👓 The General Data Protection Regulation sets privacy by default | Brookings

Read The General Data Protection Regulation sets privacy by default (Brookings)
Tom Wheeler writes that the EU’s General Data Protection Regulation establishes privacy by default for personal information online.
Interesting to see the former FCC commissioner writing about privacy and GDPR.

👓 Facebook and Google hit with $8.8 billion in lawsuits on day one of GDPR | The Verge

Read Facebook and Google hit with $8.8 billion in lawsuits on day one of GDPR by Russell Brandom (The Verge)
Time to regulate

👓 Can we PLEASE talk about privacy, not GDPR, now? | Sebastian Greger

Read Can we PLEASE talk about privacy, not GDPR, now? by Sebastian Greger (Sebastian Greger)
It’s the “morning after”: a mere twelve hours have passed since the GDPR applies and while still awaiting breaking news on hobbyist blog owners being fined EUR 20 million, an army of burnt-out web and legal professionals has begun to clean up from the party that was “the final dash towards GDPR”.
A nice article pushing folks to focus more on the privacy portion of the discussion rather than the non-nonsensical technical GDPR regulations.

tl;dr: Do unto others as you would have them do unto you.

Reply to vishae’s issue Affects the status of private posts

Replied to Affects the status of private posts · Issue #70 · dshanske/simple-location by vishaevishae (GitHub)
I've noticed this issue for a little while now but it's only today that I took the time to try and weed out the source. Whenever I update a post marked as private (visibility set to private), the post would get published to the public instead. Even when I edit the post to try to set it to private again, it still remains public. I have to go to the All Post (edit.php) page and quick edit the post to change the privacy there. It's only when I deactivated simple-locations this issue stopped happening and I can update and change the privacy of my posts in the indvidual post editing page.
I could have sworn I filed this as an issue before myself, but I’m not seeing it in the queue. Perhaps I mentioned in chat somewhere?

Simple location’s privacy setting seems to override the post’s public/private settings on my site as well. Perhaps it’s a naming conflict (function/filter/etc.) with WP’s core content visibility code?

In any case, I can’t make a post private while Simple Location is installed/activated either. This seems to happen regardless of other plugins. I do seem to be able to use @vishae’s method of using the quick edit option to change a post to private. I’m not sure if this may indicate a potential solution to the issue based on what is firing on a post save/update versus what fires on a quick edit save.

Additionally, I don’t seem to be able to mark a particular location as “private” in a post either as upon saving it it defaults back to public in the UI. I only seem to be able to use “public” or “protected” options for locations.

👓 The Coming Wave of Murders Solved by Genealogy | The Atlantic

Read The Coming Wave of Murders Solved by Genealogy (The Atlantic)
The same DNA analysis used to find the alleged Golden State Killer has led to the arrest of a second alleged murderer. It’ll likely lead to more.
I can see this going to the Supreme Court sooner than later on privacy related underpinning. I can’t help but recall the words of Jed Bartlett in The West Wing when he was saying in season one that privacy would be one of the most pressing issues for the Supreme Court in the coming century.

👓 GDPR will pop the adtech bubble | Doc Searls

Read GDPR will pop the adtech bubble by Doc SearlsDoc Searls (Doc Searls Weblog)

Since tracking people took off in the late ’00s, adtech has grown to become a four-dimensional shell game played by hundreds (or, if you include martech, thousands) of companies, none of which can see the whole mess, or can control the fraud, malware and other forms of bad acting that thrive in the midst of it.

And that’s on top of the main problem: tracking people without their knowledge, approval or a court order is just flat-out wrong. The fact that it can be done is no excuse. Nor is the monstrous sum of money made by it.

Without adtech, the EU’s GDPR (General Data Protection Regulation) would never have happened. But the GDPR did happen, and as a result websites all over the world are suddenly posting notices about their changed privacy policies, use of cookies, and opt-in choices for “relevant” or “interest-based” (translation: tracking-based) advertising. Email lists are doing the same kinds of things.

Some interesting thought and analysis here on the pending death of adtech with the dawn of GDPR in the EU. I’m hoping that this might help bring about a more humanistic internet as a result.

There’s a lot to unpack here, but it looks like some tremendously valuable links and resources embedded in this article as well. I’ll have to circle back around to both re-read this and delve more deeply in to these pointers.

An Indieweb Podcast: Episode 4 “Webmentions and Privacy”

Episode 4: Webmentions and Privacy

Running time: 1 h 16m 00s | Download (23.8 MB) | Subscribe by RSS

Summary: With the GDPR regulations coming into effect in Europe on May 25th, privacy seems to be on everyone’s mind. This week, we tackle what webmentions are, using them for backfeed, and the privacy implications.

 

Huffduff this Episode


Show Notes

Related Articles and Posts

Related IndieWeb wiki pages

👓 Privacy | David Shanske

Read Privacy by David ShanskeDavid Shanske (David Shanske)
I admit to a certain amount of frustration on the subject of privacy lately. It seems, in all aspects of my life, both personal and professional, the new data privacy regulations that the EU rolls out May 25th are a theme in every discussion.
Some interesting thoughts on personal data and privacy. I can’t wait to talk to David about some of this in greater depth in our next podcast episode.

👓 Daniel Goldsmith’s reply to Sebastian Greger

Read a post by Daniel Goldsmith (View from ASCRAEUS)

Sebastian, first of all, thank you for your detailed write up on this issue. I think much of your roadmap is worthwhile, and of great interest.

I cannot, however, say that I am convinced by your contentions regarding the effect of GDPR and indieweb sites. In particular, I think your definitions are excessively broad, and you elide much information from both the Regulation itself and the Recitals.

It’s certainly interesting to see some of the replies to Sebastian’s article. It’s definitely stirring up some interesting thought. Daniel’s reply here is primarily to the legal issues at stake more than the design related issues, which have some interesting merit aside from the legal ones.

I think I fall somewhere in the middle of the two and see some of the moral and ethical pieces which are more important from a people perspective. I’m not as concerned about the law portion of it for a large variety of reasons. It’s most interesting to me to see the divide between how those in the EU and particularly Germany view the issue and those in the United States which may be looking at regulations in the coming years, particularly after the recent Facebook debacle.

As I think of these, I’m reminded about some of the cultural differences between Europe and the United States which Jeff Jarvis has expounded upon over the past several years. Europeans are generally more leery of corporations and trust government a bit more while in America it’s the opposite.

Reply to The Indieweb privacy challenge (Webmentions, silo backfeeds, and the GDPR) by Sebastian Greger

Replied to The Indieweb privacy challenge (Webmentions, silo backfeeds, and the GDPR) by Sebastian GregerSebastian Greger (sebastiangreger.net)
Originally intended to showcase a privacy-centred implementation of emerging social web technologies – with the aim to present a solution not initially motivated by legal requirements, but as an example of privacy-aware interaction design – my “social backfeed” design process unveiled intricate challenges for Indieweb sites, both for privacy in general and legal compliance in particular.
Again Sebastian Greger has written up a well-thought-out and nuanced approach to design. Here he discusses privacy and GDPR with a wealth of research and direct personal experience in these areas. He’s definitely written something interesting which I hope sparks the beginning of a broader conversation and evaluation of our ethics.

There’s so much to think about and process here, that I’ll have to re-read and think more specifically about all the details. I hope to come back to this later to mark it up and annotate it further.

I’ve read relatively deeply about a variety of privacy issues as well as the weaponization of data and its improper use by governments and businesses to unduly influence people. For those who are unaware of this movement over the recent past, I would highly recommend Cathy O’Neil’s text Weapons of Math Destruction: How Big Data Increases Inequality and Threatens Democracy, which provides an excellent overview with a variety of examples about how the misuse of data can be devastating not just to individuals who are broadly unaware of it, but entire segments of society.

There is a lot of publicly available data we reveal via social media and much of it one might flippantly consider “data exhaust” which has little, if any inherent value by itself. Unfortunately when used in aggregate, it can reveal striking things about us which we may either not be aware of ourselves or which  we wouldn’t want to be openly known.

My brief thought here is that much like the transition from the use of smaller arms and handguns, which can kill people in relatively small numbers, to weapons like machine guns on up to nuclear weapons, which have the ability to quickly murder hundreds to millions at a time, we will have to modify some of our social norms the way we’ve modified our “war” norms over the past century. We’ll need to modify our personal social contracts so that people can still interact with each other on a direct basis without fear of larger corporations, governments, or institutions aggregating our data, processing it, and then using it against us in ways which unduly benefit them and tremendously disadvantage us as individuals, groups, or even at the level of entire societies.

In my mind, we need to protect the social glue that holds society together and improves our lives while not allowing the mass destruction of the fabric of society by large groups based on their ability to aggregate, process, and use our own data against us.

Thank you Sebastian for kicking off a broader conversation!

Disclaimer: I’m aware that in posting this to my own site that it will trigger a tacit webmention which will ping Sebastian Greger’s website. I give him permission to display any and all data he chooses from the originating web page in perpetuity, or until such time as I send a webmention either modifying or deleting the content of the originating page. I say this all with some jest, while I am really relying on the past twenty years of general social norms built up on the internet and in general society as well as the current practices of the IndieWeb movement to govern what he does with this content.

👓 How a Genealogy Website Led to the Alleged Golden State Killer | The Atlantic

Read How a Genealogy Website Led to the Alleged Golden State Killer (The Atlantic)
Powerful tools are now available to anyone who wants to look for a DNA match, which has troubling privacy implications.
I find this mechanics relating to privacy in this case to be extremely similar to Facebook’s leak of data via Cambridge Analytica. Something crucial to your personal identity can be accidentally leaked out or be made discoverable to others by the actions of your closest family members.

👓 Privacy sentences to ponder | Marginal Revolution

Read Privacy sentences to ponder by Tyler Cowen (Marginal REVOLUTION)
The increasing difficulty in managing one’s online personal data leads to individuals feeling a loss of control. Additionally, repeated consumer data breaches have given people a sense of futility, ultimately making them weary of having to think about online privacy. This phenomenon is called “privacy fatigue.” Although privacy fatigue is prevalent and has been discussed by scholars, there is little empirical research on the phenomenon. A new study published in the journal Computers and Human Behavior aimed not only to conceptualize privacy fatigue but also to examine its role in online privacy behavior. Based on literature on burnout, we developed measurement items for privacy fatigue, which has two key dimensions —emotional exhaustion and cynicism. Data analyzed from a survey of 324 Internet users showed that privacy fatigue has a stronger impact on privacy behavior than privacy concerns do, although the latter is widely regarded as the dominant factor in explaining online privacy behavior.
Emphasis added by me.  That is by Hanbyl Choi, Jonghwa Park, and Yoonhyuk Jung, via Michelle Dawson.
Better control of online privacy is certainly something that the IndieWeb can help to remedy.

The past weeks have indicated that we really do need some regulations. It’s not just Facebook, but major, unpunished leaks from data brokers like Experian (which seemingly actually profited from it’s data leak) or even those of companies like Target. Many have been analogizing data as the “new oil”, but people shouldn’t be treated like dying sea birds trapped in oil slicks.

I’m bookmarking this journal article to read: The role of privacy fatigue in online privacy behavior. 1

References

1.
Choi H, Park J, Jung Y. The role of privacy fatigue in online privacy behavior. Comput Human Behav. 2018;81:42-51. doi:10.1016/j.chb.2017.12.001

👓 Gmail is getting a ‘confidential mode’ that prevents users from printing or forwarding your email | CNBC

Read Gmail is getting a 'confidential mode' that prevents users from printing or forwarding your email by Todd Haselton (CNBC)
Gmail is getting a new confidential mode that reportedly prevents recipients from forwarding or printing email messages.