Slashdot Mirror


Execs at AOL Approved Release of Private Data?

reporter writes "The New York Times has published a report providing further details about the release of private AOL search queries to the public. According to the report: 'Dr. Jensen, who said he had worked closely with Mr. Chowdhury on projects for AOL's search team, also said he had been told that the posting of the data had been approved by all appropriate executives at AOL, including Ms. [Maureen] Govern.' The report also identifies the other two people whom AOL management fired: they are Abdur Chowdhury and his immediate supervisor. Chowdhury is the employee who did the actual public distribution of the private search queries. He, apparently, has retained a lawyer."

156 comments

  1. Poor Data by krell · · Score: 5, Funny

    First they demote him from being a lt. commander. Then they attach him to AOL. Somewhere Lore must be pulling the strings.

    --
    Where were you when the voynix came?
    1. Re:Poor Data by __aaclcg7560 · · Score: 1

      Haven't you heard? Data was killed in the line of duty. This is B4 who's working at AOL.

    2. Re:Poor Data by StikyPad · · Score: 1

      He must've been an LDO... which explains a lot.

  2. retained a lawyer? by Quasar1999 · · Score: 3, Insightful

    At this point, why would you want to stay at your present job if you need a lawyer to keep it... even if you are successful, why would you want to stay, it's obvious you won't be liked by management, since they're trying to get rid of you... Or am I missing something?

    --

    ---
    Programming is like sex... Make one mistake and support it the rest of your life.
    1. Re:retained a lawyer? by krell · · Score: 2, Insightful

      "At this point, why would you want to stay at your present job if you need a lawyer to keep it"

      Ask former President Clinton. Ask Bush after he concludes this term.

      --
      Where were you when the voynix came?
    2. Re:retained a lawyer? by A+beautiful+mind · · Score: 2, Insightful

      I think a fair amount of cash must be playing some role in it.

      --
      It takes a man to suffer ignorance and smile
      Be yourself no matter what they say
    3. Re:retained a lawyer? by mrchaotica · · Score: 5, Insightful

      Perhaps because being fired is a whole lot worse than quitting voluntarily... and more importantly, lets them avoid giving you the severance pay they would otherwise owe.

      Personally, I know that if I were told by my boss to do something and then got fired for doing it, I'd be extremely pissed!

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    4. Re:retained a lawyer? by Silver+Sloth · · Score: 4, Interesting
      What do you want on your CV
      • Sacked for gross incompetence
      • Left after being used as a scapegoat
      The point of most unfair dismissal actions is not the money, it's the CV.
      --
      init 11 - for when you need that edge.
    5. Re:retained a lawyer? by Karma+Farmer · · Score: 3, Funny

      Slashdot: why ignore the article when you can ignore the summary?

    6. Re:retained a lawyer? by Daniel_Staal · · Score: 5, Insightful

      The main point really is that he believes he was fired because he is being blamed for something that is not his fault: He did what he was told, and what he was told was authorized by his bosses and the appropriate people. Blaming the mailclerk for the mail isn't good policy. (He's a little more involved then a mailclerk I assume, but how much I don't know.)

      Then, if he doesn't want to work there, he can quit. There is a huge difference in being able to tell a prospective employeer that you quit because of the culture of blame-passing, and having to tell them you were fired because you released private data to the public.

      --
      'Sensible' is a curse word.
    7. Re:retained a lawyer? by RingDev · · Score: 1

      Getting fired likely means he loses his severence package. Not to mention the black mark on his resume over this. How is it going to look when he goes up for his next interview when he was used as a scape goat for the issue at AT&T. He has to fight, if for no other reason then to maintain his appearance.

      -Rick

      --
      "Most people in the U.S. wouldn't know they live in a tyrannical state if it walked up and grabbed their junk." - MyFirs
    8. Re:retained a lawyer? by tnk1 · · Score: 1

      He doesn't want to work for AOL, I'm sure. He just wants to collect money off them for firing him.

    9. Re:retained a lawyer? by szembek · · Score: 4, Insightful

      Maybe it's not about getting fired. Maybe he's afraid of lawsuits coming his way if he is primarily blamed for authorizing the release of data.

      --
      nothing
    10. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      Of course, with his named plastered up on the New York Times any prospective employer will know that he was involved anyway.

    11. Re:retained a lawyer? by TheGreek · · Score: 4, Insightful
      At this point, why would you want to stay at your present job if you need a lawyer to keep it
      Ask former President Clinton.
      If I'm getting harassed at my current job, not only is it actionable, but chances are I can get another job elsewhere in the same line of work.

      When you're President of the United States, you don't really have any recourse when Congress (a co-equal branch) starts issuing subpoenas, nor are similar jobs readily available.

      Nice bad analogy, though.
    12. Re:retained a lawyer? by Captain+Hook · · Score: 3, Insightful

      Which is where compensation comes in, if there is a reasonable chance he won't be able to work again then AOL should have to pay for ruining the guys career.

      That of course, is assuming that he really is as innocent in all of this as he claims to be.

      --
      These comments are my personal opinions and do not necessarily reflect the opinions of the other voices in my head.
    13. Re:retained a lawyer? by B11 · · Score: 1

      Considering the fact that their trashing his name and hanging this debacle on him, it makes sense to get a lawyer. AOL also fired the "retention agent" over that phone call we all heard. Of course he was doing what he was told to do. Scapegoating lower level peons seems to be modus operandi for AOL.

      --
      insert inflammatory anti-microsoft comment here
    14. Re:retained a lawyer? by diersing · · Score: 1

      At this point, its not about staying. Its about making AOL look bad and improving the severance package. AOL fired him because of the action he took, he'll claim it was a code red and that he was acting in good faith that the proper AOL people approved it and he's the scapegoat. AOL has deep pockets and will work hard to make this whole transgression go away as fast as possible up to and including making paymnets to those that want to keep in the news.

    15. Re:retained a lawyer? by Intron · · Score: 1, Insightful

      The Nuremberg Defense. At some point, people are personally responsible for the things that they do regardless of whether they were following orders.

      At a former job, we got a contract with the Navy to put our computer system on an aircraft carrier. One employee quit rather than work on a system that would be used to help kill people. Although I didn't have any qualms about that particular application, I understood her stand.

      --
      Intron: the portion of DNA which expresses nothing useful.
    16. Re:retained a lawyer? by __aaclcg7560 · · Score: 4, Interesting

      Personally, I know that if I were told by my boss to do something and then got fired for doing it, I'd be extremely pissed!

      That's when documenting your work is important. As a lead tester at Atari a few years ago, I was in situations that I could've been fired for except all my documentation pointed back to management. When a new boss told me to stop doing that, I told him I would not. Then it became a cat-and-mouse game for the next six months as he tried to get me fired without getting himself fired in the process. I eventually left on my own for "personal reasons" and it turned out I was the third person out of a dozen senior testers to leave that year when my boss became the department manager.

    17. Re:retained a lawyer? by Moqui · · Score: 1

      The rep was not "following procedure as AOL told him to". He was fired for being a general jackass on the phone to a customer. Did AOL's service centers have some suspect processes? Most certainly. However, the rep went far and beyond those on the call with Vincent Ferrari.

    18. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      He was fired for being a general jackass on the phone to a customer.

      That is laughable.

    19. Re:retained a lawyer? by clickclickdrone · · Score: 4, Insightful

      >It's the CV
      I know of one senior guy who worked for a well known credit card company. He was brought in to cut costs. On day one all the department heads were brought in one by one. He ignored everyone's plans and spreadsheets and just gave them a slip of paper with 500k, 1 million or whatever written on it and said 'that's your budget'. A few months later he had another 35m to lose and noticed a single dept that cost that. He ordered it shut down and the staff made redundant. Within a few months the company's income was in freefall - he'd sacked their most profitable sales team. He had to go grovelling to the board to explain, rehire as many as he could at inflated salaries and was then fired. You can bet his CV reads 'Worked for xxxxx, achieved 70 million cost cuts'

      --
      I want a list of atrocities done in your name - Recoil
    20. Re:retained a lawyer? by ericspinder · · Score: 1
      The Nuremberg Defense. At some point, people are personally responsible for the things that they do regardless of whether they were following orders.
      So "killing millions on orders from psychopaths" == "releasing personal data on orders from idiots", I'm not buying it.
      --
      The grass is only greener, if you don't take care of your own lawn.
    21. Re:retained a lawyer? by EndlessNameless · · Score: 4, Insightful

      The Nuremberg Defense didn't work at the Nuremberg Trials because the people involved did things that any sane person knows is terribly "wrong" according to just about every existing belief system.

      Of course, don't let that small difference in scale dissuade you from bringing Godwin's Law into effect.

      AOL did not provide any of the information necessary to identify the searchers. So while I disagree with the disclosure, this breach of privacy is on par with other acts of corporate idiocy I've seen, and based on that I would say that there wasn't any basis requiring him to refuse this order. There's no clear and compelling need to disobey an approved transfer of more-or-less anonymous data, unlike a situation where someone is ordered to kill innocent civilians by the truckful.

      Finally, get a sense of proportion. Are you seriously comparing a poor privacy decision with a decision on a life-and-death matter? Tenuously exaggerated examples do not shore up tenuously supported arguments.

      --

      ---
      According to the latest ruleset, this post should be modded as Vorpal Flamebait +5.
    22. Re:retained a lawyer? by ConsumerOfMany · · Score: 1, Funny
      When you're President of the United States, you don't really have any recourse when Congress (a co-equal branch)

      Perhaps someone should tell bush that congress is a coequal branch of government. Even if congress did it themselves, I'm sure there would be a signing statement to the contrary....

    23. Re:retained a lawyer? by Anonymous Coward · · Score: 0
      What do you want on your CV
      So, on your planet, what's on somebody's resume bears any resemblence at all to reality? How interesting. It doesn't work that way here on Earth.
    24. Re:retained a lawyer? by TheGreek · · Score: 3, Insightful
      Perhaps someone should tell bush that congress is a coequal branch of government.
      It might be more effective for somebody to tell Congress that Congress is a co-equal branch.

      Each branch only has as much power as it chooses to exercise.
    25. Re:retained a lawyer? by B11 · · Score: 1

      I've worked in sales, if you're "hitting the numbers," not only are they going to turn a blind eye to aggressive tactics, but you'll be praised and be set as an example to fellow employees. Maybe (big maybe, I doubt it was on the radar until it hit the internet) corporate AOL had a problem with it, but I highly doubt the supervisiors in the trenches saw it as going "too far."

      --
      insert inflammatory anti-microsoft comment here
    26. Re:retained a lawyer? by poot_rootbeer · · Score: 1

      What do you want on your CV
              * Sacked for gross incompetence
              * Left after being used as a scapegoat


      They're both equally effective at preventing you from getting hired anywhere else. The new HR director isn't going to give a sympathetic ear to your tale of scapegoatism, he or she is probably going to assume that you actually deserved the blame you got, and your story is nothing more than a save-face gesture.

    27. Re:retained a lawyer? by poot_rootbeer · · Score: 1

      He did what he was told, and what he was told was authorized by his bosses and the appropriate people.

      I recall similar defenses were raised at Nuremberg, and didn't go over very well.

      Blaming the mailclerk for the mail isn't good policy.

      Maybe not, but I guarantee you that every day there are dozens of mailclerks, helpdesk technicians, and professionals of all stripes who are fired for things for which they do not actually deserve any of the blame.

    28. Re:retained a lawyer? by omeomi · · Score: 1

      At this point, why would you want to stay at your present job if you need a lawyer to keep it...

      Wrongful termination is definitely worth going to court over. If he was working under the direct orders of top executives at AOL, he didn't do anything wrong. Had he refused to post the info, he probably would have been fired. I'm okay with the execs being fired, but he's just a guy that did what he was told.

    29. Re:retained a lawyer? by omeomi · · Score: 2, Funny

      At a former job, we got a contract with the Navy to put our computer system on an aircraft carrier. One employee quit rather than work on a system that would be used to help kill people. Although I didn't have any qualms about that particular application, I understood her stand.

      The Clerks argument! My favorite! Was it okay to blow up the Death Star the second time, while it was being repaired? Do you think the average storm trooper knows how to install a toilet main? ;-)

    30. Re:retained a lawyer? by TFGeditor · · Score: 4, Informative

      "AOL did not provide any of the information necessary to identify the searchers."

      Oh, really? A couple of NY Times reporters didn't let that stop them. They used the search data to find and interview User No. 4417749, Thelma Arnold, a 62-year-old widow who lives in Lilburn, Ga. Link to story below. Bugmenot login works.

      http://www.nytimes.com/2006/08/09/technology/09aol .html?ex=1156392000&en=4908a895fec7a6a7&ei=5070

      --
      Ignorance is curable, stupid is forever.
    31. Re:retained a lawyer? by Silver+Sloth · · Score: 1
      A friend of mine was sacked for not getting on with his supervisor. The excuse used was Internet pr0n. When he finally won his unfair dismissal action the most important part of the settlement was not the money but the written, legally binding agreement that
      • He was deemed to have left voluntarily
      • No negative references
      I wouldn't want to job hunt after being misused in that way, but far better to be job hunting as a winner, not a loser.
      --
      init 11 - for when you need that edge.
    32. Re:retained a lawyer? by owlnation · · Score: 1

      In some cases yes, that's true. However, having an unfair dismissal case on your CV isn't going to make you look like a fun addition to a corporate team. Rightly or wrongly (actually only wrongly) it makes you look like a trouble maker - even if you were only rightly defending yourself and were supported by the court.

      This, of course, sucks...

    33. Re:retained a lawyer? by pclminion · · Score: 1

      That of course, is assuming that he really is as innocent in all of this as he claims to be.

      I think "naive" is a better word in this case. Of all people, I'd expect a data mining academic to understand the potential ramifications of releasing search data. Maybe this guy's head was so far in the clouds above the ivory tower that it just didn't occur to him, but I somehow doubt it. More likely, the idea of getting a publication out was too attractive to worry about petty ethical considerations.

    34. Re:retained a lawyer? by hauntingthunder · · Score: 1

      Well I would imagine that various layers crawled out of woodwork and aprached him And if you'd been argably screwed by you employer - Id want a lawyer and I bet id get a better class of lawyer ;-) Its interesting if he folowed the rules and got aproval AOL might be in trouble in the courts

      --
      You will never get to heaven with an Ak 47... But A Zu 30 is good for Low Flying Cherubim
    35. Re:retained a lawyer? by Daniel_Staal · · Score: 1

      The flaws in the Nuremburg defense are if the person executing the order can reasonably be sure the order itself is illegal or immoral. It is not always a bad defense. If they have no reason to believe there was not a good reason to obey the order or instruction, the blame for the action should be given to those who issued the order.

      "I was just following orders" is an attempt to pass the blame. Sometimes the blame legitmately needs to be passed to those responsible, and sometimes it doesn't. Ignoring the attempt offhand does not help justice.

      --
      'Sensible' is a curse word.
    36. Re:retained a lawyer? by SatanicPuppy · · Score: 1

      On the one side, I can see making the argument, "Hey, I only did what my boss told me to do" and he may even be able to win in court with that argument.

      However, I think that a technical person should have damn well known better than to do something like that, and I think that if such an individual was working under me, I very well might can him right along with his boss just for making a seriously poor judgement call.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    37. Re:retained a lawyer? by Morrigu · · Score: 1

      Eh? Whatzat? Speak up louder, I can't hear ye.

      Whatzhe goin on all 'bout, I dunno.

      --
      "We can categorically state that we have not released man-eating badgers into the area." - Major Mike Shearer, UK
    38. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      Ha-ha!

    39. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      Having a karma-envy fit, are we?

      Idiot.

    40. Re:retained a lawyer? by doesnothingwell · · Score: 1
      Then it became a cat-and-mouse game for the next six months as he tried to get me fired without getting himself fired in the process.

      The Boss/Executive documention rule "The higher up you are, the less you document anything".

      --
      They can have my command prompt when they pry it from my cold dead fingers.
    41. Re:retained a lawyer? by MaerD · · Score: 1

      To play devil's advocate and look at it from his perspective: He released the search results "in the course of doing his job", apparently cleared it with the executives, followed proper procedure, etc, etc. and now has his name associated with the PR disaster and was fired publically for it. In his eyes, he has done nothing wrong, and if anything it should be the execs that approved it who get the boot, not him. Instead, they use him a convient scapegoat. Not to mention, it could be possible that someone decides to sue over the release of thier information, and name him in the suit. (ya know, the classic "name everyone and let a judge sort it out" type of lawsuit)

      If anything he's probably suing for severance, including back-pay until he either finds another job or the whole thing is concluded. I'm not a lawyer, so I don't know which he could go for. I highly doubt it's to simply "keep his job", due to the obviously hostile enviroment should he attempt to return.

      --
      I put on my robe and wizard hat..
    42. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      "everyone already knows about the case you are pointing to. it is old news here."

      what a dumbshit you are. what makes you think everybody knows about it. go suck a GNAA members crotch.

    43. Re:retained a lawyer? by SpaceLifeForm · · Score: 1
      Well, the Judicial Branch just did tell Congress via US District Judge Anna Diggs Taylor, but I doubt they are paying attention.

      Of course, now US District Judge Anna Diggs Taylor is being attacked, being accused of failing to recuse herself in spite of a conflict of interest .

      --
      You are being MICROattacked, from various angles, in a SOFT manner.
    44. Re:retained a lawyer? by TheGreek · · Score: 1
      Well, the Judicial Branch just did tell Congress via US District Judge Anna Diggs Taylor, but I doubt they are paying attention.
      The US District Court exists because Congress says it does. It isn't until the Supreme Court of the United States says something (or declines to say something) that The Judiciary Has Spoken*. Accordingly, Congress can feel free to disregard a poorly-written decision that depends heavily on cherry-picked case law.

      Of course, now US District Judge Anna Diggs Taylor is being attacked, being accused of failing to recuse herself in spite of a conflict of interest.
      And rightly so.

      You'd probably attack Justice Scalia of the same thing.

      * "Well, John Marshall has made his decision; now let him enforce it." -- Andrew Jackson
    45. Re:retained a lawyer? by TheSkyIsPurple · · Score: 1

      How is that informative in the context of the gp poster? It is pretty obvious that AOL thought they had anonymized the data. They took out the users' names. The fact that they didn't put due diligence into making sure that the searches included couldn't be used to eventually identify the people involved doesn't mean they didn't do anything at all. Had they released the info with user names, then the Neuremberg "just following orders" thing holds a bit more water. But given how it actually played out, Neuremberg would have had to involve orders to do something that could have eventually gotten a few of the Jews killed as opposed to actually ordering mass killing.

    46. Re:retained a lawyer? by schtum · · Score: 1

      I haven't heard of this conflict of interest. Is it that she's an American citizen and therefore subject to the warrantless wiretapping that she ruled illegal? Or is it that she's a terrist luvin librul and therefore shouldn't be ruling on matters possibly related to terrorism?

      Sorry, I couldn't resist formatting the question as a troll, but I really am curious as to what the alleged conflict is.

    47. Re:retained a lawyer? by Fulcrum+of+Evil · · Score: 2, Insightful

      I recall similar defenses were raised at Nuremberg, and didn't go over very well.

      Shut the fuck up about Nuremburg! Releasing anonymized search data is not the same as shovelling people into ovens!

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    48. Re:retained a lawyer? by TheGreek · · Score: 1
      but I really am curious as to what the alleged conflict is.
      Perhaps you should have read the parent of the post to which you replied before replying, hmm?

      Now be a good little boy and go play with your toys and let us grownups have our conversation, okay?
    49. Re:retained a lawyer? by TFGeditor · · Score: 1

      My point is that "AOL did not provide any of the information necessary to identify the searchers" is obviously not correct. Clearly the search data itself was sufficient information whereby to identify and locate at least some users.

      I often Google search my own name (to look for [gasp] copyright infringement or plagiarism). Were I an AOL user whose data got released, I would certainly have been easily identified.

      --
      Ignorance is curable, stupid is forever.
    50. Re:retained a lawyer? by pilgrim23 · · Score: 1

      The Lawyer may have little to do with his feelings about AOL and the job. Ever stopped to think that some ambulance chaser is right now tracking down identifiable AOL searchers to mount a class action on this? All responsible individulas would be targets, along with AOL (regardless of current employment status) of such a suit.

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    51. Re:retained a lawyer? by whoever57 · · Score: 1
      The point of most unfair dismissal actions is not the money, it's the CV.
      It seems to me that most potential employers don't actually ask why I left my previous jobs. Some do, but it is by no means universal. OTOH, do you really want to be known as a litigious person who sued a former employer?
      --
      The real "Libtards" are the Libertarians!
    52. Re:retained a lawyer? by schtum · · Score: 1

      Oh wow, that's awful. A judge with ties to an organization dedicated to civil liberties. No wonder you're so pissed off.

    53. Re:retained a lawyer? by TheGreek · · Score: 1
      Oh wow, that's awful. A judge with ties to an organization dedicated to civil liberties. No wonder you're so pissed off.
      You forgot to mention that her organization donated money to a litigant in a case she decided.

      I guess that's only improper when it involves people and organizations with whom you disagree, right?
    54. Re:retained a lawyer? by schtum · · Score: 1

      You're right, this has happened on the other side of the political aisle. The allegations are always dismissed with the defense that it doesn't matter, as long as the judges uphold the law in their decisions. I don't think anyone has made the case that her decision was legally unfounded, so you'll forgive me if I'm unimpressed with attempts to get it overturned on a technicality. And yes, after 12 years of scorched-earth politics from the right, I'll take these small victories however we can get them.

    55. Re:retained a lawyer? by sumdumass · · Score: 1
      I don't think anyone has made the case that her decision was legally unfounded, so you'll forgive me if I'm unimpressed with attempts to get it overturned on a technicality
      It is almost impossible to counter the legality of her decisions becasue she didn't write one. She basicly said this is wrong, i'm finding for this side. case over.

      There is no legal basis mentioned for the decision, no other case laws cited in the decision, nothing even indecating why it was wrong or what laws it specificly violated. Just some rambling about free press and the first amendment. Get a good, well writen decisions and maybe there might be some substance in there that could either hold the decision or let it be challenged.

      I can see why peole would make the jump from judge with no substinant writen sumery explaining the reasons for the decisions, to mouth piece for some group she belongs to that actualy funded one side of the case who actualy won without the normal explainations. I see this as an big set back for the left. It means that It will be overturned and then either just drain money as it draggs on, or cause any other judge looking at the case to heavily favor the governments position.
    56. Re:retained a lawyer? by Anonymous Coward · · Score: 0

      She owned up to the searches when they asked. She denies making those searches, and the journalists have nothing to do but turn around and get back in their cars.

      This is more a case of social engineering than a breach of privacy... unless they got her SSN or bank account #... those can be definitively traced back to their owners... her admission dissolved her privacy more than Aol's info did.

    57. Re:retained a lawyer? by TFGeditor · · Score: 1

      "...her admission dissolved her privacy more than Aol's info did."

      Having reporters show up at your door--even if they do not know your name--and start asking questions is PRIVACY? Perhaps on your planet, but not on this one.

      --
      Ignorance is curable, stupid is forever.
    58. Re:retained a lawyer? by eam · · Score: 1

      She didn't support Bush's wiretapping,
        therefore she is supporting the terrorists,
          therefore she is a possible target of the wiretapping,
            therefore she had a conflict of interest.

      It's the Newthink.

  3. Possible Solution by Anonymous Coward · · Score: 0
    Mr. Bankston suggested that this was the kind of response that he and other privacy advocates feared. "This is not just AOL's problem," he said. "This is an industrywide problem that needs industrywide solutions."
    Here's a potential solution to your "industrywide problem": Stop treating us (your users) as nothing more than a market. We're individual human beings. Right now, we just look like sacks of money to you and your "research" consists of trying to extract that money from us.
    1. Re:Possible Solution by CDMA_Demo · · Score: 3, Funny
      Here's a potential solution to your "industrywide problem": Stop treating us (your users) as nothing more than a market. We're individual human beings. Right now, we just look like sacks of money to you and your "research" consists of trying to extract that money from us.
      I agree, users are people too. To prove your point, here is a gem: http://www.somethingawful.com/index.php?a=4016
    2. Re:Possible Solution by Anonymous Coward · · Score: 0

      Users are not even a market, they're a commodity. And, by the way, they should be called "customers", because it's not like they really "use" anything, they can only do the stuff they're allowed to.

    3. Re:Possible Solution by tnk1 · · Score: 2, Insightful
      Mr. Bankston suggested that this was the kind of response that he and other privacy advocates feared. "This is not just AOL's problem," he said. "This is an industrywide problem that needs industrywide solutions."

      Not even close to that simple. AOL didn't stand to make any money off this situation. The data was provided entirely "altruistically" for the benefit of researchers.

      And what are these researchers "researching"? They are studying how to make searches more relevant, among other things.

      Will more relevant searching make a buck for someone? Well, it's done wonders for Google, but the release of this data isn't making that research an AOL property. And we love Google because it gives us what we want to see up front, without digging for it.

      In the end, the release of this data is a good thing, but the implementation of the release failed badly. Nevertheless, we *want* this data to get out, we just don't want it to get out in any way that can tag individuals.

    4. Re:Possible Solution by trevor-ds · · Score: 5, Insightful

      That's a bit cynical, don't you think?

      If they really wanted to make the most money possible, they would have sold these logs (non-anonymized) to the scores of direct marketers that I'm sure would love to have this data. Instead, they packaged it up and tried to make it available to academic researchers. These researchers honestly just want to make better search engines that run faster and return better results. Furthermore, when academics come up with a great new idea, it gets published so that anyone can read it.

      Every once in a while, someone suggests an open source search engine. Check out Nutch if you want to see work in this area. However, if open source search solutions are going to be any good at all, they'll have to rely on the decades of public, published information retrieval research that's already out there.

      We are entering a time when companies are capable of totally outpacing academia because they have query log data, so they know exactly what users actually do. There is no way that an academic can get this kind of data unless a company releases it. Researchers at AOL, in good faith, tried to release data so researchers could have a chance at success. Ultimately, of course, that's good for AOL since they're not in the top three search engines out there. Public research can only help raise AOL's standing by helping to level the playing field. But, it's good for you too, because you can build your open source solution based on this research too.

      Yes, the release was botched, and yes, the long term user identifiers were a mistake. But don't make AOL out to be some evil company that was only out to destroy your privacy. They made a mistake!

    5. Re:Possible Solution by pclminion · · Score: 1

      Here's a potential solution to your "industrywide problem": Stop treating us (your users) as nothing more than a market. We're individual human beings. Right now, we just look like sacks of money to you and your "research" consists of trying to extract that money from us.

      If you want to be treated as a person, then limit your interactions to other people, not corporations. What the hell do you expect from a FACELESS ENTITY?

      Why are people continually shocked at the behavior of corporations (which are entities conceived for the sole purpose of MAKING PROFIT)? Does it suck? Yeah, it sucks. Does bitching about it make any more sense than complaining about the lack of whiskers on a lizard? Nope.

    6. Re:Possible Solution by joebob2000 · · Score: 1

      If they really wanted to make the most money possible, they would have sold these logs (non-anonymized) to the scores of direct marketers that I'm sure would love to have this data.

      No.

      1. Why would they want to sell the whole cow instead of just selling milk? The less info sold, the more likely that telemarketers will keep coming back for more. Actual names are super valuable, so you don't sell those right away, you exhaust your first level of sales and then resell with more info.

      2. Protection. If they attach names, customers might get angrier, and/or could find out who leaked the info. This whole business is untested in the courts so no corporation is going to want to be the test case.

      Your theory on AOL's intentions seems pretty far-fetched and naive to me. But whatever their intent was, what they really did was advertise their goods to a lot of telemarketers who may soon become customers of AOL or of other engines.

      If your SPAM mail starts to eerily echo your search queries, do not be surprised.

    7. Re:Possible Solution by trevor-ds · · Score: 1

      Your theory on AOL's intentions seems pretty far-fetched and naive to me.

      Well, if their intentions were otherwise, they certainly covered their tracks well:

      • The data was released one week before the world's most prestigious information retrieval conference (SIGIR), and was announced directly to researchers
      • AOL had a booth set up at the SIGIR conference, presumably to talk to researchers about this data release. Of course, the booth was vacant most of the time, since by the time the conference started the data was gone.

      Given that their response after the public outcry hasn't been a textbook case study in crisis management, I'd be surprised if these actions were just some kind of smokescreen.

  4. Have I been misinformed? by Anonymous Coward · · Score: 0

    I thought they were all proud about releasing the data, at first anyway. I seem to recall reading the odd story that spun it that way. Maybe it was just conjecture (journalists are often self-aggrandizing idiots) but it showed up in more than one article, IIRC.

    Now they're firing people over it. Isn't that a bit stupid? These people would have been fired on 0-day if they'd been taking liberties to do it.

    1. Re:Have I been misinformed? by LnxAddct · · Score: 0, Redundant

      I believe AOL was very pleased at first. This was AOL thinking they were looking cool and hip and gaining "cred" with the tech community. And then the tech community flipped them off and pointed out the significant issues with releasing the data.
      Regards,
      Steve

  5. Obviously by Anonymous Coward · · Score: 4, Interesting

    Almost everything a company does, especially publicly has to have multiple stamps of approval. Can't even order a pencil without paperwork. Right now AOL is headhunting for scapegoats to sacrifice to appease the masses. This had to have nearly everybody OKing it, if it was a mistake it would have gotten yanked back a LOT faster and legal actions would be pending, they aren't threatening anybody yet because they probably don't want their own records being pulled out and becoming massivly liable.

    Not at all sure about why they thought it was a good idea, they must have thought the ID numbers were sufficient to conceal identities which also shows the lack of security knowledge most executives have.

    1. Re:Obviously by Anonymous Coward · · Score: 0

      Maybe those who OKed it know what aggregate data is, and those who generated it do not. I've heard so many people refer to this as agregate data that I want to vomit, or "politely" ask how and what it was agregated from.

    2. Re:Obviously by MindStalker · · Score: 1

      well see, they aggregated all the people who searched for X and Y and Z and added them together and assigned that a number. So what if the aggregate generally turned out to be 1 case.

      Yes I've seen MANY people aggregate too many variables or extremly unique variables then act surprised that it didn't really aggregate.

  6. Naturally by Anonymous Coward · · Score: 0

    Future careers at the DOJ will more than compensate for their troubles.

  7. Personal Matters by kurrik · · Score: 5, Funny
    "An AOL researcher who put the queries online and a manager overseeing the project were dismissed, according to an AOL employee who did not want to be identified because the company does not comment publicly on personnel matters."
    Yeah, wouldn't want anyone's privacy to be compromised??
  8. You've got... by coolhaus · · Score: 1

    ...a subpoena!

  9. Mr. Chowdhury is a comedic GENIUS! by Jakhel · · Score: 5, Funny
    1. Re:Mr. Chowdhury is a comedic GENIUS! by Anonymous Coward · · Score: 0

      Yeah, I downloaded the data. I imported it to MySql. I ran some select queries on various keywords. All I can say is that I really, REALLY hope that AOL users really are the bottom 5% of internet users in the gene pool department that us slashdotters like to make jokes about. Because if this is a truly random sample of humanity we are in a lot of trouble...

  10. Who the hell cares? by Otter · · Score: 0
    I haven't followed this story so correct me if I'm wrong but -- the "private data" here were just search terms with no user identification, right? Just like the data that Google so bravely refused to give the US government right before they announced their deal with China?

    If that's the case, who the hell cares? Admittedly, I'm not a big tinfoil hat-ist anyway, but even if I were this would rate way low on my list of concerns, below the hundreds of ways personally identifiable data about me is being shared.

    1. Re:Who the hell cares? by 99BottlesOfBeerInMyF · · Score: 0, Troll

      I haven't followed this story so correct me if I'm wrong but -- the "private data" here were just search terms with no user identification, right?

      It was a bit more than just search, it was complete records of internet usage from the ISP.

      If that's the case, who the hell cares?

      In many cases it is simple to piece together who a user is from these records and some of the data mining potential is more than a little invasive. This is stuff like someone who routinely edits a myspace page with personally identifying information on it and the online stores and Websites they've visited. Gee someone edits John Smith's page and they have been looking at resources for dealing with HIV. Well they won't be winning the local county seat election now will they?

    2. Re:Who the hell cares? by db32 · · Score: 1

      Except that some reporters used it to personally identify a 60yr old woman in flordia IIRC. They had her verify that those indeed were her searches and she explained what they were about. So...the concern here is that you CAN be identified by your searches without "personally identifiable information". Now tack that on to "how to murder wife" searches and "how to build bomb" searches and "child pornography" searches, hand it over to the government, and now there is a bit of an issue. You get arrested because a string of child porn searches came from your computer...you should have told your 17yr old daughter to do her english final on child pornography. I think we have established a nice trend of arrest first think...maybe later. God forbid you were searching for anything that could possibly be terrorist related...islam, bombs etc...looks like your thriller novel will never hit the shelves because you have been 'detained for questioning'.

      --
      The only change I can believe in is what I find in my couch cushions.
    3. Re:Who the hell cares? by Anonymous Coward · · Score: 0

      Yes, the user names were replaced with unique numbers. However, it is possible to figure out who made the searches. I don't use AOL, but i have Googled for my real name and my Slashdot ID, just to see what comes up. I've used Google Maps to plot directions from my house to various other locations (in retrospect, putting my real address into Google Maps wasn't a good idea). Anyway, these searches, combined with my other searches could reveal a lot about me.

    4. Re:Who the hell cares? by SydShamino · · Score: 4, Interesting

      >>> so correct me if I'm wrong

      You're wrong.

      The IP address or user name of the person who searched has been removed, but it was replaced with a unique identifier that tracked all of the searches by the same person.

      Many people search for things related to themselves. For example, if you have looked for a job in the last four years, you were foolish if you didn't search for your own name to see if your friends' blogs had descriptions of your late-night drinking binges and drug use. (You are probably foolish if you used AOL search to do this, but that's a different discussion.)

      CNN ran a story where they were able to track down one older lady, just because she searched for her last name, searched for "drugstores near " or somesuch, and was the only person in her area with that name. They confirmed with her that the searches were hers. (She has a dog with problems urinating on her carpet, and she has friends with lots of diseases that she "researches" for them.) They picked someone to track down who hadn't searched for anything "naughty", but that doesn't mean they couldn't have if they had wanted to.

      --
      It doesn't hurt to be nice.
    5. Re:Who the hell cares? by pHZero · · Score: 2, Insightful

      The search terms were not linked to any specific person, however, each search term was linked to a user ID. So you can compile a list of all searches a specific person did.

      Partner this up with the fact the some people may search for the name, credit card number, and social security number to see if they're posted anywhere, you have some serious privacy concerns.

      Take for example, (and I'm making this up), user #5, these are his search terms:

      Joe Schmo
      014-56-1234
      4729-1234-5678-9012
      Pizza stores near 1 main street, oakland, CA

      Would you want this released to the public? What if some more of his search terms were:

      How to divorce your wife
      divorce lawyers
      dating websites
      how to cheat on your wife
      russian brides

      Ok, granted maybe you don't agree with what he's doing here, but is it right for this to be public??

    6. Re:Who the hell cares? by merlin_jim · · Score: 1

      It was a bit more than just search, it was complete records of internet usage from the ISP.

      No it wasn't, it was strictly search terms and if they clicked on a link, what link they clicked on - that's it

      --
      I am disrespectful to dirt! Can you see that I am serious?!
    7. Re:Who the hell cares? by grylnsmn · · Score: 1

      But the important question is, is it AOL's responsibility for what users decide to search for?

      How is AOL supposed to know if a subset of data includes privacy data? A 9-digit number could be a SSN, but it could also be a phone number (not all countries use 10 or 7 digits), an ISBN (minus the check digit), or any number of other numbers. A 16-digit number (or 15 digits) isn't necessarily a credit card number. Just because someone puts an address into a search engine doesn't mean that it's their own address.

      Don't the users have some responsibility for their own private data?

      But then, I'll probably be modded down (like what happened in the last discussion) for not being slashdotically correct, or something.

    8. Re:Who the hell cares? by MindStalker · · Score: 2, Interesting

      People generally feel comfortable with the notion that their search queries are private. Sure they may not be private, but they feel private. Sure your phone conversations arn't completly private, but the phone comapny can't just dump your conversations onto the public.

    9. Re:Who the hell cares? by Qzukk · · Score: 1

      Don't the users have some responsibility for their own private data?

      How? By never giving it to anyone? Never getting a loan, insurance, or a magazine subscription? Always working for cash under the table and never filing taxes? Any one of those things releases your address, phone number, billing information, etc. out of your control. At some point you have to say the data has changed hands and so has the responsibility to protect it.

      Sure it was dumb (was it really dumb at the time though, or are we only saying this in hindsight, knowing now that the data would be given to whoever wanted it? Being able to find things near me is quite useful, I'd hate to always dine two cities over just to "throw off the trail") to have put in your own ssn or home address into the search engine, but saying that it's the users' fault that the data got released is like saying that it's my fault if someone breaks into my house and shoots me in the face with my own gun, just because I kept it loaded. Philosophers have debated the nature of "fault" for millenia, leading to concepts such as "attractive nuisance", however generally speaking blame is assigned to the person who committed the act, and only slightly shared with people who set up the environment for the act to occur.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
    10. Re:Who the hell cares? by geobeck · · Score: 1

      You are probably foolish if you used AOL search...

      Maybe we should just leave it at that.

      --
      Find environmentally and socially responsible products on http://buy-right.net
    11. Re:Who the hell cares? by grylnsmn · · Score: 1

      I didn't say it was the user's fault, I asked whether they have some responsibility or not. That is a big difference.

      In situations like this, there's usually more than enough blame to spread around. Sure, it's easy to just say that AOL was completely in the wrong and should have to pay for it, but that doesn't reflect the whole truth, does it?

      Think of it this way, there are quite a few people who would never think of putting their own personal information into a search engine (I didn't, until this incident happened, and I still wouldn't put my credit card or SSN into any search engine). Yes, I've searched for my name, but I've found about a dozen others around the world with my same name (where are the privacy implications in that?).

      Out of the tens of thousands of searches that they released, there were, what, about 100 or so numbers that may have been SSNs? We're talking about an infintesimal proportion of the data.

      At what point would it have been acceptable? If there was only one possible SSN? Or do you insist on perfection?

      If you are insisting on perfection, then I would suggest that your problem isn't with the privacy data, but with any data being released. If that's the case, don't lie and make it seem like it's just the privacy data that you are up in arms about.

      Ultimately, it does fall to the users to remember that any information that they give to another party becomes the property of that party (except as otherwise defined by law, or negotiated in a legal agreement or contract). At that point, they can do what they wish with that information.

    12. Re:Who the hell cares? by pclminion · · Score: 1

      For example, if you have looked for a job in the last four years, you were foolish if you didn't search for your own name to see if your friends' blogs had descriptions of your late-night drinking binges and drug use. (You are probably foolish if you used AOL search to do this, but that's a different discussion.)

      Why would it be foolish? AOL search is just Google, anyway.
    13. Re:Who the hell cares? by Kadin2048 · · Score: 1

      Why would it be foolish? AOL search is just Google, anyway.

      Yeah, it's all the creepiness of Google, but without the "do no evil" oversight. What could possibly be wrong with that?

      --
      "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
    14. Re:Who the hell cares? by pclminion · · Score: 1

      Yeah, it's all the creepiness of Google, but without the "do no evil" oversight. What could possibly be wrong with that?

      Ever hear the phrase "hindsight is 20/20?" And do you really think some "do no evil" corporate mantra is going to protect you until the end of the universe? I could say you're just as stupid for using Google (after all, didn't you realize that in May 2009 they're going to release all your search queries?)
    15. Re:Who the hell cares? by NFNNMIDATA · · Score: 1

      If you look at the Something Awful website, they have a bunch that are just like that. They also have some that, while hilarious, indicate an alarming criminal intent by the searcher. So one wonders how long before some agency gets a whiff of this and demands access to the whole thing, mapped to the names and addresses of the account holders...

    16. Re:Who the hell cares? by SydShamino · · Score: 1

      Why would it be foolish? AOL search is just Google, anyway.
      AOL search is just Google search, except that they are also your ISP and can conclusively and definitively aggregate all of your searches and assign them a unique identifier, then release them to the public.

      Using Google search and clearing your cookies, you cannot be definitively matched to what you look for.

      --
      It doesn't hurt to be nice.
    17. Re:Who the hell cares? by SydShamino · · Score: 1

      Yes, I've searched for my name, but I've found about a dozen others around the world with my same name (where are the privacy implications in that?).

      Have you also searched for "Pizza Hut near ?" Voila, all those others with the same name are eliminated; it is clear that the search was about you. Piece together more searches, and it becomes clear that it was you, not about you. Then anything else you have ever searched for is correlated as well.

      It isn't any one search that causes a privacy concern. As others point out, some search engines let you see what people are searching for, either a single search at random, or as aggregate data. However, no one else correlates all the searches from the same person into one list, easily identifiable as such.

      --
      It doesn't hurt to be nice.
  11. Just because they approved it... by SheeEttin · · Score: 1

    Just because they approved it, it doesn't mean they thouroughly understood how it worked. For example, what if they were told that lists of searches (and results, if I understand this) were going to be released, with user-identifying information hidden? If they weren't told that they were replaced with unique IDs (which could be connected to a person if identifying data were to be entered), then they could not know this without doing a little research. Executives don't just get salaries for making decisions, sometimes they have to do work--but sometimes, they just decide without doing work.

    I've completely forgotten what my original point was, so I'll stop here.

    1. Re:Just because they approved it... by Anonymous Coward · · Score: 1, Informative

      The reason that the exec's approval is an issue is not because we expect the execs to know what the heck they are looking at, but because they are the custodians of the "process".

      I can entirely believe that the execs didn't know the full implications of what they were looking at, or didn't have a clear idea of what could be done with the data. I'm sure that they cared that the data was anonymized, and it *was*, just not well enough.

      However, even though they sometimes like to come off as knowing what they are talking about technically, execs didn't *need* to be able to project all the possible uses of the data set. The problem is that they did not ensure that it was referred to the right internal specialist agency that did know what could be done with it.

      When this hit inside AOL, everyone was surprised by it. Initially the only alarm inside AOL was some calls where the NetOps people were saying that traffic had taken down a switch, and could you please investigate. At the same time, Operations Security opened an investigation because they thought there was an intrusion on the machine. The release of the data wasn't even really more than a blip on anyone's radar until some people started reading the news. The interest for this was supposed to be so low, that no one really even set up any sort of high bandwidth solution for it. It was just on a 100Mbit switch that had various other hosts on it. The flood of data from the requests actually took down a registration server on the same switch, which had an effect on other AOL services.

      Everyone in Search, Ops and Dev, I talked to mentioned that this information had been demoed to the execs, which I assume included the CTO (Govern). I will say, though, that it is interesting that she has had to fall on her sword for this, because really, she's was the least likely exec in the company to have known the full privacy procedures, having been only recently hired and focused on Video Search. Not to mention with Video Searchbeing released, this is a really crappy time to lose the CTO.

      Chowdhry was mentioned in discussions as probably the most likely person to be canned, but it's surprising that they actually did it, because he has a fairly decent footprint in the Search organization. I suppose he probably should have "known better", but I don't know if firing him was the best idea for the company.

      People at AOL don't like how the execs are trying scapegoat people for this. Miller is trying to make a PR statement that "we got the bad apples". Well, none of those "apples" were "bad", as far as I can tell. The process is what failed, and AOL has a lot of process problems. Hopefully they decide to fix those without simply making us go to some stupid class about the existing process (which failed).

      Anyway, looks like we'll be getting a new CTO... and I was just done unpacking from the last re-org (instituted by Govern). Fun times ahead.

  12. think of the children by bigdavex · · Score: 5, Funny

    The Justice Department has repeatedly signaled its strong interest, through continued conversations with Internet companies and members of Congress, in having the data retained to help it fight terrorism and child pornography . .

    I bet they have a stamp that says that.
    --
    -Dave
  13. What should we expect by madleo · · Score: 1

    From Mrs. Govern besides pretty much what the Government does with our search queries? Nothing else than this! :D

    --
    -ld
  14. One good thing came from this... by erroneus · · Score: 1

    ...if ever there was any public doubt about how dangerous the release of search query data could be, this should do a lot to prove to "the public" otherwise.

    And with this improvement in public awareness of how important it is to have private data safe-guarded and controlled, I think we'll see a little more interest in what business and government does with private data. I think that ultimately, we need to get a LOT more aggressive over the misuse of the SSN (social security number) and forever separate the SSN from the credit and banking systems.

    1. Re:One good thing came from this... by Doctor+Faustus · · Score: 1

      I think that ultimately, we need to get a LOT more aggressive over the misuse of the SSN (social security number) and forever separate the SSN from the credit and banking systems.
      Which ID is used isn't the problem. The problem is that a simple ID is being used as both an ID and a password.

    2. Re:One good thing came from this... by Anonymous Coward · · Score: 0

      Well, actually, I think this showed the public that it doesn't matter very much. Only one person (to my knowledge) has been identified and she's gained fame for lost privacy - most people consider this a worthwhile trade.

      It's also made everyone feel better about searching for balloon porn or whatever our personal fetish is; it's now official that everyone does it*. We'd all be a much more relaxed and tolerant society if our deepest thoughts were made public like this regularly. We might well get laid more often too.

      I think this does show that more effort should be made to keep bank accounts safe - personal password generators etc. - so that it's harder to steal an identity. The potential damage from information leakage should be limited, rather than caring too much about the leakage itself.

      *Just this weekend I found porn on my parents' computer... but it's something I can shrug off easily because I know we all do it. I imagine a less savvy person would be freaked out.

    3. Re:One good thing came from this... by JATMON · · Score: 1

      .....And with this improvement in public awareness of how important it is to have private data safe-guarded and controlled Did AOL have something in there privacy agreement stating that they would not release the search queries? If not, how is it private data? If not, why should they be responsible for someone being stupid enough to search for their SS#, CC# or any other personal information. What they should have done was left the site up and then posted the search results of the search results. Now that would have been interesting.

  15. Users have been idenfitied by MikkoApo · · Score: 1
    From TFA:

    At least two of the AOL users have been identified by name in press accounts, and people have speculated about the identities of others on various Web sites.
    There was also an article at theregister, but I couldn't find it.
    1. Re:Users have been idenfitied by Anonymous Coward · · Score: 0
      There was also an article at theregister, but I couldn't find it.

      Good post, thanks for making Slashdot a better place.

  16. Missing the story by Anonymous Coward · · Score: 0

    Is anyone else ticked off that the mainstream media is upset that the fact this program was going on was leaked, but they're not upset at the program itself? It's like Bush and the NSA spying on average Americans. How dare the news get out! The guys who released the data did us a favor by pointing out what was going on inside AOL.

  17. Internal AOL e-mails announcing new privacy plan by Anonymous Coward · · Score: 1, Informative
    Good Morning Silicon Valley's got two internal AOL e-mails announcing the CTO's "resignation" as well as AOL's 4 part plan to become an industry leader in privacy. Excerpt:

    1. Creation of a task force, led by Ted Leonsis and Randy Boe, with senior representatives from corporate communications, integrity assurance, product and marketing, to develop new best practices in this rapidly evolving area. Among other issues, the task force will look specifically at how long we should save data, including search data, and will make recommendations to improve the AOL Privacy Policy and our privacy practices company-wide.
    2. Additional restrictions on access to databases containing search data and any other potentially sensitive member data, regardless of whether that data is linked to individual member accounts.
    3. Evaluation and development of new systems to help ensure that sensitive information is not included in research databases.
    4. Education and awareness programs for employees -- at all levels -- on how to protect sensitive information and address privacy issues.
  18. There is no privacy by gelfling · · Score: 1

    And empty suits like the weenies at AOL are just kneejerking to respond to some soccermom who screamed at them at the PTA meeting last night. Heads will roll, I didn't know thanks for your helpful crticism etc etc etc.

    Whereas they're probably just mad at someone for forgetting to SELL the information.

  19. A humble, novel suggestion by MikeRT · · Score: 1

    WikiSearch anyone? It's about time that people started realizing that these companies are not going to make this easy on anyone. I would gladly pay $5-$10/month to pay for the bills of an open source, accountable search service that doesn't keep so much data on me it makes the Stasi look like amateurs.

    1. Re:A humble, novel suggestion by Anonymous Coward · · Score: 0

      That actually might not be a bad business idea.

  20. Re: Execs at AOL Approved Release of Private Data? by Anonymous Coward · · Score: 0
  21. How about... by deepb · · Score: 1

    How about...

    * Filed lawsuit against former employer due to wrongful termination.

    1. Re:How about... by Gospodin · · Score: 1

      Yep, that's what I always look for when I'm sifting through resumes.

      --
      ...following the principles of Heisenburger's Uncertain Cat...
    2. Re:How about... by Pharmboy · · Score: 1

      That or they sued because of sexual harassment. Either one on a resume is just swell.

      --
      Tequila: It's not just for breakfast anymore!
    3. Re:How about... by sbranden · · Score: 1

      Well it worked for Darl McBride

  22. It just wants to be free! by edmicman · · Score: 2, Funny

    Whatever happened to the "information just wants to be free" argument? Where's that now?

    1. Re:It just wants to be free! by Anonymous Coward · · Score: 0

      Whatever happened to the "information just wants to be free" argument? Where's that now?

      At Gitmo. Information is accused of terrorism.

    2. Re:It just wants to be free! by MMC+Monster · · Score: 2, Insightful

      Information wants to be free. Information also wants to be expensive. It depends on the type of information you are talking about.

      --
      Help! I'm a slashdot refugee.
  23. Is it okay to use the data anyway? by dthomas731 · · Score: 2, Interesting

    I have read many articles on the analysis of the released AOL data. Some of the articles start off something like this:

    "I think the release of this data is a breach of privacy and should never have been made public. But ..."

    Then they present their analysis. My question is if you are going to preach on the evils of releasing the data then do you have the moral right to analyze it? I think not.

    1. Re:Is it okay to use the data anyway? by nasor · · Score: 1

      This is just silly. Suppose a neurologist treats a patient who was beaten by a baseball bat and has sustained brain damage. After a year of treatment, the neurologist finds that the patient's brain functions have changed to work around the damaged areas. Would you propose that the neurologist shouldn't write a paper about this because he doesn't approve of beating people with baseball bats?

    2. Re:Is it okay to use the data anyway? by multisync · · Score: 1
      My question is if you are going to preach on the evils of releasing the data then do you have the moral right to analyze it? I think not.


      The "evil" was releasing the data in the first place. What others do with the data once it is in the wild is a different matter altogether. Whether it is moral or ethical to analyze it depends on the motive of the person doing the analysis, and needs to be judged on a case-by-case basis. For example, if I were an AOL user, I would feel entitled to analyze the data to determine whether my search history was included in it. I understand others may feel that by doing so, I am invading their privacy, but I see that as an unfortunate consequence of the original wrong, which was AOL releasing it in the first place.
      --
      I don't care why you're posting AC
  24. Freeeedom! by alienmole · · Score: 3, Funny

    I'd say this only proves the point - this information wanted to be free badly enough to escape from AOL, leaving a trail of career destruction in its wake!

  25. Nuremberg analogy is valid by aeoneal · · Score: 2, Insightful
    So "killing millions on orders from psychopaths" == "releasing personal data on orders from idiots", I'm not buying it.
    Obviously they're not the same thing. But the Nurember analogy is still valid. To do a thing that you know to be wrong, that can lead to expanding the already-pervasive abuse of personal knowledge by so many large companies, is not justifiable because your boss told you to do it.

    Today the "little guy's" only defense against being taken advantage of by major corporations and the government is information and the ability to think for himself. A major problem, though, is that even those few trying to think for themselves are at the mercy of the information they are given. That's the information on which they base their decisions. The more corporations and governments know about what we are interested in and find important, the more they can tailor the information we receive to influence in their direction.

    Classic marketing and academic research isn't the issue here. The issue is our ability to choose. This is the same reason the Net Neutrality issue matters, because it can directly affect our ability to find good (useful, true) information. Even if these issues weren't considered when the data was released (and I'm sure they were), such sharing of personal data amounts to criminal negligence when caring for other people's quality of life, and yes, lives. Because among the people using this information are people who directly affect our ability to live and yet seem to be driven more by monetary concerns, such as pharmaceutical companies.
    1. Re:Nuremberg analogy is valid by Anonymous Coward · · Score: 1, Insightful

      Stupid analogy.

      The Nuremberg trials were judged by others, not the Nazi's themselves.

      This guy did what his company told him to do, and then got fired by that same company.

      He is responsible to the public for what he did, however he is NOT responsible to the company since he was following a directive. The responsibility falls on his boss if he approved it.

    2. Re:Nuremberg analogy is valid by alienw · · Score: 1

      Excuse me, but what makes you think search engine queries are private or confidential, or must be treated as such? When you type stuff into a search engine, it is no longer private. Last I checked, AOL never promised to keep search queries confidential anywhere in your contract with them. In fact, I am sure they have the right to sell them (complete with identifying information) to various marketing and database companies. There is nothing ethically or legally wrong with releasing this data, so your analogy is complete bullshit.

    3. Re:Nuremberg analogy is valid by aeoneal · · Score: 1

      Sorry you feel that way. Can you tell me why is there a debate going on over the release of the information in that case?

    4. Re:Nuremberg analogy is valid by Anonymous Coward · · Score: 0

      There's no shortage of idiots.

    5. Re:Nuremberg analogy is valid by aeoneal · · Score: 1

      Ok, you made me laugh :-D

      But seriously, apart from the privacy issue for individuals, what about the issue of the information being misused in order to tailor/edit information for the masses in general? By doing that, the information we use in making decisions becomes even less reliable than it already is. We're already being given ads for medications, etc., that mislead and are dangerous. The more those companies learn about our concerns and fears and hopes, the more they will use that information to abuse our trust, and the less likely we will be able to tell the difference. You're only as good as the data you base your decisions upon.

    6. Re:Nuremberg analogy is valid by alienw · · Score: 1

      By that logic, any type of advertising should be outlawed. While I am not disagreeing with your argument, privacy laws are not that effective for protecting consumers from abusive marketing. Drug commercials would not be effective if doctors cared more about what the hell they were doing. It's far too easy to walk in to a doctor's office and get an antibiotic prescription for a cold or an SSRI prescription for "depression" (caused by an unhealthy lifestyle rather than a chemical imbalance). Doctors do this because it's easy, it's what the patient wants, and because they often get a kickback from drug companies. Even if drug commercials were banned, the problem would not go away.

  26. This is why "free" is bad by cdrguru · · Score: 1

    Let's see here... we have various free services that are available to everyone on the Internet. These free services aren't free to operate - they cost significant amounts of money to do so. Where does the money come from?

    The first place is of course advertising. Having people pay to push their message at the unsuspecting people that are using the service. Eventually the ads become all-pervasive and lose some of their value. Where we are today is that banner ads are almost worthless and Google has made selling text-only ad space the only means of support for many free sites.

    The one that a lot of people do not understand is that just the use of the service also has value - and informational value. This information can be collated, organized and distilled and sold. There are people that would like to know how many times the word "Viagra" was searched for on Google. This information is available, for a price. Similarly, Ford would like to know how many people in Indiana search for Toyota, Dodge or Chevy. Again, this is a source of revenue for so-called free services.

    What some people posting here do not see to get is that their use of these free services is being tracked and data mined. Some of this is just to keep the service running. It is important to know that when a new album is released by Madonna that everyone will be searching for a way to download it. This can change the resources required to operate a search service. There are similar resource requirement changes in all such systems and the data required to maintain them is certainly being tracked, monitored and used. Some of it is also sold because it has value.

    Could there be a search engine or an IM service that didn't data mine or sell ads? Sure, but why would anyone pay $50 a month for a search service if there was one that was free? Some particularly paranoid types might to keep their porn searches private, but the majority would not. The amount of data that can be mined from free services (forums, blogs, search engines, IM systems, etc.) is incredible and as more and better data mining is implemented, the greater value this will have.

    Isn't free wonderful?

  27. huh? by rice_burners_suck · · Score: 0, Troll

    It looks like nobody is ever going to trust AOL again after this debacle. What a mess for AOL. What a mess for the 200,000 some people whose searches were given to the whole world to look at gleefully and laugh at them. This is so embarassing.

  28. Godwin already? by ColdWetDog · · Score: 1
    And it so early in the morning.

    --
    Faster! Faster! Faster would be better!
  29. Just waiting... by Overfiend1976 · · Score: 1, Redundant

    I'm just waiting until AOL finally curls up and dies. Been waiting for over a decade now...but it seems like the wait may get substantially shorter now.

    --
    This sig will self destruct in 5 seconds.
  30. The Real Problem by Nom+du+Keyboard · · Score: 3, Insightful
    The real problem isn't that they let this data escape.

    The real problem is that they shouldn't have been keeping it in the first place!

    If it can harm a consumer by its release, then it can harm that same consumer by the fact that the have it in their possession in the first place. Just how is AOL that much better or more trustworthy than the world at large?

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
    1. Re:The Real Problem by LinuxFreakus · · Score: 1

      Don't be ridiculous. They HAVE to keep this data. It is essential to have this type of data in order to be able to provide various statistical analysis services and summaries to sell advertising. Without it, they lose. Period. Every other company keeps the same type of data, so AOL can't afford to not keep it.

    2. Re:The Real Problem by JATMON · · Score: 1

      ...The real problem is that they shouldn't have been keeping it in the first place!

      Says who?

      ....If it can harm a consumer by its release, then it can harm that same consumer by the fact that the have it in their possession in the first place. Just how is AOL that much better or more trustworthy than the world at large?

      So, by following your logic... Your credit history can harm you, so the credit reporting agencies should not keep that data.

    3. Re:The Real Problem by Anonymous Coward · · Score: 0

      You think it's ok for AOL to do this but you probably bitch about the Goverment wiretapping suspected terrorists. I would prefer the Goverment knowing who I speak to on the phone(because I am not a terrorist and have nothing to hide) than a Corporation storing personal data to further market me or intimidate me in the future.

    4. Re:The Real Problem by JATMON · · Score: 1

      Actually, I have no problem with the wiretapping either. If you are afraid of a corporation storing personal data then you should not use the internet.

  31. It's the x-refs, not the data. by Kadin2048 · · Score: 2, Interesting

    I think you bring up a good point.

    As a society, or at least as a subset of one, we need to discuss this. Where should the "expectation of privacy" be when one is using a search engine (or the Internet in general)? It's a very open question.

    On one hand, most people I think realize that the query to the search engine is not 'private.' As in, you can go and view at any given time, all the things that are being typed in to Google. (At least you used to be able to, or maybe this was Yahoo.) At any rate, the queries themselves are not secret.

    However, what freaks people out is that one query can be associated with another. So if I type in my name, I expect that somebody on the far end knows that I'm searching for my name. However, what people don't expect, is that it's possible to link together all the searches that they've made (potentially across multiple computers, if there's a login system). So that my search for my name today, could be cross-referenced with my search for restaurants in a particular area tomorrow, and cross-referenced further with some street address I search for the day after that.

    Individually, only a very naive person would expect a query to be private. However, it's the cross-referenced information sorted by particular users that is concievably private, because it reveals much more than simple queries do.

    Let's imagine for instance that AOL had released the same number of searches, but instead of listing the IP address (or a unique identifier that's matched 1:1 with an IP address) they just gave a time/date stamp when it was made. We probably wouldn't be having this conversation, and a few executives would still have their jobs.

    Where people expect some sort of privacy (reasonably or not) is in not having one particular "search session" linked to other ones. In fact, I bet that most un-technical people probably think that they can close their browser, and thus 'start over'...not realizing that when they start searching again, it just continues adding to a list of queries from earlier. That "recordkeeping" is where the perceived invasion occurs, not in the lack of secrecy of the terms themselves.

    --
    "Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
  32. Film at eleven. by /dev/trash · · Score: 1

    Pope Catholic.
    Bear craps in woods.

  33. Actually, unfree aint so great either by joebob2000 · · Score: 1

    Telecom companies can do a lot of this stuff just as well, if not better than google and they are getting paid quite well. That does not stop them from selling your name to spamlists, or selling phone records to government spies.

    There is a moral bankruptcy in this society that ensures that anything goes as long as you get what you want and can get away with it. Individuals have no strength or bargaining power to defend themselves against corporate predation, except by not using the service.

    Until people start balking at bad TOSes en masse, there can be no change. Unfortunately, most individuals feel that as long as they get what they want, there is no need to make a fuss.

  34. think of the *animals* by exp(pi*sqrt(163)) · · Score: 1

    Children? After reading some of those search queries it's the dogs I'm worried about.

    --
    Doesn't it make you feel good to know that our freedoms are protected by politicans, lawyers and journalists.
  35. Still motivated by money, and still despicable by Moraelin · · Score: 1

    No, actually they hoped for even more money this way.

    See, just selling email addresses to the spammers doesn't actually bring _that_ much money. See the AOL idiot who exported the database and sold it to spammers. He's got, I think, some tens of thousands of dollars. That's small change for a corporation.

    Even if they sold it together with the search keywords, how much do you think they'd get? Hundreds of thousands? Let's even be generous and say a couple of millions? Those guys have to think of their own profit, so don't think you'll get all their advertising money for the next decade. That's hardly worth the effort.

    No, if you want to maximize your income, the way to go is to do the keyword matching _yourself_. See: Google.

    So excuse me if I don't think that AOL did some noble altruistic act, out of sheer generosity towards the academia. It was a desperate "someone please please please kill Google for us" act, and they stand to gain a _lot_ more if it actually works. Maybe they packed it in some PR double-speak to sound like some kind act, so they'd get their public image polished too in the process, but rest assured that even that wasn't the primary motivation. It was about long term money, plain and simple.

    And to that end, they had no qualms with raping their users' privacy. If it hadn't been so hare-brained and hadn't backfired, rest assured that the same CTO would now be getting a big fat bonus as a reward.

    --
    A polar bear is a cartesian bear after a coordinate transform.
  36. Oh, There's GOT to be a morning after by Anonymous Coward · · Score: 0

    There's got to be a morning after If we can hold on through the night We have a chance to find the sunshine Let's keep on lookin' for the light Oh, can't you see the morning after? It's waiting right outside the storm Why don't we cross the bridge together And find a place that's safe and warm? It's not too late, we should be giving Only with love can we climb It's not too late, not while we're living Let's put our hands out in time There's got to be a morning after We're moving closer to the shore I know we'll be there by tomorrow And we'll escape the darkness We won't be searchin' any more

    1. Re:Oh, There's GOT to be a morning after by Anonymous Coward · · Score: 0

      Note to non-ancient peoples: Way back near the beginning of time, Maureen McGovern had some hit records, such as the one quoted above. And her name is similar to the one in the story.

  37. +1 Funny by Agelmar · · Score: 1

    If I had any mod points left, parent would definitely be +1 Funny...

  38. try it yourself... by hakalugi · · Score: 1

    web front-end to search the 2gb log file http://czern.homeip.net/aolsearch/

    --
    If she floats, she's a witch.
  39. No one should be fired by incoherent_bubble · · Score: 1

    Sending a few lambs to slaughter won't change the direction of the flock. If all the execs and management of this company were completed different people, the same decision would have been made.

  40. Wasn't this known from day one? by insomniac8400 · · Score: 1

    Did anyone really think this wasn't a preplanned action by AOL? They probably thought everyone would think they are cool and they could get recognition from releasing this. Of course, it back fired and everyone hates AOL more than ever.

  41. Yes Im sure they did by talledega500 · · Score: 2, Informative

    And the solution is to stop trusting these guys and use your own head. Heres a good way to do just that with a search proxy.
    http://www.blackboxsearch.com/

  42. Homer Simpson Said It Best by Lance_Denmark · · Score: 1

    Reminds me of the Simpsons episode where the town splits along the new area codes- Homer (after seeing a telephone companies promotional video): I accuse the phone company of making that video...ON PURPOSE!

  43. Re:Who the hell cares - well mr Mula for one by sbranden · · Score: 1

    Here is an example. The post above yours (threaded) has three links to some interesting examples of this data. The last one is a rather strange fellow who seems to like the idea of dogs and women together. He has a few other rather strange ideas as well. Obviously AOL did not release this data with their identifiers, but if you look at the full listing of this users history, it also shows the following lines:

    9550729 bouie elementary school teacher exposed by nbc news
    9550729 do female elementary school teachers get sexually aroused by their pre-teen male students
    9550729 do female elementary school teachers get sexually aroused by their pre-teen male students
    9550729 story on mr. mula the bouie elementary school teacher accused of assaulting a student
    9550729 teacher at bouie elementary school in dekalb county accused of pushing a student

    There are also other questions about similar locations. Now, it is getting interesting as this LOOKS like an identifiable teacher reading about child porn and checking search engines to see if his past is haunting him. It may very well be the case that Mr Mula is just an interest of his and this is out of context, but it would be worth looking into.

    I hope that pedophiles are outed with this data, but there are going to be lots of innocents who are also caught up in it. For instance if you once looked up jihad and then looked up your name, you might get a tap on the shoulder one day. Of course investigators will be able to look at logs anyway, but there are a lot more eyes looking on this one.