June 2019
185 tweets
Getting ready for the Facebook breakup are we?
♥ 2
This is a good article but the problem isn't the apps, it's the conflict of interest. Operating systems and browsers are "user agents", they are supposed to act in the user's interest. But Apple and Google both monetise users, which puts them in a bad position.
Quoting a tweet by @JoannaStern ↗
♥ 17↺ 10
With iOS, Apple needs to monetise users through the App Store. In turn, this means iOS will enable tracking.
Google is even worse: it makes money from both ads and its store, and therefore both Android and Chrome are designed to prevent user privacy.
♥ 3
These things all need to be broken up. You simply can't cater to your users and sell them downriver at the same time. That's evident consumer harm.
♥ 5↺ 3
Not currently but I have painful memories of watching someone trek their cursor to the drop down menu for every save, copy, paste... I don't like to backseat drive at people but this took a toll.
I guess that not using common shortcuts might be "Incredibly Offline As Seen By Old People" 🧓
The word for Google enabling child exploitation at insane scale without meaning to isn't "accidentally", it's "negligently".
If you can't operate safely at scale then you don't get to operate at scale. Own it or GTFO.
Quoting a tweet by @can ↗
♥ 206↺ 79
It's not fair that you'd all be jumping on #nysprivacy right when I'm in California!
Trying to catch up to the bill, at a quick read it looks like a mashup of GDPR, CCPA, and fiduciary obligations? Interesting.
♥ 1
Another value of cracking down on tracking is that when it remains possible it is increasingly through means that can be clearly described as illegal since user choice is typically removed.
♥ 1
Also, it's hard to imagine an environment more hostile to publishers than the status quo. We monetise audiences, having third parties also see our audience and monetise it independently is not in the least helping publishing.
♥ 5↺ 2
Putain, mais tellement.
What Maciej said.
♥ 3
Quite frequently I am told that people want to focus on the app to "deliver a better experience" but when pressed for features or aspects that they think make apps better there I rarely get a useful answer.
♥ 3
I think a lot of it boils down to the app store flow.
No, this is product people with control over their own teams. It's all the more baffling that hiring app devs is quite painful.
Honestly I'm not even sure the UI part matters that much, most apps are simple enough that it doesn't matter much. A few small details eg. sharing intent perhaps.
♥ 1
Yes, that's possible, it's been a while since I tried.
♥ 1
I thought that would be the case but in people I've spoken to it's not been a driver.
♥ 1
It's hard to convey how disappointing it is to see @TheAtlantic publishing this piece. Its relationship to facts is so disingenuous it reads like a cheap lobbying playbook cut and pasted into a respectable outlet.
Quoting a tweet by @PrivacyProject ↗
♥ 2↺ 2
I have no doubt that the Romanian government is going after journalists. Corrupt officials will use shady distortions of the law to further their ends.
They also used tax/accounting law to intimidate the same journalists. So why isn't @BernhardWarner treating us to a choice fanciful rant about the perils of taxation?
That's also the question we have.
A great notion to use to understand today's political struggles, notably the need for data regulation to offer countervailing power in the data economy. (via @jyasskin)
vox.com/platform/amp/p…
♥ 2
I would love a text editor thingie to automatically name/number debug logging.
♥ 2
It takes a lot of work to brew macaroons. Most of the time the yeast just eats them.
♥ 1
Irène Berthezène.
♥ 1
Ah, so no. But she's working on a solution for home decoration ideas!
♥ 1
I know, but you could never name it that in France since it's the wrong region!
I wouldn't be overly worried about more than a couple making it through.
If you're in any way interested in preserving a future for news you want to read this thread if it's the only thing you read this week.
Quoting a tweet by @Chronotope ↗
♥ 10↺ 1
Has anyone looked at a flag to force iframes into private browsing mode?
♥ 4↺ 1
Yes, yes indeed. But in this case I’m interested in the feature as a way to implement some protections in browsers that place a lesser emphasis on privacy.
♥ 3
Are you fine folks all prepared and ready to comply with Nevada privacy law by October? Fun times!
♥ 2
True. Three months does seem a little long just to cut and paste whatever industry will feed them.
♥ 1
Could this be referenced by official rulemaking later or at the state level, eg. to weaken fiduciary, anonymisation, etc. provisions?
I don't believe we have in-house experience with this process but happy to look at whether we could file comments.
♥ 1
Does anyone know if under Nevada's new privacy regime we can label the opt-out "What Happens in Vegas..."?
♥ 5↺ 1
Wasn't there @w3ctag drafting in that direction?
It still enables tracking, no? I'm looking for a way to get relatively close to forcing a third party to comply with the CCPA, from the top level. This wouldn't be perfect but it would be an extra line of protection.
♥ 3
Yeah, I thought of that but I suspect it would break too much ad stuff. It could be worth a shot though.
I realise private is less than perfect, but I'm looking for mitigation and it's a start.
♥ 3
No offence Paul, but it's hard not to be cynical seeing you fix the privacy issues that affect subscription models but not those that enable your ad business which, incidentally, is a primary driver in harming the press.
♥ 4
Wait, are those paint marks indicating that you're going to war against publishers or for privacy?
I can only imagine it must be the latter, right?
So when are you shipping ITP?
♥ 7
So, as an extension that works, but in production would it not break more than is typically palatable?
♥ 3
I am merely noting that the Chrome team appears to have priorities when it comes to privacy, and those priorities happen to be very well aligned with the needs of the ad business far, far more so than with those of users (or publishers).
♥ 2
Private mode is one of the primary means that people use to circumvent partial paywalls. Pervasive tracking is how Google maintains its market dominance over advertising, which Google uses to impose unfair terms of publishers.
The Chrome team is in a position to fix either or both. I am merely observing that judging from which one they decided to fix makes it difficult, even with kindness and the friendliest intentions, not to question their values.
At the very least it might be more decent to spare us the afterthought about ponying up a few dollars for the people most affected by this kind of self-serving choice?
♥ 1
Yes, I’ve been wondering if we’re not having too much ride on the clunky old `iframe`. An <ad> element could in fact make sense for this (as would a <tracker> element).
♥ 1↺ 1
I don’t necessarily disagree, but…
1. Get enough readers using X
…
N. Profit!
Is a pattern that in my experience can be hard to execute upon.
♥ 3
What a bunch of cynics you are! You don’t get it, this HYPER-personalizes. It’s not just for you, not just personal — it’s HYPER-personal. It’s a stress ball, sure, but memorialising a secret so dark you hadn’t even shared it with the most kindred soul.
That’s why you need AI.
♥ 4
I think that depends on the scope you envision for this work overall. If it’s only the attribution then I reckon adding to <a> works but if there’s appetite for more it might be a good idea to take a breath and see what else could happen?
♥ 2
Next time someone tells them that privacy policies are a way to enable “transparency and choice” I’m having them write up a summary of the “Critique of Pure Reason”.
This is great work:
nytimes.com/interactive/20…
♥ 8↺ 5
I wonder if this is not the opposite though? Allowing what gets served in iframes to decide to be isolated, right? Here I’m looking at the container making the iframe isolated.
♥ 2
The comparison with Harry Potter is actually 💯 because “We Solemnly Swear That We Are Up To No Good” is a pretty damn accurate summary of every privacy policy out there.
Quoting a tweet by @gabrieldance ↗
♥ 10↺ 1
On its own, yes, but my idea is that we make it backed by policy. The whole TCF stuff is going to come crumbling down and there's a window to find a negotiated solution between all parties.
♥ 2
If you want to be a 3P controller, you'd need a special flag. Browsers would have to obtain consent at the level required by law.
Publishers would be allowed to discriminate against users who block the former but not the latter.
♥ 1
Notably, by default it would make requests indicating that third parties are service providers. This (with a few other tricks) would be agreed OK under legitimate interest. No secondary reuse by platforms, adtech.
♥ 1
It's a delicate piece of agreement between pubs, users, browsers, regulators, and adtech. But I think there's room for a covenant that is the mutually-optimal option. It's not stable though, so it's unlikely to just emerge.
♥ 1
No, I have not — I have some early notes but nothing of substance.
I’ll take the hint :)
♥ 1
Come say hi at the office!
If publishing an article calling to “HEX THE PATRIARCHY” is wrong I never, ever want to be right. 🧙♀️
Quoting a tweet by @sapinker ↗
♥ 4
No but you’re welcome to visit too!
♥ 1
That can be arranged 😉
I wouldn't say it's required, but I'm all for infosec swag!
♥ 2
I said the priorities aren't, not the specific feature.
Having said that, the interest of the users is first and foremost with privacy by default, not with some special mode.
Sure — I am just pointing out that the order in which things get fixed, aka priorities, is revealing and that it can get increasingly difficult, even from a position of kindness, not to become cynical when they are self-serving.
Come see us next you’re in NYC!
I’m kind of terrified now. At the same time, I think we need to get our own bobbleheads!
♥ 1
Question for Bluetooth hackers: how hard is it to capture a beacon’s signal and then replay it later? Is there any crypto involved to authenticate it? Can it be done with the Web Bluetooth API?
nytimes.com/interactive/20…
♥ 11↺ 3
That was my first impression, thanks for confirming, it’s super helpful.
Quality content. nytimes.com/2019/06/12/art…
Right, I was worried there’d be something like that. So we couldn’t confuse the system by faking beacons walking all over the place.
This means that a browser returning wikipedia results before the search makes it to Google would have some impact?
♥ 2
Frankly, by today’s standards a local cache of article titles probably wouldn’t be _that_ much. Less perfect than matching the content, but should catch lots, could be refreshed regularly.
♥ 2
The lack of privacy hurts pubs since it allows third parties to resell our audiences. And fixing incognito hurts pubs, since it’s the primary mean of paywall circumvention.
I’m 100% for the jump of queue; just saying it shouldn’t always go to the same rich people.
Excellent write-up from @Sally_Hubbard: “The Decline of American Journalism Is an Antitrust Problem.” (But it’s not just an American problem.)
Quoting a tweet by @jason_kint ↗
♥ 2↺ 1
Clickbaitiness isn’t just because of tracking — you would still get it so long as social networks drive virality through pure engagement metrics.
But it’s certainly true that there’s much lower value in developing a returning audience if someone else just pirates it.
The problem is that these aren’t footguns: they’re the most rational response to the data economy as it is structured today.
Historically, building a quality audience was the biggest asset a media could develop. That’s how they made money.
And to build a quality audience, you can’t cheat your readership — otherwise you lose them.
But if access to that audience is no longer exclusive, it becomes massively devalued. Google and Facebook will resell it and undercut you anyway.
There are two primary methods in which this is implemented: browsers and mobile OSs.
I’m not being a pain in the arse of Chrome folks because it’s fun. I have a long list of other people I’d much rather be a nuisance to. But this is a problem.
Of course that could also be solved by those companies acting as service providers instead of data overlords, but when I pitched those folks that idea the response what pretty much:
I’m not sure I understand. Are you saying you can’t do it in the browser unless you do it in the OS as well?
What I do is actually “Dada Governance” but don’t tell anybody.
Quoting a tweet by @TheAnnaGat ↗
♥ 1↺ 1
I'm still unclear what you're getting at. Google controls two of the three largest data leaks. Are you saying that everyone would somehow magically move to iOS? I don't understand how.
♥ 1
Man, that's a badge of honour.
♥ 1
Shall we kick-start an English version of @JamaisSansElles? It feels like I decline one of those every week.
♥ 2
Ah, I had never come across that. It lacks a catchy name and hashtag! I've been thinking about #NotWithoutDiversity or #NWD.
That's a big part of it yes, but it extends further. I'm in father's day mode today but I'll give you more details tomorrow.
♥ 3
It is a harm in itself, but it also involves dollars lost.
There are several different ways in which BlueKai can be used, they don't all involve selling data. I can't discuss deal details or internal policies but Oracle is a lot less hostile to publishers than Google, and their tracker respects DNT which is notable.
OK, count me in! Thanks for thinking of me Amy 😘 What do I do next, just send some text in?
♥ 1
This could really benefit from @dauwhe.
♥ 2
He's copied right here!
♥ 2
If you're in the 89% of users who don't expect their browser to share their data with third parties, this is a handy guide.
wired.com/story/privacy-…
♥ 13↺ 9
You too!
♥ 1
"The large tech companies point to our willing use of their services as proof that people don’t really care about their privacy. But this is like arguing that inmates are happy to be in jail because they use the prison library." (via @othermaciej)
idlewords.com/2019/06/the_ne…
♥ 12↺ 4
I lost two euro sizes. Everyone says it's impossible.
♥ 1
It must be the Endtimes.
♥ 2
When ITP came out I reached out to Chrome folks to ask when we could expect the same there. I was told I was stupid for even looking at ITP, and that of course Chrome would do something *much* better for privacy. (Still waiting!) I don't think John is exaggerating.
♥ 7↺ 1
Unfortunately, I've seen way worse in standards but I agree. Thanks for saying it 🙏😀
♥ 1
Do we really need consistency or is it just that we've left nitpickers run our communities?
♥ 1
I can’t share detailed stats, but at a coarse level: over half of Chrome users were detected as Incognito. How many of those do that systematically versus deliberately to circumvent a paywall I of course can’t know, but I’m sure you can compare to telemetry.
If you want to talk about things that drive companies to prefer apps, you might easily guess this is one!
♥ 1
So — acquiring an audience from a premium site and targeting it elsewhere at 1/10th of the CPM is indeed a big problem.
But you don’t need to go to clickbait.com — you can target users interested in news on FB (and elsewhere).
♥ 1
The data can also be used elsewhere, eg. to know about propensity to subscribe and pitch subs to other services, to suggest app downloads, etc.
Evidently, it hurst in reader trust — and we kinda don’t exist without that.
♥ 1
At the market level, it also harms innovation. Everything has to be done through user data, which devalues contextual alternatives (which we have).
G&FB have a vested interest in ads being tracking-based: that’s their number 1 competence and differentiator.
Since they control the entire market, it’s very hard to get alternatives to emerge as they have to work on those platforms anyway. Publishers are disincentivised to innovate, which further hurts an industry already in trouble.
Oh, you’re entirely right — BK assumes tracking (or some form of data purchase) somewhere. I was simply underscoring the fact that data is not necessarily being sold when they are on a page and that they are friendlier to users and pubs — admittedly against a very low bar!
Without going into details: we have improved things a lot, will continue to do so, but we can’t single-handedly opt out of an industry that is set up at every stage to operate on surveillance.
♥ 1
Maybe. I think things like Prettier go way too far. It's like expecting every text to follow Académie Française standards just because every project has a grumpy old guy.
Which alas doesn't make it in the least reassuring.
♥ 1
Prithee sir do expand.
Yes, that’s the metaphor I’ve been using. It’s what developers should do if they think of themselves as standardised parts.
Language/API consistency should IMHO be cultural rather than formal. But that requires people who understand culture. Perl was pretty damn good there.
♥ 1
Where can one sign up?
♥ 3
There are support groups for this, Ana — hang in there.
♥ 1
Yup — and the authoring experience on Medium isn’t great. It has some nifty basics but once you want to do something slightly out of the ordinary it falls on its face.
♥ 1
And who don’t know what writing is.
♥ 1
Online advertising does not need to collect anywhere near as much personal data to work, but if you're a company with massive abilities to surveil across the net it's in your direct interest to pretend it's necessary since that plays straight into your competitive advantage.
Quoting a tweet by @superwuster ↗
♥ 10↺ 4
NONE OF THE ABOVE.
♥ 1
Nothing is wrong with carbs, in fact by decreasing carbs you risk limiting your brain's ability to improve.
♥ 1
This is a good example of what goes wrong because science is written in graphics formats like Word or LaTeX. Computers are dumb, they will make dumb decisions if you hide information from them. t.co/jGZzYZZ2FP
♥ 5↺ 1
So, a clear political bias would be different pricing in advertising for different constituencies. This could be in CPM of course, but also in higher CPOs. Both of these are dynamic. How do you audit that? How do you separate disparities of treatment vs impact?
♥ 1
How do you identify what is political? When Facebook tried to do that it was an unmitigated disaster.
What happens when YouTube claims they aren't biased because they use machine learning?
♥ 1
Welcome @kashhill! Excellent news! nytco.com/press/kashmir-…
♥ 2
It conveys very little in the way of shared semantics for the text, which means the computer can’t tell the difference between a paragraph of body text, affiliations, and references. It’s only encoding that visually, which is unhelpful.
I don’t either! I can see good intentions here, but without a legal framework to bring some auditability to the bowels of the beast, I’m not sure how it can work.
Sure — but it’s reasonably straightforward to make HTML semantic.
(I can say this with a straight face because I’ve worked on implementations for Word and LaTeX processing, and things are relative.)
♥ 1
Oh yeah, man, I used to work in science publishing and there’s just so much garbage…
There's a ton of text that could be trimmed here. Easily.
You want... Action Item! professionalsuperhero.com
♥ 1
My understanding is that the ICO is operating under a regulator's charter that prevents them from taking action that risks excessive unpredictable disruption to an industry. I'm not saying that's the right choice but I think they do have to move in increments.
There is a lack of people who understand tech, can see through the bullshit, and can work with people in other fields to help tease out bigger picture or more precise and actionable views. The problems can be quite interesting, too.
♥ 10
“Google Chrome has become surveillance software (…) it’s much easier to switch to a browser not owned by an advertising company.” washingtonpost.com/technology/201…
♥ 21↺ 18
I'm not sure how that changes the author's assessment, though. Android is a privacy train wreck but it's hard to suggest people switch when iOS is expensive and only marginally better.
♥ 1
Yeah same, though a blank Android running nothing still tracks stupendous amounts of data.
♥ 1
Tessa Thompson.
♥ 1
That's a killer book blurb right there.
♥ 2
This article, in addition to being spot on, gave me: "bullshit-industrial complex", "innovation theatre", and a great definition of "bullshit".
Quoting a tweet by @callin_bull ↗
♥ 23↺ 10
Great write-up. I wonder if it might have benefited from some considerations about how design could contribute as a discipline.
♥ 1
WTF? Where is that from?
I can no longer figure out how to go from a song played from a playlist back to the playlist. They seem to be designing with AB testing.
Reference?
The W3C bot that handles IP commitments in repos?
Oh, I have that one on my pile 😊
Well played sir.
Are you a wonderful program/project manager interested in coordinating a fascinating array of stakeholders? Are you interested in privacy and tough problems?
Come work with me at @nytimes!
nytimes.wd5.myworkdayjobs.com/en-US/NYT/job/…
♥ 9↺ 10
Thanks James 😘
♥ 1
Yeah, there’s a bunch of videos of that out there. Just the first one I found: youtu.be/tKNN49idCUo?t=…
♥ 1
Possibly, I don’t know! I wouldn’t be surprised if they were precise enough to avoid them.
♥ 1
Ben ça dépend de ce que tu cherches en termes de privacy?
I don't think so, why?
Mischievous hacker you!
♥ 3
The first story relies on those notions, yes, but I think all you need to know is explained!
😘
Lots of truth in here, leading up to the excellent @chrishwiggins!
Quoting a tweet by @BoingBoing ↗
♥ 1
“The Audience in the Mind’s Eye: How Journalists Imagine Their Readers” from the excellent @JamesGRobinson cjr.org/tow_center_rep…
♥ 3
The one you REALLY want for karaoke night is @torgo. Not that I have the pictures to prove it, but…
♥ 2
Amazing! Are you going to do something at the office around it?
♥ 2
Please make sure we hear about it on the business side too!
♥ 1
There's lots of discussion if you want to dig: w3.org/2001/tag/group…. That's what gave us .well-known.
♥ 2
So Chrome is now officially the only surveillance browser left.
Slow clap, Google, sloooow clap.
Quoting a tweet by @MSEdgeDev ↗
♥ 9↺ 7
Cosmopolitan supremacist? What does that even?
♥ 1
That's missing the fact that it's not physically possible to say that sentence without spitting on everyone around.
♥ 1
Yes, much of this we deal with through nascent data rights (often just called privacy, but they also have huge impacts in inter-company relations). The conceptual tools we have to work with control over non-excludable goods are limited and in need of invention.
♥ 2
It's exciting just how nowhere we are with global data governance. There's so much to invent!
theatlantic.com/international/…
♥ 5↺ 1
One battle at a time.
♥ 1
Buffy.
Man, I miss telnet though.
♥ 1









