6 ms·
Etsy users irked after buyers, purchases exposed to the world
- s_mennen 16y agoThis issue has been addressed: http://www.etsy.com/teams/7716/announcements/discuss/6818578/page/1/ http://www.etsy.com/teams/7716/announcements/discuss/6818578... +10 for continuous deployment, too.
- gfodor 16y agoWe take this stuff very seriously, and I just worked with Rob (CEO), and we implemented this solution: http://www.etsy.com/teams/7716/announcements/discuss/6818578/page/1/ http://www.etsy.com/teams/7716/announcements/discuss/6818578... Being able to react to issues like this quickly is one of the great things about the Continuous Deployment process we have set up at Etsy. You can read more about that here: http://codeascraft.etsy.com/2010/05/20/quantum-of-deployment/ http://codeascraft.etsy.com/2010/05/20/quantum-of-deployment...
- jswinghammer 16y agoThat first link took me to an error page.
- gfodor 16y agoHmm, URL shortening breaking it? It works for me. Trying again: http://www.etsy.com/teams/7716/announcements/discuss/6818578/page/1/ http://www.etsy.com/teams/7716/announcements/discuss/6818578...
- jswinghammer 16y agoI was using the iPhone hacker news reader and it was broken there. Thanks.
- bigiain 16y agoNice to see a timely response, and that it's closed the privacy leakage at least for now. The statement linked there doesn't reassure me that Etsy might not "do a Facebook" and back down on privacy complaints for now, only to re-introduce them later on. Would anybody from Etsy like to state for the record that they understand that they made a serious mistake, and assure current and future users of their site that they _do_ respect our privacy and guarantee not to "leak" information like this, at least not without a very well explained opt-in mechanism in place first?
- code_duck 16y agoThat's what Etsy has done on past controversial/unpopular changes. They back off or modify it, only to trot it back out, sometimes bit by bit, later on when people aren't paying attention. That is, if they listen to their customers at all. Other times they just say 'we think this will be beneficial to sellers' and ignore their customers' opinions.
- azernik 16y agoOdd - this comment was posted 5 hours ago, and 15 minutes ago I went to my Etsy account and still saw, as my account's default privacy setting: Purchases Who can see your purchases? [x] Everyone (public) [ ]Only you (private, between you and the shop owner) I then decided to opt out - a decision I only knew I had to make after reading the Ars article.
- gfodor 16y agoWe've just pushed a change to remove the source of confusion. That option is no longer relevant as we no longer show purchase information in feedback to 3rd parties, so we've replaced the option with a message indicating that your purchases are private on Etsy.
- bugmenot 16y agoYou say that, but your site still provides an easy way of associating people's real names with their usernames -- something highly useful for social engineering.
- mukyu 16y agoIt sounds more like your continuous deployment resulted in deploying a change without considering the ramifications of it. Can you really consider that a 'win'?
- gfodor 16y agoThe issue here was stemmed from the fact that seller feedback for buyers made it so the items you buy became linked to your profile through your feedback page. In other words, even if you left no public feedback, a seller could still do something that associated that item with your account on your public profile. This, combined with the fact that folks now optionally have their real names linked to their Etsy account, made it so that a persons real name (if they chose to make it available) could be linked to a particular item through the seller feedback mechanism through no action of their own. This combined with the fact that buyer feedback is less relevant to Etsy now than it was years ago made us decide it was time to remove the buyer feedback from public view. The seller feedback mechanism we changed last night was something that had been in place since the beginning of Etsy. So, this particular issue we addressed was not a bugfix or a reversion of a previous change.
- primigenus 16y agoDon't you think it's kind of inappropriate to respond to a serious accusation with a marketing statement about the technical architecture of your site? I mean, sure, before reading this I thought Etsy was cool because of the continuous deployment thing, but now I think two things: 1. perhaps continuous deployment leads to launching features without thinking about their consequences for long enough; 2. Etsy's team is more interested in thumping its chest about continuous deployment than owning up to a serious mistake.
- gfodor 16y agoPerhaps you're right. My comment was primarily intended to link to the explanation of the change we made to address some of the concerns people had. Plugging CI was probably not necessary, though this is hacker news and so I thought it was relevant to the discussion.
- kmfrk 16y agoDo I have this right? * Seller feedback hidden * Buyer feedback hidden (or at least anonymized) * Purchase history can be hidden by opting out
- gfodor 16y agoFeedback from a seller -> buyer is now hidden from public view. Feedback from a buyer -> seller is marked as public or private by the person giving the feedback. The public or private purchase option is opt-out and right now determines if the items you purchase are seen on your public feedback.
- kmfrk 16y agoThanks for clarifying.
- tptacek 16y agoYep. That's pretty horrific. Never buying on Etsy again.
- apu 16y agoBased on your other comments on this site, I assume that was sarcasm, but I know that a lot of other people would think you were being completely serious.
- davidu 16y agoHe's not being sarcastic. It's a non-obvious disclosure of people's information they consider to be private. It's a very good example, actually, of how Etsy is not respecting peoples privacy, regardless of the language in their privacy policy. So no, Thomas is serious -- as am I. I hate shit like this because these kinds of security and privacy violations are not things the average consumer knows how to protect themselves against. It's non-trivially solved. You and I might be able to do it, but most folks can't, and they shouldn't be punished because of it.
- apu 16y agoHeh, I fail at the internet.
- deleted 16y ago[deleted]
- etsybgon 16y agoHe's not alone. If Etsy doesn't fix this by tomorrow, they're dead to me. That said, I'm not surprised. Fred Wilson has a habit of investing in companies without ethics.
- pluies 16y agoI had high opinions of Etsy after reading about their work environment and ethics, but that is just a terrible move. The only way to minimize the damages would be to roll back the feature completely and apologize. Or turn it off for everyone and leave the option to turn it back on. But that's a major PR blow.
- deleted 16y ago[deleted]
- TheCowboy 16y agoIt's also an example of how it can be a liability to depend on another self-interested corporate entity for your entire business platform. I've been reading some of the comments on the forums from sellers talking about a significant drop in sales. But Etsy is in part successful due to the success of its sellers and their unique offerings, making it a more symbiotic relationship. Merchants aren't helpless and can put pressure on Etsy to be more open about changes, and ensure that the privacy of their customers is always a first consideration.
- weaksauce 16y agoYour purchase history should never be up for grabs in a public manner. That is a breach of trust in my book. I liked etsy but I don't think I will purchase anything from them in the future because of this. Not that I am buying anything incriminating but I don't want to support this type of marginalizing of customer privacy. This is the type of thing that should most certainly be either not implemented at all or an opt-in type of thing if etsy still decided to go through with creating the feature.
- deleted 16y ago[deleted]
- silas 16y agoInteresting bit from the linked comments via "egoodman85": Hey, just want to clarify something as an Etsy employee. It's not your purchases that are public - it's your feedback on those purchases. I know it's a small distinction, but it's not like we have some sort of desire to publicize our members' purchases. Feedback is public by default just like it is on eBay - to increase accountability and transparency. It's also worth noting that feedback has been public since the site's launch (in fact, the option to make it private was only added recently). The new People Search feature does not change this at all.
- kmfrk 16y agoSo someone wrote feedback for the aforementioned dildo? How's that for satisfied customers. What confuses me is that the privacy setting says: PURCHASES Who can see your purchases? * EDIT: I'll try to think out loud here and update as I wrap my head around this. One of the examples states that he found a woman's results by her favourites. Those have always been an (opt-in) part of the privacy settings as I know. The question is a) how he tied her favourites to her person on Google, and b) how the former example tied the purchase (or favourite, or buyer feedback) to the person. In (b), I haven't found anything that explicitly says that the woman was identified - just that some woman's dildo-related purchase was somehow visible. Did they know the person by their user name and identify the person, or were the full names somehow visible, which created the - justified - outrage? I hope this is a misunderstanding, but there are still some unanswered questions. Etsy deserves the benefit of the doubt, of course. * UPDATE: Using this link: http://www.etsy.com/people/<user_name>/feedback?type=for_others replacing <user_name> with your own (wait for it) user name, your feedback history will show up. I have not found any way to disable this. This is, ipso facto, not contingent on the new privacy settings. It's a problem, but nothing points to it being a new one. I can't form a causal relationship like Ars Technica does based on this. * Hopefully last update: This all seems to be supported by Etsy's CEO: http://arstechnica.com/web/news/2011/03/etsy-users-irked-after-buyers-purchases-exposed-to-the-world.ars?comments=1#comment-21429759 http://arstechnica.com/web/news/2011/03/etsy-users-irked-aft.... I don't know how display of purchases (not buyer feedback) was handled before, but I'll leave that head-ache for someone else to figure out. Let's hope that Ars Technica own up to this correction and rectifies it. * Addendum: Seller feedback is also public like Buyer feedback. Caveat emptor indeed. cf. http://news.ycombinator.com/item?id=2325006 http://news.ycombinator.com/item?id=2325006
- droz 16y agoThere had to be at least one person at Etsy that thought this was a bad idea. As far as most people are concerned, a purchase is a private transaction between two parities that is not to be disclosed (unless explicitly agreed upon by both parties). Whoever made this 'feature' a reality really ought to get fired.
- Dylanlacey 16y agoAnd those people were probably steam-rolled over by a group of 'experts' who decided that 'very few' people would care about this, because, y'know, it's social? And everyone likes social?
- jswinghammer 16y agoI don't know anything about how they run their operation but my guess is that this was a big initiative and most people didn't see this reaction coming because so much information on the site is public already.
- moxiemk1 16y agoOur CEO just posted a comment on the article for clarification: http://arstechnica.com/web/news/2011/03/etsy-users-irked-after-buyers-purchases-exposed-to-the-world.ars?comments=1#comment-21429759 http://arstechnica.com/web/news/2011/03/etsy-users-irked-aft...
- budu3 16y ago"We do have plans to give buyers on Etsy the ability to hide feedback for certain purchases". "Certain purchases", really? Why not all purchases. I see a train wreck coming.
- kmfrk 16y agoI think it's a tough situation when nothing has changed overnight, but they might as well cover all their bases and hide all buyer feedback, until they figure out what to do. The limbo leading up to a decision isn't going to do either party any good.
- moxiemk1 16y agoEDIT: I was mistaken on a few things - see gfodor's comment above
- earl 16y agoAs was clearly pointed out, seller feedback -- over which you have no control -- is also public. And from your CEO's statement: "We do have plans to give buyers on Etsy the ability to hide feedback for certain purchases. We certainly appreciate privacy, and we spend a lot of time on these issues." Now, I barely use etsy but my gf is a heavy user. I admire your company, but if this is true -- that any purchase I or my gf make can receive public feedback from the seller -- that's really not very cool. Plus your ceo has a "plan" to allow people to disable it. It's hard to believe that your current answer to "I bought a custom dildo and the seller said I was a good buyer" is "tough shit -- email our customer service to hide your name and wait for this change to be deindexed from G/Y/B". I hope that I've misinterpreted the above article / response, because based on my limited purchasing history at etsy, it's not at all what I would have expected.
- pbj 16y agoEtsy's team should be willing to publish a highly visible feed of their staffers purchases since they obviously shouldn't have anything to hide.
- jswinghammer 16y agoMost of their team that I've met over the years (my wife used to be a pretty big seller on that site) have shops and actively sell or have sold things so you could see what they bought already through the feedback system.
- code_duck 16y agoEtsy is trying really hard to be 'social' lately. Some members like it, others don't. It seems like they swung harder down this path after the recent investment by Index Ventures.
- notJim 16y agoThis article seems really misleading, or I'm confused. If it's really just your feedback, then it's just like every other ecommerce site, where reviews are public, and ars should correct themselves. Otoh, the screenshot in the article makes it look like it's all purchases. So which is it?
- deleted 16y ago[deleted]
- covercash 16y agoI just logged in and set feedback to private, now it says: +Private Thank You! Enjoy! Check back with us. We are always adding new items. 420Chopshop .com I bought a gift for my cousin and now my profile is tagged with 420chopshop (they also sell things that aren't related to marijuana). It seems like you can write anything you want in feedback and there is no way to hide or remove it. While I don't find it to be a huge issue, it will make me think twice before buying something from Etsy in the future.
- blantonl 16y agoIt is great that someone from Etsy has stepped up to respond. Thank you! But, does feedback expose purchases? If so, there needs to be an explicit explanation (or policy) that identifies this will occur on Etsy.
- deleted 16y ago[deleted]
- ajays 16y agoAs an example: http://www.etsy.com/people/vanessakaleidoscope/feedback?type=for_others http://www.etsy.com/people/vanessakaleidoscope/feedback?type... I don't mean to pick on this person, but I'm using this page as an example (and it is from the P-A forums, I didn't dig it up). Some users think that "feedback" is like an email to the seller; it won't be public. Given that people are upset, why doesn't Etsy just disable this "feedback is public on your profile" feature?
- antihero 16y ago> This is a lovely glass......ummmmm.....massager. Yeah, that's it! A massager! Use it for aches and pains on your neck, back, or, um, yeah.. ;-) Don't worry, your secret is safe with me ;-) The description of the dildo.
- jswinghammer 16y agoBecause that would defeat the purpose. For a site like etsy feedback is very important and if a buyer or seller is untrustworthy you need to know.
- ajays 16y agoI agree. But psuedo-anonymize it! Just like Amazon gives you an option to pick a name to go with your feedback.
- citricsquid 16y agoThe responses to this give me such little faith in this community and the internet in general. This is a pain, sure, but for everyone to suddenly be saying "if they don't fix this today I'm never using them again" -- don't you think that's a bit rash? Why can't we raise our concerns about this policy with pointless threats that so little will ever carry through with. This is a relatively small issue, but one that a lot care about, so make it clear it matters to you but to say "if you don't fix it I will never use you again" is lame. Explain why this is bad instead of just saying you'll never use it again. It seems so childish.
- holdenk 16y agoIt seems like a reasonable response to say "if they don't fix this today I'm never using them again", etsy took information which people had assumed was private and made it public. If they respond quickly and take steps to ensure something like this doesn't happen again then I might consider using them again. One of the fastest ways to influence a profit driven enterprise is to make it clear that there actions mean you will no longer give them money (either by no longer shopping on etsy or listing on etsy). I also take issue with your statement that "this is a relatively small issue", while the items I personally bought on etsy are fairly mundane I don't want my shopping history to be easily googleable. How would you feel if the local XXX store started posting pictures of all of the customers in the news paper (or even just putting them up on the web)?
- citricsquid 16y agoYeah, so they can explain why it's a problem for them. If Etsy know why users are concerned they can work out a suitable solution. For example, how does "Yep. That's pretty horrific. Never buying on Etsy again." help at all?
- holdenk 16y agoI could see that possible being a concern where the reason why people are upset isn't obvious, but this is not one of those cases.
- deleted 16y ago[deleted]
- prawn 16y ago"Found an XXL glass dildo..." Next para: "Critics of Etsy's new policy seem to have a thing for searching for artisan dildos, but the point is pretty clear." That is one spectacular double pun at the end...
- btucker 16y agoWhen are companies going to figure out that whenever 'social' gets bolted on to an app there's a backlash? Why do we all keep trying this over & over? Do we actually see this increasing sales? Or is it just a general feeling that since Facebook is worth XX billion, we'll be worth more if our experience is more social?
- subpixel 16y agoI don't think it's about the money, as you propose, but more about Etsy craving to be more than just a place where people buy and sell stuff. They probably consider that uncool. Perhaps success has gone to their head a bit. Be that as it may, I can imagine it's not easy to resist the urge to 'swing for the fences' and 'make a platform play' or 'build a social-commerce ecosystem' when you're killing it in a space you pretty much invented like Etsy is.
- pdaviesa 16y agoWhy is etsy trying to do social? Are they going to roll out a daily deals service next? What's their search strategy? Come on, etsy has a nice little niche going, why ruin it by chasing the latest trend?
- sean11 16y agoSome additional clarifications here -- I also work for Etsy: http://arstechnica.com/web/news/2011/03/etsy-users-irked-after-buyers-purchases-exposed-to-the-world.ars?comments=1&start=80#comment-21430678 http://arstechnica.com/web/news/2011/03/etsy-users-irked-aft...
- AdamBrownEtsy 16y agoHi, Adam Brown from Etsy here. Just wanted to let you know that we have resolved this issue. As of right now, all your purchases and feedback on Etsy are now automatically set to private. You can read more about it in our blog: http://www.etsy.com/storque/handmade-life/rethinking-feedback-12472/ http://www.etsy.com/storque/handmade-life/rethinking-feedbac...