Myware and Spyware
smooth wombat writes "A new startup aims to provide you with a piece of software that stores all of your sufing habits. Where you go, how long you stay, how many hours online you spend surfing, etc. Why? So you can then offer that information to companies in exchange for something of value. Seth Goldstein's company is in the early testing stages of a service called Root Vaults which right now only works with Firefox. You can choose whether to send this data to your Root Vault, some other service, or just store it on your computer. There are a few restrictions on the use of this data. From the article: 'Any company that uses this data must agree to four basic principles: the data is the property of the user, it can be moved from one service or device to another at will, it can be exchanged for something of value, and the user has the right to know who is using it and how.'"
I recall a company in Texas announcing this in 2003. Don't recall the name though.
is the information of a single person really worth? I don't see how the time and effort would be worth it to install this program and then sell the data.
Something of value? A penny is of value. And they can require you amass 10,000 pennies to cash out your value. This clause prevents nothing.
Besides which... Companies can already obtain this information without the user knowing, why would they pay?
"If you make people think they're thinking, they'll love you; But if you really make them think, they'll hate you." - DM
"it can be exchanged for something of value, and the user has the right to know who is using it and how."
we'll see how this works. i think if they're *buying* the info from you (aka you recieve value for it), i'm not sure how much say you have over what they do with it.
Han shot first.
This is, surprisingly, A Good Thing. Sure it's spyware, but you can CHOOSE to put it on your computer and actually get something back. That is, of course, assuming that it does what it says it does.
fp?
Ride the skies
So make you info available on your own terms. Great idea, but why barter with each individual when you can still buy their info wholesale. Data wholesalers aren't just going to go away, and this still doesn't keep others from tracking you without your permission.
useless sig advice - Read Nabokov.
What is this thing of value? If they offer me something that I really want, I would consider it, on my work machine. No way I would let anyone monitor my home habits however. What could monitoring me at work hurt? All they would see is slashdot and various news sites....
And All I Ask is a Tall Ship And a Star to Steer Her By
And some company that agrees to this (wink, wink) decides to violate those terms. Then what?
I'll keep my browsing to myself. I can see this being part of the default install from the IS department at a corporation near you.
Remembers me those "get paid to surf" adbars... eventually people will find a way to cheat the system to make more money, making the stats useless.
\u262D = \u5350
I can predict a remote exploit in which advertisers and others will use to get your information for free.
This reminds me of the frequent shopping card you can use at the grocery store. I don't have one of those (I actually just use one of my parent's phone numbers for the discounts).
/. but I still click links that interest me -- do you? I've made purchases through /. and told the advertiser it was because of slashdot that I found them and that I support them.
I think I'd be happy to trade my browsing patterns in exchange for something. I already don't mind advertisements on websites that I like (and if they have ads that seem interesting to me, I will always not only click the ads but try to make a purchase if I like the product/price.). I don't mind cookies or any of that stuff. I know it is there, and I don't really care what they do with my "information" as I don't have anything to lose in the lifestyle I live.
I actually support these "invasios of privacy" as they help bring me a better browsing experience when people know what I am looking for and are out there supporting (through AdSense or direct advertising) the content creators I go to every day. I subscribe to
I don't support spyware though, unless I know I can get something out of it. I'd give up all my browsing experience in exchange for a little residual return -- maybe if I knew what ad clicks earned the site, or if I knew that I had an effect on what advertisers would offer me.
My big hope for AdSense this year is that Google goes beyond contextual targetting, but also finds a way for users to "vote" certain ads up and down based on their identity. I don't need to see some ads, but I'll be happy to support advertisers who know what I want and support the sites I visit.
What value is there in my personal data? How important is highly-specific tracking data on one person? The value of marketing data, in my understanding, is in being able to match marketing to potentially profitable demographics. As such, personal data is highly valuable in volume, but I doubt the value of any individual's information. My grocery store is willing to give me a couple bucks in discounts every couple weeks to track my purchasing habits. At a guess, I'd say it would amount to maybe ~$100/yr if I took them up on it.
But that's a long way from actually paying me money. And even if real cash were involved, how many people are going to trust the system enough and go to the effort of proactively doing this for the prospect of an extra $100/yr?
My guess is, not enough people to make the marketing data harvested worth the money or effort. And that's not even considering that companies are more than capable of getting most of this information already at no cost...
But I could be way off base, or missing something.
Reality has a conservative bias: it conserves mass, energy, momentum...
...but you agree to it in exchange for targetted advertising. And the companies who will review your surfing habits may or may not offer you a good deal which seems to be this company's definition of "something of value"
Well, if the price is right, I wouldn't object to using a service like this. Sounds like a good use of the spyware concept.
I kill harmless processes for sport
Have you ever been to a turkish prison?
I'd like a 5th provision to the agreement. The data will not be linked to my identity. I don't mind providing anonymous stats but I want at least a little privacy.
useless sig advice - Read Nabokov.
They're going to have a tough time competing with the vast amounts of data that Google is collecting on everyone and has been collecting for some time.
http://religiousfreaks.com/We all know the web isn't the "click here for free mony [sic]" place pop-ups have led us to believe. In deed putting adverts on your personal website, sending free ipod links, selling spam emails, google referrals, beanz, whatever you don't earn money like this. But anyway, why can't we just make up some data and then send it?
A penny is of value
Except we're all worth a hell of a lot more than that as a prospective, qualified lead. Depending on the product/service being sold, a new lead can go from $25 to several hundred dollars (higher end, more detailed data can go even higher).
I'd expect no less than $50 per vendor, to be split at some level with the information broker. Perhaps 25% to the customer from every lead, though it's getting close to "not worth my time" at $10-$15 per lead and will dillute their data with mostly lower-end leads.
Now if we can somehow work the credit agencies into this mix. They're making billions by selling your information without your permission (oh sure, you agree to release it with each vendor that reports you to the bureaus). Add to that the expense they add when they maintain incorrect information or allow their poorly secured system to be abused by identity thieves.
I bet people set up PC surfbot farms just to get paid until their VC runs out.
sulli
RTFJ.
I really wonder who owns the information being brokered. It leads me to a lot of questions... some not related to this topic specifically though.
One question I ask myself is if I can copyright my personal data. And when I see the information being misused, can I then sue for copyright infringement?
Can you get that in a kit?
"There is more worth loving than we have strength to love." - Brian Jay Stanley
My guess is that personal information on things like browsing habits is pretty cheap. Only in the aggregate (10s of thousands) is it worth anything. I can't imagine anyone paying cash for one particular person's browser history.
Unless, of course, it included passwords and bank account details. I wonder how much I can sell my neighbor's discarded bank statements for?
(:-) for the smiley impaired.)
Help! I'm a slashdot refugee.
A perl script to automatically surf pages on a spare machine and fill this thing up with valid-looking but nonetheless phony data, in 5... 4... 3...
Real Daleks don't climb stairs - they level the building.
It's just like being a Nielsen household, but being able to choose afterwards to participate, instead of having to be selected beforehand.
Your Tivo's know what you watch for a while now.
The biggest concern I have is the potential for unwanted exposure of the data, via worm or "hacker".
500GB of disk, 5TB of transfer, $5.95/mo
www.mercurynews.com/mld/mercurynews/news/13657303. htm
A few stories down is one about George W. wanting Google's search records so he can keep porn away from the kiddies.
Anyone who thinks he is anonymous on the internet is poorly informed.
Anyway, you're right. Google has this totally nailed. Anyone else has an uphill battle.
Market research has little value if the sample size is not large enough. So basically this guy is aggregating a bunch of people...pooling the data which has huge value then splitting the proceeds...great move if he can pull it off but just how many people are willing to hand over private info for a couple of bucks.
Last focus group I attended paid me $100.00 and lunch for an hour of my time and my opinion on politics of the day. I doubt the payout would be anywhere near that in this case.
Why not create the next product in the line up and name it MyHome. They can setup hidden cameras in people's houses which send information and video to companies who wish to pay for it so they can target more ads and find more ways for me to send my hard earned funds on stuff that doesn't matter.
No thanks, Google is already monitoring my browsing habits. I wouldn't want to make them mad.
Have you read my blog lately?
Like maybe a court order?
If you are going to write an article about the value of something, please define EXACTLY what value is.
This article gives no specific examples of what you would receive in exchange for these companies spying on you. All they use are buzzwords like 'something of value' or 'a lower rate or a special deal' which could mean something as lame as 10% off your next purchase.
This fact alone makes me think that it is probably not worth it.
He who knows best knows how little he knows. - Thomas Jefferson
You could use it to track what your child does on the internet. Or a company can use it to see where it's employees are surfing to. There's lots of uses for it.
Click Click Bloody Click PANCAKES!
Name: Mr Joey Joe-Joe Junior Shabidooo
Age: 49
Sex: Female
Address: 1 Main Street
Townsville
Local County
Tele: 0123456789
Hobbies and Interests: Internet dating, puppies and morris dancing.
Now give me my money.
"A new startup aims to provide you with a piece of software that stores all of your sufing habits. Where you go, how long you stay, how many hours online you spend surfing, etc. Why?"
Here's few why:
- So it can gain user's trust, but is in fact glorified spyware
- So police has an easy storage to inspect should RIAA/MPAA decide to sue you for visiting pirate torrent trackers, grokster.com or other such activity (hey, you're not anonymous! they, OMG, they got your IP!!)
- So malware has an easy storage to collect user info for it and send it out, instead of collecting it itself.
I can imagine that my boss installs it on my computer.
Maybe he will find out that I read slashdot too often!
I guess that such as statistics can be more verbose about employee's behavior then some proxy statistics.
Well, I've got to get back to work. When I stop rowing, the slave ship just goes in circles.
Companies are now willing to pay us to look at porn.
Who would want spyware? I spend all of my time killing it on school pcs (not on Macs...). Are companies really that interested in SpySpace, eBay, Amazon, and pr0n? Because that's what people do. Well, for me replace the first three with /., webcomics, and Wikipedia.
I think I saw this on /. somewhere: "Lie, lie, lie / about your age, gender, race / throw a monkey wrench / in their database" Genius.
The 'Net is a waste of time, and that's exactly what's right about it. - William Gibson
Just waiting for the first person to secretly install this "myware" on all his coworkers / servers / friends / family's machines and reap a massive profit.
I was just writing about Attention Trust on my blog last week, if you're interested.
- with-attention-trust/
http://www.whirlycott.com/phil/2006/01/11/playing
phil.
Perfect tools for watching behavior of your emplyees? Isn't it?
;-)
"Hello John, I noticed that you read the slashdot and the window with the slashdot page has a focus about 3hours average every day. You are fired."
Well, I've got to get back to work. When I stop rowing, the slave ship just goes in circles.
Does anybody here remember AllAdvantage.Com? :)
"Everything you know is wrong. (And stupid.)"
Moderation Totals: Wrong=2, Stupid=3, Total=5.
ELOI, ELOI, LAMA SABACHTHANI!?
As a whirling dervish, I've been looking forward to software to keep track of my total number of spins.
The local Albertsons grocery store has the same program. You sign up for one of their "reward cards" and you get discounts off many items. On a typical $200 shopping, I'll save $15. Selling my info is worth it there, why not online?
Sorry, I smoked my last sig
How long will it be before a piece of spyware or a virus comes along that targets this software and steals the data directly from this app?
And just how do you think you are going to know about all of those offers of "something of value"? Imagine all of the marketing firms offering you great discounts on XYZ you have no interest in buying. Unless the offer is hard cash only, this service will equal one huge billboard for you to look at.
Friends don't help friends install M$ junk.
Slashdot should have a capital "S" since it's a name.
So if one were to install this program and any information thereafter was considered my property, would companies not given express permission who gather my data be vulnerable to legal action? I mean, more than just mining my data to sell off to the highest bidder could I take my information, store it on my harddrive/wherever and do nothing with it--with the knowledge that no one else can _legally_ gather information on me, unless I give them permission (ie. Google)?
what you even 'repeat' for a few seconds..
http://news.zdnet.com/2100-9584_22-5154219.html
TiVo said users had watched the skin-baring incident nearly three times more than any other moment during the Super Bowl broadcast, sparking headlines that dramatically publicized the power of the company's longstanding data-gathering practices.
every day http://en.wikipedia.org/wiki/Special:Random
What do you think airmiles is? They get a copy of what you buy and build a profile on you, then market to you accordingly. It's selling your privacy that you bought a family-pack of condoms last time you went to the local store... Expect lots of interesting ads next time around.
...which right now only works with Firefox.
I find this surprising being that Internet Exploder still controls a huge majority of the browser market share. I could understand a non-profit web developer coding to standards first and then hacking for IE, but for a startup company, I'd think you'd want to get the largest amount of users possible straight from the get-go. Just doesn't seem logical.
Just because it can't be explained doesn't mean it isn't true. Science fits into reality... not the other way around.
Yes, this was an obvious troll, but bear with me.
"Open source" only guarantees that you have access to the source, nothing more. Putting spyware in an open source app isn't the smartest idea since anyone could simply take it out and recompile the binary.
Free software will guarantee a bit more than open source. It guarantees several freedoms (of which I won't list here) and possibly in the future protection from DRM.
In short, spyware and open source are not mutually exclusive, but spyware and free software are.
I can't understand how anyone would be comfortable selling this data, but I don't understand how people can sell blood plasma either, so meh.
autopr0n is like, down and stuff.
storing and selling information on your web browsing habits is illegal, right?
So, what's the deal?
- P2P revenge: social benefits originating from illegal downloading.
How about making many of those "features" of the new "spyware" mandatory for all spyware?
Wow, I don't want people to know about my sufing habits. I mean, if I'm sufing, please just leave me the fuck alone. Sufing is my own private right.
Any company that uses this data must agree to four basic principles: the data is the property of the user, it can be moved from one service or device to another at will, it can be exchanged for something of value, and the user has the right to know who is using it and how.
And what's going to prevent companies from violating those principles? DRM?
I wrote Clinko Music to do this a few years ago with itunes & Winamp and actively update it.
Give it a try. It's pretty kool.
This is one more example of why Free Software is about much more than free beer. Free Software systems could never get away with the kinds of abuses Tivo gets away with, and if the program leaders tried, the program would get quickly forked.
I mean, really, if a company wants me to reveal my surfing habits, technically speaking, that's private information I control. If they want it, why do they get to get it for free? I mean, that's "my product", right? Why shouldn't you be able to charge for that information?
Personally, I don't care if some wonky ad-dweller wants my surfing habits, but why should the revenue stream go in one direction only?
Hmmm... (this is the sound of one plan hatching)
depends what you mean by "free software". if you mean software covered by GPL?2, you're wrong. nothing there prevents a program from having DRM or spyware attached (it'd just be removed quickly, by virtue of the benefit of open source, as you noted). stallman is attempting to extend the definition of "open source" via GPL 3 to fit your expectations.
i speak for myself and those who like what i say.
As a demographic group this will prove worthless. The dataset is both too small and too skewered towards the geeky/machocistic-side, to give anything of value to would be advertisers. Then they have to use-and spend money for advertising too! Such data is worth too little, can always be manipulated and gamed and is generally too small to bother about.
How many will volunteer for such a system? I predict the starter bounties will be very high, then the system will be gamed and crash through the floor, taking the company with it.
It's still a fair tradeoff for the grocery store - they get to learn whether running a sale on chicken means they should mark up the prices of barbeque sauce or beer or white wine or tortillas, and they give me my discount at the checkout counter, and if they do try to mail me coupons, I don't get them, but it's no big deal (especially since that's usually for a turkey at Thanksgiving, and they've probably noticed by now that this John Doe never buys meat...)
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
Ya, but how long until companies include things like this
.... "
"... and by clicking "Next," you volunteer all self-collected data on your online habits to Sony Corp.
in thier EULAs?
Perfect tools for watching behavior of your employees, isn't it?
Don't think that your bosses don't already have this.
However, as an employee, you aren't privy to exactly how much they know. Something like this could help an employee to track his own net access and better curb his behavior.
Most businesses though won't allow employees to install such monitoring software or hardware for themselves.
Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
AFAICT, this is basically offering to let you give the company your surfing information so that spammers can stalk you around the web and target you with coupons for Viagra and Wristwatches instead of untargeted ads. The article says they might sell the ads to mortgage companies - but I already own a home, and therefore the mortgage companies *already* spam me with phone calls and snail mail about refinancing because the home ownership is public record, and if I actually *do* want to refinance, I want to go look at a website that has decent rate comparison information, which is the type of place they already advertise, and I also get more real and fake credit card junk mail than I need. If I want consumer electronics or gamer stuff, I'll go to websites about that that already carry appropriate ads.
Google Ads already tracks more information about me than I want, and I need to remember to log off of Google Gmail now that the Google Search pages remind me that they know who I am if I forget.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
You call it, "a family-pack of condoms"?
I think I learned more about your family than I wanted to know.
Having data collected from willing participants rather than believing it was surreptitiously gathered could be a benefit to an advertiser, who might believe they are getting better data.
Since the data is collected by the browser, rather than from a website, it enables more and better data to be collected. In principle, it seems to be like a browser version of a Nielsen meter.
Advertisers and marketers would also be drawn to this model because they are getting information about consumers that is more likely to be useful to them. It's like a direct-mail advertiser getting a list of people who have already bought something by mail.
And the advertisers and marketers would probably prefer to know about that kind of person more than they would about consumers who are more cautious and privacy-minded about their personal data, anyhow.
Disclaimer: I work at Root.
Root Vaults currently uses the Open Source firefox extension from attentiontrust. http://attentiontrust.org/
:wq ~ ~ ~ ~ ~
Take the deal. Download Anchorun, the auto-crawler bot. Leave it running all night. Sell it's results in the morning!
Someone paid attention in Economics class during that lecture about "well defined property rights"!
Information about what I do, collected using my machine, is my property. You pay me for it with something of value.
People aren't pissed that information is being collected, they are pissed that they aren't getting PAID for it!
Need help treating your acne? Come here!
This could also be a way of demonstrating theft of valuable IP when litigating spyware. Would circumenting your browser security to install spyware them also be considered a breach of the DMCA?
Xix.
"Everything is adjustable, provided you have the right tools"
It seems there is an event for this called VAULTSTOCK that is happening tomorrow in New York City hosted by /ROOT Markets. Here's the link if anyone is interested.
http://www.whizspark.com/es/viewevent.aspx?eid=15