Geek News: Latest Technology, Product Reviews, Gadgets and Tech Podcast News for Geeks


Do “Regular” People Know They Are Living Life in Public?

Posted by Alan Buckingham at 6:48 PM on July 25, 2010

The recent privacy flap surrounding Facebook got me thinking.  Exactly how much are we all sharing?  What can be learned from it?  And how much of any of this does the average person know or understand?

I decided to take myself as a case study.  I may not be the average user – and most of you who read this techie site probably aren’t either.  But, we all know and/or are related to the “average user”.  And that is the person who is in danger in this modern, tech-based, privacy-challenged world.  I feel as though I can kind of compare myself to the average user in a strange sort of way.  It goes like this: I write for this site and my own and, sometimes, for others, and because of that, I have a vested interest in being found.  I want my writing found and I want to share it.  In fact, I have made the conscious decision to be easily found.  Plus, I want feedback.  I want to communicate with everyone out there and crowd-source questions and discussions.  Hence, it may appear that I share everything, but, I understand what’s going on in this space.  I realize that everything I post, regardless of rather or not I mark it as private, can be, and probably will be at some point, public.  Terms of use change.  I take NOTHING for granted.  I share nothing that I wouldn’t want the whole world to know.

Just about everyone who can access the internet is using at least one of these services that I looked at (and there are many more I didn’t).  And the average user gives not a single thought to what they are telling whoever wants to look.  Mostly who is looking is advertisers – either directly or because the site in question is sharing.  There are more nefarious onlookers as well, but to be fair, that is rare and requires the site to have security hole.

I will start with the one service I considered for this piece that I don’t use – Foursquare.  I don’t use it because I live in the country and it seems rather pointless for me.  Although, I guess I could rack up the “mayor” spots!  But, if you live in a metro area you may be using it, and what better way to let your stalker know where you are and when?  Since I don’t have experience with it I’ll leave it at that.

Let’s look at two photo sharing sites – Flickr and Picasa.  I use Picasa, myself, but most of you probably use Flickr. They are pretty much interchangeable though.  Picasa has settings.  Flickr probably has similar.  You can decide to not allow the general public to see your pictures and you can block GPS data from the photos. Do most users know this?  Probably not.

I am probably in the minority in using Wakoopa.  In fact, some of you probably don’t even know what it is.  It’s a simple program that tracks what programs I use.  It even includes some Webware programs.  What’s the harm in that?  Well, we will get to those possibilities later.

Another seemingly innocuous program is Goodreads.  As with Wakoopa, I may be in the minority using it, but I would guess there are dedicated users out there as well.  This site performs the simple task of keeping track of, and sharing, the books you read.  Like Wakoopa, what could be the harm?

Do you listen to music?  Do you love Pandora as much as I do?  Or, maybe you’re into Slacker or Last FM.  Everyone knows that their Pandora playlists are shared thanks to Facebook, right?  Slacker and Last FM can’t be very far behind on that gravy train.

My phone’s GPS tracks me via Google Latitude.  This one seems secure – only people I okay can see my location.  In all seriousness, I do trust Google, and maybe it will be my downfall, but other than a couple of stupid lapses, they seem genuinely to be trying to keep all of their overwhelming amount of data about all of us in check.  But, don’t get too comfortable, because Google knows EVERYTHING.  If management changes we are all in for a rough ride.  They have it all – our profiles, our email, our RSS feeds, and, most of all, our searches.  And that’s not even counting our location (if you use Latitude) or our thoughts (if you use Buzz).  And if Google Me is real, well….

Then there’s Twitter (and I’ll include Buzz here since they are the same type of service).  The great thing about Twitter is that you KNOW everything is public.  It’s designed that way.  They do allow users to set their accounts to private, but I assume few do.  And, let’s face it, few are sharing anything private on here…right?  Well, except those who lost jobs for posting things about their bosses or the woman who was sued for libel after posting about her apartment problems.  How many other stories like these are out there?  Far too many to count I am sure.  Let’s face it.  Even a service that is outright public from the start lulls the average user into a false sense of privacy.  And, what’s more, you can (and I do) allow the Twitter feed to cross-post to Google Buzz and Facebook.  Now if I say something dumb it has the maximum chance of being heard by the most people possible.  And, let’s not forget that Twitter makes it easy to add photos and videos to every tweet with such third-party services as TwitPic and TwitVid.  Oh, and just to top it off, I can geo-tag my posts so everyone knows exactly where I am.

Finally, there’s the black hole of privacy known as Facebook.  They have changed their privacy settings several times and only once (and that’s debatable) did it favor the users.  Facebook has an interest in users sharing their data.  That’s how they make their money.  If your settings are all private then it is bad for their bottom line.  So, they have slowly opened their doors to allow more and more user data to become public.  And they have made their privacy settings harder for users to understand.  The biggest thing they have done was to make settings opt-out instead of opt-in.  They gamble on the average user not understanding all of this.  And, let’s face it, they’re right.  Sure, they made some news with all of this, and some people got up-in-arms over it, but, did the public-at-large really hear and really understand?  Probably not.

Now let’s see what we can learn about me from all of this data.  I don’t use Foursquare so my stalker will not be happy here, nor will the marketers who want to know the kind of businesses I frequent.  From Picasa they will see my pictures, and those are posted to Buzz as well, but they are marked as private so I win one here.  Wakoopa tells everyone what software I am using, which is great for the marketers, but probably useless for my stalker.  Similarly, Goodreads will let everyone know that I am just about done reading A Walk In The Woods, which is useful to marketers, but less so to my stalker.  The same for Pandora – great to know what I listen to if you want to sell to me, but not so much if you want to find me.  And then we come to the last three services I looked at, and those are the ones the stalker is interested in – Twitter, Buzz, and Facebook.  Here’s where you know where I am, where I am going and who I am with, complete with exact GPS coordinates.

Can you build a good profile for marketing or stalking?  I would say it’s very easy to do so.  And, almost everyone that each of us knows is using, at the very least, one of these services.  Worse, they don’t know what the default settings are, and even worse than that, probably don’t care because they don’t understand the implications of them.  Things are not improving on this horizon any time soon, either.  In fact, if Facebook is any indication, they will get worse.  Yes, it’s great to have all of these services and they are very useful.  But, we need to take the time to understand them and what they mean.  People have been hurt – women with real stalkers.  Nobody should have to suffer because of vague terms-of-service or the questionable practices of some site that is out to make a dollar off of unsuspecting users.

Code of Practice for Privacy Protection

Posted by Andrew at 3:18 AM on July 21, 2010

The UK’s Information Commissioner’s Office has published a pair of  guides about holding personal information online.  The first guide is a Code of Practice aimed at organisations, particularly, those that sell goods and services over the web and is to help them understand the data protection law and develop good practice.  The second is for individuals and is Protecting Your Personal Information Online.

The Information Commissioner’s Office is an independent body setup to promote and police the UK’s information legislation including the Data Protection Act and the Freedom of Information Act.

The new Code of Practice has several sections including how the law applies, how to operate internationally, individuals’ rights and pitfalls to avoid.  It also includes a number of special cases, e.g. when dealing with children.

The personal guide provides information on protecting your personal info and identity, online scams, cookies, browser settings and social networks.  Definitely worth a read, even if you are not UK-based.  It’s all good sensible stuff.

What’s been stirring the media is that for the first time the ICO has commented on “behavioural marketing”, i.e. adverts are tailored to your browsing activity.  There had been some debate about the legality of this but as long as its clear what is going on and the person can opt out, there’s no problem.  There’s more information on behavioural marketing here.

Regardless of whether you are in the UK or elsewhere or whether you are a supplier or a customer, it’s worth giving both guides a browse.

What Makes A Tech Success?

Posted by tomwiles at 1:23 AM on July 12, 2010

It seems in the world of computers and the Internet there is always a steady stream of new things on the horizon, as well as a steady stream of new products and services. It’s been this way for many years at this point.

There are always winners and losers. Winners can win big, and losers at worst fail to make any marketplace splash or even a ripple and end up in the tech dustbin of obscurity with few people ever knowing that the product or service ever existed.

What is it that makes for a successful product? Why is it that some products and services that seem very similar to other products and services end up becoming household names, while others end up being cancelled domain name landing pages?

It’s obvious there are a variety of factors that come into play. If it were easy to predict these things, we would have a lot fewer losers. Why did Twitter become a household name, whereas similar services such as Plurk and Jaiku languish in the shadows? What enabled Facebook to steal most of the MySpace thunder?

New products and services that end up being successful frequently incorporate elements and principles of previously-existing successes, but package them in more compact and useful forms.

Initially when Twitter came along a couple of years ago, I heard people talking about it, but I was a bit resistant to sign up. I felt like I had plenty of ways to communicate with people, so why did I need to add yet another account to a service that would steal away time I already had filled, only to ultimately let yet another account go dormant? I finally signed up for Twitter, and after I began using it I began to understand the value of it. With a service like Twitter, the more people that are using it, the more valuable it becomes.

About the same time I signed up for a Twitter account, I also signed up for a Plurk account. After a few visits to the Plurk website over a period of a month or two, I haven’t been back to the site since.

I believe what is valuable about Twitter is that 140 character limit per Tweet, forcing people to be succinct with their wording. Twitter and Tweet are cute names. The site design is simple, the blue bird logo pleasing to the eye, and the developers kept the API and name open to other developers, allowing an entire ecosystem of ancillary products and services to develop around it at the same time it was rapidly increasing in popularity. Twitter is very much like chat, which was already well established, but it had the added value that it either could be in real time, or not, able to be accessed from a vast array of devices beyond the Twitter website. Twitter also allows you to subscribe to just the people you want, and ignore or even completely block the rest. Twitter also allows you to reach out and touch people, and it allows you to monitor what others are up to whose lives are at once very similar to your own, yet often radically different. You can spend as much or as little time as you wish interacting with the service. Another thing that turned out to be incredibly useful with twitter is the vast 24/7 real-time data stream that it generates. Real-time Twitter data mining has proved to be quite valuable to many people.

To be honest I have always thought that many MySpace pages were often monstrous, unbelievably cluttered messes that often took a long time to load. Nonetheless, MySpace became popular because it obviously served a need with a younger demographic.

I’ve always thought Facebook’s interface is somewhat confusing, though allowing for far less cluttered and confusing-looking profile pages. I still don’t quite understand what got Facebook to the level of critical popularity – perhaps the less-cluttered, faster-loading profile pages gave it the critical edge over MySpace.

It should also be noted that Facebook allowed for an open API, allowing a myriad of interesting and often useful applications to be plugged in to its interface.

However it did it, Facebook managed to get to a critical mass of users where it became THE thing to sign up for and THE place to be to stay connected with family, friends and business associates. Something interesting has happened with Facebook that has never happened before – everyday, non-geek people who had never built website profiles in all the years they had been doing email and web browsing were suddenly signing up for Facebook in unbelievable numbers. Mothers, dads, aunts, uncles, grandmothers, etc. were suddenly showing up on the same service with their kids, nieces, nephews and grandkids. Once the ball rolled, Facebook became an incredible success.

I started noticing a while back that many people were starting to use Twitter and Facebook to communicate with each other in lieu of email. At this point I find myself getting pulled into that trend myself. These services don’t offer the relative privacy of direct email, but they allow for easy, frequent public conversations and easy sharing of personal media such as photos between friends and family on a global scale.

What I take away from the success stories versus the less-successful competitors is that oftentimes the differences in design and implementation can be slight, but those slight differences can offer real, tangible advantages to the end user. If those often-slight advantages can somehow help get the product or service to a critical mass threshold, they can find themselves catapulted to the point of planetary awareness.

Will You Leave Facebook If Privacy Issues Don’t Change?

Posted by J Powers at 8:20 AM on May 10, 2010
Facebook Logo

Facebook Logo

I went searching for a buddy on my Facebook profile. It wasn’t there. I searched and searched, but couldn’t find him. I caught him on Twitter and asked where he went. He told me that he deleted his Facebook profile due to all the privacy issues. I was not surprised – With all the issues that Facebook has seen in the last couple months, I could see why he did.

He was not alone. I have heard of a few social mediates also reducing their usage, if not nixing their Facebook profile. I definitely think about what I post on my wall and send in my message area. I delete those that post a game or other application on my wall and I don’t post anything that can be considered ”Private” – Basically, try to keep the profile as clean as possible.

Recent privacy issues with Facebook make one realize that your online data could be open to users within a heartbeat. We hear about someone finding a vulnerability, usually after the problem was fixed. Too many in a small amount of time, and we have a crisis where the FTC might have to step in.

No different than in years past…

Whether it’s Facebook, MySpace, email, websites or whatever, people try to get in and people test the limits. I just put up a Wiki site. I put on certain privacies, but within a week, someone found a new way to get through. They posted jibberish sites – nothing that would be malware, which I could easily correct. I fixed the hole and moved on.

Facebook is the site that is under fire because everyone has a profile. At least over 400 million users. In comparison, the US population is at 307 million, over 6 Billion around the world. Heck, my mom is on Facebook.

These are people that might not be tech Savvy. They don’t understand how the site works and they don’t care. They just want to connect with friends and family. They may have heard the rambling about privacy and some may have taken heed, but most haven’t and are not upset with them right now – until their profile is infiltrated.

MySpace, AOL, GeoCities

Remember when we were all on MySpace? Remember when you switched to Facebook? Did you delete your MySpace profile, or do you still check it randomly?

Back in 2007, when MySpace was king, we had different types of privacy issues. The big issue was online predators. Sex offenders on the social network site set one raid to remove over 350 profiles from MySpace.

AOL had many privacy issues in the early years. 1998, we heard of how people found back doors to the “Walled Garden”. GeoCities was under fire for selling personal information. They settled with the FTC just days before they set their first IPO. Business before privacy?

Twitter, Friendfeed, MSN, Compuserve, BBS – These all have had privacy issues at one time. As a site grows, the bad guys realize it can become a great portal to try and take down or get someone’s money. They strike, the site counter-strikes – The battle continues. Rinse and repeat.

Step in the FTC

Privacy issues have escallated to the point where Facebook hired former Bush regulator Tim Muris to defend the social network and it’s privacy problems to the FTC. Of course, if you have a product that is 400 million strong, you definitely will have scrutiny. Regulation is there to protect. Whether the government should step in for regulation might be a whole other topic. Add in the fact that some of those Facebook profiles are non- US citizens; The rules get different.

So is it different, or just the same old?

Privacy is a big issue on the Internet. Whether it’s getting your email hacked or finding a back door on a social network. We don’t want our personal information in the wrong hands. But we also want to connect to the people we care about. In all reality, Facebook is working on their issues. If you leave Facebook for privacy, you might want to just leave the Internet altogether.

So when is too much? Are you thinking of or have you deleted your Facebook profile?

Cloud Computing and the Fourth Amendment

Posted by KL Tech Muse at 4:30 PM on March 31, 2010

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized, Amendment IV, US Consitution.

Anyone who watches American cop shows, knows that, before they search your house or business they have to have a warrant signed by a Judge. What about documents that are stored in the cloud or on a smartphone do they have the same protection. Maybe yes or maybe no, the law is not clear. The law covering this issue was written in 1986. It is called the Electronice Communications Privacy Act. In 1986, the Internet as we know it today did not exist , email was in its infancy and smart phones were in the realm of science fiction.

Today people store their papers and effects online and on their cellphones. Do these documents have the same protection from government search and seizures as those in our homes, business or on our persons. The problem is according to what I have read, the law is not clear. Different cases have led to different decisions and a mishmash of laws across the country. Several companies and agencies have joined together, to bring the 1986 law into the 21st century. These companies and agencies include, The Electronic Freedom Foundation, the ACLU, Google, Microsoft, AT&T and others, According to the article in ArsTechnica some of the updates they want included are

• All “private content” held by a service provider should be protected by the same standard as material on your laptop: a warrant must be obtained. Currently, the rules are murky and confusing; the government can go after server e-mail older than 180 days, for instance, with only a subpoena (no judge needed), while more recent e-mail needs a warrant.
• Warrants must be sought to access location information. Currently, says the CDT, GPS data is protected by warrant, but other data (such as that from cell phones) is not. Courts have been “all over the ballpark” on this issue.
• For “transactional” data (i.e., data that might include e-mail headers but not message content), the coalition says that a judge should be involved, though a warrant may not be needed.
• Subpoenas should only be used where government has a particular person whose data they seek; they shouldn’t be used for bulk requests on many subscribers at once without a court order.

Shouldn’t documents that are stored in the cloud have the same protection as those documents in your home. How about wireless conversations, shouldn’t they be protected like conversations over a landline phone. I think so, the documents and conversations are private and the government has no right to search or seize them without a warrant. Now those on the other side will tell you that the government needs the power to seize documents without a warrant in its fight against terrorism. I reject this argument, except in extreme emergencies. All papers and effects should have the same protection whether online or offline. A national law would protect both individuals against the government and provide businesses with clear guidelines to follow. Cloud computing is here to stay and our laws need to catch up.

Why I Don’t Like those ‘Who’s Online’ Toolbars

Posted by J Powers at 9:07 AM on July 28, 2009

Who's Online

It all started with Facebook. A little blue bar on the bottom saying who was online. I turned off the online chat. Then MySpace did it. Then YouTube did it.

I don’t mind that they have these little “Widgets” around the site. Still – You should really ASK me before assuming I want that option turned on. Especially if you add the bar.

It’s not that I don’t want to connect with friends. It’s not that I don’t want to be social. However, when I am deep in work, I really don’t want people messaging me at the wrong moment. Especially since some of these items create sounds – with no way to turn off.

Think about it. You are showing your Boss how to do something. You are on a GotoMeeting session showing off some websites that help with your brand. You get up on Facebook to show how that cool application will post to the social network site, when you get and IM “Dude – This girl does all kinda crazy http; // bit . ly / someurl”.

OK, maybe you as the masses might not be on that level yet, but you might in a couple years. I wasn’t there last year, but now I am doing more online meetings and PC requests than ever. I got off of IM’s like Yahoo and MSN Messanger because of this phenomenon; The ability to contact someone at anytime.

I did it because I have a little bit of ADHD. If I am engrossed in a project, someone might message me and we’ll get into a long back – and – forth conversation. In the meantime, I may loose focus on what I am doing. It’s not a multi-task issue. I multi-task all the time. Just now, I am working on remixing some music I recorded, adding to my own Podcast show notes and writing this article.

Maybe it’s because of the special attention – The conversation happens in real time as oppose to something I can write – then review – then post. Don’t take too long on replying to a message, or else you might just get a “Dude – you still there?” post. Sometimes, websites take certain advantages to our good nature.

For example: Have you ever gone into Facebook and turned off ALL email notification, then a month later find that they are emailling you again? You go into the settings and find they put up a new radio button on how to contact you and turned it on?

These are small privacy issues, but we are still talking privacy here. If Twitter was to inform people that I was online, I would most likely ask for a privacy button, or stop using the program alltogether.

Now I have said this before: If you are online, in some ways you forgo your privacy. I could run a program that could tell me everytime you use your computer, then send you a list of when and where you use it from. I would need specifics from your computer to do that, which would take a bit of legwork to do.

I will go online to talk at times. Then I can choose my program and turn it on. When I go on uStream, for example, I would like to talk to people. When I call up my IM – same thing.

There are those who love the toolbar; For that I say “Use it to your hearts’ content”. However, don’t assume I want to use it. Ask me if I want to use it – That way I am not surprised when someone says “Check out this Hottie…” when my boss is looking over my shoulder at my computer screen.

Facebook Suffers it’s First App Problem

Posted by susabelle at 8:35 AM on June 26, 2008

CNet is reporting that Facebook has banned the “Top Friends” by Slide because it violated the app agreement. The installed application would apparently bypass information a user set to private. CNet found the error and reported it to Facebook. The Social Media giant then suspended the app from running on the site.

There have been a couple other applications that have had security issues, like Super Wall and SuperPoke. Both issues were resolved quickly. I am guessing the Slide apps could not be.

MySpace also has Slide applications on their site. CNet contacted them and they are looking into the matter.

It really is a “Too many Chefs in the Kitchen” scenario here. All it takes is either one mistake of code, or someone like Facebook to make updates that could change the way an application works with the site. Not sure what the case was with Slide. Maybe it’s a bigger fix than just plugging a hole, maybe the company was using your information in the wrong way.

I have a Facebook profile (add me as a friend), and I did have this application. My profile is open to all so I didn’t notice the problem. I have some other applications on there, too (Feel free to send me a hug or a plant) and new apps appearing daily from friends. I have even went to the extreme as to not accept new applications. It not only clutters up the page but you also don’t know what could become a security hole.

Bottom line – a site like this invites error because so many can contribute. Limit the applications and watch those apps you decide to install. Importantly, just because an app looks safe now doesn’t mean in 3 months wont have a gaping security hole to it. One small “fix” to the app or to Facebook or MySpace can change all that.

Do you Trust Google with your Health Information?

Posted by geeknews at 6:43 PM on May 19, 2008

Googlehealth2008In a word NO, but in all honesty Google probably already knows your health information better than you do. Back in 2004 when I was searching for “Burst Compression Fracture” and a variety of other spine related terms I bet Google knew something was wrong with my back.

I also bet when I search other more personal health terms Google gets a pretty good idea of how healthy I am or not..

Now that Google has launched Google Health they are asking you to load all kinds of personal information about ones health into their system. Well I tell you what Google, there is not a chance I am putting my health record into your online health site.

I am not putting my kids record in either! Imagine my kids finding out what dad did when they where minors, and object to that data being online when they become adults. Nope I am not gonna explain that one! Call me paranoid but there are already enough stupid things going on with our medical records (transcribing overseas) let alone me putting that info into a system that Google can mine.

Pharmy companies shell out billions each year to get their brand medicine as part of your prescription. How much would they be willing to pay Google to get a list of everyone that has heart trouble or a thousand other ailments.

How much would insurance companies pay to have access to people who are very healthy and avoid those that have ongoing issues. I’ll be honest the less Insurance companies know about you the better as they are worse than lawyers.

Sorry Google no Google Health for me, and for those that trust Google with you health data I pray your data never gets leaked.

Should customs read your diary?

Posted by todd at 5:03 AM on February 11, 2008

The EFF has launched an FOIA suit against the Department of Homeland Security to reveal details of their warrantless search and seizure of electronics devices in customs. There have been increasing reports from people that have been had the contents of their laptops, PDAs or mobile phones accessed, searched and even seized by customs officers. All of this without any warrant or allegation of illegal activity.

Homeland security allege that this is simply an extension of the baggage searches they have conducted for years. In reality though this is very different and much more incidious. Firstly the data on your laptop cannot explode in the plane. Secondly that information is private information, and the government has no entitlement to access to it without just cause. This essentially amounts to a fishing expedition to try and find evidence on people selected on some obscure profiling.

I cannot understand how US citizens have allowed the government to get away such eggregious offences against civil liberties! This is but a whisper away from prosecution for thought crime. The details of the story from the Washington Post and a link from Slashdot.

Good advise on protecting your privacy

Posted by todd at 6:29 PM on January 4, 2008

Tom Lee over on Techdirt has a well written post on Scoble’s banning from Facebook for violating its privacy terms. The dispute in question is that Robert used a Plaxo script (a beta developed script written by Plaxo) to transfer his Facebook contacts (name address and birthday) into Plaxo. Facebook claimas it is a violation of their privacy policy to extract user information with a script. Scoble believes that he only transferred information he could access manully. Other suggested that he should not be penalised himself for using a feature of a companies site he did not develop himself, and that Facebook is engaged in restraint of trade by trying to prevent Plaxo from gaining any information on their network.

This is not new ground for Scoble having previously been suspended on Secondlife for allowing his under 18 son to use his account. I think this issue will probably involve a lot of noise but is unlikely to lead to much. The title of Tom Lee’s article is fantastic advise though

Just Assume Any Info You Put Online Is Public

If you have any concerns about whether someone might now or in the future find something out about you that you would prefer they didn’t know, or would find embarrasing, simply don’t post it anywhere online.