Privacy problems? Yeah, the Free Market can fix that!
Privacy from Companies
2/6/2001; 9:40:17 AM It's linked on Slashdot, so I feel I have to reply to "The Privacy Cage" by Julian Sanchez in Liberzine. Basically, the essay suggests that the Free Market can solve all of our privacy woes, but in the process tilts with strawmen and seems to be coming from another planet... 'Since users in online interactions have de facto control over what information they will make available, they will have what amount to property rights in interactions where they demand them. If an online merchant charges too much money for a product, you don't have to buy. And you can refuse to deal just as easily if he's "charging" too much in the currency of private information.' If users had real control over their privacy, de facto or otherwise, there would be no concern over privacy issues. We do not currently have effective control over our privacy or this debate wouldn't be occurring. 'If I don't care about getting a bit more junk mail, I may allow a site to make money renting out my address in exchage for a discount. If I am more scupulous about guarding my secrets, I will share information only with sites which guarantee that I'll retain a high level of control over it.' There is currently no guarentee that we will retain that level of control in the long-term. The Toysmart case taught companies something... admit up front that your policies might change in the future, and none of your current customers will care until it's too late to do anything. Meanwhile, the customers have no guarentees of privacy while looking like there is one. The article also almost completely ignores the practical aspects of implementing a market system... which are vitally important to discuss because the smallest details of the practical system affect how it will work and how well it will work. Can people use it, or is it too complicated? Is the control granular enough to be useful? How will it be enforced? By law, by voluntary agreement? Can Joe User be tricked into giving out more information then he intends? Who controls the currency of the market (the data)? You can't simply "empower" the user, because once a company has the data, they can sell it. Who stops them? Without some sort of practical groundwork, this essay is a meaningless puff piece, capable only of stirring debate, but not really participating in it. The only practical solution mentioned is the horribly flawed P3P. To be fair, perhaps if the author made it ten or twenty times as long and did more then casually dismiss the arguments of a lot of other smart people (which the author did far too breezily for my comfort), it might make more sense. But the essay would still suffer the fatal flaw of attacking a straw man: 'If privacy ceases to be about individuals choosing how much information about themselves to release, and beomes instead a one-size-fits-all standard, then privacy is no longer a form of freedom. It's a cage.' I am still unaware of any privacy advocates who seriously believe that people must be disallowed from sharing their personal info with others. Yes, there are those like Shapiro who question whether Joe Public is capable of guarding his own privacy, but that's still not the same as claiming that Joe's decisions ought to be made for him (Sanchez glosses over this difference). Sanchez clearly does not understand the people he attacks.

New E-Mail Vulnerability - Trust Your Neighbor?
Misc.
2/5/2001; 11:12:34 AM

From Slashdot:

''According to this article in The New York Times (free registration required), a trick enables someone to essentially bug an e-mail message so that the spy would be privy to any comments that a recipient might add as the message is forwarded to others or sent back and forth. The vulnerability could facilitate the harvesting of e-mail addresses. Widely used e-mail programs that are vulnerable to the exploit (because they enable JavaScript) include Microsoft Outlook, Outlook Express and Netscape 6.'' A snippet from the article: "The potential for such e-mail spying was first discovered by Carl Voth, an engineer in British Columbia. 'What bothers me is that in this case, my vulnerability is a function of what you do,' Mr. Voth said. 'I can be careful, I can take every precaution, I can turn off JavaScript, and it doesn't matter. If my neighbor isn't diligent and I send him an e-mail, I'm still vulnerable.'" ''The Privacy Foundation, an educational and research organization based in Denver, plans to publicize and demonstrate the technique today.''

Kafkaesque? Big Brother? Finding the Right Metaphor
Privacy from Companies
2/3/2001; 2:36:37 PM

'The battle of the metaphors is much more than a literary parlor game, said Solove in his article, "Privacy and Power: Computer Databases and Metaphors for Information Privacy." The way a problem is framed determines its solution, he suggested. And if lawmakers are to come up with adequate responses to the lack of privacy online, they need to fully understand the nature of the beast. In short, if they read books, they should read more Kafka and less Orwell.'

DVD Case Follow-Up
DVD & DeCSS
2/1/2001; 11:45:38 AM

From Slashdot:

''The ACLU made a court brief today concerning the DVD CCA case. The release can be found here.'' There were actually a number of amicus briefs filed at the same time for this case, and now I think most of them are online. Journalists and publishers, law professors, law professors II, the Association for Computing Machinery, programmers and academics, library and public interest, Arnold Reinhold. These are all in support of the EFF's appeal in the case, of course. The briefs make good reading because they attempt to convey, in a very direct and concise manner, the arguments of these various groups against the DMCA.

Code + Law: An Interview with Lawrence Lessig Misc.1/31/2001; 11:21:07 AM One of many interesting statements:'There are two stages in Internet history so far, which are important to distinguish. The first stage climaxes around 1997, when the Supreme Court decided Reno v. ACLU (the case striking down the Communications Decency Act). This case represents a time when the world looked at the Internet and said, "This is an amazing new technology that we've got to be extremely respectful of." The overriding tone of the opinion is, "Congress, you must go extremely slow when you regulate in this area to make sure that you don't muck up this extraordinarily important First Amendment free-speech context, which is the Internet."... 'But now, in the second stage of Internet evolution, when it comes to copyright issues, that attitude has disappeared. So with the emergence of P2P architectures (which are being used to exchange music in ways that upset the music industry), rather than the court responding in the way that it did in Reno v. ACLU, the courts are in a knee-jerk way acting to shut down this emerging technology on the view that unless you stop it, it will be the end of copyright... 'So much of the legal battle that's going is just to get the court to be as deferential and patient with this emerging architecture as it was in the context of pornography. If you had to choose between protecting children and protecting Hollywood, you would think you would make an exception (to the law) to protect children. But, perversely, our legal system has said children are going to be left to the winds of the Internet and parents have to take care of that themselves, but we're going to march in and back up the power of Hollywood with the courts as quickly as we can to make sure that copyright interests aren't invaded.'

Senator introduces strong e-privacy bill
Privacy from Companies
1/30/2001; 4:39:34 PM 'Senator John Edwards re-introduced a bill on Monday that would require Web sites to get permission from visitors before tracking their movements online.

'The North Carolina Democrat's bill stakes out an aggressive position in the debate over Internet privacy, requiring Web sites to reveal their use of technology that commonly runs in the background without the knowledge of the visitor.'

Author of Archie Challenges Alta Vista Patents
Patents
1/30/2001; 4:27:00 PM The author of Archie, a search engine for the Gopher system which pre-dated the web, challenges the AltaVista patents by claiming he already did what they were patenting.  I'm linking to the Slashdot story because there are some interesting comments in there, pointing out that it may not even matter if he has prior art claims. Patents are nasty little things.

Judge Orders 'Master' for Sex.com
General IP Issues
1/30/2001; 4:20:54 PM 'The dispute over the domain name sex.com took a new twist Monday when a federal judge decided to add a special court adviser to the case.

'Following a hearing in U.S. District Court here, Judge James Ware told the gathering of sex.com attorneys that he would seek expert advice in bringing the case to a conclusion.'

Including a nice summary of the whole sordid, yet important, affair.

Napster confirms membership charge
Music & MP3
1/29/2001; 2:18:08 PM

'Napster's chief executive Hank Barry has told BBC News Online in an exclusive interview that users will soon be charged a membership fee.

'Mr Barry also said royalties would be paid to artists whose material is swapped over the internet with the help of Napster software.'

We all knew this was coming, now we know this is coming. No, wait... anyhow, I'm sure there was something to learn from this announcement...

Web Site Tests Verio's Role as Copyright Police
DMCA
1/27/2001; 10:05:13 PM

'Standing by its customer, hosting firm Verio has refused to take down a Web site that the Motion Picture Association of America claims is breaking the law.

'The situation is testing the role of ISPs as copyright cops in the wired world and demonstrating the limits of the Digital Millennium Copyright Act, the law that gives ISPs a safe harbor as long as they respond quickly to takedown notices.