|
<HTML> <head><TITLE>PRIVACY Forum Archive Document - (priv.09.16) </TITLE></head> <body bgcolor="#ffffff" text="#000000" link="#0000ff" vlink="#660099" alink="#ff0000"> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td width=15%> <center> <table border=0 cellspacing=0 cellpadding=0 width=100%> <tr> <td> <table border=1 cellspacing=0 cellpadding=0> <tr> <td bgcolor="#ffffcc"> <center> <font face="Arial, Helvetica, sans-serif"> <a href="http://www.pfir.org"><b>PFIR</b></a> <b>Perspective</b> </font> </center> </td> </tr> <tr> <td bgcolor="#ccffff"> <img src="/ipissues1.jpg" border=0> <center> <font size=-1 face="Arial, Helvetica, sans-serif"> <b>"CRIME or FAIR USE?"</b> </font> </center> <table border=0 cellspacing=0 cellpadding=2 width=100%> <tr> <td bgcolor="#ffffff"> <table border=1 width=100%> <tr> <td> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.ram"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.ram">Listen<br>RealAudio</a> </font> </center> </td> </tr> </table> </td> <td> <table border=0 cellpadding=1 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.mp3"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.mp3">Listen<br>MP3</a> </font> </center> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </center> </td> <td align=center> <table border=1 cellpadding=0 cellspacing=0> <tr> <td bgcolor="#ffffcc"> <table border=0 cellpadding=0 cellspacing=4> <tr> <td> <center> <font face="Arial, Helvetica, sans-serif"> "<a href="/reality">REALITY RESET</a>" </font> </td> <td> <table border=1 cellpadding=1 cellspacing=2 width=100%> <tr> <td bgcolor="#ffffff"> Today: <a href="/reality/2001-03-27">"Spraying the TV Screen"</a> </td> </tr> </table> </center> </td> </tr> </table> </td> </tr> </table> <p> <font size=+2><b>PRIVACY Forum Archive Document</b></font> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.pfir.org"><b>PFIR - "People For Internet Responsibility" Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.vortex.com"><b>Vortex Technology Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="/privmedia"><b>Radio, Television, and Press Contact Information</b></A> </font> <p> </td> </tr> </table> <hr> <PRE> PRIVACY Forum Digest Friday, 26 May 2000 Volume 09 : Issue 16 (<A HREF="http://www.vortex.com/privacy/priv.09.16">http://www.vortex.com/privacy/priv.09.16</A>) Moderated by Lauren Weinstein (<A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A>) Vortex Technology, Woodland Hills, CA, U.S.A. <A HREF="http://www.vortex.com">http://www.vortex.com</A> ===== PRIVACY FORUM ===== ------------------------------------------------------------------- The PRIVACY Forum is supported in part by the ACM (Association for Computing Machinery) Committee on Computers and Public Policy, Cable & Wireless USA, Cisco Systems, Inc., and Telos Systems. - - - These organizations do not operate or control the PRIVACY Forum in any manner, and their support does not imply agreement on their part with nor responsibility for any materials posted on or related to the PRIVACY Forum. ------------------------------------------------------------------- CONTENTS <A HREF="ftp://Cogit.com/Making">Cogit.com:Making</A> DoubleClick Look Good? (Lauren Weinstein; PRIVACY Forum Moderator) *** Please include a RELEVANT "Subject:" line on all submissions! *** *** Submissions without them may be ignored! *** ----------------------------------------------------------------------------- The Internet PRIVACY Forum is a moderated digest for the discussion and analysis of issues relating to the general topic of privacy (both personal and collective) in the "information age" of the 1990's and beyond. The moderator will choose submissions for inclusion based on their relevance and content. Submissions will not be routinely acknowledged. All submissions should be addressed to "<A HREF="mailto:privacy@vortex.com">privacy@vortex.com</A>" and must have RELEVANT "Subject:" lines; submissions without appropriate and relevant "Subject:" lines may be ignored. Excessive "signatures" on submissions are subject to editing. Subscriptions are via an automatic list server system; for subscription information, please send a message consisting of the word "help" (quotes not included) in the BODY of a message to: "<A HREF="mailto:privacy-request@vortex.com">privacy-request@vortex.com</A>". Mailing list problems should be reported to "<A HREF="mailto:list-maint@vortex.com">list-maint@vortex.com</A>". All messages included in this digest represent the views of their individual authors and all messages submitted must be appropriate to be distributable without limitations. The PRIVACY Forum archive, including all issues of the digest and all related materials, is available via anonymous FTP from site "ftp <A HREF="ftp://ftp.vortex.com/">ftp.vortex.com</A>", in the "/privacy" directory. Use the FTP login "ftp" or "anonymous", and enter your e-mail address as the password. The typical "README" and "INDEX" files are available to guide you through the files available for FTP access. PRIVACY Forum materials may also be obtained automatically via e-mail through the list server system. Please follow the instructions above for getting the list server "help" information, which includes details regarding the "index" and "get" list server commands, which are used to access the PRIVACY Forum archive. All PRIVACY Forum materials are available through the Internet Gopher system via a gopher server on site "<A HREF="http://gopher.vortex.com">gopher.vortex.com</A>/". Access to PRIVACY Forum materials is also available through the Internet World Wide Web (WWW) via the Vortex Technology WWW server at the URL: "<A HREF="http://www.vortex.com">http://www.vortex.com</A>"; full keyword searching of all PRIVACY Forum files is available via WWW access. ----------------------------------------------------------------------------- VOLUME 09, ISSUE 16 Quote for the day: "Do you want to live forever?" -- Valeria (Sandahl Bergman) "Conan the Barbarian" (Universal; 1982) ---------------------------------------------------------------------- Date: Fri, 26 May 2000 12:15 PDT From: <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> (Lauren Weinstein; PRIVACY Forum Moderator) Subject: <A HREF="ftp://Cogit.com/Making">Cogit.com:Making</A> DoubleClick Look Good? Greetings. No matter how far you dig into a cesspool, it's not always easy to tell when you've reached bottom. In the case of Internet technologies that many persons consider invasive, we may be dealing with a bottomless pit of slime, a veritable cornucopia of crassness that is breathtaking to behold. When DoubleClick, Inc. announced plans to link user Web activities with outside commercial data sources, there was an immediate outcry, and DoubleClick backed down--for now. But as many had feared would be the case, other firms have been plowing ahead into the vast, largely unregulated frontier of Big Brother, Inc. One of the newer players is Cogit.com (<A HREF="http://www.cogit.com">http://www.cogit.com</A>), a recent spinoff from Cogit Corporation. They offer (and have implemented for various customers) an array of Web user tracking and outside data personalization "linkage" services. Their two main products are called "RealProfile" and "RealTarget" (please note that neither of these have any relationship to RealNetworks, Inc. These names are starting to get Real confusing...) According to the product and technology description proudly displayed at Cogit's Web site (<A HREF="http://www.cogit.com/services.htm">http://www.cogit.com/services.htm</A>): "RealTarget uses offline behavior indicators such as high-tech preferences, automotive history, publications subscribed, and mail-order purchases, and relates them to consumer behavior on your site to make accurate predictions. Proven by Fortune 100 companies for direct marketing success, RealTarget's Master Models deliver highly improved results on the web." and: "RealProfile is a web-based consumer analysis service that helps emarketers understand who visits their web site and who drives site revenues. Enabled by an exclusive, long-term agreement with The Polk Company, RealProfile draws from offline demographic and lifestyle characteristics on 110 million US households to create in-depth anonymous profiles of your online visitors." They describe the underlying technology, which involves the usual cast of nefarious characters, including cookies, invisible one-pixel Web "bugs"--and other goodies, at <A HREF="http://www.cogit.com/technology.htm">http://www.cogit.com/technology.htm</A> and related pages. Their Web site really does make for some fascinating reading, in the Orwellian sense, that is. They also identify some of their current Web site customers. Cogit <B>of course</B> explains that all of this is not intrusive, since they say that they remove the personally-identifiable information from the consumer profiles, and then link the data anonymously. More on what this really seems to mean in a moment. Deja vu all over again--the usual, "We consider it anonymous, so you shouldn't care if we track your every move" sort of argument. One starts to suspect that most of the folks coming up with these various ideas must all be attending the same "Invasive E-Marketing For Fun and Profit" seminars. (A thought experiment--who would you choose to keynote such an event?) So here's what appears to be happening. Cogit apparently purchases masses of information about your purchasing habits, magazine subscriptions, and all sorts of other nifty data regarding your behavior. This is data that many firms consider to be their treasure-trove to exploit as they see fit. Once Cogit has managed to pick up your identity from a customer site (e.g., presumably from an online registration or online purchase), they then can link your activities on those sites to the external data sources. Once this linkage is made, the name/address/etc. information is apparently deleted. Then, using cookies and Web bugs (the latter of which are almost impossible to disable in any normal sense for most Web users) your movements can be tracked through the related sites, controlling the content displayed based on the perceived view of what you're all about. To quote from Cogit's privacy policy (<A HREF="http://www.cogit.com/policy.htm">http://www.cogit.com/policy.htm</A>): "Cogit.com's service matches personally identifiable consumer information (i.e., name, address, telephone number, etc.) supplied by its clients to a file of individual household information that Cogit.com licenses from the Polk Company. Immediately upon completion of this matching process and internal quality assurance, all personally identifiable information is irreversibly discarded to create anonymous user profiles devoid of any personally identifiable information." Cogit doesn't ask you ahead of time whether you wish to participate in their data matching extravaganza. They do offer you a way to opt-out however, as described at <A HREF="http://www.cogit.com/opt_info.htm">http://www.cogit.com/opt_info.htm</A>. They're using the same technique as DoubleClick--you must accept a cookie to stay out of the maws of the Cogit system. This presents the usual problems. First, you must have your cookies enabled to avail yourself of this opt-out--a privacy gotcha of the first order. Secondly, most people using various Cogit client Web sites are unlikely to ever even learn about this procedure. [ UPDATE (27 May 2000): It has now been determined that the Cogit.com opt-out cookie is <B>only</B> set if you have both cookies <B>and</B> javascript enabled in your Web browser! Otherwise, you will receive a page informing you that you've been opted-out and won't be profiled, but this will <B>not</B> be the case. --Lauren-- ] So, we end up back at square one once again. Perhaps you feel that the tracking, matching, analysis, and manipulation of your Web browsing, based on the myriad everyday details of your life (reading choices, purchasing habits, and much more) is a great idea! If so, you'll just love the Cogit.com system. Browse away! However, if you consider such activities to be an invasion of your life and privacy, regardless of the extent to which Cogit's data is "anonymized" in the process, then your options are far more limited. You might want to express your opinion to Cogit client sites (to the extent that you can identify them) and of course we can always hope for a saner regulatory environment concerning the use and abuse of your personal information. Don't hold your breath. --Lauren-- Lauren Weinstein <A HREF="mailto:lauren@pfir.org">lauren@pfir.org</A> or <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> Co-Founder, PFIR: People for Internet Responsibility - <A HREF="http://www.pfir.org">http://www.pfir.org</A> Moderator, PRIVACY Forum - <A HREF="http://www.vortex.com">http://www.vortex.com</A> Member, ACM Committee on Computers and Public Policy ------------------------------ End of PRIVACY Forum Digest 09.16 ************************ </PRE> <hr> <center> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A><p> <A href="http://www.vortex.com"><h4><i>Vortex Technology Home Page</i></h4></A><p> <A href="/privmedia"><h4>Radio, Television, and Press Contact Information</h4></A><p> </center> <p> <font size=-2>Copyright © 2001 Vortex Technology. All Rights Reserved.</font> </BODY> </HTML>