4 ms·
It's possible to imagine an alternative system to FLoC that was actually privacy respecting. Say we had an Open, standardized, human-readable list of categorie
by danShumway 6y ago
It's possible to imagine an alternative system to FLoC that was actually privacy respecting.
Say we had an Open, standardized, human-readable list of categories/groups that people could opt into (rather than a bunch of on-the-fly groupings determined by an AI). We could give users the ability to choose 0-X of those categories that they want to associate with. We could even let them choose on a site-by-site basis, so they could decide how ads would be targeted (or if they would be targeted at all) on parts of the web.
We could build UIs that helped them with that. We could have easy ways to opt into or out of categories. We could allow them to turn on category suggestions, so with their permission if a user visited a site about a specific kind of product, we could show a one-click option in the browser to add themselves to an associated category and see ads for similar products.
We could allow them to group sites together and say things like, "I want news sites that I visit to know that I'm looking to buy a specific brand of car, but I don't want any of the car dealership sites that I'm looking at to know what brand I want."
For users that don't want that level of detail, we could still have a 'smart' system that consumers could run (clientside) that looked at the websites they visited, or even more personal data, and auto-placed them in categories without them needing to think about the system at all. They'd just need to select an option to let the browser handle all of their categories for them.
But importantly, all of this would be based on consent. And instead of offering users a single choice to opt out, they would have an entire spectrum of choices that allowed them to decide how they presented themselves online, what specific data they shared, and who they shared it with.
If users genuinely benefit from targeted ads, then they'll opt into the system and pick categories that are relevant to them and send them to sites. If they think Google's data collection is accurate, then they'll turn on the smart system in Chrome that locally categorizes them. But at any point, for any site, they could choose to turn off the data entirely, or to add themselves to a specific category, or to remove themselves from a specific category. In human-understandable terms, they would know exactly what data they were transmitting to websites.
----
For all that Google says they're working on data privacy, very few of their proposals, even their good proposals, approach privacy from an angle of giving users more control over their identities. Google is still stuck in a world where they think of data collection as something that has to happen without the users knowledge, without the user's ability to easily inspect what's going on, without the user's ability to form multiple identities or even to just opt-into the system at all.
What I want is control over my data. And what Google (and companies like them) keep on saying is, "we'll be somewhat more responsible with your data, but only if we keep control of it."
And this represents a general attitude that comes up in so many modern tech products, from Youtube, to social feeds, to modern UI design, to device security. These companies are like a controlling, overbearing parent. People want agency over their ads/recommendations/feeds/etc, but the companies think the problem is that they're just not good enough at controlling all of that for us. It's a way of thinking about UX/product/process that's divorced from user consent and agency as an ideals that we should strive towards.
- jahewson 6y ago> We could allow them to group sites together and say things like, "I want news sites that I visit to know that I'm looking to buy a specific brand of car, but I don't want any of the car dealership sites that I'm looking at to know what brand I want." But this this isn't how ads work. Most ads are served by an ad network, such as doubleclick, which does realtime bidding on the ad space. The exchange of cookies is between you and the ad network, not you and the publisher hosting the ad or you and the advertiser who placed the ad. Otherwise you make some great points and it seems that FLoC could well provide such tools for the user, because their profile is now rich and client-side instead of being stored on some tracker server and keyed by an opaque cookie id.
- danShumway 6y ago> The exchange of cookies is between you and the ad network, not you and the publisher hosting the ad or you and the advertiser who placed the ad. But my browser could be smart enough to only exchange those cookies (or whatever data format we want to use) based on the current origin I'm visiting. There's no rule that requires me to use the same doubleclick session on CNN and Reddit. If I visit a website that's classified as a news site, at that point doubleclick wants to know information about me so it can hold an auction to show me targeted ads. At that point, the browser could send doubleclick any information -- it could be based on the current origin, it could be based on the time of day, it could be based on what profile/identity I have manually switched on/off. The point I'm getting at is the model of "you have one persistent identity that doubleclick can hook into anywhere" is already broken. Part of choosing how we present ourselves online includes the freedom to have multiple identities and to choose when/how those identities are revealed.