June 2022
253 tweets
I'm not an expert on this: what is the logic in the Star Wars universe that requires bad writing and poorly-filmed chase scenes with children?
♥ 6
For the avoidance of doubt, the writing may be terrible but these people are way, way worse.
Quoting a tweet by @starwars ↗
♥ 1
But other franchises manage to write for broad audiences without these issues. Eg. Pixar.
♥ 3
My god it's so bad. Why? Why?
♥ 2
On a rolling basis: I assume that this means online-only?
CRIOSPHINX: Context-Respecting Innovation with the Objective of Safeguarding the Privacy of Humans In Networked eXperiences.
Wikipedia: "The task of [criosphinxes] was to hold back the forces of evil." en.wikipedia.org/wiki/Sphinx
♥ 7
♥ 5
Good choice!
♥ 1
♥ 3
I actually don't mind too much that there's a kid in it (though very few writers can do kids well) but those chase scenes with the mercenaries and then again Obi-Wan trying to catch her in the market? It looked like they kept missing her on purpose.
♥ 2
Retrofuturism: some notes on @LMSacasas's recent piece about how our tech world makes us feel stuck in the past, as if nothing can change.
berjon.com/retrofuturism/
♥ 45↺ 11
Totally! Bring me more Loki!!!
♥ 1
Exactly! There's a whole galaxy of wild worlds but the only thing that matters is one family.
I guess in a way that belongs to our time.
♥ 2
Thanks Brett!
I'll look those up but if you have specific paper recommendations I'd love to hear!
♥ 1
Thank you for all the tweets!
Thank you!
I have been getting only half my mentions all day for some reason. I hope you don't hate it!
♥ 1
Thank you! Glad you liked it.
♥ 1
It is, and we should. But the problem is that libertarian paternalism isn't just the ideology of nudging, it's the moral framework of the people who see themselves as doing good in tech (esp. at Google). Until we replace that with better roots, we'll be treading water.
♥ 2
Thank you!
♥ 1
I don't know about better articulated, it's hard to beat Saturn! But overall I see the theses as related and in a few cases I could have picked a different order with limited changes.
♥ 1
The thing that I found particularly potent in your piece and that made me want to write this is how this feeling of stuck time brings together a number of disparate strands. I have felt that things are stuck for a while but I saw that as a technologist: stuck progress.
♥ 1
I hadn't realised that things feel way more stuck than that until I read your article.
♥ 2
Hahaha very fair point!
Thank you!
♥ 1
“Interestingly, it turns out that some of the ad experiences that consumers find the most annoying are also bad for the environment.”
And it so happens that this is a good time to fix this because we're getting rid of identifiers. 🧵
digiday.com/media/the-ad-e…
♥ 11↺ 2
That might sound familiar because I listed a similar option in 2020 in nytimes.github.io/std-rhea/#tummo
♥ 1
“For many years, the accepted common knowledge was that the only way to make money online was to adopt Google’s model—that surveillance capitalism was the way to go if you wanted a profitable and sustainable and scalable business. We have proven that there is another path.”
Quoting a tweet by @mario_gug ↗
♥ 7↺ 3
I'm very curious to see if Google will make the case that working in the WICG meets its @CMAgovUK commitments to proceed through the appropriate W3C process.
Quoting a tweet by @ANderagakura ↗
♥ 8↺ 2
Totally agreed, I think the fact that there isn't a market for privacy is established (and there shouldn't be). Most of the VC-supported "boom" in privacy startups is for companies that are either security, compliance, or notice-and-choice stuff.
However, what I found interesting here is that this is a long-established company that is now *growing* and has a business model. I think there's a trend, and not so much because of privacy but just because more people understand you have to pay if you want quality.
People use privacy as a comparator with Google because, well, it's easy for anyone to be better at privacy than Google. But the reason those products are interesting is usually because they're just flat out better. That's particularly obvious in search & email.
I beg to differ on that point. DDG used to be worse, but that hasn't been the case in a while IME. Partly because its index has improved, partly because Google search is really sinking, notably in UI (but not only).
Yeah, that used to be my experience, but recently it's gone the other way where I'm on someone else's device and have to switch away from G because it's subpar and has a taxing UI. And for image search, DDG is a lot better. Have you tried Neeva? I've had a good experience.
TFW when a major draft federal privacy bill is called ADPAPA. #ADPAPA
Quoting a tweet by @swodinsky ↗
♥ 4↺ 1
Yeah, it looks like they are trying to make well-intentioned carve-outs but failing. This looks fixable though.
Their definition of third-party collection that doesn't cover Google is more worrying and reads more like lobbyist intervention though.
♥ 5
This is a bad definition of "third-party." Let's hope we can get it fixed.
Quoting a tweet by @swodinsky ↗
♥ 6
Limits to preemption that keep the CPRA alive and given states general options for other stuff that will be dropped.
♥ 5↺ 1
It's been the thorn in a lot of "just use contextual" proposals. Keeping the ability to measure is crucial in all cases.
♥ 4
I mean everything is an algorithm, possibly. There's a reason why people usually focus on automated decision-making, it's easier to specify. An ad auction (typically) wouldn't be covered (with caveats for the kind of dirty tricks some folks play, eg. G), but...
♥ 9
...bidding decisions likely would.
I'm generally skeptical of transparency and impact assessment measures, but a requirement to explain what data (including "anonymised") goes into the decision explained in terms of *where it comes from* rather than vague categories would rock.
♥ 7↺ 1
Yeah and the point of the GDPR was to protect people's privacy and yet here we are.
♥ 6↺ 1
Fucked around, finding out!
♥ 5
Or even just the algo that each DSP uses in the auction.
♥ 1
Right, it takes some solid testing to know what is significant in a given model. Though of course if it has impact on people that's probably not a reason to not do it!
♥ 5
Too much for a Friday!
♥ 2
When you see industry orgs pushing absurd positions, this is what's happening: they're giving cover to their worst members.
If you're not one of the worst members and you don't speak up, it'll haunt you when you need your org to be credible.
Quoting a tweet by @dmarti ↗
♥ 10↺ 2
To be fair we should have regulated spreadsheets, but for other reasons 😁
♥ 3
I guess that depends on the procreation method?
♥ 4
Just doin' my job, sir.
♥ 2
Do you know if it will remain available after it has streamed? This is extremely my area of interest.
♥ 5
Brilliant, thank you! That way I won't regret being on another continent at that time.
♥ 1
Lawyers have parties to a contract, and anyone else is a third party. The normal tech understanding is similar, not a contract but the parties to an interaction are the person and the first party, others are third parties.
♥ 4
Adtech people like to confuse things because otherwise they'd have to accept that they logically have fewer rights. Eg. the Criteo/SWAN antiprivacy activists claim that Disqus is a first party and a publisher. Laughable but very legacy adtech.
♥ 3
There's a French saying, "les cons, ça ose tout, c'est même à ça qu'on les reconnaît."
♥ 2
Do not tempt me with a good perdurance!
♥ 2
Any sufficiently advanced technology feels like an extension of yourself; if it feels like magic, look for who's running the show.
♥ 21↺ 9
LOL, can my utter lack of education be properly respected with a lack of title? Thank you, sir.
♥ 2
Seriously, though, what do you need Shoshana? Are you generally looking in the direction of unfucking the computery things? That rabbit hole has rabbit holes; some ideas in there:
It's time to start a thread for my 2022 reading log. I hope you enjoy it and find some books to your liking!♥ 26↺ 1
♥ 3
Credit where due: it's a recommendation from @EvanSelinger (as are a few other titles in there).
♥ 2
There's just too much 😭 I wish I could get paid to read/think/write instead of mostly to be in meetings…
♥ 3
There's real risk Hal, if you skip school you might *checks notes* end up being hired as a VP at The New York Times.
♥ 2
You know there are other search engines, right?
♥ 1
Thanks! I think domestication can bring together notions of nudging, deskilling, and convenience on one side, and the issues from the loss of robustness and diversity in engineered ecosystems on the other. I need more work on this to make it crisp.
Slightly further afield, domestication also comes with a host of ills and illnesses for humans, animals, and plants — I wonder if the digital equivalent has comparable mechanisms.
Absolutely, and the ties to power and statecraft too. Scott focuses a fair bit on the evidence that people were forced into agriculture (because it's not generally better for them) and how grain and taxes work together.
♥ 1
I think I saw one the other day with the loose change at the back of the couch, but it was kind of far and with those gross crumbs.
♥ 1
Wait, if that's a training you give I will look for budget!
♥ 2
Where is the preorder button?
♥ 2
Thanks Eric.
Thank you. Yes, he really was.
♥ 1
Thanks Robert. ❤️
Thanks, indeed.
Merci!
This is a quality meme, Tom.
♥ 3↺ 1
In fairness, #ADPPA has warts that need fixing but in terms of its general approach it's excellent. It supports ad-based revenue in a way that protects publishers against intermediary power. It has some fiduciary duties and even some contextual integrity. It addresses Sync!
Quoting a tweet by @TomKemp00 ↗
♥ 4↺ 2
This shouldn't hide the fact that the warts do need to be addressed, but the draft both significantly improves people's privacy and helps publishers "keep data where the media is" which is a huge win. It is set up to rectify market power imbalance.
♥ 2
It's hard to tell if it has any chance of moving forward or passing, but if it doesn't we should learn from this draft as it provides a credible architectural blueprint for better privacy law.
♥ 2
Thank you!
Yes, it is, thank you.
Thanks Alex.
♥ 2
Thank you Maria ❤️. Yes, I'm not sharing the pics where he's with the girls but he was absolutely adorable a childhood companion.
♥ 1
Thanks Erik, he was very dog-like in fact! He followed us in the street, if we ran in the backyard he'd run around too, he tried to bring back balls.
♥ 1
Thank you Luis, hugs.
♥ 3
Thanks Anna; I included the yoga picture because I remembered how much his face had cracked you up.
♥ 1
A fortress of books and warm feet — it's important.
Thanks, yes, they do. We need the fluff.
Thank you Angelique.
Thanks Lourdes, that's kind.
Intéressant: dans la 1ère circo des Français de l'Étranger le candidat centriste-écolo, Gérard Michon, n'appelle *pas* à voter pour @RolandLescure (qui a passé la pandémie planqué à Paris).
Il serait logique que le report se fasse sur @florencergr de NUPES, qui peut donc gagner.
♥ 1
Thank you!
À ton service!
♥ 1
Lol, the *real* boss level is how many "email_bankruptcy_20xx" mailboxes you have and what the unread count is on those 😁
Thank you!
Thanks Amy ❤️
Thank you, that's very kind ❤️
♥ 1
I was thinking you get to be the EIC of the whole thing.
♥ 3
Thank you Danielle 💗
♥ 2
Thanks. Yes, I hope that too! He used to sit right at the beginning of the forest and stare into the trees. He's meant for that.
♥ 1
Thank you Lindsey.
♥ 1
Thanks for these kind words. Yes, indeed.
Thanks Allie!
Thank you.
Thank you 🫂
A lot depends on how big you need it to be. It doesn't have to be as complicated as berjon.com/w3c-governance/ for instance! Funding is the hard one — @tobie might have some good insights there.
♥ 5↺ 1
Thank you Wendy, indeed on both counts!
♥ 1
I'm not sure that labelling "this is a standards body" and "this isn't" is a good way to solve this. What are the requirements, what does a CG provide and not, etc. A CG is probably enough for open source+specs+patent commitments for instance.
♥ 5
Thank you Fran!
Thanks Ben 😔
♥ 1
The biggest issue in marketing remains measuring only short term impact. The total ROI on this kind of practice is negative, but all you measure (using a "performance marketer") is that there are some people who'll buy from the 17th email.
Quoting a tweet by @ballmatthew ↗
♥ 10↺ 1
Oh, and this is why Amazon is kicking your brand's ecommerce site's ass, BTW.
♥ 1↺ 2
Same!
True, I'm not absolving Amazon of *waves around* but people know which shopping experiences will wreck their inbox and which won't!
♥ 2
I don't know if it's the default setting, but IIRC Aristotle mentions it as something tyrants use in the Politics, so it's been around.
I liked @henryfarrell's idea of "common sense attacks" on democracy. It opens the door to thinking about protective measures.
Thanks, I know 😁 But $47 is a new low I thought!
Shit, you have a point. We can't just burn it all down.
♥ 1
♥ 2
Next time we do London. Or all to Lesvos!
♥ 3
Hi Shosh. berjon.com/competition-pr…
♥ 9↺ 1
On the contrary, that's what's exciting about it!
I'm in Brussels too and I can say that this week!
♥ 3
Max, don't forget I'm Australian. youtube.com/watch?v=v2AC41…
♥ 1
Agreed. Privacy isn't about what people perceive, people perceive all kinds of crazy things! It's still far from perfect but we do try to document this in w3.org/TR/privacy-pri….
♥ 3
Why are you bringing NBs into this? It's well established that individuals aren't in a position to exercise their agency so I'm not sure what we get by pretending that people are in a position to "decide." As cited above we're aligning on pretty clear definitions.
♥ 2
Yeah, same.
♥ 1
My go to theguardian.com/technology/200…
♥ 7↺ 1
If you're at #EDPSconf2022, come say hi!
♥ 3
"To get effective enforcement, it has to pay off to comply. Right now it pays off not to comply." @maxschrems, #EDPSconf2022 Max further explains that we have to learn from sociology of law why people comply in other domains so that we can make it work for privacy.
♥ 36↺ 10
@PaulNemitz wants to involve the tech community more into privacy. I think that is a promising avenue, but the bridge between legal and architectural enforcement does not yet exist. Also, the tech matters, but so does economics. #EDPSconf2022
♥ 1
@PachlUpa talks about how people give up in the face of pervasive surveillance. This learned helplessness is not the society that we want to live in. #EDPSconf2022
♥ 1
@maxschrems "In the privacy sector, most people don't believe in privacy." #EDPSconf2022
There is privacy as compliance, trying to do as little as possible, and privacy as product/strategy, aiming to deliver better for your users and improve your business. Can these be aligned?
♥ 12↺ 4
Hi! I presume you don't look like your avatar?
I'll look for you! I have white pants and floral shirt.
"The case is pending in Ireland." #EDPSconf2022
♥ 3
Of which year? 😁
♥ 4
@maxschrems rightly points out that the bureaucratic parts of the GDPR come from the compliance community, not the privacy community. #EDPSconf2022
♥ 12↺ 4
@vestager specifically asks who will retain access to data after the phase out of third-party cookies? Analysing this correctly will require looking at timing attacks, probabilistic matching, tracking by user agents, in-app browsers... It won't be straightforward. #EDPSconf2022
♥ 1↺ 1
A whole paragraph at once, huh? Lucky you!
But the pages run on time, Siva.
(Is the talk recorded? This should be said more!)
♥ 5
Jane Horvath says she has hope that there is a window to get a US federal privacy law. #EDPSconf2022 #ADPPA
♥ 1
Face à l'arrivée imminente de l'Étoile Noire, l'État met en place un numéro vert.
Quoting a tweet by @LeHuffPost ↗
♥ 1
The problem is that giving feedback on the feedback will make you "opinionated." I've been wondering if we should have feedback panels like we have interview panels, structured to try to weed out this kind of bias.
@VeraJourova speaks of coming new regulation complementing the GDPR: "Perhaps even ePrivacy!" #EDPSconf2022
♥ 1
Luis, this is a serious question: how good are Colombian fries? If they are not good, what can replace that? I ask because I would love to repeat this, and I think Alex too, but we had really good fries 😋
♥ 3
Yes and no. The two are related, but product or strategic privacy seek to make your business better whether you have to or not. We have a hellscape in part because we've left compliance lawyers run privacy, which is like having accounting drive your revenue model.
♥ 3
Wait, but it doesn't have to be fries! Tell me about arepas!
♥ 2
That is a good idea.
♥ 2
OK I'm hungry already.
♥ 1
Hmmm, I disagree on pretty much all of that!
Both. It's an active domain in which there is much to do and it's a stable institutional form. What we exhausted twenty years ago is "give stuff away and somehow magic, yay!"
That, absolutely agreed. But I don't think that that's what they're doing. I know at least one smart person in there.
I think that's what the icing is.
♥ 1
Not so much for the shark 🦈.
♥ 1
Aah, sorry, my bad, I had misread you. Yes, totally agreed! We're beating people up with carrots, it doesn't work 🥕!
♥ 1
Absolutely, I've seen great work on this (thinking of you @fran_mady!). But I have been wondering if privacy shouldn't formally be made a product function, with the compliance team one of the stakeholders. It might be worth a Blog Post™.
♥ 3
It should definitely be a CEO issue in terms of strategy and discussion, but I still think that operationally it's a product thing.
And yeah, we should all be more Dorthe!
♥ 2
💯 It's hard to build and hard to keep but so fucking worth it. It's a blessing to have been in such a team and not something I could forget.
♥ 4
I think that with @BuggeErik we've established that it's about carrying a big carrot 🥕!
♥ 3
This, and I also sometimes think of the kind of machine cognition we might have if AI/ML weren't mired in epistemic individualism. The idea of intelligence without an epistemic community is absurd.
Quoting a tweet by @billt ↗
♥ 7↺ 3
Ooooh, yes please!
♥ 1
This looks amazing. Will proceedings be published?
I'm seeing this late, but definitely got your back! I hope you don't let it get to you at all.
♥ 1
Infrastructure provision is always a problem, infrastructure provision that rides on investment by big companies is always going to be worse, no?
We have a bad business model for browsers (mostly selling users to search) and none for engines. That might be the first fix?
♥ 2
Indeed, but tricky doesn't mean unsolvable :) 450m is a lot of money, but at the scale of the Web it's not *that* much, and we only need so many engines. I'd say a global budget of 2-3bn for all engines should be enough?
♥ 2
Right now they come from the original sin of the Web: pretending that money doesn't exist so that the only option is to monetise people in variously icky ways.
I don't think there's a purely technical solution, but we can look for technical options with minimal regulation.
♥ 2
It's a much longer write-up than a tweet, but an interoperability mandate on search and small revshare to browsers and engines could get the money from essentially the same sources (so we're not breaking the bank) but without the downsides.
♥ 1
Ha, thanks — it's on my pile of things to write. It's a big pile, sadly, so no promises on timing. I have most of the argument lined up, it's a matter of making it digestible.
♥ 2
By search monetisation, do you mean monetisation of search or using search to monetise browsers? The former I agree isn't icky, the latter I think that if browsers picked based on what's best for people, they'd pick differently — the difference is the ickiness in my mind.
Hard to sketch in a tweet, but at a very abstract level we can look at "taxing" search such that a small fraction goes to browser and engine, per hit. Works best with a search protocol. Need registration, contract terms for all parties.
This also needs anti-fraud measures, the ability to stream tiny payments, and probably some form of privacy-preserving advertising. The latter is coming, payments has ILP. We need some regulation but not much.
I'm skipping over a ton of details but I think there's a possibility. My hope in writing it up is that people can help simplify it to the point that it works. We'll see!
True, but that doesn't prevent search from becoming a closed platform. I see a (short-term) future in which using a browser is something the weird Linux people do; everyone else just has webviews in a search app. Is that still the Web?
♥ 1↺ 1
We thought we would stay in the US at least a couple more years as my spouse is doing an MA here, but that's looking like a worse decision with every day that goes by.
♥ 32
It really fucking does.
♥ 1
100% — the problem is that it becomes hard to do policy when you're dealing with failed institutions. I'm not saying that that's an excuse, but it's the barrier.
♥ 2
This is not a drill.
People will die when you get this wrong.
Quoting a tweet by @evacide ↗
♥ 54↺ 34
There is currently a draft federal privacy bill that has advanced farther than any before it. If strong enough, it could outlaw selling location data used in hunting down people who get abortions.
You might want to push your Congresspeople, notably @SenatorCantwell.
Quoting a tweet by @motherboard ↗
♥ 5↺ 3
Individuals cannot protect their privacy.
Notice & consent cannot protect privacy.
We need strong, effective regulation.
Quoting a tweet by @zeynep ↗
♥ 16↺ 3
This is an amazing piece, thank you. As for "what's next," the scary part is that it seems altogether too predictable.
♥ 2
Is it not just a way for companies to pretend they want to do something, while knowing very well they won't?
♥ 10
Also, Canadian swear words should go a long way in France.
♥ 2
An inspiring profile of @OlufemiOTaiwo, well worth your time.
grist.org/culture/olufem…
♥ 3
Ha, I had the same idea a few years back, tried to get us to do it for the Privacy Project. I think that with just a hint of logic you could get some really fun ID graphs.
♥ 1
The little-known Spiderman Corollary is that you can't have a lot of responsibility if you don't have much power. Once someone else's script loads, publishers have almost no power, and they have no visibility into what makes money to pick what's worth doing.
♥ 6↺ 1
My point here isn't to absolve pubs from responsibility: on the contrary, pubs should be given the power to fix this. We'd get innovation at the edges, a much cleaner system, and a clear way to blame people when things go wrong.
♥ 6↺ 1
No worries, I didn't get to see whatever ghastly insult it is you made :-D
♥ 1
We're charging, we're charging. But we need a fair bit more than transparency, we need to be running targeting decisions pub-side. That's the only way we can be accountable for what's going on and build things that put our readers first.
I think that this is a case of It's More Complicated™. The NYT can audit _some_, but frankly once you get to a loaded creative there's really not much we can do. And if we can't, most publishers can't.
If all the bad things have to be decided by the pub, then blame is clear!
♥ 1
Yeah, but if pubs don't have enough power to pick gnarly shit or no gnarly shit (we have some, just not enough) then everyone gets some degree of gnarly shit. And if you complain, in so many cases my best answer is "it comes from open market programmatic ¯\_(ツ)_/¯!"
♥ 3
I agree with this. Markets can be fine when they are set up right and governed properly. Insert the usual about markets ≠ capitalism :)
♥ 2
Contextual + SDA + coarse geo would be great for pubs, too. It's not us who don't want that world :)
♥ 6
Also I'm just as clueless as Paul about sportsball so I have no idea how to address this.
♥ 5
We have a pretty good idea. I'm pretty sure that most intermediaries don't.
♥ 1
Most of the middlemen don't bring any actual value, which makes it hard to explain… If we could trim down to just the useful middlemen, this could all fit on a diagram and make sense.
♥ 2↺ 1
Agreed — pub-owned, with user accountability.
The problem with self-serve is scale. But we could federate and do automated buying much better than the current system.
♥ 4
I meant a useful one :)
♥ 1
You don't get it, it's because you're SURFING.
♥ 6
This is doubly good for being about adtech. Now I really want to read Standage 1998, which is about The Victorian Internet (trnmag.com/Bookshelf/The%…)!
Quoting a tweet by @swodinsky ↗
♥ 3
Hmpf, I dunno. Where's the Zeroth-Party Data in there, Shosh? Where?
♥ 4
Surfing!
♥ 3
Rand has any number of issues, but they're pretty damn good at the research.
♥ 1
I don't think that you can define that outside of a specific context? Given the values of an institutional arrangement, good governance will robustly, sustainably further those values.
♥ 2
That tee is pretty lit, too.
♥ 4
I don't know, I'm starting to get this vibe that having a bunch of unelected, unaccountable folks running a whole country isn't great.
Quoting a tweet by @stevenmazie ↗
♥ 25↺ 10
Privacy-friendly advertising is a thing, I hope you include it! It's a growing space, and there are companies like Kubler doing great work.
♥ 8
That's because I can't type a six-letter name without a typo — it's Kobler, kobler.no. If your Norwegian isn't up to par, you should chat with @BuggeErik.
♥ 5
Or begging for the end of the Supreme Court.
♥ 1
I put a quick and dirty thing together in there: github.com/patcg-individu…
♥ 3
Some very quick thoughts.
From a privacy perspective, using some limited data from sites {A,B,C} to advertise on site D could be fine *if* D doesn't actually learn anything and the person can never be recognised across contexts at all. Some form of opaque reusable SDA.
♥ 2
From a strategic perspective, the fact that data from one context can be used in another isn't just a privacy problem, it's really bad for publishers too when they can't control what other contexts and purposes it gets reused in.
♥ 3
This is brilliant!
♥ 1
Absolutely agreed. We could use ML but it would be better to be able to develop and share models inside leagues.
♥ 2
I would still want to pick who to share with. Speaking of course completely personally, I would be comfortable with eg. local news, niche quality pubs, or useful services that can't have strong signals (eg. a timezone site), but not antivax disinfo or whatnot.
♥ 3
Right — I don't think that this is about big vs small pubs. It's a question of signal strength and how well you know your audience.
♥ 1
The complexity might be manageable. Something "like" first-party sets plus w3.org/community/webm… could already go a long way.
♥ 2



















