News

Aggregated blog posts from the community (including ourselves)

Live Blogging: Privacy Identity Innovation Conference, Seattle WA

We will be live blogging the PII2012 conference for PDEC.

Currently, Natalie Fonseca,  Christine Herron (Intel Capital), Kevin Mahaffey (Lookout), Rob Sherman(Facebook), and Anne Toth (@cleanfreak) are discussing company approaches to privacy.

Rob is talking about how to make privacy a value add for the company. This is interesting given the controversy surrounding the imposition of openness about people’s personal data, and the rapid changes in personal data management, the management of default settings, and the complexity of their management interfaces.  Shows the need for 4th party management of privacy in big services like Facebook.

Rob says that Facebook’s position with respect to plugins on its site is more about educating developers rather than creating a uniform environment for safe use of the site.  Kevin mentioned that many developers don’t care very much about personal data that’s grabbed and they are more interested in revenue than empathy for their users.

This is one branch of a very unattractive tree where digital dossiers are assembled about even friends of friends.  It makes sense that Facebook in the short term will make plugin apps conform to their privacy methods and standards.  In the longer term, the only answer is to enable users to use 4th party services that manage their relationships to sites, plugin apps.  In the really long term, Facebook really doesn’t need to know much information about their users.  They just need to provide relationship management and let the personal data ecosystem players manage personal data and support avenues for monetization.

“Engineers are hoarders,” noted Christine.  There is a duality between the data level needed for product viability and the level needed for the business side of the organization.

Kevin is talking now about the rise of permission management functions like those included in the Android platform.  He says that this is a really cool development.

Heads are nodding about giving users ‘control.’  Methinks this is more of a positioning issue rather than a real acknowledgement of the users personal data being harvested in exchange for control of the data.  FB’s valuation is $130 per user, divide that by a 3-year valuation and that means that personal data is worth just over $40 per user per year, as priced by the market.

 

by Kelly.
Editor, Personal Data Journal
@personaldataj

 

 

 

 

 

 

European Data Retention… Now in Austria

Yesterday, on April 1st 2012, the European Union’s “Directive 2006/24/EC” (also known as the “Data Retention Directive”) entered into force in Austria. Under this directive, telecommunication providers are obliged to store information about phone calls, text messages and Internet communication for a period of 6 to 24 months. This information does not include the actual content, but it includes detailed metadata such as phone numbers, IP addresses, e-mail addresses, time and location.

Proponents argue that in an increasingly connected world, the state’s ability to request access to such data is necessary for law enforcement and the fight against terrorism, and that sufficient safeguards are in place to prevent abuse. However, in the countries that have adopted the directive in the form of national laws, the powers it grants, the storage duration, and also the safeguards vary greatly. For example, depending on the concrete implementation, access to the data may or may not require that an individual is suspected of a severe crime, that a court has explicitly granted permission, and that the targeted individual has to be informed that such access has taken place.

Critics argue that the law establishes a surveillance system which places all citizens under general suspicion, and that therefore the freedom of civil society as a counterbalance to state power is no longer guaranteed. The amount and nature of the collected data is certainly sufficient to create a detailed profile about a person’s private life. In Europe, the last century has seen authoritarian regimes of various extreme ideologies that had founded their power to a large part on the surveillance of their citizens. As a consequence, the sensitivity today to intrusions into the private sphere is high. Besides such political considerations, the potential for commercial abuse also seems extensive, for example, a corrupt employee of an Internet service provider might be tempted to simply sell the highly valuable data.

Sometimes, to illustrate their point, critics draw a comparison with the postal service, where it would seem ridiculous to record the sender, recipient, time and location of every letter. Criticism has also increased in connection with the Anti-Counterfeiting Trade Agreement (ACTA), which is a treaty that among other things targets copyright infringement on the Internet. Also, the actual usefulness of the law for combatting crime is questionable, since there are still many ways of communicating privately.

The introduction of the law has sparked online petitions as well as street protests under the motto “Farewell Privacy” in Vienna and other cities, although they were smaller than anticipated. The Austrian instantiation of the Anonymous collective had announced a counter-surveillance campaign (“Operation Pitdog”), during which it would publish thousands of e-mails related to political corruption, which later however turned out to be a hoax. Several organizations, including the Austrian Green Party and a human rights institute, announced that they would challenge the new law at the Austrian Constitutional Court – a move that had already succeeded in several other countries. For example, courts in the Czech Republic, Germany and Romania have ruled the law to be in violation of peoples’ rights, including the rights to privacy, to confidentiality in communications, and to freedom of speech.

On the European level, there has been much discussion whether the Data Retention Directive is compatible with the union’s treaties, with the Charter of Fundamental Rights, and with traditionally strong data protection policies. Even among policy makers, there seems to be an increasing sense nowadays that the directive is characterized by low effectiveness and potential negative effects, and that it is therefore not proportionate and not in the best interest of society. In 2010, the question of legality of the directive was referred to the European Court of Justice, which is expected to decide on the matter during the course of this year.

The Data Retention Directive is basically Europe’s version of the global question about freedom vs. security on the Internet. In other words, how much control of a state over its citizens’ communication is healthy for a democratic society? This is a political and legal question that is not easily answered. What is certain however is that both the amount and the value of personal data will continue to increase. At PDEC, we believe that an ecosystem around this personal data should on one hand provide the tools and rights for individuals to control their own data, and on the other hand also enable new business models around this asset.

Personal Data Journal #2

This Issue Contains

Feature Article: Understanding OAuth

Book Review: “Big Data and Privacy”

Opinion: “What does a Free Market Look Like”, by Allen  Mitchell

Opinion: “Kids and Personal Data: What you need to know   about COPPA”, by Denise Tayloe.

Publisher’s Note: What’s NSTIC Got to Do with Personal  Data”.

Editorial: “Security and Competing”.

+ Industry News, Upcoming EventsEvents, The Latest on Standards and New Resources. 

What Daily Deal proliferation says about Personal Data Opportunity

http://www.readwriteweb.com/archives/dailydealscom_do_we_really_need_another_daily_deal.php?utm_source=ReadWriteWeb+Newsletters&utm_campaign=2a798b1e2e-RWWDailyNewsletter&utm_medium=email

Resource: Ctrl-Shift Report on Privacy

ctrl-shift-retailers-privacy

Ctrl-Shift is at it again with a new report on privacy from an e-retailer perspective.

The report is free with registration: http://www.ctrl-shift.co.uk/shop/product/60

The data set is for sale: http://www.ctrl-shift.co.uk/shop/product/61

Ctrl-Shift scored the privacy policies of the IMRG Hitwise TopShop list of 100 online retailers against ten key questions including how clearly the privacy policy is written, how easy it is for the customers to express and change their preferences, whether their data is used for marketing purposes and how they treat cookies and behavioral targeting.

This 21 page report covers the following topics:

  • Summary findings and conclusions
  • Introduction: Why research privacy policies?
  • The new data sharing relationship with customers
  • The Results: Overview
  • Survey results: The details
    • How is the privacy statement written?
    • Preference Management
    • Options for receiving electronic communications
    • Data sharing for marketing purposes
    • Providing individuals with access to their data
    • Cookies, pixel tracking and related mechanisms
    • Behavioral targeting
    • Data retention
    • Policy changes
    • The scope of the contract

Information overload is not unique to Digital Age

nprlogo_138x46

It is a constant complaint: We’re choking on information. The flood of data on the Web has reached mind boggling proportions, and it shows no signs of stopping. But wait, says Harvard professor Ann Blair in an NPR radio program — this is not a new condition. It’s been part of the human experience for centuries.

Listen to program (or read transcript)

(via InfoDesign)

It’s too late for Dave Winer and John Battelle to save the common web

The halls of CERN where the Web was invented

The date was January 3, 2008. Facebook had kicked me off for running a script to try to save the common web.

See, I worked with Plaxo to run a simple script. One that would have taken my contacts out of Facebook and put them back into the common web. The script did some very simple things:

1. It grabbed all my friends names.
2. It grabbed all their phone numbers.
3. It grabbed all their email addresses.
4. It gave me a simple CSV file with all that data so I could bring them back to Google, or Microsoft, or anywhere else I wanted to put them.

Facebook’s answer was predictable. They shut me down.

Oh, a few people supported me. Joseph Smarr, for one. Marc Canter, for two. It isn’t lost on me that Joseph now works on the Google+ team and Marc isn’t in the San Francisco area anymore.

They understood what was at stake: the future of the web.

But many others said I deserved to be kicked off of Facebook.

Did I get invited to speak at John Battelle’s conferences about how the common web was screwed? No.

Did Dave Winer lead a SOPA-like protest? No.

Mike Arrington and I had violent disagreements on the Gillmor Gang about my motives.

Heck, these arguments continue to this day. Yesterday Steve Gillmor, again, on yesterday’s Gillmor Gang, said I had broken Facebook’s Terms of Service, which implied that I deserved to get kicked off. I had, but I was trying to save the common web.

The message was loud and clear: Facebook should be allowed to be a data roach motel: data can come in, but damn you Scoble if you want to take that data back out.

The lesson today, four years later, is that the common web is in grave threat, not just from Facebook’s data roach motel but from Apple’s and Amazon’s and, now, Google.

It isn’t lost on me that Joseph Smarr now works at Google and that some of the others who spoke up on my behalf now work at Facebook.

Today their arguments are hitting my ears. Only four years too late. Here, look at their arguments:

Dave Winer says: “Having Google break the contract is not just bad for Google, it’s bad for the web.”

John Battelle says: “The web as we know it is rather like our polar ice caps: under severe, long-term attack by forces of our own creation.”

Now do you get why I really don’t care anymore? The time for a major fight was four years ago.

I understood then what was at stake.

Today? It’s too late. My wife is a great example of why: she’s addicted to Facebook and Zynga and her iPhone apps.

It’s too late to save the common web. It’s why, for the past year, I’ve given up and have put most of my blogging into Google+. I should have been spending that effort on the web commons and on RSS but it’s too late.

Normal users don’t care about the argument anymore and they are addicted to Facebook and Google+ and Twitter and apps on iPhones and Android. Heck, if you are at the Super Bowl tomorrow the official app is on iOS and Android and not other platforms.

The common web isn’t just under attack, it’s been under attack for more than four years.

Why did it take so long for people to wake up?

Me? I really don’t care anymore. I’m locked into Vic Gundotra’s trunk where Google+ has helped me get 400,000 followers since July 1st last year alone. That’s, what, seven months? Did RSS ever do that for me? Did Dave Winer’s systems ever do that for me? Did John Battelle ever put me on stage to help me out? No way.

It’s too late.

I’m not going back to the open web. Why? The juice isn’t there.

So, what would I do now? What’s Dave Winer’s answer? He deleted his Facebook account and is working hard to try to get people to adopt RSS again. Sorry, Dave, but Twitter is a better place to get tech news. Not to mention that the best place to read that list is Flipboard on iOS.

Sorry, will RSS help me get new access to Google’s search engine? No.

Will RSS help me get access to Facebook’s Open Graph, which let Spotify share five billion songs in the first few months of its existence? No.

Will RSS help me get access to your Facebook news feed? No.

Will RSS help me get a better Klout score? No.

Will RSS help me get a speaking slot at O’Reilly’s conferences? No.

Will RSS help me talk with my wife, and her friends, who are all addicted to Facebook? No.

Will RSS let me get my photos onto Instagram? No.

Will RSS help me get my food consumption behaviors onto Foodspotting? No.

So, cry me a river. I’m a user. I tried to stick up for the common web in 2008. Where was the protest then? I was called an “edge case” and someone who should be ignored.

Sorry, Dave and John. It’s too late to put the genie back into the bottle.

See you on Google+.

And next time someone tries to point out that the “data black holes” of these big companies are something that should be fought against maybe you’ll be there with a better protest than what you put up.

It’s too late. Now, excuse me, while I crawl back into the trunk that Google, Facebook, Amazon have locked me in.

It’s interesting to go back and read those comments. Chris Saad is one that has been very consistent for four years. He built a company, Echo, which is still trying to keep our content separate from these big “data black holes.” If anyone deserves credit for trying to keep the web commons alive, it’s him.

What’s the right way to protest TODAY?

1. Don’t delete your Facebook account. Deleting your account just makes you look like a weirdo in today’s world. Dave Winer has that luxury, but most of us don’t.
2. Make ALL data on your Facebook account PUBLIC. Most technologists have done the opposite. To the point where if you aren’t friends with most geeks you can’t even see ANYTHING on their account. That isn’t helping the commons.
3. Work to figure out how to get our data OUT of Facebook, Google+, and Amazon and back into the commons.

Me? I’m just a user and I grew tired of this fight back in 2008. That was the year we could have done something about it. Today? No, sorry, most of this argument doesn’t make any sense to real users. My wife doesn’t care and, even, doesn’t like being in the open web for a whole lot of reasons.

Today? No, don’t put me on stage at conferences. Get regular people, like my wife, who could tell you why they don’t like the open web and, why, even, they are scared of it.

But, no, it makes for beter headlines to try to fight.

John, where were you? At least Dave has been consistently trying to keep us putting content on blogs and on RSS, which ARE the open common web. It’s just that it’s too late. We’re firmly locked back in the trunk and the day for blowing open the trunk has come and gone. Now, excuse me while I check into Foursquare, message my friends about the parties at SXSW on Facebook, find a cool meal to have tonight with my wife on Foodspotting, and go back to posting on Google+.

PHOTO CREDIT: I shot this photo of the hallways of CERN, which is where the web was invented.

UPDATE: already there are more comments on Google+ than are here. On Facebook there’s quite a bit of reaction too. Sort of underscores my point, no?

I’m A New York Times Subscriber, So Where’s My Tote Bag?

new york times

The New York Times released its latest earnings report earlier this week, spurring another round of discussion about the newspaper’s paywall, which was launched near the beginning of last year. The consensus: Early signs are positive, but it’s not doing well enough to offset plummeting print ad revenue.

What’s the solution? Well, if you listen to a number of online media pundits, it’s all about bringing more value to the most devoted members of The Times’ readership. Over at GigaOm, Matthew Ingram suggests, “Regular readers should get more than just a sales rep hitting them up for a monthly payment — the fact that they are a devoted fan should entitle them to earn rewards, whether it’s money off their subscription for interacting with the paper, or offers that others don’t get.” It’s a point he’s made before, as has Clay Shirky, who wrote that “this may be the year where we see how papers figure out how to reward the people most committed to their long-term survival.”

I’m a happy New York Times subscriber, but I have to say: I don’t think The Times is doing a good job on this front, or much of a job at all. It’s odd, because NYTimes.com general manager Denise Warren appeared on NPR’s Talk of the Nation with Shirky, and she seemed largely on-board with his ideas:

I think Clay has outlined it exactly right. I mean, this model was not designed to get everybody who comes to our website to pay. Clay is absolutely right in terms of the distribution of the audience, and I think this is true for most publishers. The vast majority of people come and turn one article or two articles.

But there is a very loyal minority of folks who told us through rounds and rounds of research that they value the New York Times content, they’d be willing to pay to support the New York Times content. And so the key for us in this model was threading that needle – remaining open to the Web, enabling those who are coming to us for that one article or two article, et cetera, to still enjoy the content but at the same time enable those who are very loyal to have some kind of a different experience with us.

Warren goes on to outline some of the advantages of a Times digital subscription — not just access to unlimited articles (20 per month is the limit for non-paying readers, though there are lots of ways around it), but also to the Times smartphone and tablet apps, as well as bonus apps like Politics and Collections, and email newsletters giving behind-the-scenes portraits of the newsroom. Now, as someone who’s constantly reading The Times on both his laptop and his iPhone, I’m happy to fork over $15 a month isn’t a bad price for those features, but I also feel like they’re a missed opportunity.

As Shirky puts it, newspapers “must also appeal to its readers’ non-financial and non-transactional motivations: loyalty, gratitude, dedication to the mission, a sense of identification with the paper, an urge to preserve it as an institution rather than a business.” Those seem to be some of the main reasons people subscribed, but The Times isn’t doing much to encourage that feeling.

The closest it comes is through its newsletters, but those newsletters also have the clearest shortcomings. I’ve been a Times subscriber since the program started in March, and in that time, I’ve received a total nine newsletters. And of those, five are “Innovations” emails, which function as ads for new features on The Times website — useful, maybe, but not particularly loyalty-inspiring. Emails offering “The Story Behind The Story” are better (though a still a little impersonal for my taste), but they show up about once every two months.

Talk of the Nation host Neal Conan makes an interesting comment about this during his interview with Shirky and Warren: He notes that NPR has convinced one in six listeners to donate, while The Times has only convinced one in a hundred to subscribe. He later says, “If you get into the tote bag business, we’re going to have a problem.”

Here’s the thing about those tote bags — they’re nice, but as NPR broadcasters constantly remind listeners, they’re not the real reason to donate. To pick an example from my local NPR station, is there anyone who would pay $144 just because it’s a great deal on a KQED hoodie? (I hope not.) They make the donation because they love KQED, and the hoodie is a sign of their dedication.

Compare that to The Times digital subscription page and pricing model, which are all about functionality — there are three pricing levels, and they reflect different levels of mobile access. That approach has its limitations — from a functional equivalent, it can be hard to justify the price, especially when you take into account the easiness of circumventing the paywall and the low price of other online services. (As a friend pointed out, it’s $15 a month for the cheapest plan, which is more than a basic Netflix subscription.)

To keep The Times in business, however, I’m happy to pay $15 a month, and I’d probably be fine paying significantly more. I don’t think the basic subscription price should change (if anything, it seems a little high), but I suspect the paper could also offer higher price points without providing a dramatic improvement in the product. It just needs rewards that make subscribers feel loyal to The Times, and maybe a little special — the digital equivalent of a tote bag.

 

Is it time to leave Facebook?

Amid plans for a $10bn share offering, the social networking giant has come under fire for its controversial ‘Timeline’ feature. Two Observer writers discuss the merits of logging off for good

James Silver, writer and journalist I could blame it on the launch of Timeline (Facebook’s now mandatory reboot of users’ profile pages) or the forthcoming mega-IPO. Or even claim I was taking some high-minded stance (a social suffragette perhaps?) on how social media gnaws away at our privacy/sense of self-worth/ability to enjoy simple pleasures such as reading a book.

But in the end it was the soul-crushing ennui that led me to deactiviate my Facebook account last week. The sheer bloody listlessness logging on to the site produced in me in those final, dreary visits. “Steve listened to ‘Death of an Interior Decorator’ by Death Cab for Cutie on Spotify for Facebook.” “Bob and Sophia commented on Mark’s photo album University of Loughborough Reunion 04.” Not forgetting that other classic: “Nigel likes Cordelia’s post Me and My Cat Archie Eat a Tuna Flan.”

It’s not that I dislike social media. I know at their best these platforms can help spark the overthrow of despots, raise cash for medical research and share brilliant links. I’m a big fan of Twitter, which has become a primary news source for me. LinkdIn is a bit of an odd duck, but I can see what it’s for. But Facebook? It’s just white noise. A time sink. If you want to tell your life story, as the Timeline tagline has it, then go and write your autobiography. No one would read it. But that’s kind of my point.

Elizabeth Day, Observer writer and author For me, the key to social media is that it’s, well, social. What I value most about Facebook is the ability to keep in touch with friends, wherever in the world they find themselves. Although James is bored by the endless videos of cats eating tuna flan, I actively like being able to see the latest photo of my goddaughter in Hong Kong or having an instant messenging chat about the best way to eat panettone with my friend in Milan (thinly sliced, with a cup of tea is his take).

Perhaps it’s because I have a strange form of phone-phobia. I hate the faux cheerfulness I have to assume when I call someone; the awkward pauses; the way you can never hang up until you’ve put the next social rendezvous firmly in the diary; the anxiety that you might be boring them. The thought of Skyping, where you can actually see someone’s face, is enough to bring me out in a rash. I prefer communicating through Facebook – I like the jokes, the bonhomie and the sense that you’re part of something (especially because, as a writer, I often work from home). And if the whole tuna-flan-feline thing gets too much, the true joy of Facebook is, of course, that you can always log out.

JS Is Facebook really the best platform with which to browse photos of your goddaughter or discuss how to eat Italian fruit bread, Elizabeth? Photo and video messaging on your phone would do just as well for the first (or one of the picture sharing sites) and if you could summon up the nerve to use Skype for video calls, you could even watch each other eat a whole variety of southern European cakes. In real time. Hell, you could even live tweet it.

I take your point that you can always log off, but what about your privacy when you’re logged on? Unless you have a PhD in machine learning, you are unlikely to be able to operate Facebook’s privacy settings, which means a disgruntled ex is just a couple of clicks away from checking out his former girlfriend’s new man, and people who are “friends” – but only in a Facebook sense (ie they met once on holiday in Magaluf in 1997) – have an access-all-areas pass to each other’s Facebook back-story.

But my problem with Facebook is not so much utility as ubiquity. From the IPO filed on Wednesday, we know the platform had 845 million monthly users, and 443 million daily, by the end of 2011. The next target is one billion. In fact, from its filing statement we learn that Mark Zuckerberg has plans for global domination: “There are more than two billion global internet users… we aim to connect with them all.” (Don’t you love that insidious word, “connect”?)

When will they be satisfied? When there are only six people in Africa who haven’t connected with Facebook? When they’ve hardwired the Facebook “like” button into toddlers’ teeth?

ED I know it’s tempting to view Zuckerberg as an evil genius (especially after he wore pyjamas to a board meeting in The Social Network), but I don’t personally feel his goal to “connect” people is all that sinister.

Of course, if you choose to leave your Facebook privacy settings wide open, if you choose to befriend someone you only met once on holiday to Magaluf, and if you then compound the error by posting (or failing to detag) a photograph of yourself in a compromised state with a vodka luge, then there might be certain drawbacks.

But I don’t understand why everyone has got in such a tizz about the Timeline. It only organises the data that is already on your profile. If you want something to remain private then – here’s a handy little tip – don’t put it on the internet. On Facebook – unlike Twitter, which allows anyone to follow you – I am friends only with people I know and like. I have customised my privacy settings (truly not that difficult) so only certain of them can view my posts. Because of this, I find it a brilliant way of sharing photos, keeping in touch with lots of people in a time-effective way and using status updates for shameless self-promotion when I have a book out (Scissors Paper Stone, out now in paperback if you want to buy a copy, James).

JS Actually, I don’t buy into the “Zuckerberg equals evil, cat-caressing genius” theory. I’m merely arguing that Facebook’s plans smack of hubris. Yes, Google, Microsoft and Apple have flourished, but the evidence suggests that social networks come and go, as fashions change. Between 2005 and 2007, MySpace was the dominant player. Bebo, too, showed early promise. Friends Reunited once had 15 million users.

Facebook faces many bumps in the road, not least competition and regulatory issues, particularly over privacy. To those I would add the likelihood of new rivals appearing, seemingly from nowhere. Just a couple of years ago, few of us had heard of (games developer) Zynga or (deals site) Groupon – both titans now. As everything goes social, we can expect new, niche networking sites to emerge.

Leaving Facebook is a bit like quitting a cult: you can leave, but you’re never truly free. Yes, my account is deactivated, but my details, friends, “likes” and even those dreaded status updates are merely mothballed in some underground server farm, waiting for that moment of weakness, where I log on once more… For now my resolve is strong. But you never know when the urge to “like” pictures of household pets eating savoury snacks may strike once again.

ED I’m sure all of this is true (not least the likelihood of James logging back on for those cat videos) but the fact that Facebook might face future challenges doesn’t detract from my enjoyment of the site as a user at the moment. I’m on Twitter as well but for different reasons – as you say, it’s a great way of getting the latest news developments. But Facebook performs a different role. It is more sociable – there is less pressure for constant 140-character updates and less competition over the number of followers/friends you have. Interestingly, whenever I speak to teenagers, they generally tell me they use Facebook but don’t see the point of Twitter, which suggests Zuckerberg and his henchmen will be around for a while yet. So James, if you are ever lured back to the light-blue land of “likes” and Scrabulous, I’ll be the first to request a friendship add.

 

guardian.co.uk © 2012 Guardian News and Media Limited or its affiliated companies. All rights reserved. | Use of this content is subject to our Terms & Conditions | More Feeds

If you like online privacy, you’re probably a terrorist

The FBI and the Department of Justice thinks that if you use anonymizers, portals, or other means to shield IP address, then you could be engaged in or supporting terrorist activity. According to this flier, anyone who uses https is a potential terrorist, including google.

Download (PDF, 268.61KB)

If you think such policies are fine and don’t have anything to hide, then I would like to know your logins to all your online accounts, forums, and bank details, as well as your Social Security Number, and credit card information. I would also like a record of all your online purchases, you know, for “advertising” purposes. Oh you don’t want me to know that? Then maybe you do have something to hide and fliers like these are meant as scaremongering instead.

TwitterRedditShare