Thursday, January 31, 2013

Compete, Inc. Collected Personal Data Including Keystrokes

Compete "captured information consumers entered into websites, including consumers’ usernames, passwords, and search terms, and also some sensitive information such as credit card and financial account information, security codes and expiration dates, and Social Security Numbers."

Two analytics companies to settle charges for online user tracking
http://www.net-security.org/secworld.php?id=13820

Compete Inc. Settles FTC Privacy Charges
http://www.esecurityplanet.com/network-security/compete-inc.-settles-ftc-privacy-charges.html

Compete Inc. is owned by Taylor Nelson Sofres, which is in turn owned by WPP plc.

http://en.wikipedia.org/wiki/Compete.com

You can own WPP. The shares are publicly traded on the London (WPP.L) and NASDAQ (WPPGY) exchanges. 

Slashdot story and comments:

The penalties seem extremely light, considering that Compete Inc. (and hence WPP) violated the Computer Fraud and Abuse Act (CFAA) by committing fraud involving Protected Computers, which is a felony.

Facebook Graph Search Reveals All

Amusingly contradictory "likes" revealed!

Actual Facebook Graph Searches
http://actualfacebookgraphsearches.tumblr.com/
shows:
Mothers of Jews who like Bacon
Married people who like Prostitutes
Current employees of Tesco who like horses
Current employers of people who like Racism

Facebook Graph searches: Hooker hunger and other delish data
http://news.cnet.com/8301-1023_3-57565460-93/facebook-graph-searches-hooker-hunger-and-other-delish-data/
shows:
Mothers of Catholics from Italy who like Durex

But:
Facebook Graph Search: 4 big reasons it matters
http://news.cnet.com/8301-1023_3-57564801-93/facebook-graph-search-4-big-reasons-it-matters/

How Generation Y really feels about online privacy
http://ces.cnet.com/8301-34435_1-57563194/how-generation-y-really-feels-about-online-privacy/
Summary of their attitude and message: "we live in public."
But then, this is a panel of people who are on stage in front of a huge audience, being recorded, miked, and with giant video overhead. Clearly they aren't shy, or are perhaps even to the other extreme.

But! People are really amusing! Lamebook!
http://www.lamebook.com/

And Facebook can resurrect the dead!
When Facebook Resurrected the Dead
http://www.youtube.com/watch?v=Zf6C-pZ3heY

Additional Links on Aaron Swartz Case

22 PowerPoint slides at Slideshare showing the legal filing terminating the legal case.
http://www.slideshare.net/DeepDude/usa-v-aaron-swartz-terminated

Memorial for Aaron Swartz at the Internet Archive. Text by Carl Malamud.
https://public.resource.org/aaron/army/

Slashdot report on Dan Kennedy's re-publication of a Massachusetts Lawyers Weekly article saying that State prosecutors had planned to let Swartz off with a warning.

http://yro.slashdot.org/story/13/01/29/0219239/prosecution-of-swartz-typical-for-the-sick-culture-pervading-the-doj

Kennedy's article:
http://dankennedy.net/2013/01/24/the-swartz-suicide-and-the-sick-culture-of-the-justice-dept/

Tuesday, January 22, 2013

Your Computer is a "Protected Computer"

As was made plain by the recent Aaron Swartz scandal, the Computer Fraud and Abuse Act can be used to prosecute alleged violators at a high level for minor transgressions. The law, "18 USC § 1030 - Fraud and related activity in connection with computers" defines several forms of violations, all of which involve what the National Information Infrastructure Protection Act of 1996 defines as a protected computer:

a computer—
(A) exclusively for the use of a financial institution or the United States Government, or, in the case of a computer not exclusively for such use, used by or for a financial institution or the United States Government and the conduct constituting the offense affects that use by or for the financial institution or the Government; or
(B) which is used in interstate or foreign commerce or communication, including a computer located outside the United States that is used in a manner that affects interstate or foreign commerce or communication of the United States.

This is a rather wide definition, as any computer used to buy from Amazon or perform online banking with an out of state bank then immediately qualifies as being "used in interstate commerce." Also, anyone sending an email to any other person in another state would then also be using the computer for interstate communications, again meeting the standard.

What this means is that your personal computer is a protected computer, and any transgression against your computer then qualifies for a criminal complaint at the Federal level. More on this tomorrow.

Monday, January 21, 2013

France Proposes Personal Information Tax

Slashdot reports that the New York Times reports that France is considering a tax on companies that collect personal information.

France Proposes a Tax On Personal Information Collection
http://tech.slashdot.org/story/13/01/21/1253219/france-proposes-a-tax-on-personal-information-collection

France Proposes an Internet Tax
http://www.nytimes.com/2013/01/21/business/global/21iht-datatax21.html

The rationale in part is that "...users of services like Google and Facebook are, in effect, working for these companies without pay by providing the personal information that lets them sell advertising." Touché

The tax would be based on the number of users tracked, not by the quantity of information. Unfortunately, this would give internet companies further incentive to thwart anonymous and pseudonymous accounts. Fortunately, this would give the French government an incentive to allow anonymous and pseudonymous accounts, as the extra accounts would drive up tax collections.

Judge: Wash Post and Agence France-Presse Stole Photos

A judge has granted a summary judgment stating that defendants Washington Post and AFP improperly used without license photographs owned by photographer Daniel Morel. Morel took photographs within hours of the Haiti earthquake in 2010 and posted links to them on Twitter. AFP had argued that any photos posted on the internet and linked to from Twitter were available for all to use without licence.

News outlets improperly used photos posted to Twitter: judge
http://www.reuters.com/article/2013/01/15/us-socialmedia-copyright-ruling-idUSBRE90E11P20130115

The case is not yet concluded, as determination of willfulness and damages will be determined at trial.

The case highlights the evolving area of copyright law as applied to photographs used in social media. While Twitter's service terms do allow the reposting and rebroadcasting of users' images in certain circumstances, such as "retweeting," they do not apply to commercial use.

There is a tendency in the social media business and photographic support businesses, such as printing of digital photographs, to treat consumer photos as "not copyrighted" even though existing copyright law states explicitly that all photographs are protected by copyright from the moment of capture, and that the copyright is owned by the photographer.

Although this law applies even to supposedly non-professional photographs, it is in the interest of social media companies such as Google+, Facebook, Instagram, and LinkedIn to insist upon unlimited distribution rights as a non-negotiable part of their Terms of Service. Instagram recently changed their TOS to take a right to use customer photographs for any purpose, which could have included advertising, without compensating the owner of the photograph.

More on Instagram's TOS:
Instagram's TOS Go Into Effect Today
Terms of Use • Instagram
What Instagram’s New Terms of Service Mean for You

The TOS of companies that make prints from digital photographs also overreach in most cases. The actual wording of the contracts makes it clear that when you upload photographs to Sams Club, Costco, Wal-Mart, Target, SnapFish, SmugMug, Mpix, Wolf Camera, Shutterfly, Flickr, and so on that the company gains a perpetual license to reproduce your photograph, with no compensation to you.

Sams Club TOS

Excerpt from the Sams Club TOS:
"You grant to samsclub.com a non-exclusive, royalty-free, perpetual, irrevocable, unrestricted, world-wide right and license to access, use, copy, reproduce, distribute, transmit, display, perform, communicate to the public, modify, adapt, publish, translate, create derivative works from, and otherwise use such Materials (in whole or in part) in connection with the Site and/or the Products, using any form, media or technology now known or later developed, without providing compensation to you or any other person, without any liability to you or any other person, and free from any obligation of confidence or other duties on the part of samsclub.com, its affiliates and their respective licensees;"

In short, you must be extremely vigilant when getting prints made from your better photographs, because some larger businesses are looking to monetize your content. To avoid losing rights to your own pictures, insist on a new, separate contract that grants a right to the print-making company to copy your files and photos only for the purpose of making prints for you as customer, and limits the time frame on the license to no more than 30 days.

North Korea: "It's like The Truman Show, at country scale"

Google chief Eric Schmidt,  who said at one time that everything you do should be posted on line*, visited North Korea with his daughter Sophie. Sophie blogged about the visit in a post titled It might not get weirder than this. Everything she says in her article is surprising. I highly recommend reading it, especially if you like traveling.

Networkworld's Ms. Smith's take: Bugged guesthouse: Eric Schmidt's daughter reveals North Korea trip details.

* Actually, he said something like "if you don't want anyone to know what you are doing, then maybe you shouldn't be doing it." But it amounts to the same thing. I could even prove it mathematically, except that I'm too lazy at the moment, and you probably believe me already.

1/22/13 update:
More articles about the trip, with new details:
Sophie Schmidt Recounted North Korea Trip with Her Father, Google Chairman Eric Schmidt on a Blog
SOPHIE SCHMIDT GOES TO NORTH KOREA & REPORTS BACK META
Eric Schmidt's daughter lifts lid on 'very strange' North Korea
Eric Schmidt's post on Google+