Internet Privacy a "Joke" 28
Forrester Research has released a study of the internet which claims that "90% of sites fail to comply with the five basic privacy protection principles" and "most privacy policies are a joke." To read the full report, you need to be a paying client, but the E-Commerce Times reprints some tidbits. Among them: the research firm, contradicting a Georgetown University study accepted by the Federal Trade Commission just two months ago, recommends that the FTC take action because third-party oversight is not proving effective.
Re: Spam (Score:1)
/* Steinar */
Privacy and spam (Score:1)
On the other hand, if you want to get lots of spam, just post regularly to a Usenet newsgroup without munging your identity.
I have a new Yahoo email address that as yet has never been used for anything but private email. I wonder how long it'll take before I get spam to it...
One way it might have happened... (Score:1)
Just 'cause YOU never used the account, doesn't mean no one did. Someone else might have used the account name (just happened to pick that name?) specifically to misdirect all their spam to.
If I create (f'rinstance) the account "nospam@hotmail.com", and then never ever use it, should I be surprised that it fills up with spam?
Freedom 1.0 (Score:1)
From the "How does freedom work" section:
It seems to be growing more and more popular by the minute, and once it is out of beta I might just consider it. Or will I? How terrible of a thing is it that companies know lots about us? The information has always been there about our grocery buying habits, our eating habits, our salaries, our personal histories...all that is required is a simple check by an unscrupulous soul. The internet is supposed to be the last frontier I suppose. Is anyone really surprised, though, that it's getting so commercial?
Regards,
-efisher
---
Re:The "Right" To Privacy (Score:1)
Privacy on Slashdot? (Score:1)
From looking at my slashdot profile [slashdot.org], it appears I'm a geek obsessed with GPL or biology related news. Wouldn't want that to become public knowledge...
At least I can always become an AC if I want to talk about embarrassing topics like IPv6.
Re:Privacy on Slashdot? (Score:1)
It's not as though one has to be so stupid as to give out *real* data all the time - it's fun what you can do with a town of Nowheresville and postcode of S0D 0FF
Re:Privacy and spam (Score:1)
> to a Usenet newsgroup without munging your identity.
> me when I get "Dear fellow X" (X being something that has zero commonality with
> the relevant newsgroup) emails on accounts that I create for RPG characters.
> That'll teach me to post to News with a valid return address.
I actually post to Usenet with a valid address, because I don't believe in munging; I think it defeats the purpose of the Internet. I mean, isn't this medium for *communication*? I'm not going to make it at all harder for people to communicate with me. I don't condemn others for munging, because not everyone has the same ideals, but I won't do it myself.
But yet, I don't get much spam at all; maybe once a month, tops. My server is using the RBL [vix.com], and I've been having good luck with it.
We don't have a privacy policy page (Score:1)
Of course, if someone's thinking of hacking it, or doing something else like that, we want them to think we will collect that data. It is in the logs, but we never use it.
So?
I have three words for you people (Score:1)
Zero Knowledge Systems [zks.net]
Check them out, its good stuff.
Re:Freedom 1.0 (Score:1)
Re:Freedom 1.0 (Score:1)
(And yes, I use all 3. Four if you count BeOS. See my sig
--
"BeOS is in practise, what in theory NT should of been." - UnknownSoldier
Re:The consumer needs to demand privacy (Score:1)
Or the truth. See below...
> Absolutely no company has the right to ask for SINs unless they are employing you.
There is NO law that REQUIRES a person to have a SIN. And yes you CAN legally work without one.
"I am not a number, I am a Sui Juris!"
(With apologies to "The Prisoner")
Cheers
Accountibility might be more important (Score:1)
This theory does explain why people in large cities tend to ignore those who need help while those in small communities are more likely to help each other.
The components needed to force cooperation were a relatively equal power distribution, and a good chance of meeting each other again.
Having privacy on both sides limits the urge to cooperate. The problem with the eCommerce site is it's really only one way privacy, the corp has some level of privacy (with respect to what they're doing with the data their collecting, who they're selling it to, etc), while the average user has very little. Additionally, and more importantly, the corp has much more power then any individual user. So there is little incentive for the corp to be cooperative.
It might be interesting to require that the corp to disclose as much information about itself as it collects from users. Though the power imbalence would still exist.
If not that then a consumer review web site where people can post the results of interactions with particular corps. By having some way of maintaing a list of how a company has performed the corp would have to cooperate more fully in order to protect it's reputation, and thus it's continued existance. This would even the playing field between the corp and the users.
Though of course after aguing for this I still really don't want them analyzing my life to figure out the best way to manipulate me--unless they manage to figure out that I've made the personal comittment to refuse any form of push advertising.
Policies That Suit You (Score:2)
False Identity (Score:2)
I get a lot of email, and 40% of it is spam. Sites have posted my email address without my consent. I'm resonably sure that supposedly trustworthy sites are selling my personal information. I routinely block cookies to nearly every site, I use a Windows personal firewall program (AtGuard) to block a lot of network traffic, and surf through a proxy. Yet despite all these efforts information slips out.
So the other day I was reading a book in which a spy had a number of false identities complete with passports, credit cards, Social Security addresses. That got me thinking: "This is what I need." An identity I'd use all the time online that wasn't actually "me" so if information slipped out it wouldn't actually be my personal information.
Seeing how knowledgable some Slashdotters are when it comes to obscure things like numbered swiss bank accounts, etc. I thought I'd ask what you people know about false identities.
How hard would it be to get a credit card / bank account under another name? What are the legal issues involved with doing the above?
I use AtGuard to protect my privacy (Score:2)
- Act as a personal firewall, screening incoming and outgoing packets and connections. Strange to relate, there are script kiddies out there who will try to hack your home PC.
- Block HTTP cookies, referer, browser and email ("From") headers on a site-by-site basis,
- Block adverts (and also tell you how much bandwidth you have saved thereby)
- Fix animated GIFs to play once only instead of repeating
I really like it. The firewall is probably the coolest feature: you can block, permit and log any connection or packet based on remote address, local port number and local executable name.BTW, I have no connection with them other than as a satisfied customer.
Paul.
The "Right" To Privacy (Score:2)
I think that it is reasonable that in this day and age you have to pay a little something for your privacy. How can people willing to pay x thousand dollars for the swankiest new computer, and 20+$/month for Internet access (please don't reply just to tell me how little you get your internet access for) complain about another couple bucks to keep the corporations and the government from finding out who they are?
In the phone directory you have to pay a little bit extra to not be listed. You can use a false name for no charge (as you can on the internet), but the phone company can trace any old call back to you, with an appropriate court order. The internet is the same way - publicity is the default and privacy will cost you.
Perhaps a better way to think about it is: The amount that you pay to use the Internet is the amount that it costs, discounted by the value of your personal information. If you take back that privacy, you forfeit the subsidy you have gotten from your publicity. The end result is the same, except that the default is cheaper, and encourages more people to enter the media. [This analogy is not technically complete, but is functional]
Those who care CAN reclaim their privacy, but it is not done for them by government regulation. Sounds fair to me.
info submitted online is becoming (Score:2)
Their services are touted as a huge departure for medical services world-wide, and one of the best things to happen to patients. Unfortunately, they do not openly describe what they do with the information they gather -- they are selling compiled data "anonymously" to various research firms etc. But at some point, in order to retrieve your record, there is a cross-reference between your name, and your records.
How long before pharmaceuticals start purchasing targeted ad space? How long before someone breaks in?
The consumer needs to demand privacy (Score:3)
The real problem is that most people just don't care about privacy. Whenever some company asks for personal information most people give it up. If Joe Q. Random decided not to do business with a company because he was required to give out private information (that is not really needed anyway) things would change fast.
Credit card numbers should only be requested when it is time to pay for goods and/or services. You don't give your credit card number at the front door of a store. I don't see why you should do so in an e-store. Credit card numbers also shouldn't be stored forever. They should be destroyed when the store receives the funds from the credit card company. (unless there is some other legal reason that required the store to hang on to them... I'm not sure what the rules are.) As far as I know (correct me if I'm wrong, I'm Canadian) Social Security numbers should be shared with the following people: You, Your employer, and the Tax Man. I'm pretty sure they are not for identification. Absoltely no company has the right to ask for SINs (Social Insurance Numbers... Canadian version of Social Security) unless they are employing you.
Don't bother telling corporations to act differently. It's a waste of time. Instead, tell your friends to think about what information they are willing to give up. The bad companies will fix themselves when they start to lose money because they ask for personal information that they don't need to supply the goods and/or services they are selling. On the flipside, companies sometimes do need to know who you are. We can't do business if we are all anonymous. Most stores won't take credit cards or cheques without ID - e-stores are not different. Someone needs to implement a digital wallet to mitigate this problem. If it was possible to "pay with cash" over the net then most places wouldn't even need to ask for your name.
As for protecting the privacy of your favorite colours/songs/foods or whatever, forget it. If you want that stuff to stay secret then keep your mouth shut. OBVIOUSLY companies are going to record this and use the information to market something towards you. I don't see anything unethical about doing so. Anyway, this psychological profile junk is not an issue if the people doing the profiling don't have a clue who you are. If that's the case then the best they can say is "cool_dood235 from ppp-236.someisp.com likes the colour pink, listens to the Back Street Boys and drinks a frap at Starbucks twice a week" Wow. Big deal. I would hardly call that an invasion of ones privacy. Besides, you can always lie. A single mother who's barely making it from month to month can eaily click on "$150,000 or more" in a survey that polls for income.
Sean Comeau
The Bigger Picture (Score:3)
OK. Ive rambled a bit, but to conclude, what I'm looking for is a more interactive foundation beyond TCP/IP and HTTP where everyone has a true voice.