ISPs Aim to Use Facebook Fracas to Saddle Silicon Valley with Crappy New Laws
techdirt.com
techdirt.com
It is obvious everywhere that massive PR pushes are going on and astroturfing to a heavy degree everywhere ISP competitors on the advertising/privacy/data space are.
Instead of innovating their way in with products people want and improving their networks so people pay more, the ISPs are trying to win this via bribing for legislation and mud slinging. They bought their way in with the ISP privacy protections being removed under the FCC to the FTC because they have more leverage there.
It is sad ISPs have resorted to this instead of innovating and creating products people want by improving them rather than trying to slow down competitors via bribing and lobbying.
ISPs were once a beacon of innovation bringing in broadband, now they are in the milking it phase.
[1] https://eff.org/deeplinks/2017/03/five-creepy-things-your-is...
[2] https://www.flake.senate.gov/public/index.cfm/2017/3/op-ed-f...
I don't remember this time period. Any examples?
I think when the cable companies started monopolizing the internet and the web because commercialized, that's when we lost a lot of computing's early "innocence".
I'm sure someone will say I'm romanticizing that period, but darnit, just let me.
ISPs are actively holding back on innovation / expansion and that causes less innovation in the US competitively.
> FCC report finds almost no broadband competition at 100Mbps speeds [1][2].
> Even at 25Mbps, 43 percent of the US had zero ISPs or just one [1][2].
[1] https://arstechnica.com/information-technology/2018/02/fcc-r...
[2] https://transition.fcc.gov/Daily_Releases/Daily_Business/201...
Networking is not my area of expertise, so it's possible that some do this already. I guess I always assumed that ISPs had research departments whose members would be involved in drafting network-related RFCs and publishing papers, but maybe that's left to Cisco et al.
The interesting thing is that a huge focus appears to be cost-sensitive. As last mile operators, they have relatively low profit-per-customer (compared to a backhaul operator) with which to build each final physical network link.
Hence crazy stuff like "fiber to the box and short-run copper standard to the house".
For ISPs, the council is that they should be regulated (e.g. net neutrality, data privacy).
For Facebook, Google, et al. the council is that they shouldn't be regulated (e.g. EU GDPR).
I have yet to see a cogent argument justifying that difference. My suspicion is that it ultimately falls down to "ISPs are unpopular, web companies are popular."
When it comes down to it, regulation promoting consumer privacy, price and TOS transparency, and access by new entrants to the market is almost always beneficial... to the consumer.
Because let's not kid ourselves that Facebook or Google are fundamentally different than someone who owns the last mile of your network connectivity.
Their current behavior might be (mostly) benevolent, but the centralization they've engineered means if they want to maximize monetization tomorrow...
GDPR is regulation, so I'm not sure what you're getting at here.
I expect that there would be some similar sentiment if we were discussing a specific piece of isp regulating legislation.
Admittedly, there are other, pro viewpoints expressed, but my takeaway is that there's a sizable libertarian contingent which would rather absolutely have freedom in action than freedom in opportunity.
Which seems... short-sighted.
To paraphrase a (disputed) John Steinback quote, "HNers see themselves as temporarily embarrassed founders of the next Google or Facebook". There's vicariousness to the support, in addition to those with actual employment links past, present, or future (hopefully).
Users choose to use Facebook, Google, Apple, Amazon, Microsoft or whichever "Big Web" services they want.
However, many people in US have absolutely zero choice regarding their ISP, because ISPs have monopolies in the regions they serve, there's no competition. It's inherently not a free market.
I'd argue the opposite. Users can't not choose to use Facebook.
Even if you have never had a Facebook account, even if you have never touched a smartphone in your entire life, even if you intentionally try to eradicate Facebook from your life -- Facebook still has a profile on you, full of data about you, from other people in your life who do use Facebook.
Facebook isn't Facebook.com. Facebook is basically a modern day Equifax, that just happens to run a few apps on the side.
However, your ISPs have the capability to control what you see and do, and potentially snoop on your activity, including private information that you'd never reveal to a friend. You can't say "Hey, that's not cool, I'll use a provider that doesn't do that", because in your area such a provider may simply not exist.
I recognize not associating with anyone who uses Facebook is impractical; however ISPs have the potential to do so much more damage than Facebook (even if they're not doing so right now).
Which is why ISPs fought privacy provisions so vehemently.
ISPs control the last mile, so they're technically free to use DPI, packet injection, etc.
But web companies control the application layer and have much more finely grained ability to instrument and track users (in their experiences or others').
And I'll lay a bet down right now that the killer app of the future is going to be predictive or ml-enabled experiences. Experiences that simply can't be created without the right data, at scale.
And handing all that to scaled web companies without encouraging disruption via market regulation? That terrifies the hell out of me.
Not mostly because I care about being tracked or my data, but because of what kind of market and world "data winner take all" produces in 10-20 years.
Agreed, you might even say ISPs/networks are a utility now, though ISPs seem to not think that.
The difference here is that the ISP utility/commodity is not only a local monopoly with false competition but they are trying to leverage that trusted position to sell you other things and wants to be an ad network with your private data.
Your oil/steel/water company isn't trying to get you to sign up to HBO or some discounted bundle, build an ad network from your data or limiting how much or which way you can use your oil/steel/water.
ISPs could rapidly expand their network and build products people want on top of it leveraging that new capability separate from the ISP on web/mobile/media and compete in the street rather than leveraging their trusted position, but they won't because they are in the bribing/milking it/monopoly laziness phase not the competitive innovative phase.
ISPs resemble those companies that innovated, got top market position then just turned to metrics not continuing to innovate, more like Microsoft around 2006 than Amazon today.
I guess I look at ISPs as acting in their own best interest rather than out of malice.
Essentially every initiative they've tried for the last few decades comes straight from HBR [1]. They aren't bad ideas, they're just almost all anti-consumer.
And their options for innovation are limited (as publicly traded companies). The thing we (HN) would like ("faster internet for cheaper") is the most expensive for them to build.
So naturally they gravitate towards VOIP or mobile content, because those things produce better ROI.
The only way we'd get the ISPs we want is if they were prohibited from being anything other than utilities. Although the irony there is that they'd likely find it difficult to access the necessary capital to build super fast networks. (Or in other words, the blood tracking money subsidizes faster internet connections)
Which is what everybody is doing. Doesn't Amazon try to sell you Prime or Amazon Video or Prime Now or Echo or whatever else they have? Doesn't Facebook try to sell you advertising and promotion services? Doesn't Whole Foods, being just bought by Amazon, now try to sell you grocery delivery service by Amazon? Don't thousand of organizations have branded credit cards, branded insurance policies, branded merchandise, etc.?
Cross-sells are as old as commerce itself. I don't see anything evil in that. What's wrong in offering you a deal? If you don't want it, you don't buy it.
> Your oil/steel/water company isn't trying to get you to sign up to HBO or some discounted bundle
Water company regularly sends me insurance solicitations. Gas companies have affiliate networks with all kinds of cross-sells. I don't buy steel beams so no idea what's up there :)
> they won't because they are in the bribing/milking it/monopoly laziness phase not the competitive innovative phase
Wait, so you're complaining about ISPs offering you various "other things" for sale and at the same time you're complaining they are not offering you enough various other things for sale?
BTW, how you easy do you imagine for ISPs to innovate if they'd be tightly regulated on what they can charge, who they can charge and which traffic they can price in which way - based on fixing the current model of doing ISP business?
To innovate, you need to try various things - sometimes crazy things, sometimes wrong things, sometimes wildly unusual and controversial things. But any unusual move by ISP is commonly seen as yet another step in the evil plot of oppressing their customers - how you expect to see innovation in this space with such approach? If every new website would be considered only as a plot to steal your private data and your money - how many e-commerce startups could survive in such an environment? What if the government would crack a whip anytime somebody builds an unusual site or charges customers using a novel pricing scheme?
A cogent argument: ISPs are your gateway to the internet you can't route around and web/mobile/content companies are built on top and can be routed around.
ISPs could build products people want instead of regulatory capturing their way into the game. ISPs aren't innovating through products, they are lobbying, bribing and legislating their way in. They should go more the direction of Hulu like Comcast did rather than trying to slow down innovation, nothing is stopping ISPs from building web/mobile properties that people want to use rather than fighting against them. ISPs should spend more money on expanding networks not data caps, slow lanes and lobbying to retain their local monopolies. ISPs should get out of the business if they don't want to be neutral networks who protect private data as the steward of your gateway to the network, they want to be content companies and ad/data collectors.
ISPs should basically be focused on what their customers want, like web companies have to do to compete, rather than what the company wants solely. Being local monopolies has gone to their head and they are abusing the position/trust.
Noone but the ISPs wanted their ISP selling their private data, removing neutral network protections, adding data caps, slowing down expansions, adding slow lanes for milking it. Google Fiber is an ISP, they should also be neutral and not selling data. ISPs are the gatway to the network and privacy is important as well as innovations to allow new types of web/mobile/media companies, right now they are trying to limit that.
When ISPs are focused again on being a neutral network that protects your trust and provides competitive speeds with the world, then they will be liked again.
Web companies aren't innocent but they aren't your gateway to the network.
Ultimately, all large companies have turned predatory in the US. We are against bullying but not by large corps apparently.
What is more respectable, innovative products that you want to use or products you are forced to use through authority and mini monopolies? You'll find your answer.
We disagree on a core premise then. I contend that at scale, web companies can't be routed around.
At minimum, when I have to run blacklist filters to avoid my third party web traffic ending up logged on Google or Facebook servers, something is wrong.
When the majority of new tech is being acquhired and integrated into existing platforms (e.g. WhatsApp & Google Docs), something is wrong.
Your conclusion sums up my thoughts as well.
> What is more respectable, innovative products that you want to use or products you are forced to use through authority and mini monopolies?
But you just admitted you can route around them. Let me know when you route around your ISP.
Your line of thinking is basically the ISP narrative of "Hey web companies are doing lots of bad stuff, why can't we? And why can't we do so without building any product or anything anyone wants?"
ISPs could build or help fund products that protect your data from Facebook/Google etc more easily, and those will pop up independently. But ISPs don't actually want to protect your data, they lobbied to get access to it without innovating or building products, they just want your data not them, it is a dangerous game that could really backfire on them.
Right now?
I can VPN to Switzerland. And I can use a TLS encrypted channel to most of the Internet.
Until ISPs start banning / slow laning encryption or mandating ISP-controlled computers, hostile network links are a solved problem.
Encryption moots all the additional value they're trying to create.
That's essentially their play with mobile-accessible first party content players. Make it easy / mandate it, and people will happily walk into the walled garden where they can be watched.
My evil genius side tells me that ISPs have already been developing VPN clients and probably own many third party ones through shell corps and obscuring/finagling ownership offshore even. In the last few years some have really taken off and gotten lots of funding and advertising and fit this model, I won't name names but I have my conjecture suspicions on a handfuls of them.
Sketchy or poser VPN clients can say they don't keep logs but they can easily transfer it off to the ISPs which they are now LEGALLY allowed to sell off and share.
Because VPN clients are apps installed on devices (mobile/desktop/tablets etc) they can basically do anything to get that data including scraping destinations and content from unencrypted browsers and apps once the handshake is complete and decrypted.
You are thinking naively or aren't thinking predatory or evil enough to think like ISP bullies yet. ISPs didn't bribe and lobby HARD for over a decade removing privacy protections and neutrality of networks just to be blocked by encrypted transmissions.
ISPs have also been very friendly to surveillance overreaches, they probably cut deals for using that data and since there are so few and your gateway it is easy. [1][2].
As for the specific point, in my threat model ISPs aren't competent or rewarded enough to poison VPN clients.
Comcast may be anti-user, but I don't think it's NSA-capable.
My overarching belief is that there are technical solutions to network adversaries. There are fewer (and sometimes no) technical solutions to application adversaries, when I desire to use the service. (And see my previous comments about some large services approaching unavoidable status)
Your ISP will know popular VPNs and will definitely get in the VPN client/app game.
> Comcast may be anti-user, but I don't think it's NSA-capable. My overarching belief is that there are technical solutions to network adversaries.
You have much more trust for your ISP than most in tech.
> There are fewer (and sometimes no) technical solutions to application adversaries, when I desire to use the service.
You can use or not use the services at the app layer full stop.
Meanwhile your lack of trust for the app layer being market regulated eventhough the the application layer is more easily blocked and competitive seems biased towards ISPs.
Yet you don't seem to mind if ISPs are in reselling your private data that you PAY them to secure, and lobbied to get that additionally entering the VPN game, which they are just not publicly yet.
It is a strange position to take if you are being objective about it, that the network is more easily secured than something that runs on the network. I completely disagree and we'll just have to agree to disagree. ISPs have no reason to earn your trust and they have no competitive threats to keep them honest. There can be a #deletefacebook movement because it is possible, there can't be a #deleteyourisp movement because you simply cannot, that is why they are bullies to the customer.
ISPs will also be the brownshirts that implement the government firewall that is coming due to insane overreach by authority. ISPs can't wait to further their monopolies buddying up to the authority [1]. Definitely not going to be able to route around that one, 'for your safety'.
ISPs want the whole internet to be like hotel wifi.
[1] https://www.wired.com/2017/04/internet-censorship-is-advanci...
Technically, "Big web" would be perhaps a structural oligopoly [1] or you could say the market has monopolistic competition[2]. they're protected by the network effect, they provide unique products that are hard to duplicate. They are not actual monopolies as economists define them (and not really monopolies in the popular understanding either).
But ISPs are straight, government-granted monopolies [3]. Such companies have essentially one incentive, be good at influencing regulators and legislators.
Glibly equating these market structures distorts the situation.
As to why ISPs should be regulated in the name of neutrality and privacy? Well, they already are highly regulated. They are creations of regulation. The public damn well should get something out of that regulation, especially, the regulation is all about ameliorating the abusive situation their (actual, not pseudo) monopoly position invites.
[1] http://www.economicsonline.co.uk/Business_economics/Oligopol... [2] https://en.wikipedia.org/wiki/Monopolistic_competition [3] https://en.wikipedia.org/wiki/Government-granted_monopoly
I'd be curious to know why.
I would strongly disagree with this characterization of the market.
From joe_the_user's link [1] on oligopolies, every item under Barriers to Entry: Artificial Barriers applies to large, network-effect web companies.
Google Takeout is probably the guiding light on fighting this, but were Google no longer in a dominant market position I'm not confident it would remain a corporate emphasis.
... Ironically, this same debate (regulating ISP vs edge provider) just came up in Zuckerberg's Senate questioning.
ISPs are more akin to power companies, which provide vital infrastructure in virtue of government fiat.
I've also never stated that ISPs shouldn't be regulated.
In fact, I'd prefer they both be regulated in order to promote open access to the market and more disruption.
So I ask again, why would we not want to regulate structural oligopolies?
Which is to say, regulation might be justified in a less free-market oriented country, like France, on equivalent grounds, but there is a substantive moral and legal distinction to be made in the minds of many who enjoy a free market economy.
And no, Netflix is not a straw man. My argument applies just as well to Facebook, StackOverflow, Ebay (which is regulated as a commerce platform), Google, Amazon, etc., as it does to Home Depot, Walmart, etc. etc.
We default in these cases to not regulating.
That's nowhere in my argument. I merely pointed that government grant monopolies pretty much automatically should be regulated since they are virtually extensions of government fiat already ("we" give Comcast etc a monopoly on placement on phone poles and similar stuff, we should get something for that) and that this situation isn't comparable to monopolistic competition.
If you're curious, I think actual private companies should be regulated when their actions involve negative externalities [1] in their production process - chemical companies should not be able to dump toxins into rivers, broadly greenhouse gases should be limited, etc.
One might argue that Facebook selling people's data to the highest bidder is another kind of negative externality. I would argue that a better outcome is consumer education, gradually people learn whatever they post online has a significant risk of being public. Similarly, it's better for people to learn not to be manipulated by simple schemes than to imagine a firewall against the manipulations of evil people. Just consider that a firewall against manipulations of evil people would let in the manipulation of "good people", right? Perhaps that's the whole idea.
Comcast doesn’t have a monopoly on placing things on utility poles. Poles are mostly owned by power companies or the local phone company, and those entities are required to lease pole space to everyone at non-discriminatory rates.
Except they aren’t and haven’t been since the 1994 cable act made granting monopoly franchises illegal.
The natural, physical costs to creating an ISP creates a ready parallel to other, established natural monopolies. Electrical and water suppliers spring readily to mind.
Big Web companies do not have the same natural barriers to entry, which suggests that other models may be available.
The biggest contention with the GDPR is it applying to small companies, because the amount of work to comply with it costs a lot. And the penalties being scaled in a way that only makes sense to large tech companies.
TBH, small under 10 engineer companies are are rarely privacy threats. And Sue's maid service who uses excel spreadsheets to track their business is not a privacy risk either.
After all, one single developer can make a popular app that reaches millions. (If you want an example, the Muslim Pro app has over 40 million downloads and is made by a team of less than 5).
Possibly google fb et all ought to start lobbying for LLU and for full competion in the local loop.
I need the protection. We don't need to go and start creating huge regulatory bodies around various industries, pitting one against the other. Make it so my information can't be captured -- or it can't be shared. Or make it so that keeping any information of mine past 30 days is a felony.
Then no matter who the businesses are, people can sue them and owners can go to jail.
Instead of trying to figure out exactly where the tech is right now, and how things might change? Bullshit. Protect me. With enough protections, the rest of it will work itself out.
Having said that, try to avoid phrases like, “the rest will work itself out,” which will turn off virtuallly everyone who doesn’t think exactly like you. Remember that this is now an issue the public at large is very interested in, and shape your words for public consumption.
Anyhow, I do agree we should be protecting peoples right to privacy and unfettered access to the internet.
The enemy of getting this fixed is complexity. Once we start targeting individual companies, types of internet connections, or hardware devices? We've lost. It's all over.
It's not these things don't need fixing, it's that we have about ten words or so to put into a slogan. That slogan needs to be repeated over and over again. I am a firm believer in Net Neutrality -- but that's not the right slogan to march under. If we get Net Neutrality and everything else stays the same, it's a complete loss.
By shifting the focus to each user, we can talk more directly about benefits. And by making penalties perhaps draconian, we can leave the management of the complexities to the vendors, where it belongs, instead of the public debate, where the lawyers win.
Privacy and anonymity are much bigger fish to fry than whether YouTube costs more than Instagram. If we could come up with a simple slogan to cover both of them, sign me up. Otherwise? We gotta stop everybody from putting telemetry on every detail of our lives.
Before the 60s in the U.S., there was pervasive and deeply-held racism, but most people didn't see it, even those who wanted to be morally superior to everybody else. (See the movie "The Help"). Many times I think of what that issue is for us. What will we look back on in 50 years as being barbaric and evil? What is our current equivalent to the Civil Rights campaigns?
It's storing tracking data about the minute parts of people's lives. We will either morally overcome this or we will enter a new Dark Ages. There's no middle ground. Here. Here is the moral battle.
ISPs don't need to collect our data to provide service, yet they do. Content providers don't need to track us, yet they do. They both need to be addressed, or as you say, "we've lost." So, Privacy Now! Or some better clarion call.
https://arstechnica.com/tech-policy/2017/10/verizon-asks-fcc...
https://arstechnica.com/tech-policy/2017/04/trumps-signature...
* The US isn't immune at all to regulatory capture [0]
* It's highly likely there are already existing regulations and laws that cover this but merely aren't being enforced (in which case, why would these new regulations be enforced either?)
* ISPs undoubtedly have a huge conflict of interest here
Which isn't to say that new laws are always a bad idea, more that they should be a measured response and not a knee-jerk reaction spawned by bad actors.
It's also far easier to point out badly crafted and/or ill-intentioned law proposals than it is to create effective and fair legislation, but both are necessary for the process to move forward.
That is, I think many people would agree with you (one need only read the comments on any of the threads about Equifax), but think this is basically an untenable place to start from.
0: https://en.wikipedia.org/wiki/Regulatory_capture#United_Stat...
The fact that FB can't give a straight answer, and it has to be dragged out with revelations of increasing scale, is a big part of why public sentiment favors more external regulation.
I guess I'd disagree with that. Many environmental regulations are highly defensible, for example, especially when they arise in light of new evidence.
I could also be wrong, but I don't believe most environmental regulations are proposed by powerful, monopolistic competitors of oil companies (which is a big part of what makes this proposed regulation untenable).
> Self-regulation is only a solution if the industry at large addresses the concerns early and acts in good faith
I don't think anyone's really proposing this as an alternative. The point's more that repealing a bad law is significantly harder than creating it in the first place, so it makes sense to be diligent.
Similarly in tech, many of the people arguing against regulations are economically incentivized to minimize the regulations. FB knew exactly what they were doing, third party developers at the time sounded the alarm [1] about how FB's API structure guaranteed that abuse would happen. What we're seeing now is the digital equivalent of BP Deepwater, where people warned about the safety before the incident and no one cared.
[1] https://www.eff.org/deeplinks/2009/12/facebooks-new-privacy-...
I don't think that makes those regulations un-defensible. It just means there are tradeoffs.
Maybe we're just disagreeing about what the word "defensible" means in this context.
> Similarly in tech, many of the people arguing against regulations are economically incentivized to minimize the regulations
Except in this particular instance, the people arguing FOR regulations are economically incentivized to maximize the regulations. That's what makes this particular proposal untenable.
Outside of the renewable energy industry, the people pushing for environmental regulations don't have much economic incentive to do so (other than some very trivial ones, like that the economy will suffer if the planet declines).
Legislation not passed by a suitably large majority should automatically come with a 10yr sunset provision.
<User> connected to <IP> and transferred <this much data> at <date/time> just isn't that valuable compared to the highly detailed usage and interaction data gathered by GA and similar services. Even if you ignore the DNS point and add "<User> looked up <hostname>" to the above, it still doesn't come close to what GA/etc are able to collect.
Edit: Why the downvotes? Isn't this supposed to be a site full of technically skilled people (many of whom work in "ad tech") who should know that what I said is accurate? Would any of the downvoters care to explain themselves instead of using downvotes as an "I don't like this post" button? This site is starting to feel more and more like Reddit.
You've also chosen one very specific part of my post and used it to attempt to claim the entire post doesn't make sense. What about the rest? Even if you ignore the entire DNS-related portion of my post, there's no way you can claim that ISPs are able to access anywhere near as much data as GA/etc when users are mostly accessing encrypted sites.
The ISPs are already playing a dangerous game. Unlike their buddies at the FCC, congress is elected, and with enough popular pressure (and midterms coming up), they can be persuaded to do the right thing.
It's worth raising a question -- do the executives at AT&T/Comcast/Mediacom/Verizon really think that the public is on their side?
I am not afraid of regulation but its an annoying burden to keep big players big, and small players non-existent.
Most people do not have the money or motivation I have, and those people lose out because of regulations.
Never let a good tragedy go to waste.
If you do regulate you force bad players to work harder to keep doing bad things.
I understand that regulation has negative side effects and unintended consequences. But truly free markets lead to child labor and depressed worker wages. It's impossible to craft perfect regulations, but it's implausible to assume "everything will just sort itself out if we let the free market be completely free" since that has literally never happened on a broad scale.
I support people's privacy - from all-of-the-above.
The "ISPs are bad, therefore Silicon Valley should be allowed to continue running roughshod over users' privacy" narrative is really idiotic. It tries to present this as a situation where we have a choice of either regulating ISPs, or regulating privacy-invading Silicon Valley surveillance corporations, but not both.
Edit: I just read the full article, and yes maybe my assumption wasn't charitable. That said, I had just got done reading this article where Mike Masnick encourages us to continue giving the benefit of the doubt to someone who has repeatedly violated trust for more than a decade, which left me assuming it would just be more of the same.
https://www.techdirt.com/articles/20180408/22400539590/faceb...
Maybe read the article next time and not make such a low-effort comment.
..and I say this as someone who used to be a big fan of that site. It's disappointing.
The use of the FB/CA "scandal" to promote knee jerk legislation that burdens the tech industry is just tech being on the receiving end of something they have no qualms about advocating for when it happens to a different industry.
The only downside I see is that governments will use this excuse to bring more censorship and anti-encryption laws, too, and I hate that Silicon Valley companies put is in a position where we have to either put up with their crap or side with governments and get some bad internet laws passed.
But right now, I think it's time to rein in on the Silicon Valley companies over their abuse of user data. Then we can deal with the abuse of user data by ISPs, data brokers, and everyone else. Ideally, this would be solved with a GDPR-like law, so that even ISPs "lose" in this scenario, and the consumers win. If we're lucky we may be able to stave off the government from trying to put an anti-encryption bill into the whole thing.
There is a lot of Silicon Valley right now whose core business is doing the things that are very likely to be regulated out of existence.
So I'd say self-regulation isn't an option at this point, as "self-regulation" is asking Facebook to return to unprofitability with no prospect of profit in the future, the destruction of huge swathes of the ad industry, any number of other companies based around data mining and selling and abusing information asymmetries... there's no way the wolves are going to self-regulate themselves into dogs.