July 2021

357 tweets

Thread of 2 tweets

Replying to @pbannist and @mnot

Yeah, I mean, I don't agree with all that Neil says. But the legibility angle is an important one which I am using as well, and I'm very interested in seeing how others put it to work.

Replying to @null and @NewsCEO

Thanks David!
has the power to fix this mess for people and help the economy — it's more than time to use it. The ban and NIE system need to be lifted, at the very least for vaccinated visa holders. To clear the backlog, visa stamps and statuses need to be extended automatically.
↺ 6

Thread of 2 tweets

Replying to @sidhubaba

I like the idea of what you're saying; at the same time I'm not sure that the French practice of thoroughly charring unmarinated meat and eating it with no sides other than wine strong enough to cover the taste should qualify as a "grilling tradition."

Replying to @sidhubaba

It is not without its charm! There should be tourist warnings relative to it, though. I was once at a French-American wedding in France that involved grilling, and significant conflicts have been started over less.
↺ 1

Replying to @null and @borisschapira, @ElieSl

On peut même faire ça hors congé de paternité! 😎 (De toute façon, même à temps complet, 11j c'est trop peu.)

Replying to @null and @borisschapira, @ElieSl

Cool, c'est mieux! J'avais un peu ri jaune sur mes 11 jours à €50/jour forfaitaires...
Data might have become grammatically singular, but personal data is primarily a collective concern that requires collective governance. Read @salome_viljoen_, @mer__edith, and @jathansadowski as they make that case in @Nature!
Quoting a tweet by @salome_viljoen_ ↗
↺ 2

Replying to @aldengolab and @salome_viljoen_, @mer__edith, @jathansadowski, @Nature

Not in Nature, though.

Replying to @BrettFrischmann and @MrsMRS_PhD, @profmadison, @EvanSelinger

That is something I've been wondering about: if someone has looked at the scale structure of existing polycentric systems. Is rule-setting scale free?

Replying to @null and @MrsMRS_PhD, @BrettFrischmann, @profmadison, @EvanSelinger

I would be happy to, though I might not bring more than questions and coffee. Seems like a networks/complexity angle could make sense? Maybe @msantolini, @jbakcoleman, or @manlius84 have thoughts?

Replying to @manlius84 and @MrsMRS_PhD, @BrettFrischmann, @profmadison, @EvanSelinger, @msantolini, @jbakcoleman, @bagrow, @a_baronca

Thank you! I will definitely read these.
Working from home is great, but my assistant could be better at sorting papers.

Replying to @RDBinns and @Elibietti, @TrialByTruth, @sivavaid

A form of tenancy in common? (I think that translates the French "indivision.") You are the owner, but you can't cede without collective governance (in French indivision, it's even unanimity, but that's a whole other bag of problems). I think there could be something there!

Replying to @ColinHayhurst

Thank you!

Replying to @Elibietti and @TrialByTruth, @RDBinns, @sivavaid

I agree that we need more than a simplistic binary of property or not. The whole notion of controllership seems built to ascribe a form of property-like rights without saying it. It makes it hard to characterise theft.

Replying to @BuggeErik

As you can see in the picture, the cat is about to pick up the pen and start summarising my notes.
The secret to all successful A/B testing when the product manager is influential in the company.
Quoting a tweet by @michael_nielsen ↗
↺ 1

Replying to @mc2hampion and @ColinHayhurst

To be clear, my thinking isn't that democracy will save us, only that it's credibly the highest collective cognition we can achieve, and we need to be putting the odds on our side. But we could still fail.
I'd also note in the condo story that, in a functioning polycentric system, decision-making failure at one level should be caught by other levels, in this case whatever city or state code inspection system has them in scope. The board failed, but not alone.

Thread of 2 tweets

Scroll upthread to see why.
Quoting a tweet by @lukecissell ↗

Replying to @mc2hampion and @ColinHayhurst

It is. I think the difficulties will be 1) making sure they apply the right values, and 2) holding them to not prefer big companies. For governments, it's easy to have just a couple of big cos that you can summon to your office and get some symbolic concession from.
I'm notably concerned about the latter after seeing the commitments @CMAgovUK secured on the Privacy Sandbox. They're directionally fine, but they are almost completely ineffective.

Thread of 2 tweets

Replying to @kyotonio

What's also hilarious is that they've been telling everyone since they introduced this API quite a while ago that it has terrible results and people should really only ever use it when there is no alternative.

Replying to @kyotonio

Yup, you do.

Replying to @kyotonio

Yeah, I'm sure it works to some degree, I'm more amused at the backpedalling from FB. I wonder how effective it is with IP & email masking, and loss of fingerprinting surface in the UA string. I'm pretty sure it's on borrowed time.

Replying to @null and @pixeldetracking, @kyotonio

But they can only get as many as sites get and that's not everything. It also has to match with them. Or am I missing something?

Replying to @jaredrileysmith and @kyotonio

Right, but that's becoming less useful with UA-CH.

Replying to @tobie and @mnot

Yes, we have to roll this back. I hope this will draw attention to these problems:
Quoting a tweet by @natashanyt ↗
Let's normalise surveillance for kids so that they're better prepared for adult life... It's like someone found a copy of Discipline & Punish and thought it was a how-to manual.
Quoting a tweet by @mnot ↗
↺ 5
NIEs are now automatically valid for 12 months. This is a good step forward, a great follow-up would be to grant a similar extension to visa stamps. travel.state.gov/content/travel…
↺ 1

Replying to @leonieclaude and @celiabelin

Yes, it doesn't make sense since unmarried partners can be visa dependents!

Replying to @Chronotope

As you hint at, I think that the path forward is semantics. It would be great to have a way to mark that something is an ad, and something is an offer. Then we could establish reader mode best practices for those.
↺ 1
My assumption is that they wouldn't be invasive: ads with zero animation, just inserted, and offers included without overlaying atop anything. There are ways to make this work without breaking it.
I would also love if we could target it with media queries with a very minimal set of properties, perhaps no positioning or colour, but at least fonts and typesetting. Indicate a logo to use. Keep some soul to it.

Thread of 3 tweets

Replying to @Chronotope

There's a lot that ads could do with MQs, that's definitely something to explore.
Oh, wait, you're talking about having device info passed into bids? If we can keep the entropy at a decent level, that would be really neat indeed.

Thread of 2 tweets

Replying to @histoftech

Your work is amazing AND your dad jokes are an inspiration. (Or maybe it's the other way around?) Either way, I don't know what I can do to help, but I would love to if I can.

Replying to @recifs

Hahaha 😂 J'ai bien quelques idées, si tu as des entrées dans le processus ePrivacy je suis preneur!

Replying to @RIngthorss and @keith_wilson

Journals can fix this. I forget which journal (maybe @PLOS?) started doing peer reviews as a group. Reviewers can be anonymous to the authors but see each other and need consensus on feedback. It's harder to be that guy in front of witnesses.
Just like that "webs that spiders will weave under different drugs" paper, except with kids aged 2-6. (OK, that's not *quite* the research, but it looks close enough 😛.)
Quoting a tweet by @choldawa ↗
↺ 1
Very weird: has spam stopped working to the point that snail mail scamming works better? I just received this 12 page invitation to a secret society in Utah and it's wild.
↺ 3

Replying to @null and @benharnett

Did you know that Einstein managed to find his way out of a love triangle and go from nothing to Nobel in two years because he knew The Secrets?

Replying to @null and @mattmay

I know, I remember seeing some as a kid — but I thought they had disappeared. Maybe it's just that some marketer now has me in their "old person" segment.
↺ 1

Replying to @jason_kint

This Is The Future That Privacy Advocates Want.
↺ 1

Replying to @JamieXML

I too have long seen the fnords.

Replying to @null and @benharnett

I'm happy to share! There's a space to correct my address that you could use.

Replying to @RobertJBateman

It's very helpful.

Replying to @null and @benlikestocode

As if the Atlas Shrugged people needed to be even more of a sect!

Replying to @RobertJBateman

Well, now that I know how to use a stamp, I'm happy to forward it to you!
Do you like tech policy? Are you near Princeton? Come to Tech Policy: Princeton on the 22nd! berjon.com/tech-policy-pr…
↺ 3

Replying to @null and @Carnage4Life, @slightlylate

I don't think we can keep those two entirely separate, restricting one makes the other even more problematic than it already is on its own. Policy option: papers.ssrn.com/sol3/papers.cf… Inclusion in Web privacy model (draft, more to come): darobin.github.io/pup/

Replying to @slightlylate and @Carnage4Life

I literally have no idea what you mean by that.

Replying to @null and @Carnage4Life, @slightlylate

I look at it even outside anticompetitive concerns, real as they are. The amount of sludge choice architecture in the Chrome Sync consent funnel should not be possible in a trustworthy environment — even if the data were only used for saintly purposes.
If we lose the assumption that browsers are trustworthy then there is literally nothing left that works on the Web. The architectural bottom falls out on the whole argument from RFC8890 and values-based protocols. The fiduciary model seeks to make the foundation work (again).

Thread of 2 tweets

Replying to @RDBinns

It's interesting to note how this aligns with CCPA notions of sale.

Replying to @PeterSMagnusson

I don't know, big numbers are cheap 😉
What interests me here is how to get to a situation in which there is only one controller, which is what GPC is going after. I'm aligning Do Not Sell with a withdrawal/objection (depending on basis) to processing by other controllers.

Thread of 3 tweets

Replying to @mholzschlag and @alexanderdanilo

I deny any knowledge of this "trouble", I really don't know what you might mean!

Replying to @mholzschlag and @alexanderdanilo

Heya! ♥ I blame @danbri anyway.

Replying to @Forsheit and @AGRobBonta, @globalprivctrl

I'm not sure what your expectation of a "recognised standard" is? In standardisation, adoption is the key metric, and GPC has more than enough of that.

Replying to @Forsheit and @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

But that's the thing: this isn't how Web standards work. As per Process §6.2.2 you cannot advance without implementation experience, which means the standard needs to be adopted *before* it is ratified.
But differently, it's a question of fact and not a question of rubber-stamping. That GPC can demonstrate implementation experience, including now by being adopted by major jurisdictions, is exactly the expected order of execution.

Thread of 2 tweets

Replying to @Forsheit and @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

We're talking about a boolean flag available over HTTP and the DOM — it's been tested through and through. That it works for legislation is the relevant criterion to look for, and it seems the AG has found that it works.
So seen.
Quoting a tweet by @PDLComics ↗
↺ 2

Replying to @Forsheit and @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

I don't at all understand this idea that we should only respect consumer choice when things are made as painful as possible for consumers. GPC *is* consumer choice, it's just consumer choice designed with consumers in mind.

Replying to @Forsheit and @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

That's an easy fix for businesses that wish to make things clear to their users: just display an indication that the user is opted out, as per their browser preference. We do that.

Replying to @Forsheit and @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

There is absolutely nothing "large" or "sophisticated" about this. Any off-the-shelf CMP can support this trivially. Anyone who rolled their own can implement this in well under a day. I think sticking to the facts creates less confusion than fear-mongering.

Replying to @fatemehx2 and @Forsheit, @jason_kint, @AGRobBonta, @globalprivctrl, @w3c

I mean, there's a whole W3C workstream that's exactly about making advertising work in a way that doesn't require treating your readers as the enemy. Maybe people should pay attention :)

Replying to @jathansadowski

How dare she make well-document statements.

Replying to @bayesianboy

I think the internet needs to know more about the duck noise kitten.

Replying to @garjoh_canuck and @WolfieChristl, @ashk4n

The beauty of the market, as clearly described by Hayek, is how the price mechanism can encode local information that can never be effectively shared to everyone or efficiently processed by some big centralised entity.
The idea of broadcasting local knowledge or handing it all over to a couple of big inefficient engineering bureaucracies is, on paper, a recipe to create inequality, poverty, inefficiency, and a highly distorted market and — lo! — that is what we observe.

Thread of 3 tweets

Replying to @swodinsky and @garjoh_canuck, @WolfieChristl, @ashk4n

This is literally the story of my life, except the area of knowledge changes all the time :)
WHAT DO YOU MEAN SEASON FINALE IT'S ONLY EPISODE SIX.
↺ 1

Thread of 2 tweets

Replying to @samdebord

Exactly.
This wasn't what I had in mind when I said we should reboot the Internet but I'm open to options.
Quoting a tweet by @csferrie ↗
↺ 3

Replying to @RobinvanBeauDow and @RobinCRLee

I haven't read that specific book, but it sounds like it's about a commons approach? If so, I definitely think that there's a lot to find there, yes!

Replying to @craigaatkinson

Yeah, I looked up how sensitive it is and apparently it's one millionth of a volt, which sounds pretty sensitive. I have no idea if undersea cables leak current and if so how much, but it's a theory!

Replying to @RobinvanBeauDow and @RobinCRLee

Thanks! I'll check it out. (Will you be back in Princeton by the way?)

Replying to @RobinvanBeauDow and @RobinCRLee

Let me know when you're back!

Thread of 2 tweets

Replying to @nattyover and @WKCosmo

I got the impression that he was talking about inexpressible rather than inexpressed? There's a huge amount of tacit, implicit, craft knowledge that isn't or is only poorly captured in text, not just from evolution.
I mean, there could well be a text about the exact experience of hammering in a nail, or the precise amount of time and intensity to make eye contact when crossing someone in a given city, as modulated by perception of social status, etc. but there probably isn't.

Thread of 3 tweets

Replying to @CECabrera_ and @HannahPoferl, @nytimes, @Columbia

Congratulations!
Sadly, there seems to be no illustrator credit, but I would like to thank whoever decided to illustrate California enforcing GPC — a protocol flag to indicate privacy — with a bear looking at a literal flag reading "DENOTE PRIVACY." Strong allegory vibes! Cc @KateKayeReports
↺ 4

Thread of 2 tweets

It's a good thing that privacy browsers can turn GPC on by default, then :)
Quoting a tweet by @johnwilander ↗
↺ 3

Replying to @johnwilander

I don't disagree on principle — but not everything can be solved technologically, and in some cases we have to rely on legislation. My view: We should use every bit that helps, and if that includes sending a signal by default, then so be it.

Replying to @gsnedders and @johnwilander

Or even just logging in with email and having that used for web-wide tracking. I love what Apple is doing to help address that, but it's only going to work for a limited number of people. Why not help plug that hole? It's a pretty big one.
↺ 1

Replying to @johnwilander and @gsnedders

Yeah, but we have to work with the laws we have, not wait for the ones we wish we had.

Replying to @johnwilander

We do — but IE also had no law that said they could do it and gave teeth to that choice. Also, it's not my preferred option but this could be a one-off ATT-like decision.
Having been quite active on the GPC work, but also being European, people often ask me how I see GPC working under the GDPR. I wrote it up! berjon.com/gpc-under-the-… (Note: this is not legal advice!)
↺ 8

Replying to @pbannist

It's great that people are discovering CI, but it hardly counts as "alternative." Outside of industry corners where people still see "transparency & choice" as a real thing, it's largely the standard. I cover it in both darobin.github.io/pup/ and open.nytimes.com/how-the-new-yo… :)

Replying to @null and @pes10k, @johnwilander, @ashk4n, @Chronotope

I am not a lawyer, etc. but the law/regs indicate that if users pick a tool that's privacy-supportive, then it can be on by default. For Apple, well, that's on billboards all around the world. For Mozilla, they've been advertising their privacy too.
Both Chrome and Edge have been active in privacy, even if more recently. I got an ad about how Google care about privacy now this morning. They might have to prompt, but I think they could consider the default.
I would also add that Ethical Web and a couple of RFCs clearly document that privacy is an essential component of browsers. Browsers are meant to be PETs — that should count for something!

Thread of 3 tweets

Replying to @KateKayeReports

It's absolutely great stuff :)

Replying to @KateKayeReports

These look wonderful.

Replying to @weeb0

Thank you!

Replying to @lukOlejnik and @MaxGendler, @johnwilander, @pes10k

I see no basis under which a piece of software must allow its users to decrease their level of data protection.

Replying to @SZimmeck

Thanks Sebastian!

Replying to @MaxGendler and @lukOlejnik, @johnwilander, @pes10k

It's also guidance for the cases in which the browser might accept third-party cookies — not for how it might completely ignore them.

Replying to @MaxGendler and @lukOlejnik, @johnwilander, @pes10k

By the time ePR gets anywhere there won't be third-party cookies left anyway.

Replying to @coolharsh55

You make good points! I think I address most of them, but it's certainly true that having an official take on it would be much better.

Replying to @coolharsh55

I'm not sure that putting it in the spec works, I don't think we can use a standards body to produce legal interpretations? I wish!

Replying to @coolharsh55

That's the part I don't understand: separating the interpretation of the signal from enforcement. Are you saying that we should basically have my blog in the spec, that will say what it means but it'll need another step for enforcement? Is that better?

Thread of 2 tweets

Replying to @maximilianhils

Thanks! I'm not sure I fully get your question? Under the GDPR, there is an explicit allowance for direct marketing under legitimate interest. GPC is about data transfers to other controllers (including under LI). So LI is in scope for 3P controllers, but not 1P direct marketing.

Thread of 2 tweets

Look at that hockey stick, I'm getting filthy rich monetising my blog!
↺ 1

Replying to @ylitvinenko

It's powerful infrastructure technology, the hard part with these is always figuring out what is a good way to use them. I don't know if you know ReSpec, but all the docs it makes are monetised to support its development. It's small but neat!

Replying to @null and @nhoizey

Aha, but it grew overnight, I'm nipping at your heels! I'll get to space before you, MUAHAHAHAHA.

Replying to @null and @amyvdh, @pbannist

Thank you! Hahaha 😂 yes that's a great comic!

Replying to @RobertJBateman and @maximilianhils

Thanks! WRT direct marketing under LI, I think I'm the one who's unclear because I am taking shortcuts through assumptions. Let me try to unpack this and see if I can make more sense to you two! Under Recital 47, DM may be done under LI. It's not restricted to the 1P.
The GDPR doesn't have much in the way of a built-in 1P/3P distinction anyway. However, R47 does place some restrictions on that, and frankly unrelated to GPC if there is a 3P carrying out its own DM (not on behalf of 1P) under LI, I'd *love* to see that LIA!
With that said, I turn to GPC. There can be DM of the 1P under LI. GPC explicitly does not touch that as you point out Maximilian. For 3P, either they are controllers or they are processors. If they are controllers, GPC just shut them down — so they can't be processing.
If they are processors, they can't be processing the data for their own purposes (lest they be requalified as controllers, then go to previous point). So they can't be carrying out their own DM *unless* the 1P were to instruct them to.
So, I load you as a tracker and then I instruct you to go direct-market yourself with that data. It would be weird! But if it did happen — why not? — then the legal basis would be contract and not LI I think. As usual, I'm not a lawyer so I may be full of crap :)

Thread of 5 tweets

Replying to @ylitvinenko

Yeah, those are the docs, they're not actually built with ReSpec. Here is one example: darobin.github.io/pup/ (It's my draft but the money goes to the project.) Full disclosure: I did start ReSpec, but they added this after I left so not plugging my stuff :)

Replying to @IelTop

Sure, it always does — there is no obligation for a browser to do anything the page says if that goes against the user's preferences.

Replying to @julien51 and @UnlockProtocol

I thought of that — but I don't have anything to offer in exchange!
Calling bullshit masterclass.
Quoting a tweet by @CT_Bergstrom ↗
↺ 9
"More power than they can handle" is exactly the problem with all variants of algorithmic media. twitter.com/juanof9/status…
↺ 3

Replying to @null and @benlikestocode

Well put 😁

Replying to @faineg

Wow, I... I kinda want to do that too.

Replying to @IelTop

But the signals are not conflicting, the question of precedence is easily solved. Whereas automating interactions with arbitrary banners is hard.
I want to help fix the Internet so that it can enhance rather than destroy our capacity for collective action and intelligence.
Quoting a tweet by @bethsawin ↗
↺ 3

Replying to @BrettFrischmann and @EvanSelinger

Me too!

Replying to @IelTop

This is built on the assumption of a legal decision, not for firms to call it. Otherwise nothing works! The problem with banners is that the GDPR default when they are rejected is useless, and I'm not sure that they have the right granularity to automate something that works.

Replying to @jwajsberg

You mean after fixing that?
At heart, it's a problem of unfettered power and gatekeeping. We had a world of many gatekeepers, we wanted to have more (or none at all), and instead we have two or three. It continues because they are allowed to extract resources from everyone else and no one stops them.
So the question is: what's the smallest number of moves that breaks the algorithmic media duopoly? Sorry I don't have better solution yet, I have just started rethinking the approach!

Thread of 3 tweets

Replying to @coolharsh55 and @IelTop

Opt in is a good system when there is a good definition of what is optional and what is essential, basically when it is grounded in a strong theory of privacy rather than trying to mimic human subject research informed consent!

Replying to @heidilegg

That wouldn't be a bad thing!
Is there a good, citable text (or even a textbook) about how much of journalism involves deciding what is relevant to readers?
↺ 2

Replying to @null and @ToddWalker, @Moonalice

Agnatology (also agnotology I think) is the science of creating doubt or ignorance. Agnatogenesis is when you generate that.

Replying to @jwajsberg

It's depressing that the problem is hard, but I think that it's encouraging that we actually have powerful intellectual tools with which to investigate it. Just like with smoking or chemicals (the history of Dupont is interesting here), there'll be denialism but we're equipped.

Replying to @coolharsh55 and @IelTop

Indeed! But the definition of essential that DPAs use is smaller than what is essential. So you end up obligated to obtain consent for essential purposes.

Replying to @cwollen and @coolharsh55, @IelTop

No! Not sure if you are asking this in the context of the tweet or the blog post?

Replying to @dkiesow

Fair, but I'm not looking for something defining news. In fact, I'd rather go broad and include service journalism here, not just news.

Replying to @null and @sivavaid

Thanks! Looking that up.

Replying to @devjpow

I think that's not the answer to the specific question I had at hand, but it looks like it's actually *super* relevant to the line of thinking that I'm tinkering with so I'm definitely getting it. Thanks a lot!

Replying to @coolharsh55 and @IelTop

Actually, my point is that that's why we *should* regulate. What we have right now is not regulation, it's offloading the work of defining what's right to data subjects, who are rarely equipped to do it well! I would expect regulation to do that work rather than cop out.
I don't have an up-to-date written version, and I think it has to be context-dependent. But it's work I had looked at with the people looking at "Acceptable Ads" and there's a new line of work coming up to define that better for news.

Thread of 2 tweets

Replying to @null and @paulduplantis

Thank you!

Replying to @cwollen and @coolharsh55, @IelTop

The point being made there is that withdrawal or objection to processing do not need to target specific purposes in order to be effective.

Replying to @null and @ToddWalker, @Moonalice

Heh. @CT_Bergstrom: you might want to consider putting a definition up somewhere that search engines will pick it up, maybe on the Calling Bullshit site?

Replying to @dkiesow

That looks like it might indeed be a promising avenue — thanks!

Replying to @null and @podopie

I'm looking at the similarities between traditional and algorithmic media, and why the latter are a lot less different than they like to claim they are. Maybe I should, like, ask Dean for a quote instead of probing Twitter :)
It's Sunday, don't forget to box up your kittens!

Replying to @FrankPasquale

This looks spot on. And dated is arguably better, I'm looking for foundations. Thanks Frank!

Replying to @CT_Bergstrom and @ToddWalker, @Moonalice

Ah! I hadn't seen that you'd just done it. Looks great!

Replying to @coolharsh55 and @IelTop

I would say there are several levels: some things should not be consentable (organ sale), some things should be consentable but hard to consent to because risky (research on human subjects), anything that has to be fluid should not involve consent.
If we architect a regulatory system that will make all kinds of processing, from the trivial to the risky, look the same to subjects, then we're really hurting people. Sadly, that's the GDPR as currently semi-enforced. It's a bad system.

Thread of 3 tweets

Replying to @BuggeErik

Awww. Is that a dog life vest next to it?

Replying to @cwollen and @coolharsh55, @IelTop

But this isn't specifically about marketing. Evidently LI is always tied to a purpose, but objecting need not be.

Replying to @cbpetre and @FrankPasquale

Thank you! This is super helpful. The only one I'm familiar with is the work of dear colleague @JamesGRobinson (and glad to see it recommended in good company).

Replying to @null and @MadronaCitizen

Nah — it's `object-fit: cat-in-box` :)

Replying to @cbpetre and @FrankPasquale, @JamesGRobinson

It is indeed!

Replying to @coolharsh55 and @IelTop

The industry is full of shit, but the situation isn't helped by privacy folks with completely unrealistic expectations of what should be consented to. Regulators and legislators can't figure out what to do when everyone is unreasonable.

Replying to @montezumachavez

Thank you my friend :)

Replying to @coolharsh55 and @IelTop

I don't think we should remove consent entirely either, but if it's not rare I don't think that it can work. Basically, if a site asks for consent and you don't already know why, that should be a big red flag.

Replying to @BuggeErik

It's so adorable.

Replying to @cwollen and @coolharsh55, @IelTop

As I said, lawyers expect that you have to be specific in objecting but I have yet to see any supporting evidence for that view. And I don't see why: the data subject should be empowered to just object, it's their data.

Replying to @patrick_h_lauke

You mean I should have one?

Replying to @patrick_h_lauke

Removed it, easier.

Replying to @mnot

That's true everywhere else, too :)
For the folks looking for a solution to the FB/YT/etc. problem: there's a platform out there that has 4.1 billion MAU, everyone can write to it, everyone can share. Sure, it has some issues and some disinformation — but not anywhere near the same scale. It's called email.
↺ 9
I mean it. I'm not saying that we should use email as is. SMTP is from 1981, a lot of the other technologies in it are similarly dated. It's lacking some features and has some architectural issues, and the fact that most know it through Gmail makes it look even less usable.
But the principle that makes it work is simple and can be reproduced: instead of having the Google/Facebook algorithmic media duopoly serve as gatekeepers deciding for everyone who gets amplified and who doesn't, everyone can decide locally who they personally amplify.

Read the whole thread: 7 tweets →

Replying to @lehors

That list is pretty short, though, I'm not sure there's anyone in the "And Co" 😁

Replying to @random_walker

I don't think it's principal agent, everyone knows this is bad. But you can measure mailing retention easily, it's harder, more expensive, and more deliberate to measure the impact of this kind of trick on the brand. This would be a cool study to do at scale.

Replying to @sheeraf and @ceciliakang

Take them up on it, I want to hear how it goes 😁
There's been sunset light all day here in New Jersey from the fires in Canada, 4,000km west. I never knew nuclear winter would be pretty.
↺ 3

Replying to @loganmoseley

Replying to @TzviyaSiegman

Sadly, no, it's actually what the end of the world looks like. fire.airnow.gov/#

Replying to @TzviyaSiegman

I have more; I took pity. ;-)

Replying to @salome_viljoen_

Damn, how did I not think of that.
"Pseudonymous identifiers are safe!" Exhibit #7359
Quoting a tweet by @GerritD ↗
↺ 16
Say what you will about how boring Facebook is on the tech side, their lawyers definitely know a thing or two about innovation. "Facebook said the consent clauses must be seen as a "contract" where users "ordered" personalized advertising." 😂
Quoting a tweet by @maxschrems ↗
↺ 16

Replying to @swodinsky and @bigblackjacobin, @Chronotope

Yeah, no, you have the informed take, that's the take. People care a lot about privacy. They care when you ask, they care when you give them a real option. If it's lose privacy or live in a cave, they don't go live in a cave. That's called having "transparency and choice."
↺ 2

Thread of 2 tweets

Thread of 2 tweets

Replying to @hoofnagle

Oh, I'm not surprised, I love ordering me some personalised ads, it really takes the edge off.

Replying to @petetiarks

There's a career waiting for you!

Replying to @DoraCrisan

I don't believe they're contract based?

Replying to @recifs

The victim.

Replying to @Chronotope and @bigblackjacobin, @swodinsky

A lot of my citations are links to your threads 😁

Replying to @Chronotope and @jathansadowski, @swodinsky, @bigblackjacobin

Yay! Which reminds me that before this thing, we had talked about doing a get-together of the people who discuss the garbage jungle. I don't know about Melbourne, but for those closer to NYC we could do that soon?

Replying to @DoraCrisan

As in the GDPR legal basis, cookie walls are usually consent.

Replying to @RobertJBateman

I know, I was mostly poking fun at them :)

Replying to @RobertJBateman and @AureliePols

Yeah, I mean, if I'm serious it's not even the most egregious use of a legal basis I've seen. @rubin was sharing examples of sites asking users to agree to legitimate interest recently, I thought that was pretty creative.

Replying to @ericlaw

I was being sarcastic?

Replying to @Chronotope and @jathansadowski, @swodinsky, @bigblackjacobin

Same! All vaxed up and doing meetups in Princeton, so it should be pretty easy to do the same in NYC. I'll let you pick where since I'm no longer local — I'm very open with when!
This looks like a pretty cool opportunity!
Quoting a tweet by @BKCHarvard ↗
↺ 2

Replying to @laurencediver and @mnot

Wow, this looks amazing! Great cover too. December 😭
When people suggest that tech meant to replace third-party cookies should be thoroughly evaluated before they can be phased out, I always think: against what? It's not like the current system works.
Quoting a tweet by @kfranasz ↗
↺ 3
Reminder: tonight is the first Tech Policy Princeton. If you're in the area, come by and have drinks and a chat with us! berjon.com/tech-policy-pr…
↺ 1

Replying to @laurencediver and @mnot, @EdinburghUP

It also tantalisingly says "pre-order" but it looks like you can't :) y u torture me @EdinburghUP?

Replying to @alextcone

Are you still in PA? It's, like, right next door ;)

Replying to @Moonalice

I mean, if they're English then that certainly makes sense.

Replying to @alextcone

Sign up for the emails, you never know!

Replying to @null and @BarakShoshany

They lost the job to Major Breakthrough.

Thread of 2 tweets

Replying to @privacypen and @montezumachavez

The initial group is as described on the site; the spec is by the people listed as editors and it's an open process so others are participating with issues, suggestions, etc.; browsers, extensions, CMPs I think are all listed too; sites can be a bunch, the NYT is one!
I saw my first ad delivered by PARAKEET today and hey, it's pretty relevant!

Replying to @privacypen and @montezumachavez

I think the IAB is evolving. There are still some conservative voices there who haven't noticed that the world is changing, but there are folks who've been paying attention and know this can't and won't go on. We'll see!

Replying to @BrettFrischmann

That's a shame — sign up for the email (it's me on the other end, so no spam…) and maybe you can make it next time!

Replying to @recifs

No — I live in the 'burbs and I don't have one so it's *actually* something I could buy. I won't, but pretty good!

Replying to @ZachTumin

You haven't missed it: it's tonight! I don't know if they still serve 16yo, I haven't been 16 in a while, and when I was 16 pretty much any bar would serve us so I wouldn't notice ;)

Replying to @privacypen and @montezumachavez

Oh, some people will put up a fight, for sure. But so far it feels very rearguard.
There's a lot of debate around privacy, which can make it hard to find a path forward. But if we stick to discussing opinions that have some grounding in reality, there's a lot less doubt to sow around. berjon.com/privacy-realit…
↺ 26

Replying to @coolharsh55 and @privacypen, @montezumachavez

There's a whole rest of the world! Also, they are still trying to sow confusion :)

Replying to @PrivacyMatters

Thanks Pat :)

Replying to @coolharsh55 and @PrivacyMatters

I started answering your rant but then the tweets were gone :) I think we agree on much here though perhaps not details. I like automation (see GPC) but that too needs defaults — then you're back to deciding what's good without user intervention, no?

Replying to @null and @LibSkrat

Thank you!

Replying to @Log3overLog2

DuckDuckGo launches a public beta of their single-origin email system, with tracker removal. It integrates with their browser and extension. With the push to use hashed emails for tracking, this is going to become common practice. spreadprivacy.com/introducing-em…
↺ 10
The fascinating story of a prisoner who made Chinese typable on QWERTY, from @tsmullaney. psyche.co/ideas/how-a-so…

Replying to @null and @ndw

Is there another direction it could be moving in? (sound of giggling running away)

Replying to @null and @koalie, @DuckDuckGo

I believe they do that so that you can join the wait list without giving them any data.
Following topics might be one of the least useful @Twitter features (it's better to follow people), but it would be great to be able to *block* topics. Same tech, better design.

Replying to @null and @je5perl

I know, but I'd rather go "no Olympics" than do it word by word!

Replying to @MaxGendler and @Twitter

The imprecision is real, but statistically measurable. It's not like I read everything here anyway, not even close. The benefit from not seeing stuff I don't care about would outweigh the cost.

Replying to @anablzk and @Twitter

C'est sympa la K-Pop 😁 Tant que je peux passer à côté des olympiques...
If you needed one story to drive home the fact that vaccine hesitancy is multifaceted.
Quoting a tweet by @Cleavon_MD ↗

Replying to @null and @ndw

Well played 😁

Replying to @LeonieWatson

I imagine it gets quite sticky?

Replying to @LeonieWatson

Hahaha! One may naively think that the stickier something is, the less far it may travel. I assume that one would be wrong.
It's not just designers, but also developers who are being automated. From standardised coding style to agile methods, it's an entire industry that is gladly Taylorising itself.
The decreasing variety and complexity of the digital world is almost certainly making us collectively dumber, right when we need to be smarter. I often wonder if that's the bottleneck that explains the Fermi Paradox. berjon.com/stewardship/
↺ 1

Thread of 4 tweets

Replying to @c_d_los and @Cennydd

The problem is how fast that happens. It's probably good that there's only one design for a hammer. It probably took a while to get there. When we take the time to explore an iteration, we have more chances to find its side effects before they become entrenched.
With data-driven design, we settle on a local maximum and entrench it, all with habituation and the sticky effects of maxima, before we know what it does.

Thread of 2 tweets

So much of the narrative is that it's great tech that just happens to have harmful side effects, as if that position made sense. "It's a great bridge, it just happens to collapse when people are on it." "Top notch car, it just catches fire when people drive it. People amirite?"
Quoting a tweet by @rajiinio ↗
↺ 2
If you build tech at social scales and it has bad social effects, you're just bad at what you do. The number of users you have may be much more strongly correlated with your company's market behaviour than its technical proficiency.

Thread of 2 tweets

Replying to @JeniT

Thanks Jeni, it means a lot.

Replying to @seanmmcdonald

There are Pareto frontiers in most problems I guess? But I'm not sure what you're saying, exactly. There can be negative consequences from tech that we can collectively decide to accept. But if something is unsafe at scale, we need not accept that it run at that scale.

Replying to @DerekRiemer and @LeonieWatson

You say that like it would cause less of a carnage.

Replying to @mdubinko and @JeniT

I would extend it to all algorithmic media, but yep!

Replying to @kenarchersf

Thank you 🤗

Replying to @kenarchersf

Yes, and given the number of releases, it's basically industrial p-hacking!

Replying to @tim_libert

Right, the problem is that the market behaviour is slowing down progress towards gay space communism.

Replying to @seanmmcdonald

I don't believe that I assume bad faith, though I have often noted a lack of self-awareness in such cases. I'd be curious to hear what obstacles to scale you have in mind. I've been looking for some too. At least some involve better behaviour with data, I reckon!

Replying to @seanmmcdonald

I don't think that's bad faith but I do think that it's worth reinforcing that if you build big and it comes out bad you're bad at big, no? I see a lot of denial that the fault is structurally in how the tech is set up.

Replying to @seanmmcdonald

Exactly! Shouldn't we expect anyone claiming to want to fix tech to be looking to introduce these kinds of brakes?

Replying to @seanmmcdonald

I think we mostly agree and it's largely a matter of how we formulate it 😁
These are great lessons, and not just for physics.
Quoting a tweet by @dashunwang ↗
↺ 2

Replying to @baekdal and @inkbitspixels

That's because they indeed take place after Endgame, as the beginning of a new phase. There's a whole bunch of other movies coming!

Replying to @baekdal and @inkbitspixels

Replying to @LeonieWatson and @DerekRiemer

What I'm hearing you say is that, were it not for your thoughtful application of corn flour, it would have been way, way worse.

Replying to @Moonalice

High praise, many thanks 😊

Replying to @sp

Thank you! That's very kind.

Replying to @sp

Perfect — canards and herring make for a fine dinner.

Replying to @neilturkewitz and @Moonalice

Thank you!

Replying to @LeaVerou

Oh there's more! I love how when some part of the UI is conditional, it does a slow server roundtrip for it and will wipe out anything you entered after the conditional point because you hadn't seen that it was doing something else.
A few months back they also introduced a bug in which it would prompt a confusing save dialog onbeforeunload on EVERY page. It was brutal. It also shows that someone is actually maintaining that system, which is terrifying in more ways than one.
Also, having done this in parallel with someone else: the session timeouts are for everyone at the same time. Clearly sessions are in-memory (because why store?) and either it regularly crashes or there's a memory leak and they force-restart it every ~twenty minutes.
Anyway, good luck to you. Right now we're stuck on different continents and the next visa appointment we could get (so far) is April 2022.

Thread of 4 tweets

Replying to @privacyguru and @nytimes

Thanks! I hope the acronym is a big part of its success.

Replying to @privacyguru and @bbennettesq, @nytimes

These are two very good puppies, I can tell.
Does anyone have a theory as to why the US administration believes that vaccines don't work on visa holders?
Quoting a tweet by @RachelEMoran ↗
↺ 1

Replying to @hoofnagle

This would seem like a good context in which to rely on RFC6919. datatracker.ietf.org/doc/html/rfc69…

Replying to @perigrin

Nope, sorry!
Word of the week: Potemkin Village.
↺ 1

Replying to @perigrin

That would be great! I'm in Jersey but can hop up, but I don't know if I'll be around because visa madness.

Replying to @Iwillleavenow

Thank you, I'm honoured :)

Replying to @null and @LibSkrat, @Iwillleavenow

Wait, into syllabi?

Replying to @null and @LibSkrat, @Iwillleavenow

That would be amazing! I'd love to show up in the course if that happens and is helpful :)

Replying to @null and @LibSkrat, @Iwillleavenow

They look great!

Replying to @wbm312 and @Iwillleavenow

Thank you! I think it came out relatable because it's actually a lightly edited email rant I sent to the W3C Advisory Committee in which I was tired of people shamelessly peddling the same BS they have been peddling over the past couple decades. We've all been there :-D

Replying to @Iwillleavenow and @wbm312

Oh, some polishing happened 😁

Replying to @null and @amelia_acker, @muira_mccammon

I keep ideas, definitions, references organised separately from writing (in @NotionHQ ,but whatever works), and then to write something I list the bits from that which I want to use (on paper). It has worked with shorter texts, in the process of seeing if it scales to a book!

Replying to @jyasskin and @TzviyaSiegman, @hober, @Catfish_Man

The one thing I don't know about levels is how well it keeps track of inflation. From what I'm seeing in tech hiring right now, salaries are trending up at an insane pace. If you're in tech and you checked a year ago, check again!

Replying to @wbm312

Thank you 😁

Replying to @bortzmeyer

Putain c'est du lourd.

Replying to @Ls01 and @bortzmeyer

Il faudrait un prix pour ce genre de génie.

Replying to @privacypen

I saw but… that's pretty weak? I mean we know they have no leg to stand on, but I feel it really shows there.
Whoa, better watch out job market! I'm soon going to rank in the top 30% for my HTML mad skillz!
↺ 1

Replying to @hibaymj

I'll show them "responsive" kids how you do some real table layout.

Replying to @nappy_techie

I reckon some good animated GIFs can easily push you into the top 5% there.

Replying to @null and @pes10k

Dude, everyone knows that you can't get to the top decile unless you uppercase your tags. Wait till they quiz me on <BASEFONT> or where best to include <BGSOUND>. Or on the exact parsing rules for <SARCASM>.
This is an amazing thread, full of twists and turns, and tea.
Quoting a tweet by @garius ↗
↺ 1

Replying to @JamesGRobinson

Whoa whoa whoa, you're going to push me into the top 25% before I'm even ready!

Replying to @JamesGRobinson

Yes, that *is* a skill too.

Replying to @jathansadowski

I've been calling it "bullshit" but yours is nice too!

Thread of 2 tweets

Replying to @aawinecoff

That makes it OK to cheat, right?

Replying to @realmaplesyrup

Me too!
I spent literal years working to get the Web to native parity. WebAPIs, WebApps, DAP... In the early 2000s I built an engine that could build TV apps with SVG and JS. I still think it's a future we could, nay should, get to. But not now, not from here. Fugu-taboutit.
↺ 2
The Web has much more urgent needs than emulating native right now. Making it look, as the Chrome folks do, as if that's the priority is part of the problem. The Web should compete on what makes it fucking awesome rather than on monkeying what it's bad at.
↺ 6

Read the whole thread: 9 tweets →

7% of American children have had a parent in prison or jail at some point. This is what a failing as a civilisation looks like.
Quoting a tweet by @ClintSmithIII ↗
↺ 4

Replying to @null and @marcosc

Can you separate the two in any kind of way that works? I've heard a lot of arguments against engine governance; I'm increasingly of the mind that they nevertheless seem better than the alternative.

Replying to @null and @HelloFillip

I'm up for that, but you mean fully at the browser level, not even just the engine?

Replying to @null and @HelloFillip

I agree that the engine feels like the right level, the reason I was asking is because Chrome breaks that at the browser level. I hesitate between thinking we should solve for that and thinking only Google can look at that and not see the problem.

Replying to @Adora

What really sucks is that the mailing list modals are there because of the privacy: removing third-party cookies means hashed emails are the new trackers. We're going to have to get rid of email now...

Replying to @tim_libert

That's, like, everyone who speaks English apart from Americans.

Replying to @null and @marcosc

There's also a lot less riding on Node, and the forking costs (if it became necessary) would be manageable. The same for engines would be very hard to get right and to keep right.

Replying to @krave

It's hard to get competition when the cost of maintaining an engine is so high and companies can get away with cheating their way to marketshare!

Replying to @annbass

It's a Times thing, everyone hacks on whatever for a week. Fun stuff 😁

Replying to @valentinebaud

Viens bosser pour nous 😁
A great read on GPC and privacy from @GiladEdelman. wired.com/story/global-p…
↺ 2

Replying to @cwilso

In a world of infinite resources, I wholeheartedly agree. But we're not in that world? There are also differences between native and Web that we should proactively not fix, like app stores, unified identity, untrustworthiness.

Replying to @tim_libert

Replying to @tim_libert

Ha, that's a fun fact for you to advertize!

Replying to @tim_libert

That guy's spelling was better.

Replying to @fatemehx2

It really is.

Replying to @denladeside and @cwilso

Hey, as I said, I spent years working on that and I built phone & STB apps from a homegrown SVG+JS+native APIs because that sure as hell beat Symbian development. I don't need to be sold on the value; it's the prioritisation I find problematic.

Replying to @rictic and @cwilso

But having Apple+Google define the platform isn't a marked improvement over just having Google define the platform. These are not the only 2 companies. Should Apple do a chunk more? Fuck yeah. Lots. But parity? So long as the Web keeps the problems it has, it won't make a dent.

Replying to @rictic and @cwilso

From a publisher's perspective, the advantage of the Web should be that we can have control and independence, whereas on native we have to play by someone else's rules. But in today's Web we have to play by someone else's rules anyway, and give them data and content.
Again, I'm talking about priorities. Sure, APIs are nice, I need zero convincing of that. But the top priority is a Web that isn't Google's other proprietary platform — which is where we sit right now. There's as much value in improving that as there is in improving Android.

Thread of 2 tweets

Replying to @JonGarbee

I have a blog post in draft on this, it's awesome enough that it doesn't fit in a tweet 😁

Replying to @JonGarbee

I think it's kind of assumed. Also, you never know, someone might have a "what's special about the web" two-liner. But I really don't, I'm mostly trying not to turn it into a small book.

Replying to @PrivacyMatters

Ah, yes, the well-known "not practical" legal basis!
Props to @benzevgreen for what might be the best and shortest summary of scientific forestry, as per Seeing Like A State.

Replying to @laquadrature and @mario_gug

Félicitations!

Replying to @philosophybites and @EmmaKennedy

This is true, but it is true of any language well taught. In Latin we teach poetry, for other languages we teach practical use. I'd wager that if you'd taken A level Business Latin it'd be a fair bit less alive to you today. Therein the rub, maybe.

Replying to @salome_viljoen_ and @benzevgreen

Since she slept on my lap through the last three chapters, I thought it would be appropriate 😁
What is the best corpus to study the link structure of the Web as it changed over the past ~25 years? Or is there a study of that change over time? I haven't been able to dig up anything that isn't dated, introductory, or a static view.
↺ 2

Replying to @AmeliasBrain

Can you even copy it if you want to? I suspect that would be very slow, I need the link structure, the content is irrelevant 😁

Replying to @Paul__Walsh and @AmeliasBrain

Thanks — that might be the fallback, but I would prefer to find 1) just the links and 2) something that goes back farther in time. Even getting *only* the WAT to extract the graphs for the years they have would be near 200TB, give or take :)

Replying to @advantagepeter and @peterhgillies

Hahaha, there was no tornado 🌪!