chasing ones' tail" comes to mind.

Now, will the U.S. consider a similar law? I wonder who will make the push for it, and how many dollars will be spent to lobby against it. 
Posted to EU | Google | Privacy

We missed something. Too much about the toy, not enough on the game.

I'm reading Alex's post about Western Union's new "send money by prepaid phone" service and I can't help but think there is an invitation for regulatory disaster here.

I've had to send money with Western Union once in 25 years, to a friend who was stuck in Michigan with maxed out credit cards from a ticket and impound lot, who needed cash to fill up his car and drive back east.

When I called Western Union, they asked me a whole bunch of questions to verify who I was. They had my addresses going back five years (even my college dorms) and I had to think back to remember my old home phone number growing up (301-229-9041) and even some details about my parents.

The beauty of prepaid phones, however, is that they offer some level of anonymity by disconnecting the phone number from an identity. This is useful for say, people who are whistleblowers or sources for journalists, or even for plain old privacy-minded people who are willing to pay a premium to not have a name associated with their phone.

Western Union, which discontinued their signature telegram service last year, now makes their money taking a cut of funds that people send using their network. Those remittances that enterprising immigrants send home (which are, incidentally a huge part of the global economy) make up a massive pool of funds. For instance, Ghana's economy recieved $4.5 Billion in remittances from abroad in 2005, a huge chunk of that country's GDP.

In the U.S. many undocumented/illegal immigrants get paid cash. They send this cash home via Western Union. No tax is paid at any point, except perhaps by WU. On the other hand, this is cumbersome because of the paper trail required. Let's go back to me trying to send $150 tp Michigan. They knew everything about me. I'm sure they collect just as much information on Joe Blow trying to send cash, because they've been an easy target for money laundering and other underhanded enterprises. They cover their butts.

Another thing, if sending money is going to be so easy domestically, isn't the Government going to want a cut, or want to watch the sums moving around from phone to phone? I'd like to see the privacy policy associated with this service. Is reloading my phone with minutes going to be as document-heavy as sending money? Will I have to fill out a form, or will I just be able to buy a "card" with cash, no questions asked? Can you see where this is going?

Now, if I buy a prepaid phone from this service, am I going to have to document myself the same way? What if this becomes more widespread? Could this new "feature" spell the end of the disconnection of number and identity?

If so, the prepaid phone market will be all but dead, except to those who have no other choice. What bothers me about it is that right now, I have a choice, and should continue to have a choice whether or not to be anonymous. I'm afraid that in their zeal to open a new market, Western Union could make it an attractive option for the Government to take that choice from me.

I hope not.

Posted to Bad Business Ideas | Mobile Phones | Privacy
DSC_0288.JPG

Brian Knapp is Chief Privacy Officer for loopt, the "mobile social networking" company recently promoted by Sprint-Nextel and Boost Mobile using those adds with people wearing fat suits floating in swimming pools. Knapp describes loopt as "a mashup of google maps and twitter..." (a thousand web 2.0 marketers heads just exploded, but he's pretty spot on, actually).
 
 We took advantage of some downtime here at TPS to talk about his service, why it's cool, semantic games like "tracking" versus "location sharing", and, most importantly, how entreprenerus and innovators with potentially controversial technologies can get out in front of the doomsayers, horror stories and local news anchors. I'm very impressed by "where he's at" on how tech entrepreneurs can deal with Washington. Finally, a company that has the right idea. 

Posted to Congress | Interviews | Privacy | Social Networking | Tech Policy Summit | Telecommunications | Wireless
Another great panel I got to late (since I was at the last one). 

Left to Right (picture to come)

Mozelle Thompson (host)
John Thomaszewski, VP Policy/Compliance, TRUSTe
Shawn Broderick, CEO, TrustPlus
J.R. Reagan, VP and Managing Director, Bearing Point

I walked in as Facebook came up, and the topic was liability for third party use of information you post, including a lawsuit where someone sued for using someone's likeness off of Facebook w/o permission. (Full Disclosure: Thompson is a consultant for Facebook). I'd note that Facebook's TOS lets them use your picture to promote them.

Of course, the discussion led to generational differences in sharing of information, my favorite topic, aka "audit trails." I asked the Panel the question that I've been asking for weeks now, in that whether or not these online "life audit trails" will be a problem and how to deal with them.

Also, who owns the data?

Both Thompson and Thomaszewski (who w/ TRUSTe certifies Facebook's privacy practices) noted that the Terms of Service and Privacy Policies need to gybe, and that a generational shift is needed to get people totally comfortable with as it was put, "more truth, all the time."

Good answers. 

I like Facebook, I like the people. I'm getting more convinced on their earnestness on privacy. I still want to know about Data Portability, but the more I hear about their privacy concepts, the more I trust them. 

There are some good things happening. I may be a skeptic, but they're bringing me around.

Posted to Facebook | Privacy
Yes, that magazine has noticed what I've been pointing out for a while, that your data on Facebook is theirs for the purpose of selling it to third parties, and they don't want you to have it back. 

I've repeatedly contacted them about the "where did the CSV export feature go?" issue and gotten silence, but now even The Economist has noticed that they keep you on the site to keep you looking at the data, and the ads.

The opening of social networks may now accelerate thanks to that older next big thing, web-mail. As a technology, mail has come to seem rather old-fashioned. But Google, Yahoo!, Microsoft and other firms are now discovering that they may already have the ideal infrastructure for social networking in the form of the address books, in-boxes and calendars of their users. "E-mail in the wider sense is the most important social network," says David Ascher, who managesThunderbird, a cutting-edge open-source e-mail application, for the Mozilla Foundation, which also oversees the popular Firefox web browser.

That is because the extended in-box contains invaluable and dynamically updated information about human connections. On Facebook, a social graph notoriously deteriorates after the initial thrill of finding old friends from school wears off. By contrast, an e-mail account has access to the entire address book and can infer information from the frequency and intensity of contact as it occurs. Joe gets e-mails from Jack and Jane, but opens only Jane's; Joe has Jane in his calendar tomorrow, and is instant-messaging with her right now; Joe tagged Jack "work only" in his address book. Perhaps Joe's party photos should be visible to Jane, but not Jack.

This kind of social intelligence can be applied across many services on the open web. Better yet, if there is no pressure to make a business out of it, it can remain intimate and discreet. Facebook has an economic incentive to publish ever more data about its users, says Mr Ascher, whereas Thunderbird, which is an open-source project, can let users minimise what they share. Social networking may end up being everywhere, and yet nowhere.

I'm going to give them another chance to tell me what happened to their "export contacts" feature and just come clean. Then I'm going to start talking about something I'm going to start using in the daily content here. It's a really cool technology.

It's going to let you interact with us in more ways than comments. It does everything Facebook does, but with more privacy and respect for the user. It's really, really cool and I'm a big believer in it. 

Wait.
Posted to Bad Business Ideas | Facebook | Privacy | Social Networking
...went off without a hitch. We talk about managing your reputation online, running for office, etc.


Posted to Privacy | Technology
Interesting note: Estonia has a national ID card which ties into an OpenID provider. Theoretically could be a framework for e-voting in America, and since OpenID is not centralized, you could have an OpenID for your state, local, work, etc identifications. No need for a national ID card for OpenID to allow real-world trust mechanisms to tie into online services.

Also, if no one realized it, Yahoo! already does alot of OpenID.

Pictures will be on the Flickr stream...

Panel:

George Fletcher - AOL OpenID architect
Andy Smith - Google
Simon Willison - Freelance OpenID Evangelist
David Recordon - Six Apart
Artur Bergman - Wikia

More later.

Posted to Privacy | SXSW | SXSWi

Days to DTV transition

Change Congress


Archives

Subscribe in a reader