Four Missed Opportunities for Privacy
The NY Times has a blog posting on the occasion of the Internet advertising industry's release (PDF) of what it describes as tough new standards governing the collection and use of data about users' behavior. The Times' Saul Hansell describes these "new" standards as more of the same old status quo, and outlines four privacy-enhancing ideas, being discussed by Google, Yahoo, the FTC, and Congress, that the IAB has completely ignored. These principles are: every ad should explain itself; users should be able to see data collected about them; browsers should help enforce user choices about tracking; and some information (medical and financial) is simply too sensitive to track.
You mean that "self regulation" fails when it is opposed to self interest? Who could have guessed?
Remember, the N.S.A. intercepts EVERYTHING.
Therefore, encrypt EVERYTHING.
Yours In Obfuscation,
Kilgore Trout
P.S. CheneyIsAwArCriMinAlBushIsAnAlCoHoLicProsecuteAfghanistanIraqJihad
A letter to penthouse...
What he can't kill, he has sex on. Trent.
Ads will never "explain themselves" and companies will never reveal how much information they harvest from you (outside of lengthy, dull, usage terms written in Jargon.) Either case would make users skittish, and there's too much money involved for either them or congress to want to do anything about it.
As for medical and financial information, it's incredibly sensitive, yes, but having it tracked is incredibly convenient for both lay people and companies (if inconvenient for the IT staff who have to secure them.) Either way, these records have to be kept somewhere and somehow and be accessible in some way to people who need them (doctors and banks.)
The only change I see possible is improvement in the browsers. If any privacy change does occur, you can bet that it will start with either Firefox, Opera, or some non-mainstream browser, and then be eventually adopted by IE. Don't expect the end-users to know how to enable any privacy features though.
From http://www.merriam-webster.com/dictionary/privacy
"privacy (noun) The quality or state of being apart from company or observation."
They honestly need to stop using the word privacy in these proposals.
One thing that caught my attention in the summary:
users should be able to see data collected about them
Seems like a very valid sort of thing to want. If your company has information about me, I should be able to know what information you have. Common sense, right?
On the other hand, if you're going to talk about something like this, don't you also have to talk about other increases in security to go along with the additional transparency? If you're going to make it increasingly easy for me to see information about me, it should go hand in hand with making it increasingly difficult for someone who is not-me to access that information about me.
I really think it's time that we talk about improving our security models. SSL on everything would be a good start.
Re: Ads explaining themselves.
-- Sacrifical Lamb to give so they can deny the other three. I have no problem *understanding*
THE HUGE AD FOR SAVE ENDANGERED GM!!!!!!!!!!!!!
It's the EXCITING INTERACTIVE PAGE-EATING DYNAMIC MULTIPLEXED SCRIPTS AND FRIENDS that suk here.
The others fall under "1984 is too sexy to give up."
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
Buy this viagra right now and the scam will be smaller while your penis will be bigger!
Install adblock extension, disable 3rd party cookie files, use software that ads advertising domains to your hosts file.
As far as I can tell the internet doesn't even have banner ads anymore.
These principles are: every ad should explain itself, users should be able to see data collected about them, browsers should help enforce user choices about tracking, and some information (medical and financial) is simply too sensitive to track.
This fails in many aspects. Every ad should explain itself? How are you going to do that on something that takes up 1/6th of a normal computer screen. If you click it for more info, that kinda kills the entire point of the ad to begin with. Users should be able to see the data collected about them? Oh no theres no potential for abuse for this one. Theres no way this can be used to create a very good phishing attack especially if you have physical access to the computer. As for browsers helping enforcing user choices, how do you do that? Have a box where you check "block tracking cookies?" I'm sure theres no potential for abuse for that either. Theres no way that MS or another company will "conveniently" "mislabel" legitimate cookies as tracking cookies. Plus, this can very well lead to a ton of censorship.
Taxation is legalized theft, no more, no less.
There's a grain of truth here. Cookies have a nice cutesy name to them that makes them seem innocent. It's "just" an edible text file, that's all!
Why not call them something else? Take a page out of PETA's book; call them turds or something!
Note: I was 13 when I wrote most of this. Take with several grains of salt.
When it comes to privacy, there are much bigger issues than the pervasive use of tracking cookies. (For example: indefinite data retention after a customer has stopped doing business with a vendor, sale of customer data without explicit opt-in, and let's not forget the pervasive failure of government agencies to encrypt sensitive data like Social Security numbers.) Tracking cookies seem quaint and harmless by comparison... this article reminds me of the privacy issues we used to worry about back in 1999.
[Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
If Google is really interested in privacy, if their motto of "don't be evil" isn't mere words, then why do I have to enable google.com cookies when accessing gmail, since they also have gmail.google.com cookies? When browsing the web, I have my browser set to "ask" about each cookie. Those from sites I don't log into are set in the browser as "always reject". My browser is also set to treat all accepted cookies, regardless of expiration, as session cookies. So when I go to yahoo where I don't have an account, I set to "always reject" just once, and I never see another dialogue pop up ever again about yahoo.com. Why can't I do this with google.com? Having to repeatedly reject cookies that refuse to take no as an answer and therefore the google cookie dialogue box keeps popping up whenever I use google's search, that gets tiring. But either I have to do this, or I have to set it to reject all google cookies, but then when I need to check gmail, I not only have to allow gmail.google.com cookies, but I also have to open up the cookie settings dialogue box, then scroll down the url list of "reject all" until I find www.google.com and remove it from the list. Then I can accept google cookies and gmail cookies, which then allows me to access my gmail account. If Google were really concerned about users' privacy, you'd be able to access your gmail account by only accepting gmail cookies, and Google wouldn't require you to also accept the cookies from www.google.com, the same cookies from their search application. But since they are able to force you to choose to deal with the hassle of rejecting google.com cookies on every visit to gmail.com or to just have you capitulate and accept all google.com cookies just to check gmail (and then they can use the cookies you accepted for gmail entry to track your actions on all their other internet domains/properties they own or are "affiliated" with) which is really their goal, then they are able to use cookies for tracking where other companies may not be able to because users can just "reject all" on their first visit to the other sites, and then they (web users) won't have to be forced to deal with the cookies dialogue boxes.
If google were really concerned about users' privacy, or concerned about "being evil", then they wouldn't require acceptance of google.com cookies just to check/read new emails, they would just accept the use of gmail.google.com cookies and not require google.com cookies as well for accessing gmail accounts.
I recently bought two event services (one for a concert and two for joining a local city kickball team). Two weeks later I got rolling stone magazine (had my full name, address and e-mail). With no phone number available I had to e-mail the place (via their web form) to find out how they got my information and that I didn't order a subscription to two years of rolling stone. According to them the event pass i bought is what auto subscribed me (unbeknownst to me). I asked them to tell me who did this so I can contact the place and tell them to stop giving my information (afterall I BOUGHT a product). They e-mailed me telling me they do not have this information....
Privacy is dead.
On a side note i will be calling rolling stone corporate and complaining (i told the person in the e-mail to purge my info from their DB but that part of my message got ignored). THen I am calling the two places I bought event passes to (probably the concert) and complain to their corporate...probably all of it will get ignored.
Then it will be time to complain to the BBB.
I do not support "The Man". I also do not support your irrational stupidity