links for 2006-06-29

links for 2006-06-28

links for 2006-06-27

privacy, trust and the internet

I blog therefore I am ( …a nerd). Although, I’m pretty sure none of you out there would actually think that. In fact, I’d imagine that you reading this would picture me as intelligent, tall, dark and handsome. Haha! Or maybe not. Two out four are correct but I’ll leave it up to you to decide which. So! Am I just publicly stroking my ego? Or is there some point to this, you ask?

Well, there is! I posted recently about online spaces, privacy and their implications. In that post I quote a few examples of where online spaces had betrayed the trust of their users and allowed their personal information to be used against them. Betrayal, I suppose, is the wrong word to use in this case because there has never been any protection.

Online spaces are, for the most part, public only allowing for the most basic levels privacy. We have ‘friends’ ‘contacts’ and ‘everybody’ and these usually the only distinctions we have when deciding who we share our personal bits with. But this, I’m sure you will agree, is far from who things work in real life. If we are going to be sharing more of ourselves electronically we need more realistic ways of representing trust and protecting privacy.

First of all we need to come to terms with what exactly privacy is. Chrisopher Allen has made some really insightful comments in his post ‘four kinds of privacy’

When people speak about privacy, they may actually be talking about very different forms of privacy: defensive privacy, human-rights privacy, personal privacy, and contextual privacy.

Defensive privacy is the first form: it’s about protecting information about myself that makes me vulnerable or makes me feel at risk. This type of information can include things like my social security number, my credit report, or non-financial things such as my medical records or my home address… Most of the current privacy issues on the Internet seem to fall into this category.

Closely intersecting defensive privacy is the category of human-rights privacy. Human-rights privacy differs from defensive privacy in that it is about how governments can abuse information, rather then individuals abusing information.

The third kind of privacy, personal privacy, is more unique to the United States. It is what Supreme Court Justice Brandeis in 1890 called “the right to be left alone”. This form of privacy is often what the more Libertarian-oriented founders of the Internet mean when they talk about privacy. Personal privacy covers things like the “do not call registry”, the various rights to do as we please in our own houses — such as view pornography or play S&M games with our partners — and the general right to not be interrupted or interfered with unnecessarily at home.

Finally, contextual privacy. This category is very difficult to define, and is easily confused with other forms of privacy, but I believe it has more to do with an inappropriate level of intimacy. An example of this is when I discovered that my professional colleagues on Orkut could see that I was in a committed relationship, and in turn I could see that some of them were in open marriages. I don’t think there is very much harm that can come from this information being revealed, however, it was “icky” because it was an inappropriate level of intimacy for a professional context.

The important point made here is that there are varying levels of privacy, and each level is sensitive to context. And who we choose to share this private information with is dependant on our levels of trust. Chrisopher Allen has another great post about this too…

I believe that as we evolve social software to better serve our needs and the needs of the groups that we are involved in, we need to figure out how to apply an understanding of how human groups behave and work.

One useful concept I use I call “Progressive Trust”. The basic idea is to model how trust works in the real world, between real people, rather then solely relying on mathematical or cryptographic trust.

This is how I typically explain progressive trust when I meet someone in-person at a conference:

… As our unspoken agreement to continue discussion evolves, we typically will unconsciously check to see if others are listening, and adapt our conversation thereafter. If the discussion becomes more personal or serious, we will often find ourselves moving to a more private portion of the room. As our discussions become deeper, we may begin to speak of things that hint at a mutual respect for confidentiality.

Also early on we’ll begin to scope out the nature of our time together. Is it only professional, or a potential friendship? Even intimate relationships go through this phase — are we with someone who wants to date? Is is possible that a future date lead to something more?

At some point our mutual interests may be so large that we decide not just to collaborate, but to share assets, whether through a partnership, a corporation, or a marriage. Before this is complete there will be more credentials and authentication of those credentials (talk to former employees, engage in credit checks, visit each others’ families, take blood tests), endorsements, and less risky tests of the full contract (signing a term sheet, or a marriage engagement).

This is what we should be aiming for and trying build. What we have now is just absurd by comparison.

Take myspace.com for example. A random stranger, 1 of 50 million, wandering around stumbles across your profile and let’s say you’ve filled it out in detail. Said random stranger now knows how you look, your name, your interests, your favourite films, books and who you hang out with (all 739 of them). Real life random strangers might know how you look but, unless you walk around with a name tag, that’s all they’ll ever know.

What happens if someone actually goes out looking for information on you? Say you were applying for a job and they decided to look into your background. Wouldn’t it be great to be able to enjoy some defensive privacy?

(oh, I seem to have gotten just a jbit side tracked with this post, so I’ll get into the tall, dark and handsome bits next time)

links for 2006-06-26

links for 2006-06-23

links for 2006-06-21

links for 2006-06-20

links for 2006-06-19

the nsa, social networks and privacy

It’s been some time now since news of the NSA’s domestic spying program broke. Wired’s coverage of the story has been exceptional so there is not much more for me too add.

It also since surfaced that the NSA has also been funding research into datamining social networking sites like myspace. The press, though, have made a meal out of that story. (btw. check out what the we feel fine project have done.) Datamining publicly available information is not all that bad in itself.

The real cause for concern though is not that the NSA is mining social networking sites, it’s that the practice is well on it’s way to becoming common practice

Many companies that recruit on college campuses have been using search engines like Google and Yahoo to conduct background checks on seniors looking for their first job. But now, college career counselors and other experts say, some recruiters are looking up applicants on social networking sites like Facebook, MySpace, Xanga and Friendster, where college students often post risqué or teasing photographs and provocative comments about drinking, recreational drug use and sexual exploits in what some mistakenly believe is relative privacy.

Most people mistakenly assume that what they post stays between them and their friends, but that’s just naive. The argument made by the companies is that the information already is public, which is true. And it’s not just prospective employee’s tapping into this, police have used MySpace to ID suspects and to arrest taggers.

This is one of the consequences in living in the electronic age, more and more of what we do, how we interact, is being recorded and we’re only just coming to terms with what this means. We’re putting more and more of ourselves online so you would have thought that someone would have stopped to consider what exactly the implications would be, but noooo….

It’s reassuring to know though, that people are starting to look at identity and think about what it means on the internet. Oh, no prizes for guessing what they’ve dubbed the idea, Identity 2.0. Check out Dick Hardt’s follow up to his ETech 2006 talk.

The identity protocol’s of the future should have the flexibility to allow us to control what about ourselves we reveal and who we reveal it to. I doubt that they’ll stop the NSA but it might just keep safe from your prospective employee’s prying eyes. For now, just be like this guy…

the executive found the candidate’s Web page with this description of his interests: “smokin’ blunts” (cigars hollowed out and stuffed with marijuana), shooting people and obsessive sex, all described in vivid slang.

hahaha!


Technorati Tags: , , ,