Mike English's blog

thinking thoughts and writing words

privacy on the open web

View Comments

(Here come the questions…)

What are the essential elements of a profile page?

  • your name
  • your contact information
  • a picture or avatar
  • some kind of bio, or a few self-descriptive words
  • what else?

What contact information should be included on a profile page?

  • e-mail
  • twitter
  • instant messaging
  • phone?

Eventually these questions become more about privacy than accessibility.

But what does privacy mean on the open web?

With the advent of social networking websites, and especially since the increased popularity of Facebook and Twitter we’ve grown accustomed to living publicly. We no longer think twice about updating Twitter or our Facebook status to let the entire world know where we are, or what we’re doing. Why?

Part of this has to do, I think, with knowing that this information is of interest to our own existing social groups. It’s nice to know what your friends are up to. On the other hand, are we at greater risk by exposing this information? By using services like brightkite or Dopplr are we simply asking to be kidnapped, or to have our houses looted in our absence?

In my personal experience, doubts about these new web-ventures have usually been dismissed as old-fashioned and out of place. There’s a new paradigm, we’re working toward a new reality, and these old fears need to be set aside on the frontier of innovation.

The new reality, as I see it, is one where technology works for people.  The new social web is one where our virtual interactions begin to mimic the subtleties of ‘real life‘ social interaction. But there are a lot of difficulties in manifesting this vision. At the forefront is the problem of privacy. In real life you don’t go to great lengths to hide information about yourself, but you don’t rattle off everything you’ve ever done the first second you meet someone either. In real life we get to know people gradually; we become acquainted with them over time and more intimate channels of communication may or may not be opened.

If you strike up a conversation with someone in a coffeehouse for example, you don’t give them your home phone, mobile phone, mailing address, weekly schedule, favorite books, favorite movies, and who knows what else in the first five minutes of conversation, and before you get to know them as a person. But this is how it works on the web right now, it’s usually all or nothing, because we treat profiles like business cards. Not that this isn’t useful, but for the average user, it becomes difficult to decide what information to share.

The other thing about real life information sharing is that it is almost always managed subconsiously on an individual basis. We think about our relationship with each person we interact with, and they often don’t fall into clear-cut categories. The categorical model of relationships assumption that most social websites with privacy controls make is inadequate.

Mimicking the safety of this individual and gradual sharing of information is difficult on the web. On the web, we like everything to be automatic and ready to go. We don’t want to spend our time managing our information, we want to spend it actually being social. It’s easier to build in levels of privacy to a closed, centralized network like Facebook. But on the open web, lack of universal standards makes managing privacy a dauntingly time-consuming task. Is it worth the effort? How badly do we need our privacy? How do we think about privacy on the open web? Are our models analogous to real world social interaction? Can they be?

EDIT:

Chris Saad points out that “traditional ideas of privacy are changing.” Are these changes a natural evolution, or are they sparked by the inability of the Internet’s global interconnectedness, the “global village” model, to mimic traditional social relations?  If the later, and if we treat this effect of technology on our lives as acceptable, the Internet potentially stands to have a larger cultural impact than I think anyone yet expects.

Written by Mike English

December 3rd, 2008 at 12:58 am

  • I think there are a couple factors here.

    First, one of the problems will not be about achieving privacy; it will be about getting heard in the din of democratized technology. When everyone's publishing, how do you rise above and get your ideas heard? This is a fundamental shift -- one that's quite unintuitive for previous generations who felt that anonymity could provide protection.

    Second, the web needs to invert itself from a service-centric world where you must repeat your identity on all of them to a user- or citizen-of-the-web-centric orientation. This is what technologies like OpenID are all about... can you define yourself as the primary authority about yourself without relying on a third party service? You should be able to -- but today we know people by the services they use, rather than by the multi-faceted individuals that they are (potentially with accounts across multiple services).

    Third, one thing that we need to begin to cope with — or adjust our expectations about — is the concept of decay, which of course is absent from digital technology where everything is designed to persist, perhaps, indefinitely. What does it mean when you can connect with your preschool friends on Facebook after you've graduated from college? Would that be a meaningful or useful relationship? Would such connections crowd out more happenstance but possibly deeper relationships that might spawn from random associations, or by affiliating oneself with people with similar interests.

    In other words, we live in a time of information and social abundance; the same assumptions that worked in a time of relative isolation and desolation should no longer apply.

    I've written about these subjects previously. Might interest you:

    http://factoryjoe.com/blog/2008/06/11/thoughts-...
    http://factoryjoe.com/blog/2007/11/11/privacy-p...
    http://factoryjoe.com/blog/2006/06/05/privacy-w...
    http://factoryjoe.com/blog/2006/01/24/pry-to
  • (Sorry Chris, I edited just as you commented)

    Thanks for weighing in. I'm curious to see how long the trend to 'share far and wide' lasts. As I just pointed out in my edit, I think it indicates the stunning impact of technology's shortcomings back onto human behavior. Will the effects be permanent? Is the perceived importance of personal privacy altogether on the decline?

    Also, for me, I'm taking as a given a new blank slate outside the walled networks. If I build my own identity endpoint, I'm in complete control of the data there, but I'm still left asking, what to share?

    In the long run, I'm less interested in how to my "Facebook data" onto another corporately controlled website, than I am in imagining what ad-hoc open networks are possible with independent control of my identity and social data.
  • Social software is getting better and better all the time at having more nuanced and granular control over permissions in a way that mimics the real world.

    The fact is, though, that we can invest time solving those problems until we solve the blank slate problem every socially aware app faces.

    That is, we need a way for the apps to get the data, then we can add layers of innovation on top.

    At the end of the day, though, people just want to share far and wide at the moment - they don't seem to care about the subtle real-world interactions. Yet.
blog comments powered by Disqus