Posts tagged as:

Earlier this month, Google made news when it announced that its cloud computing productivity suite Google Docs had suffered a technical glitch that temporarily compromised a subset of users’ shared documents. After becoming aware of this glitch, Google notified its users via email and posted an entry to the Official Google Docs Blog that offered a more detailed explanation of what happened.

It turns out that a bug in Google’s permissions code was causing certain documents that had been shared by their author with other users but subsequently unshared to remain visible to those users. By the time Google notified its users, the bug had already been resolved, and Google estimates that only around 0.05% of all documents were vulnerable due to the glitch. As to how many documents were actually viewed by unauthorized parties, it’s unclear at this point.

All in all, the Google Docs glitch, while troubling, seems relatively minor as far as bugs go. Nevertheless, the Electronic Privacy Information Center’s Mark Rotenberg jumped on the chance to attack Google, as he often does when Google makes news for anything privacy-related. Yesterday, EPIC filed a complaint with the Federal Trade Commission that called on the FTC to investigate Google’s privacy safeguards, order Google to shut down all cloud computing services—including Gmail, which has 26 million users—pending a thorough privacy evaluation, and force Google to pay $5 million to a fund that would be setup for “privacy research.”

Watchdog activist groups like EPIC can play a useful role in the public discourse on privacy, helping to publicize unsavory behavior by companies and educating consumers about keeping data secure. Unfortunately, however, these groups’ admirable focus on protecting privacy sometimes edges on the myopic, causing them to overreact to data breaches and sometimes even call for regulatory interventions that are decidedly anti-consumer. EPIC’s latest complaint about Google is a classic example of this.

Continue reading →

Google’s new “Interest Based Advertising” (IBA) program represents the company’s first foray into what is generally called “Online Behavioral Advertising” (OBA):  In order to deliver more relevant advertising, Google will begin tailoring ads delivered through AdSense on the Google Content Network (GCN) and YouTube.com (but not Google.com).  This tailoring will be based on a profile of each user’s interests created by tracking their browsing activity across sites that use AdSense-but not search queries or other user information.  Until now, (i) AdSense has delivered essentially “contextual” advertising by choosing which ad to display on a page based on an algorithmic analysis of keywords on that page; and (ii) Google has tracked users’ browsing only for analytics purposes-to limit the number of times a user sees a particular ad (to prevent overexposure) and to allow sequencing of ads in campaigns where one ad must follow another. 

Google is sure to be attacked for crossing a “line in the sand” drawn by some privacy advocates between contextual and behavioral advertising-even though Google’s closest competitor, Yahoo!, already offers a similar program, and the concept in general is hardly new.  Google’s position as the leading search engine and third party ad-delivery network will no doubt cause paroxysms of privacy hysteria among those who consider targeted advertising inherently invasive, unfair or manipulative.

But those whose first priority is advancing consumer privacy, not advancing a political or regulatory agenda, should applaud Google for excluding sensitive categories and for putting the new Ad Preference Manager at the core of the company’s new IBA program.  The Ad Preference Manager sets a new “gold standard” for implementing the principles of Notice and Choice, which have formed the core of both OBA industry self-regulation and the various regulatory proposals made in recent years.  Indeed, Google has done precisely what Adam Thierer and I have called for:  giving consumers more granular control over their own privacy preferences by developing better tools.

Continue reading →

Whenever I pen anything about the dangers of age verification mandates for the Internet and social networking sites, I always point to Federal Trade Commission (FTC) reports about rising identity theft complaints. For the ninth year in a row, identity theft was the number one consumer complaint to the agency.

Now, imagine how much worse this problem could get if government mandated that everyone had to be “verified” before they were allowed to visit a social networking site, however that ends up being defined. Such a mandate would exponentially increase the amount of personal information — especially credit card information — that was available to identity thieves.  Age verification advocates often ignore this problem when making the case for regulation.

Worse yet, much of the information that would be made available via such mandates would be personal information about children, which makes for a very attractive target for identity thieves since those records are rarely checked until the kids get much older and start applying for things. At least most adults typically learn they have been the victim of ID theft shortly after it occurs, allowing them to take steps to deal with the situation. With kids, their records could be milked for years by bad guys without them or their parents ever knowing it.

ID theft FTC

Even an economy in shambles shall not sway the elevation to Federal Trade Commission chairmanship of Jon Leibowitz, an interventionist-minded commissioner who, like all planners, knows better than others how markets should be structured.

In several important areas, his inclinations (judging from the cheers emanating from interest groups like PIRG and Center for Digital Democracy) lean toward substituting political “discipline” for what competitive markets offer.

He supports “opt-in” with respect to behavioral advertising, which we’ve often described as not-necessarily good for a lot of reasons. We’ll come back to this later.

He supports antitrust intervention with respect to firms like Intel (and watch out, Google), and favors destructive “conditions” on mergers. Nineteenth-century, smokestack-era antitrust, rather than withering, now seems dedicated to exploiting and hobbling large-scale transactions in ways that end up creating entities that would not emerge in free markets. Several mergers lately have resulted in such artificially constrained frankensteins, or suffered catastrophic delays. Thus “competition policy” (ha!) neuters the healthy competitive response to them that could have come about. (See my FCC comment on XM/Sirius in that regard.)

On “net neutrality,” we leap beyond whether markets are adequate to discipline errant behavior; here the starting point is the nominee’s doubt that even antitrust intervention is necessarily “adequate to the task”; thus the implication that new laws may be in order.

Let’s just take net neutrality for now. There are plenty reasons I think it’s an outrage to regulate price and access on networks and infrastructure; but just for the moment, the entire concept rests upon numerous (I often feel deliberate, in my less-charitable moods) misperceptions or misrepresentations about competitive markets and capitalism. These include but are not limited to the following: (Adapted from an FCC filing I made).

Continue reading →

Facebook sparked a major user uprising when it amended its terms of service earlier this month to grant the social networking site greater licensing rights over user-submitted content. The implications of Facebook’s amended Terms of Use were originally uncovered by The Consumerist this past Sunday in a story entitled, “Facebook’s New Terms Of Service: ‘We Can Do Anything We Want With Your Content. Forever.'” The title pretty much sums up what the controversy was all about: under Facebook’s amended Terms of Use, even after a user deletes his Facebook account, Facebook would retain its license to distribute nearly all types of user-submitted content including photos and videos.

Predictably, news of Facebook’s expanded licensing rights made many users angry, with several Facebook groups against Terms of Use modifications popping up, attracting thousands of members overnight. As is often the case with juicy reports like this one, news of the Facebook fiasco spread throughout the blogosphere rapidly, eventually making its way to major tech sites and even the main page of CNN.com. By yesterday afternoon, a snapshot of Mark Zuckerberg‘s face was plastered on Fox News Channel, next to an excerpt of an entry he posted to Facebook’s blog in defense of the social networking site’s new terms.

Facebook’s explanation of its new terms seemed reasonable enough: even after a user quits Facebook, material that user has posted on friends’ walls and other messages the user has sent to others may remain available. Facebook also noted that its perpetual license only allowed the site to use material in accordance with departed users’ privacy settings (presumably at the time of their departure). Under the new terms, therefore, Facebook would still be required to respect albums marked as private–and ensure they stay that way.

But the seemingly stark contrast between Facebook’s attempts to justify the changes to its terms of use and, well, the actual language of terms themselves left many observers dissatisfied. In theory, if a user who had a Facebook photo album open to her entire network were to delete her account, Facebook would retain license to make those photos available to members of her network in perpetuity. And depending on how you parse the amended terms, Facebook could even use your profile pic in ads for the social network long after you terminated your Facebook account.

Continue reading →

Statue at FTC Headquarters: “Man Controlling Trade” (We’re rooting for the horse!)

Adam Thierer and I have just released a new PFF paper entitled “Targeted Online Advertising: What’s the Harm & Where Are We Heading?” (PDF) about the FTC’s new “Self-Regulatory Principles for Online Behavioral Advertising.”  Adam lampooned some of the attitudes at play in this debate in a great rant yesterday.

But we give the FTC credit for resisting calls to abandon self-regulation, and for its thoughtful consideration of the danger in stifling advertising-the economic engine that has supported a flowering of creative expression and innovation online content and services.  That said, we continue to have our doubts about the FTC’s approach, however-well intentioned:

  1. Where is this approach heading?  Will a good faith effort to suggest best practices eventually morph into outright government regulation of the online advertising marketplace?
  2. What, concretely, is the harm we’re trying to address?  We have asked this question several times before and have yet to see a compelling answer.
  3. What will creeping “co-regulation” mean for the future of “free” Internet services?  Is the mother’s milk of the Internet-advertising-about to be choked off by onerous privacy mandates?

We stand at an important crossroads in the debate over the online marketplace and the future of a “free and open” Internet. Many of those who celebrate that goal focus on concepts like “net neutrality” at the distribution layer, but what really keeps the Internet so “free and open” is the economic engine of online advertising at the applications and content layers. If misguided government regulation chokes off the Internet’s growth or evolution, we would be killing the goose that laid the golden eggs.

The dangers of regulation to the health of the Internet are real, but the ease with which government could disrupt the economic motor of the Internet (advertising) is not widely understood-and therein lies the true danger in this debate.  The advocates of regulation pay lip service to the importance of advertising in funding online content and services but don’t seem to understand that this quid pro quo is a fragile one: Tipping the balance, even slightly, could have major consequences for continued online creativity and innovation.

Continue reading →

Google has—as I noted it would last June—finally released (PCWorld, Google’s policy blog)  its eagerly-awaited suite of tools available for free (of course) at MeasurementLab.net that allow users to monitor how their ISP might be tweaking (degrading, deprioritizing, etc.) their traffic—among other handy features.  Huzzah!

So, now that we have visibility into traffic management practices on a large scale, remind me again why the FCC would need to  mandate “net neutrality” requirements?  Why not just leave the matter up to the FTC to enforce each ISP’s terms of use under the agency’s existing authority to punish unfair and deceptive trade practices?  Won’t the threat of users switching to another broadband provider discipline ISPs’ traffic management?  (As long as ISPs have traffic nationwide traffic management policies, even those users in areas lacking meaningful broadband competition will be protected from discriminatory network management practices by pressure in other markets.)

“If you believe that network neutrality government regulation is not needed, if you believe that the market will handle this … then you should also welcome Measurement Labs,” [Princeton Center for Information Technology Policy director Ed] Felten said. “What you are appealing to is a process of public discussion … in which consumers move to the ISP [Internet service provider] that gives them the best performance. It’s a market that’s facilitated by better information.”

Yes, it’s true (as PCWorld article linked to above points out) that a consumer might not be able to discern whether apparent degradation of their traffic was actually caused by the ISP or whether it might be the result of, say, spyware or simple Internet congestion.  But they don’t need to figure that out for themselves.  Although the relatively small percentage of users who install this tool are likely to be highly sophisticated (at least the early adopters), all they need to is “sound the alarm” about what they think might be a serious violation of “net neutrality” principles, and a small cadre of technical experts can do the rest:  examining these allegations to determine what ISPs are actually doing.  

Sure, there will be false alarms and of course many advocates of “net neutrality” regulation will still insist that ISPs shouldn’t be allowed to practice certain kinds of network management, no matter how transparently the ISPs might disclose their practices.  But the truth will emerge, and in the ongoing tug-of-war between public pressure and ISPs’ practical needs to manage their networks smartly, between the desire of some to have practices disclosed very specifically and the ISPs’ desire to maintain operational flexibility, I suspect we’ll find a relatively stable (if constantly-evolving) equilibrium.  It won’t be perfect, but do we really think government bureaucrats will do a better job of finding that happy medium?

Is $1,200,000,000,000.00.  That’s the expected 2009 Federal budget deficit.  Since the current Federal debt is estimated at a “mere” $10.6 trillion, this means that we’re expected to add nearly 9% in a single year to a debt accumulated over 233 years (since 1774).  This number also amounts to more than 8% of the U.S. economy. 

So what does this have to do with technology policy?  To start with, this figure comes from Congressional Budget Office estimates, which “don’t account for the huge economic stimulus bill Obama is expected to propose soon to try to jolt the economy.”  So, while the Obama team has talked about big “public works” and “infrastructure” spending (which used to be called, variously, “make-work,” “pork barrel” and “corporate welfare”), there’s sure to be huge pressure not to waste more taxpayer money on top of this staggering figure.  Whatever blame Bush deserves, Obama probably doesn’t want to go down in history as the man who finally caused the U.S. government to default on its unmanageable debt burden.

One certainly could make an argument that the kind of technology-related “infrastructure” stimulus Obama has talked about (e.g., broadband subsidies) would be less of a waste of money than, say, simply building more bridges (as Japan did in the 1990s, its “lost decade”) or other reflexively Keynesian responses.  But even so, I suspect that the total amount of funding made available for such projects won’t be anywhere near enough to satisfy the technology policy Left.  

This could result in increased pressure on the Administration to increase regulation of the technology sector in order to implement tech-leftist ideas about “protecting” users’ privacy, promoting media diversity or “fairness”, mandating net “neutrality,” “opening up” spectrum, etc.  Such  proposals might seem attractive precisely because they generally wouldn’t require increased Federal expenditures other than the cost of hiring more bureaucrats (which means more government employee union jobs anyway—hardly a bad thing for Democrats)—while the economic consequences of such proposals for companies and consumers will probably surely be trivialized.  For example, if the advocates of government control at the so-called “Free Press” can’t get universal broadband, they’ll probably press that much harder to cripple online advertising and traffic management by ISPs, just to name two popular bogeymen.obamas-new-new-deal

One might think that a sharp economic decline would cause policy-makers to think twice before undermining the business models that have supported IT innovation and real infrastructure investment.  But one has only to look at the policies of FDR’s first two terms to see how even an amiable, soft-spoken president elected on a mantra of change and “uniting” the nation in a time of crisis could consistently choose to place “Reform” (i.e., increased regulation) over “Recovery” (i.e., the health of the economy)—with devastating economic consequences.

Continue reading →

I attended the Federal Trade Commission hearing about the state of intellectual property on Friday, and wrote a piece about the event, “With US Patent Overhaul Dead, Agencies Ponder Changes As Industry Debates Role Of ‘Trolls’.”

The piece appeared in ip-watch.org, the excellent Geneva-based publication run by my friend and former colleague William New. Those of you who aren’t familiar yet with ip-watch.org should definitely begin following it: it’s a must-read for practitioners, advocates and activists concerned about all forms of intellectual property.

The Federal Trade Commission has announced that it will hold “a series of public hearings beginning on December 5, 2008, in Washington, D.C., to explore the evolving market for intellectual property (IP).”

It’s timely, then, that we will be having a forum Monday on a provocative book whose thesis is the title: Against Intellectual Monopoly. Co-author Michele Boldrin will present the book, and Rob Atkinson of the Information Technology and Innovation Foundation will critique it.

Highlighting one of the issues at Monday’s forum, the Arts+Labs blog points to Atkinson’s testimony about the value of American intellectual property on the export market. Over 50 percent of U.S. exports depend on some form of IP protection, according to Rob Atkinson.

It’ll be a good, interesting discussion. Register here now.