Post AmCGh7VF0WDfEkdptw by rhymerepartee@mastodon.social
(DIR) More posts by rhymerepartee@mastodon.social
(DIR) Post #AmCGgjUiGpXKmAD4kK by pluralistic@mamot.fr
2024-09-20T13:38:01Z
0 likes, 0 repeats
It's easy to greet the FTC's new report on social media privacy, which concludes that tech giants have terrible privacy practices with a resounding "duh," but that would be a grave mistake.--If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:https://pluralistic.net/2024/09/20/water-also-wet/#marking-their-own-homework1/
(DIR) Post #AmCGgkJPEM5PJNvYlE by pluralistic@mamot.fr
2024-09-20T13:38:39Z
0 likes, 0 repeats
Much to the disappointment of autocrats and would-be autocrats, administrative agencies like the FTC can't just make rules up. In order to enact policies, regulators have to do their homework: for example, they can do "market studies," which go beyond anything you'd get out of an MBA or Master of Public Policy program, thanks to the agency's legal authority to force companies to reveal their confidential business information.2/
(DIR) Post #AmCGgl5cL6ePiuU3uK by pluralistic@mamot.fr
2024-09-20T13:38:47Z
0 likes, 0 repeats
Market studies are fabulous in their own right. The UK Competition and Markets Authority has a fantastic research group called the Digital Markets Unit that has published some of the most fascinating deep dives into how parts of the tech industry actually function, 400+ page bangers that pierce the Shield of Boringness that tech firms use to hide their operations. I recommend their ad-tech study:https://www.gov.uk/cma-cases/online-platforms-and-digital-advertising-market-study3/
(DIR) Post #AmCGglufHJU4HEMpTU by pluralistic@mamot.fr
2024-09-20T13:39:00Z
0 likes, 0 repeats
In and of themselves, good market studies are powerful things. They expose workings. They inform debate. When they're undertaken by wealthy, powerful countries, they provide enforcement roadmaps for smaller, poorer nations who are being tormented in the same way, by the same companies, that the regulator studied.4/
(DIR) Post #AmCGgmVB5Ygu6TRzO4 by pluralistic@mamot.fr
2024-09-20T13:39:13Z
0 likes, 0 repeats
But market studies are really just curtain-raisers. After a regulator establishes the facts about a market, they can intervene. They can propose new regulations, and they can impose "conduct remedies" (punishments that restrict corporate behavior) on companies that are cheating.5/
(DIR) Post #AmCGgn8WjGAO4VrPii by pluralistic@mamot.fr
2024-09-20T13:39:21Z
0 likes, 0 repeats
Now, the stolen, corrupt, illegitimate, extremist, bullshit Supreme Court just made regulation a lot harder. In a case called *Loper Bright*, SCOTUS killed the longstanding principle of "Chevron deference," which basically meant that when an agency said it had built a factual case to support a regulation, courts should assume they're not lying:https://jacobin.com/2024/07/scotus-decisions-chevron-immunity-loper6/
(DIR) Post #AmCGgnsFzEkKMLFw00 by pluralistic@mamot.fr
2024-09-20T13:39:29Z
0 likes, 0 repeats
The death of Chevron Deference means that many important regulations - past, present and future - are going to get dragged in front of a judge, most likely one of those Texas MAGA mouth-breathers in the Fifth Circuit, to be neutered or killed. But even so, regulators still have options - they can still impose conduct remedies, which are unaffected by the sabotage of Chevron Deference.7/
(DIR) Post #AmCGgoSPonfaAUAoMK by pluralistic@mamot.fr
2024-09-20T13:39:38Z
0 likes, 0 repeats
Pre-*Loper*, post-*Loper*, and today, the careful, thorough investigation of the facts of how markets operate is the prelude to *doing things* about how those markets operate. Facts matter. They matter even if there's a change in government, because once the facts are in the public domain, other governments can use them as the basis for action. 8/
(DIR) Post #AmCGgp0RmGtLs25zP6 by pluralistic@mamot.fr
2024-09-20T13:39:47Z
0 likes, 0 repeats
Which is why, when the FTC uses its powers to compel disclosures from the largest tech companies in the world, and then assesses those disclosures and concludes that these companies engage in "vast surveillance," in ways that the users don't realize and that these companies "fail to adequately protect users, that matters.9/
(DIR) Post #AmCGgpjT4su87f9wZs by pluralistic@mamot.fr
2024-09-20T13:40:01Z
0 likes, 0 repeats
What's more, the Commission concludes that "data abuses can fuel market dominance, and market dominance can, in turn, further enable data abuses and practices that harm consumers." In other words: tech monopolists spy on us in order to achieve and maintain their monopolies, and then they spy on us some more, and that hurts us.10/
(DIR) Post #AmCGgqYW15jmfz2i92 by pluralistic@mamot.fr
2024-09-20T13:40:15Z
0 likes, 0 repeats
So if you're wondering what kind of action this report is teeing up, I think we can safely say that the FTC believes that there's evidence that the unregulated, rampant practices of the commercial surveillance industry are illegal. First, because commercial surveillance harms us as "consumers." 11/
(DIR) Post #AmCGgrBVg6vgcvHqvQ by pluralistic@mamot.fr
2024-09-20T13:40:24Z
0 likes, 0 repeats
"Consumer welfare" is the one rubric for enforcement that the right-wing economists who hijacked antitrust law in the Reagan era left intact, and here we have the Commission giving us evidence that surveillance hurts us, and that it comes about as a result of monopoly, *and* that the more companies spy, the stronger their monopolies become. 12/
(DIR) Post #AmCGgruB02esrSBWXw by pluralistic@mamot.fr
2024-09-20T13:40:34Z
0 likes, 0 repeats
But the Commission also tees up another kind of enforcement: Section 5, the long (long!) neglected power of the agency to punish companies for "unfair and deceptive methods of competition," a *very* broad power indeed:https://pluralistic.net/2023/01/10/the-courage-to-govern/#whos-in-chargeIn the study, the Commission shows - pretty convincingly! - that the commercial surveillance sector routinely tricks people who have no idea how their data is being used. 13/
(DIR) Post #AmCGgscqJyO55z5CAS by pluralistic@mamot.fr
2024-09-20T13:40:53Z
0 likes, 0 repeats
Most people don't understand, for example, that the platforms use all kinds of inducements to get web publishers to embed tracking pixels, fonts, analytics beacons, etc that sends user-data back to the Big Tech databases, where it's merged with data from your direct interactions with the company. 14/
(DIR) Post #AmCGgt96O2Bwi2AxRw by pluralistic@mamot.fr
2024-09-20T13:41:18Z
0 likes, 0 repeats
Likewise, most people don't understand the shadowy data-broker industry, which sells Big Tech huge amounts of data harvested by your credit card, by Bluetooth and wifi monitoring devices on streets and in stores, and by your car. Data-brokers buy this data from anyone who claims to have it, including people who are probably lying, like Nissan, who claims that it has records of the smells inside drivers' cars, as well as those drivers' sex-lives:https://nypost.com/2023/09/06/nissan-kia-collect-data-about-drivers-sexual-activity/15/
(DIR) Post #AmCGgtcAdxRaABmAl6 by pluralistic@mamot.fr
2024-09-20T13:41:36Z
0 likes, 0 repeats
Or Cox, which claims it is secretly recording and transcribing the conversations we have in range of the mics on our speakers, phones, and other IoT devices:https://www.404media.co/heres-the-pitch-deck-for-active-listening-ad-targeting/(If there's a kernel of truth to Cox's bullshit, my guess it's that they've convinced some of the sleazier "smart TV" companies to secretly turn on their mics, then inflated this into a marketdroid's wet-dream of "we have logged every word uttered by Americans and can use it to target ads.)16/
(DIR) Post #AmCGgu4WwW83a92oxk by pluralistic@mamot.fr
2024-09-20T13:41:49Z
0 likes, 0 repeats
Notwithstanding the rampant fraud inside the data brokerage industry, there's no question that *some* of the data they offer for sale is real, that it's intimate and sensitive, and that the people it's harvested from never consented to its collection. How do you opt out of public facial recognition cameras? "Just don't have a face" isn't a realistic opt-out policy.17/
(DIR) Post #AmCGguqO4aPTyZR2Ya by pluralistic@mamot.fr
2024-09-20T13:42:02Z
0 likes, 0 repeats
And if the public is being deceived about the collection of this data, they're even *more* in the dark about the way it's used - merged with on-platform usage data and data from apps and the web, then analyzed for the purposes of drawing "inferences" about you and your traits.18/
(DIR) Post #AmCGgvWDZ3s24J0Rl2 by pluralistic@mamot.fr
2024-09-20T13:42:10Z
0 likes, 0 repeats
What's more, the companies have chaotic, bullshit internal processes for handling your data, which *also* rise to the level of "deceptive and unfair" conduct. For example, if you send these companies a deletion request for your data, they'll *tell* you they deleted the data, but actually, they keep it, after "de-identifying" it. 19/
(DIR) Post #AmCGgwGInijYNEZFaa by pluralistic@mamot.fr
2024-09-20T13:42:41Z
0 likes, 0 repeats
De-identification is a highly theoretical way of sanitizing data by removing the "personally identifiers" from it. In practice, most de-identified data can be quickly *re*-identified, and nearly all de-identified data can *eventually* be re-identified:https://pluralistic.net/2024/03/08/the-fire-of-orodruin/#are-we-the-baddiesBreaches, re-identification, and weaponization are extraordinarily hard to prevent. 20/
(DIR) Post #AmCGgwv4M9LMPfdo8G by pluralistic@mamot.fr
2024-09-20T13:42:56Z
0 likes, 0 repeats
In general, we should operate on the assumption that any data that's collected will probably leak, and any data that's retained will almost certainly leak someday. To have even a hope of preventing this, companies have to treat data with enormous care, maintaining detailed logs and conducting regular audits. 21/
(DIR) Post #AmCGgxSOMFzy51EQ4W by pluralistic@mamot.fr
2024-09-20T13:43:10Z
0 likes, 0 repeats
But the Commission found that the biggest tech companies are extraordinarily sloppy, to the point where "they often could not even identify all the data points they collected or all of the third parties they shared that data with."This has serious implications for consumer privacy, obviously, but there's also a big national security dimension. 22/
(DIR) Post #AmCGgy65ydl249o7xQ by pluralistic@mamot.fr
2024-09-20T13:43:21Z
0 likes, 0 repeats
Given the recent panic at the prospect that the Chinese government is using Tiktok to spy on Americans, it's pretty amazing that American commercial surveillance has escaped serious Congressional scrutiny.23/
(DIR) Post #AmCGgylDVkeQ7h2y3M by pluralistic@mamot.fr
2024-09-20T13:43:31Z
0 likes, 0 repeats
After all, it would be a simple matter to use the tech platforms targeting systems to identify and push ads (including ads linking to malicious sites) to Congressional staffers ("under-40s with Political Science college degrees within one mile of Congress") or, say, NORAD personnel ("Air Force enlistees within one mile of Cheyenne Mountain").24/
(DIR) Post #AmCGgzGPdlbXgRdsg4 by pluralistic@mamot.fr
2024-09-20T13:43:45Z
0 likes, 0 repeats
Those targeting parameters should be enough to worry Congress, but there's a whole *universe* of potential characteristics that can be selected, hence the Commission's conclusion that "profound threats to users can occur when targeting occurs based on sensitive categories."25/
(DIR) Post #AmCGgzkXpjhvBtjwe0 by pluralistic@mamot.fr
2024-09-20T13:44:41Z
0 likes, 0 repeats
The FTC's findings about the dangers of all this data are timely, given the current wrangle over *another* antitrust case. In August, a federal court found that Google is a monopolist in search, and that the company used its data lakes to secure and maintain its monopoly.This kicked off widespread demands for the court to order Google to share its data with competitors in order to erase that competitive advantage. 26/
(DIR) Post #AmCGh0RnEwInM1yU3U by pluralistic@mamot.fr
2024-09-20T13:44:51Z
0 likes, 0 repeats
Holy *moly* is this a bad idea - as the FTC study shows, the data that Google stole from us all is *incredibly* toxic. Arguing that we can fix the Google problem by sharing that data far and wide is like proposing that we can "solve" the fact that only some countries have nuclear warheads by "democratizing" access to planet-busting bombs:https://pluralistic.net/2024/08/07/revealed-preferences/#extinguish-v-improve27/
(DIR) Post #AmCGh0tRa8Q6jmuZ9c by pluralistic@mamot.fr
2024-09-20T13:45:04Z
0 likes, 0 repeats
To address the competitive advantage Google achieved by engaging in the reckless, harmful conduct detailed in this FTC report, we should *delete all that data*. Sure, that may seem inconceivable, but come *on*, surely the right amount of toxic, nonconsensually harvested data on the public that should be retained by corporations is *zero*:https://pluralistic.net/2024/09/19/just-stop-putting-that-up-your-ass/#harm-reduction28/
(DIR) Post #AmCGh1Xr9skKl7oq92 by pluralistic@mamot.fr
2024-09-20T13:45:11Z
0 likes, 0 repeats
Some people argue that we don't need to share out the data that Google never should have been allowed to collect - it's enough to share out the "inferences" that Google drew from that data, and from other data its other tentacles (Youtube, Android, etc) shoved into its gaping maw, as well as the oceans of data-broker slurry it stirred into the mix.29/
(DIR) Post #AmCGh28iwoEkbT4Hbs by pluralistic@mamot.fr
2024-09-20T13:45:21Z
0 likes, 0 repeats
But as the report finds, the most unethical, least consensual data was "personal information that these systems infer, that was purchased from third parties, or that was derived from users’ and non-users’ activities off of the platform." We gotta delete that, too. *Especially* that.30/
(DIR) Post #AmCGh2tAA9NqvUnMzg by pluralistic@mamot.fr
2024-09-20T13:45:27Z
0 likes, 0 repeats
A major focus of the report is the way that the platforms handled children's data. Platforms have special obligations when it comes to kids' data, because while Congress has failed to act on consumer privacy, they *did* bestir themselves to enact a children's privacy law. In 2000, Congress passed the Children's Online Privacy Protection Act (COPPA), which puts strict limits on the collection, retention and processing of data on kids under 13.31/
(DIR) Post #AmCGh3bTVOpT8vWl3w by pluralistic@mamot.fr
2024-09-20T13:45:46Z
0 likes, 0 repeats
Now, there are two ways to think about COPPA. One view is, "if you're not *certain* that everyone in your data-set is over 13, you shouldn't be collecting or processing their data *at all*." Another is, "In order to ensure that everyone whose data you're collecting and processing is over 13, you should collect a *gigantic* amount of data on all of them, including the under-13s, in order to be sure that not collecting under-13s' data." 32/
(DIR) Post #AmCGh48RWpCUnAx5Rw by pluralistic@mamot.fr
2024-09-20T13:45:53Z
0 likes, 0 repeats
That second approach would be ironically self-defeating, obviously, though it's one that's gaining traction around the world and in state legislatures, as "age verification" laws find legislative support.The platforms, meanwhile, found a third, even *stupider* approach: rather than collecting nothing because they can't verify ages, or collecting everything to verify ages, they collect everything, but make you click a box that says, "I'm over 13":https://pluralistic.net/2023/04/09/how-to-make-a-child-safe-tiktok/33/
(DIR) Post #AmCGh4cDk71IHWsrrc by pluralistic@mamot.fr
2024-09-20T13:46:02Z
0 likes, 0 repeats
It will not surprise you to learn that many children under 13 have figured out that they can click the "I'm over 13" box and go on their merry way. It won't surprise you, but apparently, it will surprise the hell out of the platforms, who claimed that *they had zero underage users* on the basis that everyone has to click the "I'm over 13" box to get an account on the service.34/
(DIR) Post #AmCGh5U6Vm7aye5tqq by pluralistic@mamot.fr
2024-09-20T13:46:13Z
0 likes, 0 repeats
By failing to pass comprehensive privacy legislation for 36 years (and counting), Congress delegated privacy protection to self-regulation by the companies themselves. They've been marking their own homework, and now, thanks to the FTC's power to compel disclosures, we can say for certain that the platforms *cheat*.No surprise that the FTC's top recommendation is for Congress to pass a new privacy law. 35/
(DIR) Post #AmCGh62qQbuWiOLe08 by pluralistic@mamot.fr
2024-09-20T13:46:21Z
0 likes, 0 repeats
But they've got other, eminently sensible recommendations, like requiring the companies to do a better job of protecting their users' data: collect less, store less, delete it after use, stop combining data from their various lines of business, and stop sharing data with third parties.Remember, the FTC has broad powers to order "conduct remedies" like this, and these are largely unaffected by the Supreme Court's "Chevron deference" decision in *Loper-Bright*.36/
(DIR) Post #AmCGh6iJwP5Un1kleK by pluralistic@mamot.fr
2024-09-20T13:46:32Z
0 likes, 0 repeats
The FTC says that privacy policies should be "clear, simple, and easily understood," and says that ad-targeting should be severely restricted. They want clearer consent for data inferences (including AI), and that companies should monitor their own processes with regular, stringent audits.37/
(DIR) Post #AmCGh7VF0WDfEkdptw by rhymerepartee@mastodon.social
2024-09-20T13:52:29Z
0 likes, 0 repeats
@pluralistic Cory, really appreciate your insight and knowledge ( love the adventures of Martin, forensic accountant ) but do you really need to impose all the vertical real estate of these long threads/nn ?
(DIR) Post #AmCGh8DCN5NhR5CwPw by shironeko@fedi.tesaguri.club
2024-09-20T14:07:02.100697Z
0 likes, 0 repeats
@rhymerepartee @pluralistic agree, there plenty of fedi platforms that allow long posts/unlisted posts.
(DIR) Post #AmCGh8GOBDvvayhUOG by pluralistic@mamot.fr
2024-09-20T13:46:53Z
0 likes, 0 repeats
They also have recommendations for competition regulators - remember, the Biden administration has a "whole of government" antitrust approach that asks every agency to use its power to break up corporate concentration:https://www.eff.org/deeplinks/2021/08/party-its-1979-og-antitrust-back-baby38/
(DIR) Post #AmCGh9oSQ2mMOveD8C by pluralistic@mamot.fr
2024-09-20T13:47:05Z
0 likes, 0 repeats
They say that competition enforcers factor in the privacy implications of proposed mergers, and think about how promoting privacy could also promote competition (in other words, if Google's stolen data helped it secure a monopoly, then making them delete that data will weaken their market power).I understand the reflex to greet a report like this with cheap cynicism, but that's a mistake. 39/
(DIR) Post #AmCGhBhRP6M4FkNdTM by pluralistic@mamot.fr
2024-09-20T13:47:14Z
0 likes, 0 repeats
There's a difference between "everybody knows" that tech is screwing us on privacy, and "a federal agency has concluded" that this is true. These market studies make a difference - if you doubt it, consider for a moment that Cigna is *suing the FTC* for releasing a landmark market study showing how its Express Scripts division has used its monopoly power to jack up the price of prescription drugs:https://www.fiercehealthcare.com/payers/express-scripts-files-suit-against-ftc-demands-retraction-report-pbm-industry40/
(DIR) Post #AmCGhDFrcbU54nUdlY by pluralistic@mamot.fr
2024-09-20T13:47:22Z
0 likes, 0 repeats
Big business is shit-scared of this kind of research by federal agencies - if they think this threatens their power, why shouldn't we take them at their word?This report is a milestone, and - as with the UK Competition and Markets Authority reports - it's a *banger*. Even after *Loper-Bright*, this report can form the factual foundation for muscular conduct remedies that will limit what the largest tech companies can do.41/
(DIR) Post #AmCGhEq3jW1zzLR3p2 by pluralistic@mamot.fr
2024-09-20T13:47:32Z
0 likes, 0 repeats
But without privacy law, the data brokerages that feed the tech giants will be largely unaffected. True, the Consumer Finance Protection Bureau is doing some good work at the margins here:https://pluralistic.net/2023/08/16/the-second-best-time-is-now/#the-point-of-a-system-is-what-it-doesBut we need to do more than curb the worst excesses of the largest data-brokers. We need to *kill this sector*, and to do that, Congress has to act:https://pluralistic.net/2023/12/06/privacy-first/#but-not-just-privacy42/
(DIR) Post #AmCGhGKECpl2bCYfU8 by pluralistic@mamot.fr
2024-09-20T13:47:39Z
0 likes, 0 repeats
On September 24th, I'll be speaking in person at the Boston Public Library!https://bpl.bibliocommons.com/events/66cf2d8bf520192f005fcc50--The paperback edition of The Lost Cause, my nationally bestselling, hopeful solarpunk novel is out this month!https://us.macmillan.com/books/9781250865946/thelostcause43/
(DIR) Post #AmCGhHtMNhSDSS0Esq by pluralistic@mamot.fr
2024-09-20T13:47:45Z
0 likes, 0 repeats
Image:Cryteria (modified)https://commons.wikimedia.org/wiki/File:HAL9000.svgCC BY 3.0https://creativecommons.org/licenses/by/3.0/deed.eneof/
(DIR) Post #AmCmv2iKo1foyKRsPo by tomjennings@tldr.nettime.org
2024-09-20T20:08:16Z
0 likes, 0 repeats
@spherulitic @pluralistic This was always possible. We just don't want to do it, because its awful. What makes people want to do it? That's the interesting question (with many answers I'm not pursuing).