If a picture is worth a thousand words, then a good metaphor must be worth a million. In an insightful blog post published on 23 March, Doc Searls, one of the elder statesman of the web, managed to get both for the price of one. His post was headed by one of those illustrations of an iceberg showing that only the tip is the visible part, while the great bulk of the object lies underwater. In this case, the tip was adorned with the Facebook logo while the submerged mass represented “Every other website making money from tracking-based advertising”. The moral: “Facebook’s Cambridge Analytica problems are nothing compared to what’s coming for all of online publishing.”

The proximate cause of Searls’s essay was encountering a New York Times op-ed piece entitled Facebook’s Surveillance Machine by Zeynep Tufekci. It wasn’t the (unexceptional) content of the article that interested Searls, however, but what his ad-blocking software told him about the Times page in which the essay appeared. The software had detected no fewer than 13 hidden trackers on the page. (I’ve just checked and my Ghostery plug-in has detected 19.)

In our current online world, only the paranoid thrive

And the point of this? The NYT is just doing what every other publication that lives off “adtech” does: tracker-based advertising. These publications, Searls wrote, “don’t just open the kimonos of their readers. They bring readers’ bare digital necks to vampires ravenous for the blood of personal data, all for the purpose of aiming ‘interest-based’ advertising at those same readers.”

This is what security guru Bruce Schneier meant when he observed that “surveillance is the business model of the internet”. (Pedantic columnists – like this one – might object that he meant the web rather than the internet, but since many people cannot distinguish between the two, we’ll let that pass.) The fundamental truth highlighted by Schneier’s aphorism is that the vast majority of internet users have entered into a Faustian bargain in which they exchange control of their personal data in return for “free” services (such as social networking and search) and/or easy access to the websites of online publications, YouTube and the like.

The big question for those of us who study this stuff is whether internet users really appreciate the nature of that pact. And if they don’t, what would it take to alert them to it? At the moment, the omens don’t look too promising. The huge fuss caused by the Cambridge Analytica revelations, for example, has generated a predictable #deletefacebook frenzy in liberal echo-chambers, but outside of those it’s not clear that everyday Facebook users are much affected by the controversy.

A radical proposal to keep your personal data safe | Richard Stallman Read more

Granted, recent opinion polls cast doubt over the level of trust people have in Facebook over privacy, despite advertisements the firm ran in British and US newspapers apologising to users. But I doubt that that scepticism will translate into people actually boycotting Facebook, WhatsApp, Instagram and Messenger. And although the company’s share price has tumbled, investment analysts are still unsure about whether this is a temporary blip or a real crisis. It might just turn out to be like the VW “Dieselgate” fiasco, in which the share price plummeted but eventually stabilised.

Big though Facebook is, however, it’s only the tip of the web iceberg. And it’s there that change will have to come if the data vampires are to be vanquished. The good news is that we already have some useful tools available – most of them free – to every internet user; and some potentially heavy artillery is arriving in May. On the tools front, there are browser plug-ins such as Disconnect Private Browsing, Privacy Badger and Ghostery. Installing any one of these tends to administer a salutary shock, because they instantly reveal (and enable you to block) the startling number of snoopers who are covertly tracking your online activity. And anyone who uses public wifi in cafes, airports and other places really ought to fork out for some VPN (Virtual Private Network) software to protect them from tracking and preserve their anonymity. In our current online world, only the paranoid thrive.

The heavy weaponry is the EU’s General Data Protection Regulation (GDPR), which becomes law in May. It says that people must be able to easily learn who has their personal data, and what they are doing with it. And it mandates that people must have confidence that no other parties receive these data. If it’s rigorously enforced (which could be a big “if” unless data protection authorities are properly resourced) it could blow a massive hole in the covert ad-tracking racket – and oblige us to find less abusive and dysfunctional business models to support our online addiction. So let’s resolve not to allow the coming crisis to go to waste.

What I’m reading



Photon opportunity

If you want to put our current squabbles into perspective, ponder Icarus, the furthest star from Earth seen so far by the Hubble space telescope. The photons that hit Hubble’s image sensor left Icarus 9bn years ago, which means we’re looking at it as it was when the universe was a third of its current age. There’s a wonderful account by Katyanna Quach in the Register of why we’re able to see it now.

Trash talk

Mark Zuckerberg’s enthusiasm for “helping people become more open” stands in contrast to his obsession with protecting his privacy. For example, anyone planning to rummage through his rubbish is in for a tough time, as Joe Veix discovered in the Outline.