On the Internet, things get old fast. One prime candidate for the digital dustbin, it seems, is the current approach to protecting privacy on the Internet.
It is an artifact of the 1990s, intended as a light-touch policy to nurture innovation in an emerging industry. And its central concept is “notice and choice,” in which Web sites post notices of their privacy policies and users can then make choices about sites they frequent and the levels of privacy they prefer.
However, policy and privacy experts agree that the relentless rise of Internet data harvesting has overrun the old approach of using lengthy written notices to safeguard privacy.
These statements are rarely read, are often confusing and can’t hope to capture the complexity of modern data-handling practices. As a result, experts say, consumers typically have little meaningful choice about the online use of their personal information — whether their birth dates, addresses, credit card numbers or Web-browsing habits.
“There are essentially no defenders anymore of the pure notice-and-choice model,” said Daniel Weitzner, a senior policy official at the National Telecommunications and Information Administration of the Commerce Department. “It’s no longer adequate.”
So if the current model is broken, how can it be fixed? There are two broad answers: rules and tools.
Rules would mean new regulations. The US Congress and the Federal Trade Commission are looking at further rules that could limit how personal information is used. For example, the government might ban the use of recorded trails of a person’s Web-browsing behavior — so-called click streams — in employment or health insurance decisions.
Still, the next round of online privacy regulation needs to proceed carefully, policy experts warn. They say that online data collection and analysis is an economic imperative, and that the Internet industry of the future will involve adding value to the free flow of information — much of it created by individuals and their browsing activity. Google, Facebook and Twitter are evidence of the trend, and so are legions of start-ups seeking riches in fields like social networking, cloud computing and smartphone applications.
“Getting this balance right is critical to the future of the Web, to foster innovation and economic growth,” Weitzner said.
Whatever the future of regulation, better digital tools are needed. Enhancing online privacy is a daunting research challenge that involves not only computing, but also human behavior and perception. So researchers nationwide are tackling the issue in new ways.
At Carnegie Mellon University, a group is working on what it calls “privacy nudges.” This approach taps computer science techniques like machine learning, natural language processing and text analysis, as well as disciplines like behavioral economics.
The goal is to design software that essentially sits over your shoulder and provides real-time reminders — short on-screen messages — that the information you’re about to send has privacy implications.
“It learns, helps you and occasionally prompts you,” said Lorrie Faith Cranor, a computer scientist at Carnegie Mellon. “When we go online, there are a lot of ways we can inadvertently give up our privacy.”
On a social networking site, Cranor says, people often type in their birth dates and widely circulate them, hoping to receive online birthday greetings. But a birth date posted online, she says, can also be used for marketing profiling, identification and potentially identity theft. A software agent, she says, could inform the user of that before a birth date is typed.
An on-screen alert is a mild nudge. A stronger one might be automatically enrolling the user in an online lottery for cash prizes (perhaps financed by the industry, to avoid tougher privacy regulation), if the person doesn’t disclose potentially sensitive personal information.
The stronger incentive, says Alessandro Acquisti, a researcher who specializes in the economics of privacy, may be needed to offset the bias toward immediate gratification in human decision-making — thinking only of the emotionally satisfying birthday greeting next week instead of the privacy risks down the road.
Ryan Calo, a fellow at the Center for Internet and Society at Stanford Law School, is exploring technologies that deliver “visceral notice.” His research involves voice and animation technology that emulates humans. When putting information in a personal health record, for example, a virtual nurse could explain to the user the privacy implications, and trade-offs, of sharing personal information with doctors, family members, insurers and drug companies.
Calo explains that people naturally react more strongly, in a visceral way, to anthropomorphic cues. He points to a sociological experiment that had people pay for coffee on an honor system. One box for depositing cash had a picture of flowers on it, while another had a picture of human eyes. Time and again, he said, people paid more often for coffee when the box had eyes instead of flowers.
“Our brains are hard-wired to respond to images that look human, alive,” Calo said.
At Princeton, Edward Felten, a computer scientist, wants to re-engineer the Web browser for greater privacy. A key, he says, is to alter the software’s design so that information about on-screen viewing sessions is kept separate and not routinely passed along so a person’s browsing behavior can be tracked. His plan would push mainstream browsing toward anonymous mode, which can be done in the latest browser software, but only by opening a separate, specially designed window.
“The browser needs to be less promiscuous about revealing the information collected,” Felten said.
Xiaomi Corp founder Lei Jun (雷軍) on May 22 made a high-profile announcement, giving online viewers a sneak peek at the company’s first 3-nanometer mobile processor — the Xring O1 chip — and saying it is a breakthrough in China’s chip design history. Although Xiaomi might be capable of designing chips, it lacks the ability to manufacture them. No matter how beautifully planned the blueprints are, if they cannot be mass-produced, they are nothing more than drawings on paper. The truth is that China’s chipmaking efforts are still heavily reliant on the free world — particularly on Taiwan Semiconductor Manufacturing
Keelung Mayor George Hsieh (謝國樑) of the Chinese Nationalist Party (KMT) on Tuesday last week apologized over allegations that the former director of the city’s Civil Affairs Department had illegally accessed citizens’ data to assist the KMT in its campaign to recall Democratic Progressive Party (DPP) councilors. Given the public discontent with opposition lawmakers’ disruptive behavior in the legislature, passage of unconstitutional legislation and slashing of the central government’s budget, civic groups have launched a massive campaign to recall KMT lawmakers. The KMT has tried to fight back by initiating campaigns to recall DPP lawmakers, but the petition documents they
A recent scandal involving a high-school student from a private school in Taichung has reignited long-standing frustrations with Taiwan’s increasingly complex and high-pressure university admissions system. The student, who had successfully gained admission to several prestigious medical schools, shared their learning portfolio on social media — only for Internet sleuths to quickly uncover a falsified claim of receiving a “Best Debater” award. The fallout was swift and unforgiving. National Yang Ming Chiao Tung University and Taipei Medical University revoked the student’s admission on Wednesday. One day later, Chung Shan Medical University also announced it would cancel the student’s admission. China Medical
Construction of the Ma-anshan Nuclear Power Plant in Pingtung County’s Hengchun Township (恆春) started in 1978. It began commercial operations in 1984. Since then, it has experienced several accidents, radiation pollution and fires. It was finally decommissioned on May 17 after the operating license of its No. 2 reactor expired. However, a proposed referendum to be held on Aug. 23 on restarting the reactor is potentially bringing back those risks. Four reasons are listed for holding the referendum: First, the difficulty of meeting greenhouse gas reduction targets and the inefficiency of new energy sources such as photovoltaic and wind power. Second,
RSS