7 ms·

The problem is not that software developers are sleeping, it's that most users do not care much and are not willing to pay for privacy despite saying it's impor

The problem is not that software developers are sleeping, it's that most users do not care much and are not willing to pay for privacy despite saying it's important for them. This might change when people actually realize what companies can and will do with their personal data and how easy it is to categorize, predict and manipulate people with only a little of their behavior data. Until then, people will just enjoy their free search engines, social networks, phone operating systems and will be content paying with their private data. Some things are changing for the better though: Many people finally become a bit more informed about privacy, also thanks to the effort of journalists uncovering some of the biggest data scandals. In addition, at least for EU citizens the situation should massively improve on May 25, 2018, as then the new EU data protection directive will come into force, which will significantly increase the rights of people to control how, when and by whom their data can be used. And with a maximum fine corresponding to 4 % of the worldwide revenue, companies will finally have some good incentives to be more careful with the data of their users.

unknown2374 10y ago
To add to that, I have found that a lot of my friends in the software developer community, who used to have the "nothing to hide, nothing to fear" mentality, are finally paying more attention to privacy related issues in light of the new administration in the States. Reminds me of what Snowden said a few years back, "Even if you trust the government today, what happens when it changes?”. I have noticed a similar phenomenon happening among my non-technical family members as well. So yes, I am totally with you that things are changing, I am excited to see how the dynamic changes in Silicon Valley for companies that used to rely on that mentality. However, I am still worried that this might just be an initial reaction to the regime change in the States and it might die down soon as people, at the very least the non-technical people, might become tired of how hard it is to use products that are privacy and "freedom" respecting and might fall back to the convenience of the products and services offered "free" but for the price of their privacy.
- digi_owl 10y ago
  I can't help wonder if it is a generational memory thing. The people doing tech now didn't grow up or live through a massive war and police states. Because those that did had insulated them from that. It seems like we humans are incapable of learning from past events because we primarily learn by experiencing. End result is that we take the status quo for granted until it changes, boiling frog like.
  - intended 10y ago
    It is definitely a generational and cultural thing. For example : I feel the same way about American positivity on self driving cars, because I live in a country where people can drive on the wrong side of the road, or footpaths. Where beggars can swamp your car during a light, or where gangs distract you by tapping the back of your car. These are cultural memory and experience. In India, people are very pro surveillance, many believe that we have nothing to hide and those who do are likely criminals. We are only building civil liberties groups today. Side note: apparently the boiling frog thing isn't true. If it gets hot it jumps out.
  - xkxx 10y ago
    > boiling frog like Just want to mention that the anecdote about a frog slowly being boiled alive has no foundation in reality: https://en.wikipedia.org/wiki/Boiling_frog https://en.wikipedia.org/wiki/Boiling_frog.
  - qplex 10y ago
    To be fair, your viewpoint is quite narrow. There are plenty people doing tech and living in police states even today.
busterarm 10y ago
I'm a dev on a marketing team and we build all our own AdTech instead of buy products, for the most part. The (mostly young) online paid ad guys are way more paranoid than the old conspiracy theorist hacker types I grew up around. All we do is talk about how advanced the tech around attribution is, all the data DSPs are collecting about you, etc. All of these guys seem to have an attitude where they're making a deal with the devil and they want to make as much cash as they can before retiring to some island off the grid. It's really bizarre.
- theseatoms 10y ago
  Do they use any specific tools or practices to protect themselves?
  - problems 10y ago
    There's dozens of tools around for this, but I recommend this fairly simple combination: - uBlock Origin - just straight up blocking ads solves the problem, some lists also block other kinds of trackers, it also has an excellent advanced mode feature that can be used to whitelist - EFF's Privacy Badger - blocks or trashes tracking cookies automatically, includes social blocking too - HTTPS Everywhere - force SSL on with as many sites as possible - Consider referrer control extensions too, though they may break some sites Other tools in this field include Ghostery and Disconnect, but Ghostery has some sketchy ownership and Disconnect seemed to break random sites - plus most if not all of the stuff they catch will already be blocked between uBlock Origin with privacy lists and Privacy Badger.
    - ThePhysicist 10y ago
      I second uBlock origin and Privacy Badger, as they have (to my knowledge) no commercial interests. As OP said, many other extensions/tools actually belong -through intermediaries- to data collection companies, so they might protect you from some threats but actually spy on you as well. Ghostery allows you to opt out of their data collection though, so it seems that the tool is at least partially trustworthy.
    - 10y ago
Arizhel 10y ago
>it's that most users do not care much and are not willing to pay for privacy despite saying it's important for them.... Until then, people will just enjoy their free search engines, social networks, phone operating systems and will be content paying with their private data. What's worse is that there are privacy-respecting alternatives available out there, all for free or close to it. For search engines, you can use startpage.com and duckduckgo.com. For social networks, you can use Diaspora. You might have to pay for a cheap hosting account though. For phone operating systems, you can use LineageOS (formerly CyanogenMod). For PC/laptop OSes, you can use Linux. But no one wants to bother with any of these things. They'd rather use whatever's mainstream, and they're perfectly happy to post all their private information on Facebook for the whole world to see.
- zepto 10y ago
  Mostly accurate, until you say ' "they'd rather use whatever's mainstream" Ignoring that the options people do choose are vastly more capable, usable, convenient, reliable, supported, etc, than any of the options that would protect their privacy. People are making tradeoff, but it has nothing to do with what is 'mainstream'. The mainstream choices are mainstream because they offer tremendous value in comparison to the privacy preserving alternatives.
- obstinate 10y ago
  Excepting the dimension of privacy, none of those alternatives are as useful or capable as their mainstream competition.
  - subverter 10y ago
    After switching to DuckDuckGo from Google completely more than a year ago, I have to say it's quite good. Bangs (https://duckduckgo.com/bang https://duckduckgo.com/bang) are particularly useful. Are the results as good? Probably not. But there's always a trade-off we make when choosing our tools. It's not always about choosing the one with the most features or the one that's most popular. Sometimes ideology matters, and I'd say that's the case for many who choose a search engine like DuckDuckGo over Google. I'm more than happy to trade not-quite-as-good search results for privacy – and I know that the more people who do, the better those search results will become.
subverter 10y ago
I agree that a big share of responsibility lies with consumers not choosing privacy-minded alternatives. I wouldn't write off software developers completely though. There likely are some who simply do what they're told without speaking up or questioning the decision, even though they know better / think differently. They stick Google Analytics on a site instead of raising the idea of using Piwik instead. Or they add Facebook and Twitter share buttons without asking whether they can be optionally loaded. Maybe they'll be shot down by a superior, or maybe the superior doesn't even care and allows the software developer to decide. Depending on the size of the software's audience, that small decision could make a substantial difference in privacy.
- paulryanrogers 10y ago
  In my brief experience with adtech integrations it's more about costs in time and servers. Piwik takes more
laythea 10y ago
Yes, this is not the users fault as is kind of implied by the first statement. Most users (lamen users not tech savvy) don't have/don't know know they have much choice when it comes to privacy. That's why this has to be controlled by regulation rather than driven by market demands (which you allude to in the closing paragraph).
- subverter 10y ago
  Does it though? If people don't care about privacy, then government is wasting their time creating regulation that doesn't matter to people. That's not useful. If people don't know about the privacy implications of technology, is adding regulation the best way to inform them? There are lots of organizations like EFF that are much more effective with their resources to inform people compared to government. And wouldn't it be speculative to create regulation without first determining how people feel about it? Don't get me wrong – I think privacy is extremely important – I just don't think government can address it nearly as well as the free market, which is much more in tune with how important it is to people.
  - aninhumer 10y ago
    A market solution to privacy issues involves consumers making informed choices about how much information they share, which is currently relatively difficult. Companies are able to track a wide variety of information with only minimal effort to inform people or acquire consent. Regulation could make their use of data far more visible, or even require explicit consent for different instances of tracking. This isn't holding the market back, it's enabling individuals to make more efficient decisions about which transactions they think are actually beneficial to them.
    - subverter 10y ago
      I'd actually say it's relative easy to find privacy information about a product or company. Independent researchers and organizations (like EFF) are exposing privacy violations all the time. It's oftentimes just a search away. Case in point: Pokémon Go. It didn't take long at all before they were exposed (http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-a-huge-security-risk http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-...) for requesting full access to your Google account. The subsequent outrage caused them to take a more privacy-minded stance. My point being, this information is and can be made available to consumers without requiring government or regulation. A whole new non-profit organization could be established that does just that: researches and publishes privacy-related data on products/companies. It could even have a program that rates and awards gold stars to those that pass their requirements, like EFF's Secure Messaging Scorecard (https://www.eff.org/node/82654 https://www.eff.org/node/82654). > This isn't holding the market back... Regulation always makes it harder for new entrants to the market, while simultaneously keeping incumbents in power (because they're often large enough to handle the time and money required to comply). And with less competition comes less choice, poorer service, and higher prices. It sounds backwards, but not regulating privacy actually makes it easier for privacy-minded companies to enter the market and find success.
confounded 10y ago
I disagree. We are sleeping. It's not that ordinary people don't care; it's a cost benefit problem --- the time/bullshit-costs of moving data from entrenched cloud providers is large. The joy of hacking is that everywhere we go, we beat a path. We build good clients for bad APIs, we figure out the weird munge and consistency problems involved in data transfer, and we automate the process of managing servers. These levels of responsibility and abstraction are modern software, and the more we go there (personally and professionally), the easier it becomes for viable consumer-grade alternatives to appear. We also set-trends more than we realize. Almost every major newspaper has a tech section, and much of that is fascination with our culture, and reflection on privacy issues. This is on us.
- ThePhysicist 10y ago
  The privacy problem at its core is a political one, and it needs a political solution. I think the belief that software will fix the world, which is quite common among developers, is quite problematic because it often fuels behaviour that is not always very helpful. The truth is, the overwhelming number of societal problems get solved politically, and technology is often just the means to turn political decisions into reality. This might change in the future, but so far it is true. The data protection directive is a good example: With the political engagement of Jan Philipp Albrecht (and many others), he did more to protect peoples privacy than any hacker or software developer I could name. So if you really wanna do something about this, don't think about how you can solve the problem using technology, but for a change think about how you can help us achieve a political solution first.
  - MrQuincle 10y ago
    So, what laws should we propose from the IT community? + Ownership about your own data. + The right to be forgotten. + The right to use your own data in your way. + The transparency of being able to monitor who is when looking into your data.
    - ThePhysicist 10y ago
      Yes those are very good points, and they are actually contained in the EU data protection directive: * You have the right to know exactly what a company knows about you, for which purposes it uses that information, and how it processes it. * You have the right to revoke a company's permission to process/store your personal data, and a right to have your data erased (there are some exceptions though) * You have the right to obtain a digital copy of all your personal data (including data that was generated through your behavior, e.g. by clicking on "Like" on Facebook) in a common machine-readable format, and also to have that data transferred to another company if you wish so (this should make it easier to change providers) * You have the right to know (actually you even need to be told beforehand) for which purposes your data will be used and by whom it will be used. If you should be subjected to a fully-automated decision making process (e.g. your credit score gets calculated algorithmically) you have the right to know which kind of algorithms are used in the process and how their internal logic is structured.
pasbesoin 10y ago
When they deny you auto insurance or double your rates, because your brother living 1000 miles away looks like an alcoholic on Facebook. THEN, you'll start thinking about your privacy. You do realize, companies are already lobbying for and soliciting access to Facebook data. Tick tock... P.S. I became friends with and helped out a convicted felon, this past year. Three DUI's. Their life is now back on track. Per corporate-sought data maximalism, our Facebook friendship could cost me in terms of insurance premiums or even simple insurability, employability, perhaps my ability to get or maintain a mortgage. God knows. And that's a further part of the problem, that this is all feeding into corporate "black box" algorithms and decisions. Maybe I start getting "enhanced screening" at every pass through an airport, because the government -- or a private/privatized screener -- is using Facebook to acquire this third party data that, so far, it's (supposedly) prevented from acquiring directly. You see, it's not just alcohol, but this person used to be into drugs. So, do I need to rethink my whole decision to help this person? Will data domination dissuade simple kindness and decency? And that proverbial "second chance"? Privacy. Ultimately, it strikes at the core of our society and our humanity. A far greater threat than the ostensible threats ostensibly (um, data, please) being prevented. Or, in the case of private business, a far greater loss than the profit supposedly being maximized.

unknown2374 10y ago

To add to that, I have found that a lot of my friends in the software developer community, who used to have the "nothing to hide, nothing to fear" mentality, are finally paying more attention to privacy related issues in light of the new administration in the States. Reminds me of what Snowden said a few years back, "Even if you trust the government today, what happens when it changes?”. I have noticed a similar phenomenon happening among my non-technical family members as well. So yes, I am totally with you that things are changing, I am excited to see how the dynamic changes in Silicon Valley for companies that used to rely on that mentality. However, I am still worried that this might just be an initial reaction to the regime change in the States and it might die down soon as people, at the very least the non-technical people, might become tired of how hard it is to use products that are privacy and "freedom" respecting and might fall back to the convenience of the products and services offered "free" but for the price of their privacy.

digi_owl 10y ago
I can't help wonder if it is a generational memory thing. The people doing tech now didn't grow up or live through a massive war and police states. Because those that did had insulated them from that. It seems like we humans are incapable of learning from past events because we primarily learn by experiencing. End result is that we take the status quo for granted until it changes, boiling frog like.
- intended 10y ago
  It is definitely a generational and cultural thing. For example : I feel the same way about American positivity on self driving cars, because I live in a country where people can drive on the wrong side of the road, or footpaths. Where beggars can swamp your car during a light, or where gangs distract you by tapping the back of your car. These are cultural memory and experience. In India, people are very pro surveillance, many believe that we have nothing to hide and those who do are likely criminals. We are only building civil liberties groups today. Side note: apparently the boiling frog thing isn't true. If it gets hot it jumps out.
- xkxx 10y ago
  > boiling frog like Just want to mention that the anecdote about a frog slowly being boiled alive has no foundation in reality: https://en.wikipedia.org/wiki/Boiling_frog https://en.wikipedia.org/wiki/Boiling_frog.
- qplex 10y ago
  To be fair, your viewpoint is quite narrow. There are plenty people doing tech and living in police states even today.

busterarm 10y ago

I'm a dev on a marketing team and we build all our own AdTech instead of buy products, for the most part. The (mostly young) online paid ad guys are way more paranoid than the old conspiracy theorist hacker types I grew up around. All we do is talk about how advanced the tech around attribution is, all the data DSPs are collecting about you, etc. All of these guys seem to have an attitude where they're making a deal with the devil and they want to make as much cash as they can before retiring to some island off the grid. It's really bizarre.

theseatoms 10y ago
Do they use any specific tools or practices to protect themselves?
- problems 10y ago
  There's dozens of tools around for this, but I recommend this fairly simple combination: - uBlock Origin - just straight up blocking ads solves the problem, some lists also block other kinds of trackers, it also has an excellent advanced mode feature that can be used to whitelist - EFF's Privacy Badger - blocks or trashes tracking cookies automatically, includes social blocking too - HTTPS Everywhere - force SSL on with as many sites as possible - Consider referrer control extensions too, though they may break some sites Other tools in this field include Ghostery and Disconnect, but Ghostery has some sketchy ownership and Disconnect seemed to break random sites - plus most if not all of the stuff they catch will already be blocked between uBlock Origin with privacy lists and Privacy Badger.
  - ThePhysicist 10y ago
    I second uBlock origin and Privacy Badger, as they have (to my knowledge) no commercial interests. As OP said, many other extensions/tools actually belong -through intermediaries- to data collection companies, so they might protect you from some threats but actually spy on you as well. Ghostery allows you to opt out of their data collection though, so it seems that the tool is at least partially trustworthy.
  - 10y ago

Arizhel 10y ago

>it's that most users do not care much and are not willing to pay for privacy despite saying it's important for them.... Until then, people will just enjoy their free search engines, social networks, phone operating systems and will be content paying with their private data. What's worse is that there are privacy-respecting alternatives available out there, all for free or close to it. For search engines, you can use startpage.com and duckduckgo.com. For social networks, you can use Diaspora. You might have to pay for a cheap hosting account though. For phone operating systems, you can use LineageOS (formerly CyanogenMod). For PC/laptop OSes, you can use Linux. But no one wants to bother with any of these things. They'd rather use whatever's mainstream, and they're perfectly happy to post all their private information on Facebook for the whole world to see.

zepto 10y ago
Mostly accurate, until you say ' "they'd rather use whatever's mainstream" Ignoring that the options people do choose are vastly more capable, usable, convenient, reliable, supported, etc, than any of the options that would protect their privacy. People are making tradeoff, but it has nothing to do with what is 'mainstream'. The mainstream choices are mainstream because they offer tremendous value in comparison to the privacy preserving alternatives.
obstinate 10y ago
Excepting the dimension of privacy, none of those alternatives are as useful or capable as their mainstream competition.
- subverter 10y ago
  After switching to DuckDuckGo from Google completely more than a year ago, I have to say it's quite good. Bangs (https://duckduckgo.com/bang https://duckduckgo.com/bang) are particularly useful. Are the results as good? Probably not. But there's always a trade-off we make when choosing our tools. It's not always about choosing the one with the most features or the one that's most popular. Sometimes ideology matters, and I'd say that's the case for many who choose a search engine like DuckDuckGo over Google. I'm more than happy to trade not-quite-as-good search results for privacy – and I know that the more people who do, the better those search results will become.

subverter 10y ago

I agree that a big share of responsibility lies with consumers not choosing privacy-minded alternatives. I wouldn't write off software developers completely though. There likely are some who simply do what they're told without speaking up or questioning the decision, even though they know better / think differently. They stick Google Analytics on a site instead of raising the idea of using Piwik instead. Or they add Facebook and Twitter share buttons without asking whether they can be optionally loaded. Maybe they'll be shot down by a superior, or maybe the superior doesn't even care and allows the software developer to decide. Depending on the size of the software's audience, that small decision could make a substantial difference in privacy.

paulryanrogers 10y ago
In my brief experience with adtech integrations it's more about costs in time and servers. Piwik takes more

laythea 10y ago

Yes, this is not the users fault as is kind of implied by the first statement. Most users (lamen users not tech savvy) don't have/don't know know they have much choice when it comes to privacy. That's why this has to be controlled by regulation rather than driven by market demands (which you allude to in the closing paragraph).

subverter 10y ago
Does it though? If people don't care about privacy, then government is wasting their time creating regulation that doesn't matter to people. That's not useful. If people don't know about the privacy implications of technology, is adding regulation the best way to inform them? There are lots of organizations like EFF that are much more effective with their resources to inform people compared to government. And wouldn't it be speculative to create regulation without first determining how people feel about it? Don't get me wrong – I think privacy is extremely important – I just don't think government can address it nearly as well as the free market, which is much more in tune with how important it is to people.
- aninhumer 10y ago
  A market solution to privacy issues involves consumers making informed choices about how much information they share, which is currently relatively difficult. Companies are able to track a wide variety of information with only minimal effort to inform people or acquire consent. Regulation could make their use of data far more visible, or even require explicit consent for different instances of tracking. This isn't holding the market back, it's enabling individuals to make more efficient decisions about which transactions they think are actually beneficial to them.
  - subverter 10y ago
    I'd actually say it's relative easy to find privacy information about a product or company. Independent researchers and organizations (like EFF) are exposing privacy violations all the time. It's oftentimes just a search away. Case in point: Pokémon Go. It didn't take long at all before they were exposed (http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-a-huge-security-risk http://adamreeve.tumblr.com/post/147120922009/pokemon-go-is-...) for requesting full access to your Google account. The subsequent outrage caused them to take a more privacy-minded stance. My point being, this information is and can be made available to consumers without requiring government or regulation. A whole new non-profit organization could be established that does just that: researches and publishes privacy-related data on products/companies. It could even have a program that rates and awards gold stars to those that pass their requirements, like EFF's Secure Messaging Scorecard (https://www.eff.org/node/82654 https://www.eff.org/node/82654). > This isn't holding the market back... Regulation always makes it harder for new entrants to the market, while simultaneously keeping incumbents in power (because they're often large enough to handle the time and money required to comply). And with less competition comes less choice, poorer service, and higher prices. It sounds backwards, but not regulating privacy actually makes it easier for privacy-minded companies to enter the market and find success.

confounded 10y ago

I disagree. We are sleeping. It's not that ordinary people don't care; it's a cost benefit problem --- the time/bullshit-costs of moving data from entrenched cloud providers is large. The joy of hacking is that everywhere we go, we beat a path. We build good clients for bad APIs, we figure out the weird munge and consistency problems involved in data transfer, and we automate the process of managing servers. These levels of responsibility and abstraction are modern software, and the more we go there (personally and professionally), the easier it becomes for viable consumer-grade alternatives to appear. We also set-trends more than we realize. Almost every major newspaper has a tech section, and much of that is fascination with our culture, and reflection on privacy issues. This is on us.

ThePhysicist 10y ago
The privacy problem at its core is a political one, and it needs a political solution. I think the belief that software will fix the world, which is quite common among developers, is quite problematic because it often fuels behaviour that is not always very helpful. The truth is, the overwhelming number of societal problems get solved politically, and technology is often just the means to turn political decisions into reality. This might change in the future, but so far it is true. The data protection directive is a good example: With the political engagement of Jan Philipp Albrecht (and many others), he did more to protect peoples privacy than any hacker or software developer I could name. So if you really wanna do something about this, don't think about how you can solve the problem using technology, but for a change think about how you can help us achieve a political solution first.
- MrQuincle 10y ago
  So, what laws should we propose from the IT community? + Ownership about your own data. + The right to be forgotten. + The right to use your own data in your way. + The transparency of being able to monitor who is when looking into your data.
  - ThePhysicist 10y ago
    Yes those are very good points, and they are actually contained in the EU data protection directive: * You have the right to know exactly what a company knows about you, for which purposes it uses that information, and how it processes it. * You have the right to revoke a company's permission to process/store your personal data, and a right to have your data erased (there are some exceptions though) * You have the right to obtain a digital copy of all your personal data (including data that was generated through your behavior, e.g. by clicking on "Like" on Facebook) in a common machine-readable format, and also to have that data transferred to another company if you wish so (this should make it easier to change providers) * You have the right to know (actually you even need to be told beforehand) for which purposes your data will be used and by whom it will be used. If you should be subjected to a fully-automated decision making process (e.g. your credit score gets calculated algorithmically) you have the right to know which kind of algorithms are used in the process and how their internal logic is structured.

pasbesoin 10y ago

When they deny you auto insurance or double your rates, because your brother living 1000 miles away looks like an alcoholic on Facebook. THEN, you'll start thinking about your privacy. You do realize, companies are already lobbying for and soliciting access to Facebook data. Tick tock... P.S. I became friends with and helped out a convicted felon, this past year. Three DUI's. Their life is now back on track. Per corporate-sought data maximalism, our Facebook friendship could cost me in terms of insurance premiums or even simple insurability, employability, perhaps my ability to get or maintain a mortgage. God knows. And that's a further part of the problem, that this is all feeding into corporate "black box" algorithms and decisions. Maybe I start getting "enhanced screening" at every pass through an airport, because the government -- or a private/privatized screener -- is using Facebook to acquire this third party data that, so far, it's (supposedly) prevented from acquiring directly. You see, it's not just alcohol, but this person used to be into drugs. So, do I need to rethink my whole decision to help this person? Will data domination dissuade simple kindness and decency? And that proverbial "second chance"? Privacy. Ultimately, it strikes at the core of our society and our humanity. A far greater threat than the ostensible threats ostensibly (um, data, please) being prevented. Or, in the case of private business, a far greater loss than the profit supposedly being maximized.