Posts about privacy

Social is for sharing, not hiding

I fear we are on the verge of fetishizing privacy. Well, we’re not — but our media and government are.

Media’s assumptions

Yesterday I got a call from a journalist about Google+ and its Circles. He was not at all hostile to Google, Facebook, or social, but even so, implicit in his questions was a presumption that privacy is our highest priority in social services.

Think about that for half a minute and the absurdity of it becomes apparent. We don’t come to social services to hide secrets; that would be idiotic. We come to share.

The journalist said that people must be afraid of being public. Think about that for the rest of a minute: Media and government have held a monopoly on publicness as they have owned the megaphone and soapbox. Now the internet gives the rest of us the ability to be public and these long-public people think we are scared of what the have? How patronizing of them.

The meme about Google+ Circles is that it beats Facebook on privacy because it gives us upfront control over whom we share with. That’s true: Every time I share something I make a decision about whether to share it with the public or some of my circles. That is better, clearer, and easier than digging into Facebook’s settings once and for all to silo my world. It is better than not bothering to change those settings and depending on Facebook’s defaults, only to find them change and become more public. Google+ got to learn from Facebook and start with Circles to enable this difference.

Except I have watched my own behavior with Google+ lo, these 36 hours and I find at when I share with less than everyone it is not out of privacy or security needs. It’s out of relevance. I may have something to tell my TWiT colleagues or my fellow journowonks that would bore everyone else who follows me. So I restrict my audience not to keep a secret but to reduce noise for them, which I can’t do on Twitter or can’t easily do on Facebook. I am still sharing; it’s better sharing.

The journalist talked about Zuckerberg and Google wanting us to share — and they do because, as I’ve said, they depend on getting us to generate more signals about our interests, needs, and desires so they can gi e us more relevant, thus valuable content, services, and advertising. But in the journalist’s phrasing I heard him implying that Zuckerberg and Page were squeezing stuff out of like toothpaste tubes, against our wills.

Nonsense. As I say in Public Parts, 600 million people can’t be wrong. We are sharing a billion things a day on Facebook alone because we want to, because we find value in it. That’s where the discussion should begin, with the power of publicness, not with the presumption of privacy.

Government’s presumptions

I was delighted yesterday to see a senator — Pat Toomey of Pennsylvania — warn his colleagues against “breaking the internet.”

Some are in such a rush to regulate the net and protect what they and media think is our highest priority — privacy — that they threaten to both hamper how sites and services and operate and how they can sustain themselves.

Jay Rockefeller is pushing do-not-track. John Kerry and John McCain have a privacy bill. Al Franken has a bill to limit sharing of location data with third parties (those “third parties” are becoming the boogeymen of the digital age, though they are often just companies that serve ads, provide web services such as analytics, and sell us stuff).

I’m not suggesting that all this legislation is bad. We do need privacy protections. Sites must give us greater and clearer control over what we share to whom and why (as Google seems to have done with its Circles). Phones should not be storing information about what we do without our knowledge and without giving us control over it. Stipulated.

But I fear unintended consequences. Rockefeller’s do-not-track could pull the advertising rug out from under web sites, forcing some of them to go behind a pay wall — if they can — and killing other sites, reducing the content on the web. Franken’s location bill, I learned this week, does not have a carve out for sending data to ad-servers (they are dreaded “third parties”), which could kneecap the local-mobile content industry before it even starts.

Politicians and media companies are coming at these questions at the wrong starting line: as if we go to the internet to take a piece of private information and squirrel it away there. That’s not what we’re doing. We’re sharing.

: MORE: On Twitter, @hasanahmad complains that when sharing a photo with a circle members of that circle could share it in turn and then it becomes more public.

Yes, absolutely. That’s how life works. You tell a friend something. Then, as I say in Public Parts, the responsibility for what to do with that lies with that friend; what you’ve said is public to that extent and whether it becomes more public is a decision your friend will now make. It may be fine to share in turn; it may not be. You’d need to set those conditions with that friend before sharing. And if you don’t want the friend to share, maybe you shouldn’t share. The issue here isn’t technology. It’s people. No change there.

So I asked my Twitter interrogator what he proposes we do about this: Put license conditions on the photo we share? Sue the friend?

This is where Eric Schmidt is right. I’ll paraphrase him: If you want to hide something, the worst place to do that is on a social network. That’s where you share. Your brain is where you hide secrets.

: SEE ALSO: Jonathan Allen on sharing for purpose v privacy.

The privacy industry: Scare and sell

At two privacy conferences—one in New York, the other right now in Victoria, B.C.—I’ve watched the growth of privacy’s regulatory/industrial complex and seen its strategy in action: scare, then sell.

Yesterday, before I spoke at the Reboot conference, the privacy commissioner for the province, Elizabeth Denham, got up to demonize the social net and its leaders. She said that Google’s Eric Schmidt believes privacy is not relevant anymore, citing his jokes about changing our names at age 21. She belittled Mark Zuckerberg, too. She bragged about helping to bring Facebook to accounts when she was in the federal privacy office. And she gloated about the fizzle of Google Buzz. Then she boasted about adding more regulators to her office and getting more resources. Scare and spend.

At a later panel, I saw a vendor go through his PowerPoint showing the growth of so many outlets of social media. He said 500 million people were using Facebook. Then he paused … dramatically. Then he said, “scary.” Why is that scary? He didn’t say. He talked about watching YouTube videos as if that could be harmful in and of itself. How? He didn’t say. That’s how the discussion of the social web has advanced in this industry: all you have to do is say people are using these mysterious tools and the fear is assumed. But then he sold his service. Scare, then sell.

I spoke with the head of an association of chief privacy officers. Boy, I said, I’ll bet your membership is growing. In increments of a thousand, he said. He also noted how the growth in the U.S. is in privacy officers while in Europe it’s in privacy regulators.

I saw the two come together at the other conference, MediaBistro’s in New York, when the head of a privacy advocacy organization issued his fearsome spectres for the crowd of companies and regulators. It becomes a self-powering machine: The privacy advocate feeds the regulators arguments to be scared and regulate more, then companies think they need more privacy services, and more companies are born to provide them—companies that set up booths here in Victoria. One handed out a slick magazine with the big cover billing: “Social Media RISKS: Four Areas You Must Examine At Your Company.”

In the draft of my book Public Parts—which I’m furiously editing now—I had not gone after privacy’s regulatory/industrial complex. I’m trying hard not to pit privacy and publicness against each other as they are not binary; one depends upon the other in a continuum of choices we all make.

But the emergence of Privacy, Inc., as a industry built on scaring people is beginning to scare me.

In my talk yesterday, I warned of unintended consequences of too much regulation enacted too quickly. I cited Germany’s Verpixelungsrecht, its blurring of images in Google Street View and the precedent that sets for others taking pictures in public of public views.

I also worry that efforts to bring in a Do Not Track list and other demonization of ad targeting could cripple the revenue of the media and news industries even as they struggle to find sustainability; it could kill news outlets and reduce journalism.

At the final panel I attended, moderated by Denham, I saw execs from trade groups and Yahoo as well as a reasonable friend from Ottawa’s privacy office talk about meaningful efforts that are being made to be more transparent about advertising, which—lord knows—is needed.

The ad and media industries have been damned fools, not being open enough about what they do and how they do it and the value that comes to them—in higher ad rates—and much more importantly to the public—in relevance (and less noise). But Yahoo showed off a good tool to see and change how you are being targeted. The Canadian Interactive Advertising Bureau put forward a good framework for self-regulation. FutureOfPrivacy.org gave good advice about seeing past tools and disclosures and making advertising actually worthwhile for consumers.

Denham, to her credit, asked the panel to define bad regulation. They said it’s taking a narrow issue and using broad strokes to regulate it, doing collateral damage. She came to the view of regulation I’ve learned from danah boyd: that we need to concentrate on controlling use of data more than the gathering of it. (It’s illogical, indeed impossible, to tell people what they may not know; it’s logical and feasible to tell them what they may not do with what they know.)

So at the end of the day, I felt a bit better. But I fear that the reasonable and necessary moves to protect privacy—and it does need protection—won’t be able to outrun the fear strategy. For fear is building a new industry, a very fast-growing industry.

: Here’s Mathew Ingram’s GigaOm report on my talk with a brief chat. I hope to be able to post the talk itself soon.

The kids are all right

Yesterday, I held a session on privacy and publicness as part of a news literacy event held at Baruch’s journalism school, intending to exploit these young people by interviewing them — rather than lecturing them — for my book on publicness and privacy. I came away greatly heartened about the wisdom and savvy of the NYC teens I heard from there.

I started the day, though, depressed as GMA weekend anchor Ron Claiborne delivered a propagandistic defense of all things professional, closed, and corporate in journalism and an attack on this internet thing. “When was the last time you saw a correction on a blog?” he demanded. I muttered, “fuck me,” and then had to remind myself of the company I was in. So I muttered on Twitter that I’ve seen countless corrections on blogs since I last saw one on network news. Claiborne was telling the internet to get off these kids’ lawns. I got grumpy. My mood didn’t improve when nobody showed up for my first of two sessions. “Well,” I joked with fellow faculty, “they say kids today don’t care about privacy today. I guess this is the proof.”

But in my second session, the room filled with three or four dozen young people (and a few teachers) and I began interviewing them. Boy, was I impressed. Random notes….

No one in the room uses MySpace. They scrunch their collective noses at the name. Not so very long ago, MySpace was said to be the service for young people, particularly urban young people. Well, no more. Rupert’s Folly has fallen off a cliff. It’s clear this is why he’s giving it two quarters to climb back up or he’s setting it adrift.

Almost none of them uses Twitter. They say it lacks context; it is too fast and fleeting; and they don’t care about much of what they read there (which makes sense when your friends aren’t there). When I tweeted that, the NYTimes’ @zimbalist asked why. I think it’s because they’re not publishers (yet). They’re connecting. Whether this is a matter of the the age or their age, I have no way to know; we’ll have to wait to see the impact on Twitter when they grow older.

But I’ve seen this elsewhere. This summer, as my son and I drove up to Facebook’s headquarters to interview Mark Zuckerberg for the book, Jake said he thought Facebook had invented something entirely new in the Wall. Its inventor disagreed; Mark said people always have, in his word, signalled. But I side with Jake. On his Wall (when I’m permitted in) I see him and his friends holding conversations there, in the open, as if in the hall at school. They use the Wall as a place to communicate. I see the Wall — as I think others my age do — as a place to publish or broadcast; we instinctively see it as media. So Twitter fits our reflex; Facebook theirs. But I think the young people are making use of the internet that is truer to its nature: It is not a medium but is a connector.

All the students post photos to Facebook; many post videos there; a few had posted videos to YouTube — interesting that so few do, because some of them come from a school for the performing arts. One young woman says she was going to take down her account because her videos are dumb and pointless, in her view: just her talking. One young man had just put up some impressions and he enjoys the idea of having a public there. Will we see more of that; is it their ambition to make media and audiences? Again, time will tell. I’ll bet we will as they find their public voices.

Every student in the room uses Facebook. They confess to being on it for hours at a time — three or more a day. My son’s was in the first class able to use Facebook in high school four-plus years ago. I thought it might seep down to middle school. So far, not so much. These students say they started using it in high school. I’ll confess relief. I found it fascinating that a few of the students with younger siblings were quite protective of them and did not approve of a 9-year-old using Twitter.

To a young man and woman, the people in this room confirm what I’ve learned from danah boyd: that young people do care about their privacy; that they do protect it; but also that they have to learn this. As danah says — countering Murdoch, btw — young people are not “digital natives” who are born with TOS in their DNA.

These students are very aware that what they tell a few friends on Facebook could end up anywhere, seen also by people they do not know. They post with that fully in mind. Backing up what danah says, many of them seemed to have been burned once and taught the lesson. The biggest challenge to privacy, then, is not so much Facebook or the internet but blabby, gossipy friends. Ever thus.

They are also aware that their parents and other adults are watching. Even if your parents aren’t your “friends” someone else’s may see what you write on their Wall. So they’re careful. Nonetheless they decry classmates doing stupid things (though they also know that folks often exaggerate on Facebook). Like what? Like showing themselves drinking. What could come of this? They could get caught.

Or there’s the college admissions problem. For these kids — bright, active, and mostly college-bound — that’s an issue. I ask whether they think that college admissions officers — and later, employers — should not be allowed to look at their Facebook presences. Surprisingly, none of them seem to object as a matter of principle and right. To them, it seems to make sense to check someone out online.

Almost all these students have changed their privacy settings, restricting their Walls, photos, birthdays, or contact information — even though, again, they know that anything could be repeated. They seem very much in control and like that control. They have other means of control as well: I ask whether they speak in code that they understand and parents don’t; they all laughed and nodded.

Is there, as media would lead us to believe, a sudden explosion of bullying? No, they tell me, there’ve always been bullies; it’s probably just easier to see them now. A teacher complained that fights get bigger crowds because students tweet the location and a mob gathers. “It doesn’t go down like that,” one of her students tells her. “There’s no texting.” Crowds gather the way they always have.

These students are not slavish fans of Facebook. One student argues that Facebook dilutes friendship; he says he doesn’t use it to communicate with his close (real) friends. Another says she unfriends people with some regularity because in reality friendships do change. A few others say they did discover new friends through Facebook. They all expect to use Facebook to stay in touch after they graduate. The point, says one: “Different people have different reasons to be on Facebook.” Some use it to connect with others; some use it just for fun. Which are you? I ask him. A bit of both, he says.

At the end, I ask what I’d missed and one student wants to be sure that I knew about the benefits of using Facebook and the publicness it brings. Oh, yes, I do, I assure her.

The Rutgers tragedy and privacy and technology

Last night, I went to CBS to record an interview with Katie Couric about the Rutgers tragedy, privacy, and technology.

Couric asked me the same question a half-dozen ways — old reporter’s trick; I’ve used it; I teach it — trying to get me to give her the answer she wanted: that the internet makes this different, that this is a teaching moment, and that we should give our children instruction about the dangers of the internet. I wouldn’t agree that technology makes the essence of this story and its sin different. The lesson is the same as it has always been: the Golden Rule. The sin could have been committed with a Kodak camera or a telephone or a letter, for that matter.

I do agree that the internet adds speed and reach and permanence to a mistake — that, as someone has said, it is a tattoo. But what this story really brings out is a timeless ethic of privacy (which is how I am framing the topic in Public Parts): Privacy is the responsibility of the person who receives information about someone. Once you know something about me, the weight lies with you as you decide how to use that information, whether to spread it, in what light. That came as close as I would to what Couric was aiming for and so this is the clip that made it onto the show.

I also said society bears responsibility in this story. That today anyone would still feel shame about being revealed as gay — full stop — and then would make such a tragic decision is our failing. I told Couric that the gays and lesbians who have summoned the courage to leave their closet and privacy behind to stand before the homophobes — saying, “Yes, I’m gay, you have a problem with that?” — are the heroes who used their publicness as a weapon against bigotry. I made clear to her that I am not suggesting people should be forced out of their closets. But I do believe that the people who have chosen to leave have operated under an ethic of publicness. If the weight of the ethic of privacy lies with the recipient of information — you know information about me — then the weight of the ethic of publicness lies with the originator of information — I know something and must decide whether it would be of benefit to others to share it.

As I left, I tried to tell Couric that media too often look at technology and change and see only danger. This is how the invention of the Kodak camera was treated in the 1890s. More than 500 million people choose to share on Facebook because they see benefit in it and more do so on Twitter and in blogs and YouTube…. Media constantly looks at the edge, the dark edge, jumping on a story such as this to seek out the perils technology brings. Couric protested that they do lots of stories about good things in technology. Every time Steve Jobs does anything, we cover it, she said. But that’s not understanding its value, I argued. I urged her to do a story in which young people who use and understand Facebook explain it to their elders.

We can’t pretend to give young people lessons in the internet if we don’t understand how they see it. For example, I’ve learned lately that young people use Facebook’s Wall to hold conversations in public while people my age use it — with media reflex — as a place to publish or broadcast. Same platform, different uses, different worldviews, different impact. When I was in Berlin talking about publicness and privacy, Renate Künast, head of the Greens in Parliament, said she talked to a young person who took a cooking course instead of an a computer course because in the latter “what the teachers wanted to teach me was something I learned five years ago.” We have things to learn from children about the future, for the future is theirs and they’re building it right in front of us.

But in enduring morals and ethics — the Golden Rules — we parents remain the teachers and I don’t think we give ourselves enough credit for teaching and our children enough credit for learning well. Those rules pertain no matter the medium or the technology in which human interaction occurs. The Rutgers story is not a tale of technology creating tragedy. It is a story of human tragedy.

The real Facebook burglaries story

I did a little reporting to get the real story behind the reports of a Facebook burglary spree that supposedly used the service — right after its launch of Places — to find victims who were away on vacation. I emailed Nashua, NH detective Dan Archambault, who told me that only two of the cases involved Facebook and in each case, “one or two of the suspects were Facebook friends with the respective homeowners. They basically had access to the walls and could read that the families were away on vacation. The information was only available to friends and the Facebook Places feature was NOT a part of this. And finally my advice to Facebook users is carefully pick your friends and watch what you post.”

And my advice is don’t believe everything you read. So this was not a case of a criminal using Facebook to find any old random victim. The implication of the coverage is that we were all — all 500 million of us — at risk for being so foolish to make ourselves public on Facebook and make ourselves vulnerable to every criminal out there. No, it’s foolish to make the wrong friends. Always has been. Still is.

I also contacted Facebook, and a PR person there sent back suggestions for how to wisely use the service: “I would recommend creating friend lists to separate people you really trust from others. Then, use the publisher privacy control to
send status updates to appropriate groups (and only them). I actually think it may make sense to tell people you really trust that you are gone through Facebook just as you would in person. Then, they can watch your place for you, feed your cat, etc… As for everyone else, if you wouldn’t tell them in person you were leaving town, you probably shouldn’t use Facebook to tell them. As always, we also recommend people only accept friend requests from others they actually know.”

All sensible.

If only things were so simple for Google, where, according to Gawker, an engineer used his high-level access to the company’s data bases to stalk teenagers. Google fired him. But the damage is done. We spoke about the case on today’s This Week in Google and as Leo Laporte and Gina Trapani said, to keep systems running, someone will always have access to data. Of course, that someone should be trusted. But as this case reveals, you never know whom to trust. So the company must come up with systems to assure trust. Should there be teams that must operate together in failsafe mode to get access to data? You tell me what would work.

The bottom line for both companies is that trust is essential and cases such as these can ruin trust and eventually ruin companies if we cannot depend on them. In the first case, media blew up a story for effect. In the second case, a dangerous vulnerability is revealed.

: AND: Being a journalism professor, I suppose I should point out the journalistic lesson here about reporting.

When this story first came out, it was marked by sloppy reporting that was only repeated and diluted. I read a number of the reports and backed up the line to the Nashua paper trying to find answers to basic questions. Nothing.

For anyone who knows the slightest thing about Facebook — that is, any reporter who uses it — the reporting raised obvious questions. So I contacted Facebook, who gave me the email of the detective, and I asked him: How did the accused use Facebook? In how many cases? Were they friends — that is, connected on Facebook — with any of the victims? Facebook tells me that its Places feature was not involved; true? Finally, what advice do you have for people using Facebook? Plus a few, more-detailed questions about the specifics of how these victims used Facebook.

The detective said this is an ongoing investigation, so he was limited in what he could tell me. But, as you can see, he answered the essential and obvious questions reporters and editors should have asked before. And if they didn’t have answers, they should have said so. I say lately that the key skill of journalists is going to be less saying what we know than saying what we don’t know. That is the essential skill in process journalism.

But all along the chain, nobody wanted to ruin a good story: USE FACEBOOK AND YOU’LL BE ROBBED! Much more fun, isn’t it? Reporting takes all the fun out of it.