Four Missed Opportunities for Privacy
The NY Times has a blog posting on the occasion of the Internet advertising industry's release (PDF) of what it describes as tough new standards governing the collection and use of data about users' behavior. The Times' Saul Hansell describes these "new" standards as more of the same old status quo, and outlines four privacy-enhancing ideas, being discussed by Google, Yahoo, the FTC, and Congress, that the IAB has completely ignored. These principles are: every ad should explain itself; users should be able to see data collected about them; browsers should help enforce user choices about tracking; and some information (medical and financial) is simply too sensitive to track.
You mean that "self regulation" fails when it is opposed to self interest? Who could have guessed?
A letter to penthouse...
What he can't kill, he has sex on. Trent.
Ads will never "explain themselves" and companies will never reveal how much information they harvest from you (outside of lengthy, dull, usage terms written in Jargon.) Either case would make users skittish, and there's too much money involved for either them or congress to want to do anything about it.
As for medical and financial information, it's incredibly sensitive, yes, but having it tracked is incredibly convenient for both lay people and companies (if inconvenient for the IT staff who have to secure them.) Either way, these records have to be kept somewhere and somehow and be accessible in some way to people who need them (doctors and banks.)
The only change I see possible is improvement in the browsers. If any privacy change does occur, you can bet that it will start with either Firefox, Opera, or some non-mainstream browser, and then be eventually adopted by IE. Don't expect the end-users to know how to enable any privacy features though.
One thing that caught my attention in the summary:
users should be able to see data collected about them
Seems like a very valid sort of thing to want. If your company has information about me, I should be able to know what information you have. Common sense, right?
On the other hand, if you're going to talk about something like this, don't you also have to talk about other increases in security to go along with the additional transparency? If you're going to make it increasingly easy for me to see information about me, it should go hand in hand with making it increasingly difficult for someone who is not-me to access that information about me.
I really think it's time that we talk about improving our security models. SSL on everything would be a good start.
Re: Ads explaining themselves.
-- Sacrifical Lamb to give so they can deny the other three. I have no problem *understanding*
THE HUGE AD FOR SAVE ENDANGERED GM!!!!!!!!!!!!!
It's the EXCITING INTERACTIVE PAGE-EATING DYNAMIC MULTIPLEXED SCRIPTS AND FRIENDS that suk here.
The others fall under "1984 is too sexy to give up."
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
Install adblock extension, disable 3rd party cookie files, use software that ads advertising domains to your hosts file.
As far as I can tell the internet doesn't even have banner ads anymore.
These principles are: every ad should explain itself, users should be able to see data collected about them, browsers should help enforce user choices about tracking, and some information (medical and financial) is simply too sensitive to track.
This fails in many aspects. Every ad should explain itself? How are you going to do that on something that takes up 1/6th of a normal computer screen. If you click it for more info, that kinda kills the entire point of the ad to begin with. Users should be able to see the data collected about them? Oh no theres no potential for abuse for this one. Theres no way this can be used to create a very good phishing attack especially if you have physical access to the computer. As for browsers helping enforcing user choices, how do you do that? Have a box where you check "block tracking cookies?" I'm sure theres no potential for abuse for that either. Theres no way that MS or another company will "conveniently" "mislabel" legitimate cookies as tracking cookies. Plus, this can very well lead to a ton of censorship.
Taxation is legalized theft, no more, no less.
There's a grain of truth here. Cookies have a nice cutesy name to them that makes them seem innocent. It's "just" an edible text file, that's all!
Why not call them something else? Take a page out of PETA's book; call them turds or something!
Note: I was 13 when I wrote most of this. Take with several grains of salt.
When it comes to privacy, there are much bigger issues than the pervasive use of tracking cookies. (For example: indefinite data retention after a customer has stopped doing business with a vendor, sale of customer data without explicit opt-in, and let's not forget the pervasive failure of government agencies to encrypt sensitive data like Social Security numbers.) Tracking cookies seem quaint and harmless by comparison... this article reminds me of the privacy issues we used to worry about back in 1999.
[Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
You don't encrypt to protect yourself from the NSA. If you're interesting to the NSA, they'll spend the resources to get the information they desire. And they'll get it one way or another involving a back door.
Can you be Even More Awesome?!
And they'll get it one way or another involving a back door.
including applying a cattle-prod to your anus.
I recently bought two event services (one for a concert and two for joining a local city kickball team). Two weeks later I got rolling stone magazine (had my full name, address and e-mail). With no phone number available I had to e-mail the place (via their web form) to find out how they got my information and that I didn't order a subscription to two years of rolling stone. According to them the event pass i bought is what auto subscribed me (unbeknownst to me). I asked them to tell me who did this so I can contact the place and tell them to stop giving my information (afterall I BOUGHT a product). They e-mailed me telling me they do not have this information....
Privacy is dead.
On a side note i will be calling rolling stone corporate and complaining (i told the person in the e-mail to purge my info from their DB but that part of my message got ignored). THen I am calling the two places I bought event passes to (probably the concert) and complain to their corporate...probably all of it will get ignored.
Then it will be time to complain to the BBB.
I do not support "The Man". I also do not support your irrational stupidity