Peter Bihr

Archive
digital rights

Today I tried to buy an ebook. I’m a big fan of the Kindle and buy ebooks all the time. So I wanted to buy a digital copy of Lawrence Lessig‘s Republic, Lost on institutional corruption (which ironically is responsible for the mess I’m about to describe). I was surprised to find it only as hardcover and audio book on Amazon.com – and tweeted as much.

Nicely enough, Mr. Lessig got back to me personally, asking where I was accessing Amazon from. Turns out that even though my Kindle is connected to Amazon.com (ie. Amazon US, not Germany) the Kindle version just wouldn’t show up.

Intrigued by his pointer, I fired up a VPN to get a US-based IP address, but still no luck. In the end I noticed that my Kindle was set to “Region Europe”. Digging into the Kindle settings, I managed to switch it to the US by putting in a postal address I used to live at.

Let’s recap. To buy a digital book I had to…

  • register my Kindle with the US version of Amazon
  • fake an IP address through a VPN service
  • switch the Kindle settings to the US by way of an old postal address

All that to spend some money on a book that would have been cheaper and much, much easier to pirate.

Now, call me old-fashioned, but that’s not how it’s supposed to work.

[permalink]

The Washington Post just had a great article about the horrible train wreck called SOPA that we’ve all been watching:

When you have a signed letter from the engineers responsible for creating the Internet pointing out that this bill would jeopardize our cybersecurity, balkanize the Internet and create a climate of uncertainty that would stifle innovation, it seems odd to ignore it. As a general rule, when the people saying that this will have a horrible, chilling impact on something are the ones who created that thing in the first place, and the people who are saying, “Oh, no, it’ll be fine, it only targets the bad actors” are members of the Motion Picture Association of America, it seems obvious whose opinion you should heed.

And this just about sums it up better than anything, no?

[permalink]

A few weeks ago, I tried out Gigalocal. It’s a platform that lets users announce jobs they would like to see done, and how much they’re willing to pay for it. (“Clean my apartment for 20 Euros”-style jobs.) I signed up so a journalist friend of mine could try out the process in a controlled environment, and without having to clean someone else’s apartment. Yet, there was a bit of a problem.

The minute I put up a test job offer for my friend (“I’d like a cold soft drink, now, delivered”), the service tweeted the job. Makes sense, I guess, as it makes it easier to track jobs out and about waiting for jobs. (If the users of said service have smartphones, that is.) But they didn’t keep it to the job description.

Gigalocal tweeted my full address, down to the house number.

That’s right. They didn’t restrict the location info to the neighborhood (close enough to figure out if that job’s a good fit for you), or next subway stop, or street level, or a 500m radius. No, they tweeted the full address.

I canceled my account and mentioned in the cancellation form that I find publicly tweeting addresses quite unacceptable, as I hadn’t been aware before that the company might do that.

Here’s the reply (translation below):

Grundsätzlich kann jeder User seine Daten selbst schützen. Niemand ist gezwungen seinen Wohnort anzugeben. Ein User kann einen Gig überall erstellen, seine aktuelle Position wird vom GPS Modul (Smartphone) oder durch die IP (Website) vorgegeben. Diese Ortung hat man schon wenn man auf Google Maps geht und dem Browser erlaubt den Standort zu erkennen. Jedem User steht es frei wo er seinen Gig erstellt, er kann ihn also gerne 4 Straßen weiter erstellen und sich dort mit dem Gig Erfüller treffen.

Translation: Generally, every user can protect their own data. Nobody is forced to input their home address. A user can submit a gig wherever they like, their current position is read through the GPS module (smart phone) or IP address (website). This triangulation takes place even if you just go to Google Maps and allow the browser to read your location.

Every user is free to set up their gig wherever they like, so they can set it up 4 streets down and meet up with the job fulfiller there.

I was shocked. Shocked at this level of ignorance in building a user service that requires granular privacy. (Home addresses!) Shocked at how the staff didn’t even seem to consider they might have made a grave mistake. And shocked at myself for being even surprised by the two aforementioned failures.

Gigalocal, here’s a hint: You want your “job fulfillers” to know if a job is close enough to make it worth the trip. You don’t want to show the world people’s home and office addresses. And you never, ever want to tweet personal information without asking permission first.

Now go back to the drawing board and don’t come back before you know what you’re doing.

[permalink]

The other day I visited Friedrich-Ebert-Stiftung (FES) for a day to give a keynote speech and a workshop for FES stipends at the summer academy. (Full disclosure: paid gig.) For completeness’ sake I’m posting the slides below. In order for them to make sense I’d recommend downloading the file from Slideshare so you can see the notes.

On a side note, I have to say I really enjoyed particularly the discussions with these students. We talked a lot about privacy on social networks and the implications of using these online services. I was surprised on more than one occasion: Not a lot of the participants use smartphones, which may be a budget thing given they’re all still studying. The crowd was much more critical of online social networking than I expected. (There was a strong split in the group, with those seeing chances rather than risks on one side and those highly critical of social networks on the other.)

Two things became very clear, though: (1) Just like German society overall this group had a significant part of online critics (with varying degrees of informed argumentation). (2) All of them are acutely – almost painfully – aware of the role of privacy and how it’s being affected by voluntary participation in online sharing behavior (social networking, Twitter etc), involuntary sharing (government involvement) and commercialization (all major actors are international corporations).

While I wished the overall discourse (on a societal level) about the complex issues of privacy/ownership/control of data online was based on a more informed basis, it’s very clear that we’ll be having this discussion for awhile to come. And that’s good: Keep thinking, discussing, debating. Just please make sure to stay away from panic and fear driven rhetoric as well as hyperbole. And if you happen to encounter such arguments, feel free to drop in some facts and see the fear go away.

[permalink]

A little while ago I wrote a little rant about the fake Streetview Google had launched in Germany, an odd Google Maps & Panoramio hybrid. Eventually that’s about to change: Google Streetview is coming to Germany for real.

And boy, are people in Germany going crazy over this.

On the one hand you have those who thing that having public spaces accessible online is a good thing (including yours truly). One the other you have those who claim that it’s the end of privacy, illegitimate commercialism by a global corporation or that it helps burglars.

These critics spread – or buy into – a hyperbole like I haven’t seen in a long time. They are, I daresay, going absolutely nuts.

Why is this important? Because there’s practically no privacy risk, the burglar argument is completely bogus (not even burglars are so stupid, and statistics show that there’s no correlation of Streetview and break-ins) – while on the other hand a service like Streeview is incredibly useful for all kinds of legitimate uses.

DW-World sums it up nicely:

“Behind all of these criticisms here in Germany is the fear that Google might be too powerful, while being too strange and intransparent,” [law professor] Hoeren told Deutsche Welle. “It’s not really about data collection, telecommunications and privacy and such.”

If you understand German, Mario Sixtus wrote a fantastic piece on the subject. His take: trying to restrict a service like Google, including giving house owners the right to have photos of their houses removed from the service, is an attack on all our rights to the public space.

I couldn’t agree more.

The fact that many media outlets and politicians chime in with the rest of the criticism (or rather, take a lead in the fear mongering) doesn’t make their claims any more substantial or legitimate. Either we protect those rights, or we’ll lose them. And I’d like to keep living in a country where everyone – yes, even large corporations – are allowed to pick up a camera, take photos of buildings* in public and share these photos online.

(*Photos of people are a different matter altogether, but that isn’t what Google is doing here.)

Full disclaimer: I’ve worked with Google before and I’m a member of the Google Internet & Society Collaboratory. I still think that Google’s new stance on Net Neutrality sucks.

[permalink]

Disclaimer: I’m strongly biased towards openness. I prefer free and open software over closed systems, I prefer an open and decentralized web over a closed and centralized one. I prefer transparency over obscurity.

That said, I’d also consider myself a pragmatic idealist (thanks for the hint, Igor) in the sense that I think to reach certain idealistic goals it’s sometimes necessary (or even ok) to make compromises.

Examples: I use a Mac (closed) to feed my WordPress blog (open); I use Twitter (kinda closed) to promote open web ideals (open: duh!); my phone is powered by Android (open) but uses HTC’s Sense UI (closed).

So when we were about to announce an event that’s promoting the ideals of an open web (Drumbeat), we discussed how to best promote the event. We decided to complement the “official” event page on the Drumbeat site with a Facebook event page.

I insisted on having this second option, and for several reasons. One of those reasons is merely of the practical kind: it’s much easier to organize an event if you have any idea how many people are coming, and Facebook is very, very convenient to use that way. The other reason is more philosophical: I believe to reach out to new people, i.e. if you want to mainstream the discussion and get more people involved, you have to reach out to them where they mostly communicate. Facebook is an obvious choice, as you get access to a whole lot of people.

Like we almost expected, we got into a little flame war over this decision, including all the all-so-common personal attacks and insults. (My favorite being the statement that it’s “people like [me] who destroy the open web”, and that we’re “riff-raff”. I was surprised not to see Godwin’s Law invoked, but maybe that will happen in the next few mails?) To put one thing straight: I’m not even insulted, I find it very amusing to read a lengthy, hand-crafted personal attack. I appreciate, one could say, the effort people like this invest in personal trolling. (As long as – like in this case – it doesn’t even hit the mark and stays within certain boundaries.)

But it did get me thinking, and we discussed this a lot afterwards: To which degree is it ok to use a closed platform to promote an open web? And I stand by my decision, and would like to re-iterate: it’s not only ok, but necessary not to insist on personal moral high ground and being the true believer that knows everything better; but to go where the people you’d like to get involved really are and discuss with them. It’s not ok, and most likely damaging, to just assume everybody on the planet is thinking about these issues all day, and if they don’t leave all their bad habits behind they don’t deserve any better.

This kind of thinking is, from my point of view, arrogant, hypocritical and damaging. It devalues the ideals these same people strive to promote.

(I’m sure many other professions have to make similar decisions every day, like international development aid workers, who buy building materials on local markets to strengthen the local economy, even though they know that a certain share of those revenues go back to funding the same groups that caused the underlying structural problems.)

Long story short: For the time being I’ll keep doing it the way I’ve done it so far. I’ll keep using Facebook to promote events, I’ll stick to Twitter if that’s where I reach new people. But I’d like to hear your take on this!

[permalink]

IMG_4567

A few weeks ago, four recent NYU graduates announced – to the background noise of the latest (of many) major Facebook privacy fail – that they intended to build a privacy-focuses, decentralized, open-source alternative to Facebook. A social network, installed on a server of your choice, the data controlled by you alone.

Their fundraising period just ended. Instead of the $10K they had planned to raise, they got some $200K in pledges on Kickstarter.

There are several interesting points here: (1) these four young guys seem fairly inexperienced, yet they are a main focal point of hope for a large & growing number of privacy concerned web heads, including myself, so they get all the attention and are in a very interesting place right now. (2) After their initial announcement and the following hype (both on blogs and traditional media) they fell practically silent for several weeks. Which didn’t go down to well with many including myself, but others are more forgiving that way. (3) How can they match the expectations? Is there even a clear consensus about where the road should lead? Can they manage to pull of the first steps towards a prototype and open source quickly enough to engage the community, including some of the veterans of this field like Chris Messina and David Recordon (who both work for big companies now)?

As of yesterday, the Diaspora website is relaunched and also offers the Diaspora roadmap (PDF). Looks like late summer is still the first big milestone. From the (very top-level) roadmap, and with my very limited knowledge about the technical background of social networking and distributed computing, the project seems to be sensible. I really hope the four of them manage to pull off the first steps quickly enough to get more people and support on board.

This is potentially huge. But so is the chance of screwing up. And they just put a lot of stuff on a plate that’s growing by the day.

Image: IMG_4567, a Creative Commons Attribution Share-Alike (2.0) image from nearnearfuture’s photostream

[permalink]