A Data Scientist Visits The Magic Kingdom, Sans Privacy
An anonymous reader writes "MailChimp Chief Data Scientist [John Foreman] is at Disney World this weekend wearing his RFID-equipped MagicBand. Here's how he thinks the practice of digitally tracking consumers in the physical world will reach everywhere from theme parks to our homes." Foreman's conclusion (and headline) — shades of Scott McNeally's famous "Get over it" — is "You don't want your privacy." That seems to miss the mark, at least for me: I don't mind parceling out certain kinds of information (like whether I like to buy decaf at Starbucks, or how long the wait is to ride Space Mountain), in contexts of my own choosing, but that's much different from being snooped on by the NSA or other state actors in other contexts.
I do value my privacy and its people like you selling it down the river for a cup of cofffee
It is called Down and Out in the Magic Kingdom. Cory Doctorow already figured it all out.
AnimePapers.org: Anime Wallpapers Handled With Care
Even if you don't care today, others are using data mining techniques to learn from those innocuous facts.
They know that coffee beans are decaffeinated using chemicals that cause cancer, and if they correlate that to an increased risk in cancer, they might increase your health insurance rates. And because people who drink decaf are statistically less alert and therefore more likely to get into car accidents than coffee drinkers, they're going to raise your car insurance rates, too.
Everybody has something to hide, even if the facts don't seem relevant to your well being today.
John
What would you expect someone who works as a data scientist for a company which does mass mailing say? Sure, Mail Chimp isn't a spamming service (through requiring double-opt-in) but a central part of its service is including trackers in e-mail to check if you're opening it.
I'd be more dubious if it was a data scientist from doubleclick, but not necessary much more.
In the UK we use that sort of technology to tag petty criminals. Nice to know how the mouse views me!
MailChimp sounds like a company that I'll go out of my way to avoid. Seems that their chief data scientist should have run this by their chief privacy officer before he slapped his companies name on it.
He may not, but i do.
---- Booth was a patriot ----
I went down to Disney just a few weeks ago.. and, to be honest, it would be awesome if the MagicBands actually worked. You have to be 1-2mm away from the reader for the readers to even attempt to get the data off the band.. and most times it just doesn't work and the cast members had to get the numbers from the back of the bands manually. So much for "Magic". Very frustrating. I was envisioning something more seamless.
I too don't really mind that Starbucks sees that I prefer fizzy drinks and chocolate brownies when I am with my coffee drinking friends. But I don't want them sharing that data with anyone. The best privacy law would be that you have 3 options when dealing with a company. 1 That they only use your data for internal purposes (No "trusted" third parties) 2. That they do with your data as they want. 3. That they destroy your data or at least anything that an information scientist could use to identify you (except for your preference) down to the minimum data required to do business with you. Also the companies could not offer discounts or charge extra depending on your preference. Lastly # 1 is the default option.
So looking at option 3 I would include information rich companies such as CC or phone companies. So with either of them they would be able to record what phone calls you made over the last month, Bill you, give you 30 days to dispute the charges, and then forget anything about you except that you are a customer and owe a certain amount. They wouldn't even be able to see what they billed you 5 months ago let alone who you called. Yes it is nice for the phone company to be able to look at their old records to figure out what they could sell you but that doesn't benefit me. That is stealing information from me. They would still have the information in aggregate so they could see that people 20% more each month and thus they should increase their capacity accordingly.
The same with things like EZPass, the power company, the water company, even the police handing out tickets. The moment I pay the ticket there is no reason for them to specifically remember that I got a parking ticket on the corner of South and Main. They could remember that someone did get a ticket, just not who.
To my understanding the MagicBand has two RFID components. One is long range, battery powered, and is used for tracking a person in the parks. My understanding is they use the data to see where crowds go, what's popular during different times of day on which days, and when there's too much of a crowd, they'll put out distractions to get the crowd to move. The other chip is for short range stuff like room key, purchase transactions, and FastPass. This one can be read by a NFC reader and everything but the serial number is encrypted. Here's the thing, it's a privately owned theme park that can dictate within reason what goes on in their park. Don't like it, don't go and patronize. Simple as that.
I've read on a Disney enthusiast that people up in arms saying they'd be putting foil around their bands and honestly I don't know why they're paying Disney to go to the park if they don't like it. What people need to be up in arms about is the dwindling of our freedoms and the abuses of the law by our (US) government. No, people may get a little grouchy, but they just put up with it and let is slide. A private company with their private property doing something to better their product and people flip a shit when they have a choice to not participate.
We went down recently and got the Magic Bands. Disney uses them in five ways:
1. Ticket into the park
2. "Fast pass+" for some rides in the park
3. Purchases (with a pin, if your card is tied in)
4. Room access if staying on resort.
5. Photo pass (photos shot by in park employees)
In most cases, these are actions that for >95% of us would be tied to our credit card transaction. Even the old paper fast passes would have been tied to your park ticket (which is probably tied to your credit card).
The photo pass is one that previously was not tied to your credit card in any way. You would take pictures and get a code, if you never bought the code or tied the code to your online disney account they would not have your picture. But I am sure Disney has plenty of CCD in place and could tie in your entering the park to a picture if they wanted.
I really doubt they are tracking people in the park. Their RFID sensors stink! You have to orient the band just right to get the RFID close to the sensor. You have to hold it still and sometimes swipe two or three times. I doubt they are long range scanning your RFID in the park without your knowledge.
Also, you only get three of the new fast pass+ "experiences" in the park each day. So they really will only see you in three spots. For them, this stuff is probably more useful for load leveling than privacy invasion.
BTW, problems with the system have been all over the place. Disney invested almost a billion in it and they were considering dropping it, but it worked pretty well for us.
So in summary, if you are skeevy about this at Disney World, pay cash or use gift cards to buy your tickets.
"You don't want your privacy."
That is my decision to make, not yours.
If Scott doesn't want his privacy, fine with me, I don't care. But whether or not I want mine is not his call. That's the basic, simple in-your-face fact that everyone in these pro- and contra-privacy discussions seems to be missing.
Assorted stuff I do sometimes: Lemuria.org
That would actually be a pretty neat reality show: "You have nothing to hide!" streaming live online!
"Live in this glass hotel, and prove to the world you have nothing to hide!"
"Cellphones and computers provided free! Stay 3 months and earn $10,000!"
smallprint>Sponsored by the NSA and your local congress troll!/smallprint
Hmm, the humour and sarcasm seem to have been be lost on you.