Slashdot Mirror


Privacy Option Proposed To Control Behavioral Ads

techinsider sends this quote from Security Week: "A group of media and marketing trade associations, with support from the Council of Better Business Bureaus, today announced the details of a self-regulatory program designed to give consumers enhanced control over the collection and use of data regarding their Web viewing for online behavioral advertising purposes. The program promotes the use of the 'Advertising Option Icon' and accompanying language, to be displayed within or near online advertisements or on Web pages where data is collected and used for behavioral advertising. The Advertising Option Icon indicates a company's use of online behavioral advertising and adherence to the Principles guiding the program. Similar to a Web site’s privacy policy, consumers will be able to link to a clear disclosure statement regarding the company's online behavioral advertising data collection and use practices as well as an easy-to-use opt-out option."

40 of 81 comments (clear)

  1. I would take a wild guess that by hsmith · · Score: 5, Insightful

    The ones that let you opt our aren't the ones you need to worry most about...

    1. Re:I would take a wild guess that by prograde · · Score: 3, Insightful

      I'm reminded of the 'evil' bit.

    2. Re:I would take a wild guess that by KiloByte · · Score: 4, Insightful

      We learned it damn well that opting out means just "hey, there's someone who not only doesn't have ads blocked but also doesn't ignore them!". In other words, you can be damn sure other sites in that advertising network will try to advertise to you more aggressively.

      --
      The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
    3. Re:I would take a wild guess that by Mathinker · · Score: 2, Insightful

      Funny, I have them opted out and blocked (more or less --- I never enable third-party advertising domains in NoScript). Does that mean I'm managing to waste even more of their resources than ordinary blockers?

    4. Re:I would take a wild guess that by spazdor · · Score: 3, Insightful

      I think it's almost time that we start looking at and designing GUIs the way we look at firewalls. Which apps have a legitimate need to receive which UI events? Does an app really have a right to know where the mouse is, or even whether its window happens to be minimized at the moment?

      There are definitely some apps which would behave much better on my desktop if I could put a 'default drop all inbound' policy on them and just enable specific input events.

      --
      DRM: Terminator crops for your mind!
    5. Re:I would take a wild guess that by Runaway1956 · · Score: 2, Insightful

      The battle is lost. Lost long ago. In this article, they are discussing targeted behavioural advertising like it's "normal" and "acceptable". I guess there are only a few of us freaks left who object to being tracked all over the internet. Sorry - but it's NO ONE's business where I go, or what I look at, or what I click on. Thank all the nerds and the gods of anonymity for the blocking tools available on Firefox. I can browse the web, knowing that only the MOST determined, and somewhat sophisticated people can track my habits.

      --
      "Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
  2. I would imagine by symes · · Score: 2, Insightful

    that the sort of person who would be interested in schooling themselves in companies policies would also be the sort of person who is well aware of how best to block most of these behavioural ads. That said, anything, no matter how small, that reigns bad ads is to be welcomed.

    1. Re:I would imagine by catbutt · · Score: 4, Insightful

      I don't agree. They may be aware of how to block them, but maybe that isn't their choice -- if the site takes their wishes into consideration. Maybe they actually want to support the sites they view, in hopes that they sites will continue to care about having them as a visitor.

      I see, on this page, a notice that says "As our way of thanking you for your positive contributions to Slashdot, you are eligible to disable advertising." You know what I do in response? I let them show me ads. Because I like slashdot. I don't want it to start to become targeted at the audience that is not tech-savvy enough to know how to install an ad blocker -- I want it to be targeted at people like me.

  3. Abuse by Scutter · · Score: 2, Funny

    I'm sure this won't be abused at all by the more unscrupulous types of advertisers. You know, those who get paid by the click or the ones trying to distribute malware.

    --

    "Tell me doctor, with all of your defenses, are there any provisions for an attack by killer bees?"
    1. Re:Abuse by dkleinsc · · Score: 4, Insightful

      Sure, this will be abused by the most unscrupulous types of advertisers. They're unscrupulous for a reason.

      However, like the wildly popular Do Not Call registry and a voluntary program for direct mail, these do reduce the annoyance level a bit, because there are advertisers with scruples. The equivalent in the world of phone marketing is that the almost nightly "Do you want to change your long distance carrier?" calls have been replaced by maybe monthly calls from "Cardholder Services" and other obvious scam artists. While not perfect, it's definitely an improvement.

      --
      I am officially gone from /. Long live http://www.soylentnews.com/
    2. Re:Abuse by Anonymous Coward · · Score: 3, Interesting

      However, like the wildly popular Do Not Call registry and a voluntary program for direct mail, these do reduce the annoyance level a bit, because there are advertisers with scruples.

      I've more or less been forced to conclude that anybody still calling me here in Canada (we have slightly different rules) is either fraudulent, too stupid to look up the registry, or has been given an exemption (ie they're a charity or something). I even see a lot of bogus caller IDs -- a very high percentage of them actually.

      Being on the Do Not Call registry mean that any telemarketer who gets through (and they do) gets a very rude and abrupt "fuck the hell off". As a deterrent to calling me, the registry serves no purpose. Profanity seems to at least put them off their game.

      My problem is, there's so many fraudulent callers, I'm forced to conclude that they all are since I have no real way of knowing. So, every telemarketer who calls is presumed to be a lying sack of shit ... it makes the decision tree much shorter. They probably are.

    3. Re:Abuse by hedwards · · Score: 3, Informative

      Indeed, here in the US, they've made exceptions for all the people that we really don't want to hear from, ie., politicians. During election season it's terrible. 7 or 8 calls a day, frequently from a robocaller. Charities aren't quite as bad, but still they call frequently enough as to be an annoyance.

  4. TRUSTe all over again? by mlts · · Score: 5, Interesting

    Didn't we go through this before with the TRUSTe logo of showing if the site only used the information in-house versus sharing with others?

    This just seems like more feel good PR fluff, like the P3P stuff about a decade ago. We don't need more "assurances" about privacy. We need the data not to be collected in the first place. No Flash shared objects. No shared objects in Quicktime or other add-ons. No using tricks in a browser to "personalize/individualize" content.

    1. Re:TRUSTe all over again? by Anonymous Coward · · Score: 3, Informative

      yes, and it the same attorney who has been doing this for years. he has been representing the DMA for decades. Every time there are proposed regulations they form a new org that does nothing. Like TRUSTe, complaints will be useless and they will never take action against their members (who pay the bills!)

    2. Re:TRUSTe all over again? by Monkeedude1212 · · Score: 4, Interesting

      I agree. I think if anyone wants information from me they should have to ask me for it. They should not be able to collect any more information on me anymore than I should be able to collect information on whoever is interested and using the data. And if that's an advertising firm with 200+ employees than I want the browsing habits of all 200+ employees. I'd probably settle for just the CEO. Just a simple exchange of information, right? No different than sharing our names. But like I said earlier, they should have to ask, and I should have the right to refuse. Simple as that. Why should browsing habits be considered any less private than how I put on my pants in the morning, yet if someone wanted to sit outside my window and take readings on that - I could get them arrested.

    3. Re:TRUSTe all over again? by mlts · · Score: 2, Informative

      Expectations of privacy. Ad companies want people to think that anything on the Web is public for any to see. This way, in court cases, the judge just finds the ad company not guilty because the plaintiff has no reasonable expectation of privacy on the Web, as per what other people think.

      The only good thing is that there are so many sheep out there that ad companies are not reacting to people who use AdBlock or other means of security. However, I'm sure it will only be a matter of time before most sites become like Hulu and offer anything other than a "Go away" message on the front page. Of course, the next step will be add-ons or Greasemonkey scripts that fake cookies and identifying info, and the arms race will go on.

      Time to register your copy of sandboxie and VMWare Workstation. I'm sure we will get more pretty feel good crap like this coupled with more invasive shared objects stored by add-ons in our future.

    4. Re:TRUSTe all over again? by zeropointburn · · Score: 3, Insightful

      While I do agree with you in spirit, there is a problem. You put your pants on in your own private property. You search Google by using a semi-public service. Instead of comparing it to how you put your pants on, compare it to someone watching and noting which parking spots you prefer at the supermarket or at work. Creepy but not illegal.
        Sometimes the information is used for statistical purposes (people from 9 county prefer the east side of the lot, 22 county prefers the west side). For targeted ads, it's more like having a free parking space downtown, provided you give your name, address, and license plate number. Then they take that and say 'hey, Bob likes to park downtown on Wednesdays, so I'll print up a few flyers with his name and leave them with the attendant to deliver when he gets there.' Then they take the next step and start charging the local shops, as well as exchanging info. Now they can say 'hey, Bob's probably coming back this Wednesday to stop in at the hardware store and the theatre, so I'll print up ads with his name on it for those stores.'
        As with many great ideas, this is very easy to misuse. If I work for the parking lot, I know Bob will be at the theatre for two hours once a week, so I know exactly when to ransack his car. If I've bought this behavioral information, now I know when Bob is away from home and where he is at certain times. Now it's getting pretty creepy. From an advertiser's perspective, I can harm them by buying the info and placing my own flyers under his window with better offers. If I'm an unscrupulous advertiser, now I know where bob lives and I can junk-mail and flyer him unto a psychotic break.

        To get away from that rampantly over-developed example, let's consider what could be done. If the major players were to offer a search engine that specifically advertised privacy, would you or I bother to use it? It would be a nice step but probably an empty gesture if it came to a court case. Some government org could try to regulate or legislate, make a mess of it, and make it both easier for scams and harder for legitimate advertisers. An industry group could form and try to self-regulate, which is what we see here. Individual users could use the tools available (like firefox and noscript), while the less tech-savvy get bombarded to make up the lost clicks. This already happens. What could possibly be done to stop the avalanche while still making it possible to run an ad-supported site? It is similar to the email spam problem in many ways, and while progress is made against both crapfests, it will never really go away.

      --
      -1 raving lunatic; +6 subGenius... Things even out...
    5. Re:TRUSTe all over again? by hedwards · · Score: 3, Interesting

      There isn't really a problem. There isn't a realistic expectation of privacy in public mainly because by default it's a public place. There's other people there that can see you, so obviously there's not going to be any privacy.

      Online is a bit trickier, but it's largely private, people don't know where the data is going between them and the server, but those parties in the middle shouldn't be allowed to collect data beyond what's necessary to keep their infrastructure running. And definitely no personal information.

      Ads are more like stalking than they are like other people in a public space. While you don't have any right to privacy in a public area, it is still illegal to follow people around and make note of where they're going without consent. Generally it comes under stalking prohibitions.

    6. Re:TRUSTe all over again? by mlts · · Score: 2, Interesting

      This is only going to get worse. Even if the website has a privacy guarantee, there are plenty of other parties that can steal private info and sling ads with potential browser exploits:

      The ad serving company. If it pays them to have blackhats put on exploits randomly, they will do it, assuming they don't get caught.

      Ad clients who have their own servers.

      ISPs using Phorm-esque MITM appliances to modify the connection in flight. This is a very lucrative thing for ISPs, because they can not just replace ads, but capture click-throughs and other data. And since there are zero laws preventing this, queries that were typed in on one webpage can be redirected to another.

      Moral: A legal solution won't be happening anytime soon.

    7. Re:TRUSTe all over again? by Chaonici · · Score: 3, Informative

      a search engine that specifically advertised privacy

      You mean like startpage, a search engine powered by Ixquick that doesn't record your IP address?

    8. Re:TRUSTe all over again? by Nethead · · Score: 2, Insightful

      I think if anyone wants information from me they should have to ask me for it.

      But the protocol does ask you for it, and your computer answers. The solution is to train your computer to not give out the answers. There is no expectation of privacy when you freely answer nosy questions.

      --
      -- I have a private email server in my basement.
  5. Devient behavior is the answer! by Kenja · · Score: 2, Funny

    Just generate a history of horrifically devient behavior and they'll take you out of the system out of sheer shame by association. Start by googling zucchini and lubrication.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
  6. I really don't care. by chemicaldave · · Score: 2, Insightful

    If companies want to market ads to me based on my behavior then go for it. I wont click them anyway. Give me something that bans obnoxious (I don't need to explain what these are) ads.

  7. Re:"Opt-out" indeed by wealthychef · · Score: 4, Insightful

    Yes, I can always rely on marketers to honor the "opt-out" feature. And it's always so easy to find and use! This is an obvious fraud designed to avoid pending legislation of some sort. It's a dishonest attempt to appear to honor people's privacy. Only Opt-In truly honors my privacy. My data is MINE.

    --
    Currently hooked on AMP
  8. So... what? by rakuen · · Score: 2, Insightful

    So people like us /.'ers who know ways to block advertisements have little use for this. The rest of the people probably won't know or care enough to utilize it. I suppose there's a middle ground in there something, but I think the bottom line is I'm impressed by how much nothing this accomplishes for the end user.

    I suppose it does help cover a business' rear a bit in the legal department.

    1. Re:So... what? by mlts · · Score: 2, Insightful

      It is just advertising PR. It also is a wakeup call to the more technologically adept people that they are far better served by using products like AdBlock, NoScript, Sandboxie, BetterPrivacy, and other items as opposed to thinking that the website or its advertisers will do anything else but sell any and every bit of info they get to the highest bidder.

      Of course, the opt out button is there, but is the private info still present on their servers? Even in saved database snapshots? All this information can be easily mined and used for profit the second that advertising company gets bought out, or declares bankruptcy, and there is nothing a person can do about it.

    2. Re:So... what? by AuMatar · · Score: 3, Insightful

      No, it's an attempt to head off legislation. By making a voluntary "self-policing" system, they get to point at it and say "See, we're doing something" in an attempt to block legislative efforts that would likely be more strict.

      --
      I still have more fans than freaks. WTF is wrong with you people?
  9. "easy-to-use opt-out option" by John+Hasler · · Score: 2, Insightful

    I've already got one of those. It's called Privoxy.

    --
    Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  10. It's a trap! by __aagctu1952 · · Score: 3, Funny

    Let me guess: The Advertising Option Icon will be a 1x1 transparent gif? :-)

    1. Re:It's a trap! by rakuen · · Score: 2, Informative

      You can do even better. Use CSS to hide it behind another image. Then you can't even find it accidentally!

  11. Opt Out? Shouldn't that be Opt IN? by krelvin · · Score: 2, Insightful

    I would much rather opt in for stuff I am interested in with Opt Out being the default.

    Why should a consumer need to opt out of something they didn't ask for.

  12. The right of self-determination over personal data by Jah-Wren+Ryel · · Score: 3, Insightful

    Screw this voluntary self-regulation slap-on-the-wrist-at-worst bullshit.

    What we really need is legal backing for the right of self-determination over personal data.

    --
    When information is power, privacy is freedom.
  13. Re:My way of fighting against advertisement: by Abstrackt · · Score: 3, Interesting

    Here's how I fight against advertisement:

    I never buy anything that has been advertised to me, period.

    Advertising is not only annoying, but often it's rather immoral with it's use of "behavior modification" techniques.

    Everyone should boycott any product that's advertised in annoying ways.

    How do you buy food?

    The bakery in your local grocery store wafts the smell of fresh bread for a reason and the sugary cereals sitting on the lower shelves are decorated brightly so the little ones can pick them out more easily. Even at the less devious end of the scale, like a farmer's market, you still need to be advertised to to know the product exists, right?

    --
    They say a little knowledge is a dangerous thing, but it's not one half so bad as a lot of ignorance. - Terry Pratchett
  14. Re:My way of fighting against advertisement: by catbutt · · Score: 2, Insightful

    Everyone should boycott any product that's advertised in annoying ways.

    Boycotts don't work. "Everyone" is not a single individual with a single shared interest. It is a lot of separate people, each with their own interests, acting independently. Expecting anything different is doomed to failure.

    Unless you can convince people that their individual interest will be served by participating in your boycott (regardless of whether or not other's participate), you can expect the boycot to fail.

  15. Re:No thanks. by zeropointburn · · Score: 3, Interesting

    You must not use any sites that have been forced to host and embed ads because their readership blocks the advertisers. I would much rather be able to allow or deny ads not just by advertiser (doubleclick can burn in hell), but by site as well. Then I could block all the ads on various slashdot links while still allowing ads at sites I like. Wish someone would do that with adblock/noscript.

    --
    -1 raving lunatic; +6 subGenius... Things even out...
  16. Easy to find opt out... by spinkham · · Score: 3, Insightful

    A:I eventually had to go down to the cellar.
    P: That's the display department.
    A: I had to take a torch.
    P: The lights must have been out.
    A: So were the stairs.
    P: But you did find the plans^H^H^H^H^H opt out button?
    A: Yes, I found them. In a locked filing cabinet in a disused lavatory behind a door that said "Beware of the tiger".
    P: That's our display department.

    --The HitchhIker's Guide to the Galaxy

    --
    Blessed are the pessimists, for they have made backups.
  17. Re:No thanks. by hedwards · · Score: 4, Insightful

    If they defaulted to opt-in tracking and refrained from those obnoxious flash ads, I'm sure there'd be quite a few more people that would be willing to watch the ads. But when ads purposely cover content randomly, crash the browser or track you without permission, that's pretty deserving of being blocked.

  18. Re:"Opt-out" indeed by hedwards · · Score: 2, Interesting

    I'm not sure about these days, but I did spend a bit of time unsubscribing from spam for a while. It was a junk account that I was going to have to abandon either way. The results were a noticeable reduction in spam messages pretty quickly, then a gradual increase over time. I'm not sure what the actual explanation is, given that most spammers don't have any way of receiving a response to their spam, other than through a store.

  19. well if they are not stupid by RobertLTux · · Score: 2, Informative

    47CFR64.1200 (thats the Code of Federal Regulations Volumne 47 section 64 subsection 1200)
    or as it is formally known
    TITLE 47--TELECOMMUNICATION

                    CHAPTER I--FEDERAL COMMUNICATIONS COMMISSION (CONTINUED)

    PART 64_MISCELLANEOUS RULES RELATING TO COMMON CARRIERS--
    Table of Contents

        Subpart L_Restrictions on Telemarketing, Telephone Solicitation, and
                                                        Facsimile Advertising

    of course you will have a somewhat different actual law but...
    if they think you live this far south then you
    1 ask for their name
    2 ask for the "company they are calling on behalf of"
    3 ask them for a call back number (must be a non toll number)
    4 bonus points if you are on the CA DNC list

    of course 99.999% of the time they will drop the call once you inform them that you are invoking 47CFR64.1200
    (of course if you can invoke the CA version thats even better)

    --
    Any person using FTFY or editing my postings agrees to a US$50.00 charge
  20. let me just reply to myself and invite a downmod by spazdor · · Score: 2, Interesting

    As another example, I can recall a couple IM programs with an "auto-away" feature, which activates after a certain period of idleness, but automatically deactivates as soon as you move the mouse, regardless of which window has focus. I would choke that program down to receiving mouseclick and keyboard events only. No mouseover, no GetFocus(or whatever the damn API calls it), just the facts.

    --
    DRM: Terminator crops for your mind!