Eric Schmidt: "If you have something [to hide], maybe you shouldn't be doing it"
theregister.co.uk
theregister.co.uk
Perhaps he is saying, "The fact of the matter is that we're required to retain and release lots of information. If you don't want that information being passed around, you probably shouldn't give it to us. Sorry, we do the best we can under the circumstances."
"If you have something that you don't want anyone to know, maybe you shouldn't be [googling] it in the first place."
If staying in business and out of the cross-hairs of the DoJ's anti-trust division means you have to play ball with some data retention "requests," then you're probably going to rationalize a million tenuously logical reasons why that's the right thing to do.
When the government sees it hitting their tax take they will listen
When that day comes, insurance companies are going to say, "We'll make it worth your while if you tell us who is googling for 'breast cancer;' 'diabetes;' 'melanoma.'" At some point in the future the major shareholders (think Carl Icahn or some such character) will make it awfully hard to say, "no." Just a more direct way to monetize the data.
As I said elsewhere here, google should, if they don't want to be evil, allow us to opt for a poorer search experience and not keep our data.
And I don't buy your slippery slope argument. Sure, Google could sell your search patterns. And your ISP could sell your browsing habits. And ask.com's AskEraser feature could all be a lie and it too could be selling your queries...
Ultimately if you don't trust Google with your search queries, then you should take Schmidt's advice and not query anything embarrassing.
Agreed. I don't believe in inherent evil. I do believe that certain business structures lead to behavior that some observers would consider "evil" and others would simply call "upholding fiduciary responsibility." But that's a discussion for another thread.
And I don't buy your slippery slope argument.
And I can't make you. But you're a fool if you dismiss it out of hand. The Facebook beacon debacle is a shiny reminder of what can happen if we stand by and let it.
I have no problem with Google's handling of my information at this time. In particular, I'm not worried about embarrassing queries as much as an elderly person you love, for example, being denied insurance coverage (or only given coverage at exorbitant rates) because the company is able to argue "pre-existing condition" (or some other claim of exclusion) from private information.
But if this hoopla is unnerving, wait until people find out how supermarkets sell loyalty card information!
Or take my advice, sidle up to an open WiFi network (or if you are really nefarious, crack a "secure" one--bet that won't get logged), load up a flash-based Linux distro with no means of storing anything permanently, and query till your heart's content. If that's more privacy than you need, how about Private Browsing mode, which is in every major browser now (except IE? dunno.)
Sheesh!--the hue and cry over Google and privacy completely overlooks the fact that the Internet is the most anonymous means of exchanging information ever created. Yes, unfortunately legal and profit motives mean your online activities are, to some extent, recorded. But breaking the link between "you" and what you do online is trivial, and the more your privacy matters to you, the more thoroughly can you achieve that separation.
And retaining for policing/security reasons doesn't mean you should use the data for other privacy-invading targeting.
see the Yahoo leak from cryptomeme http://cryptome.org/isp-spy/yahoo-spy.pdf
Not that you could tell from the article's headline. Either The Register is being sensationalist, or just didn't see it in those terms.
As more practical advice, if you're doing something you don't want others associating with your IP address, use an anonymizer you feel you can trust.
Finally, a reasoned response. I came in here just to say this; Can't believe what an uproar this is causing...
The article links to a story about Google blocking CNET reporters for a year after they used Google search to find details about Schmidt: http://money.cnn.com/2005/08/05/technology/google_cnet/
Really, all this "privacy" nonsense is for the little people, not important folk like Eric Schmidt, anyway.
To be clear, this is a story about Google's press representatives not speaking to CNET reporters -- when I first read it, I thought you meant that Google blocked CNET's IP address. Still a very petty response.
All of these guys are hypocrites; when will you guys realize this? Oh, and that gas-guzzling 767 with the private shower is being used to "create good in places like Africa" (or whatever they had said), right?
I think a lot of people are having a knee-jerk reaction thinking that this guy is giving moral advice. What I see here is just a statement of fact: if you don't want something to ever possibly be known about you, don't put in online.
Readers of this site should know better than the general public that there is always a risk of data getting into the wrong hands. Even if you trust the host. Even if you encrypted the data. etc.
The problem is not that Google stores your data. The problem is that disclosing that data has social and legal consequences. Why shoot the messenger?
I am not worried about search / email / etc., though, I am worried about Analytics. I would like to be able to globally disable it. (NoScript solves this problem, but Analytics should be opt-in, not opt-out-by-blocking-Javascript.)
Judgement matters... If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place... If you really need that kind of privacy, the reality is that search engines - including Google - do retain this information for some time and it's important, for example, that we are all subject in the United States to the Patriot Act and it is possible that all that information could be made available to the authorities.
Schmidt's statement is clearly pragmatic. One might even argue there's an implied criticism of laws like the Patriot Act. Could he have phrased it better? Yes. He shouldn't have said the sentence in question. But next time, actually read/watch the primary source so you can get the full picture. His closing remarks completely change the tone of the conversation. Are you really going to let The Register do your thinking for you?
This is typical Internet drama. We have seen it a million times. I give the guy the benefit of doubt since this wouldn't be the first occasion some journalist taken a sentence out of context.
But the bigger news may be that Schmidt has actually admitted there are cases where the search giant is forced to release your personal data.
Oh, you mean Google follows US laws? They don't participate in acts of civil disobedience in a suicidal effort to protect our privacy!? Eeeevil!
> Page generated at 17:55 on 15 October 2009 (PDT).
Pretty silly thing to have said though.
The right to privacy from the government is a logical consequence of the fact that the government is the servant of the people, put in place to protect and promote the people's interests. The Declaration of Independence describes our reason for instituting a government at all:
"We hold these truths to be self-evident, that all men are created equal, that they are endowed by their Creator with certain unalienable Rights, that among these are Life, Liberty and the pursuit of Happiness. — That to secure these rights, Governments are instituted among Men, deriving their just powers from the consent of the governed, ..."
We need no justification for privacy from the government and its proxies. The most upstanding citizen still has the right to keep his affairs private. Even people with nothing to hide have the right to hide it.
We explicitly give the government the power of search, but only when we (through a judge) agree that it's necessary. Without that agreement, they're not allowed:
Amendment 4 - Search and Seizure. Ratified 12/15/1791.
"The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized."
We explicitly restrict all other powers of government through the 10th Amendment:
Amendment 10 - Powers of the States and People. Ratified 12/15/1791.
"The powers not delegated to the United States by the Constitution, nor prohibited by it to the States, are reserved to the States respectively, or to the people."
We do that because we recognize the tendency of unchecked governments to gather more power to themselves. When a government becomes more powerful than its people, the people are slaves who have lost "the Blessings of Liberty" as listed in the Constitution's Preamble.
Government is a dangerous tool. It's the people who should be watching the government, not the other way around.
Rather, it seems more likely that the feds would be knocking on Google's house and seizing a portion of their "papers" that recorded the times that I've come over to visit. I don't think I own their log entries for my searches. Moreover, does a corporation get protection under that amendment, and even if they do, there's already the "warrant" mechanism.
Also, the government is not demanding data from Google because they're interested in Google; they're interested in you.
I was previously on the fence about trusting Google with all my data and personal information. This one idiotic sentence from the CEO makes the choice to stop using Google services a lot easier for me.
When I use google I know that there is some probability of the results getting hacked or leaked or subpoenaed or looked at by a google employee trying to improve search. However the expected value of that embarrassment (probability of someone I actually care about seeing it X how embarrassed I would be) is very low, and, for me, doesn't even come close to outweighing the benefit provided by the suite of google products. On the otherhand (and I think this is Erik's point) if you are using google to do something that would legitimately land you in jail the expected value of bad-stuff is much higher. (Actually both the probability of getting subpoenaed and the level of bad go up).
I feel that there is this idea that everything you do everywhere on the internet can and should be totally private and that any chance that it isn't is seen as removing a fundamental right. In my opinion the internet is more like a trail out in the middle of the wilderness: usually no one sees what you do and its probably ok to have sex with your girlfriend without anyone knowing, but if you start burying bodies out there the FBI can and will use that against you.
How about in a divorce trial, when character is at issue, and you are fighting for child custody rights?
More generally, the argument of as long as you aren't doing anything wrong, why should you be worried has been debunked, I think rather convincingly in places like http://www.schneier.com/blog/archives/2006/05/the_value_of_p...
edit: someone submitted the link a little while ago: http://news.ycombinator.com/item?id=984088 hopefully the discussion can continue.
Never in my life had I imagined writing an email to a VP stating that I had just burned a CD of kiddie porn for her only to receive a terse "Thanks!" message back. We did this on a dedicated machine which could easily be wiped/re-imaged.
Cases like child pornography are the wedge justifications for putting into place controlling mechanisms, and cheered on by lots of well-meaning people. But once the controlling mechanisms are there they can be used and abused for political and commercial gain by police both public and secret.
The inherent non-visible, automatable and centralizable nature of such controls makes them more powerful than any real-world analogue. No large conspiracies, long chains of command or big bribes for armies of cronies are needed for historically unprecedented manipulation of the futures, careers and freedoms of people and companies. I don't think one can trust the law to catch up or to be effective in restraining those with the power. The bogeymen of terrorism and child molestation are more than effective enough to frighten the councils of old men who largely control court decisions.
IMO, decentralization and transport encryption, to the point that real-time centralization of control is infeasible, ought to be baked into the design of such a vital infrastructure. The privacy problems are going to get worse. We're still waiting for the big scandal, the hidden nuke test that went wrong, which will make this need obvious to the public at large. If we're unlucky, we might never see that scandal.
For example if you plan to murder someone you better not google for "how to hide a corpse" :)
My concern is about the people in power abusing their power to get information about their main rivals. Think "Watergate". Except without the physical breaking and entering.
There are legitimate reasons why people who have done nothing wrong would want what they have done not revealed to those in power. My concern about our descent into becoming a police state is that the checks and balances that should protect those people are disappearing.
Mr. Braithwaite? We're investigating a co-worker of yours for possible misuse of computers for XXXXXXX. Can you please tell us: have you ever observed him doing XXXXXX? Do you think you could have a look at his computer the next time he takes a bathroom break and tell us if you see any signs of XXXXXX on it?
"That sounds pretty bad but to be perfectly honest, I'm very comfortable with your ability to gather surveillance information using normal means, including obtaining a search warrant for his computer. I'd like to consult a lawyer before answering any questions about anybody, thank you very much. Please excuse me..."
Mr. Braithwaite? Let me see here... Oh yes, you're they guy who likes to look at pictures of XXXXXX. And I see here you purchased the following toys... Do you keep those in the house where your... let me see... two kids visit? Does your ex-wife's lawyer know what kind of movies you like to watch? Would you like her to know? Sit down please, we have much to discuss.
You don't want to get all legal with us and demand a lawyer, do you? You don't want us to have to bother with a lot of troublesome search warrants, do you?
If he was against it he would have said something like "if you like your privacy don't put it on the internet". Instead, he said "you shouldn't be doing it in the first place".
This single phrase has a strong connotation that you are doing something bad. Schmidt doesn't strike me as being dumb enough to say this without knowing exactly how the public would interpret it.
From Wikipedia Article about Google Chrome: Chrome sends details about its usage to Google through both optional and non-optional user tracking mechanisms
"...we are all subject in the United States to the Patriot Act..."
How many of you are actually concerned you'll receive a subpoena from the feds to reveal you porn viewing habits?
Universal sousveillance is the future, but since you'll be less and less able to tell whether you're in the future in this sense, acting as though you are might be prudent. :)
If this anti-google sentiment is to be believed and they are marching the corporate road to evil, I shudder to think of the information that could be inferred from collective search pattern trends.
I just noticed that the example had not been given yet and I think it's an important one in this debate. It is a seemingly benign, if not entirely altruistic, case study. What is the consensus, smoke and mirrors, or is there a real social value to be gleaned [2] from the harvest of the vast data swarm?
[1: http://www.google.org/flutrends/] [2: http://en.wikipedia.org/wiki/Gleaning]
Imagine putting that on Youtube.
(EDIT: yes, I know they own Youtube. Of course they'll take it down. But it would be reposted on Vimeo and the like, and the publicity for the takedown would cause the Streisand effect).
Imagine that getting taken down from Youtube in record time.
http://www.schneier.com/blog/archives/2006/05/the_value_of_p...
Mostly, because we don't know how to confront them. I certainly don't know how to patch human nature so that power doesn't corrupt. So, in the meantime, I'll take privacy, thanks.
there is a much deeper, more philosophical reason for instituting a right to privacy than just the fear of corrupt governments.
humans are adapted to signal certain values for the sake of group cohesion. we have a "public persona" and a private life. this isn't something sinister, it's a way of coping with the demands placed on us by our interaction with others. we know in practice that depriving people of the ability to hide things from each other is extremely detrimental to their psyches. most importantly, it is detrimental regardless of the triviality of the things kept secret.
when deprived of the ability to keep secrets people are forced to be "always on". they must maintain the "proper" signals at all times. this is extremely draining (yes, even for extroverts, eventually). the things we like to signal to others aren't necessarily the things that make us most happy.
3 days ago in this case.
http://www.reddit.com/r/technology/comments/ab8jt/googles_ce...
It's like a very slow echo.
Idea: A new competing search engine could release a General Privacy Agreement along with their search service.
https://www.ixquick.com/eng/protect-privacy.html
They claim to be "The only search engine that does not record your IP address."
I like that they don't record your IP, and that they offer https access. Hard to say whether they really do what they say, but they do have the European Privacy Seal, for whatever that's worth.
I'm using it now to see how I like it, so far so good.
I think that most non-tech people would be very surprised if they realized how much personal data our corporate overlords have collected.
I don't want employers, grandparents, and the government to have access to my private and personal life.
No reason everyone should know movies, books, music, games, sexuality, political beliefs, and everything else about me.
the more people who realize how little privacy they have left the better. it's the only way the trend will be reversed.
I'm definitely not a fan of exposing data that people wish to keep private. It seems conceivable, though, that privacy is an idea that won't survive time and technology.
What's going on here is a redefining of personal data as "private but without privacy." While the distinction itself is somewhat subtle, the ways this redefining is being carried out are anything but.
In Eric's case, he has never exactly been known for his subtlety of thought, has he…?
Hypocrite.
There are plenty of legitimate, even honorable actions which are threatened by poor privacy policies.
It is very easy to get caught with this type of argumentation. It is wrong.
Keywords may actually reveal a lot more that one would assume, and prone for des-interpretation as well.
http://news.ycombinator.com/item?id=982838
Though unfortunately my submission didn't get as many upvotes for whatever reason.
The message is simply that any information on the Internet is subject to the risk of exposure. We use credit cards knowing that the risk is very low - but we all know its possible your credit card number will be intercepted, misused, etc. This is a fact, not a question of morality.
Telling us what 'personalized' is about. Not doing better searching, doing better selling. Find the people with a little extra money, 24/7, and offer them something they might go for, 24/7, whether they need it or don't. Helping them stay one paycheck away from broke.
Problem solved!
He mentions the Patriot Act and I would paraphrase him as throwing up his arms and saying "Hey, we're subject to those laws just like you! We have no choice!" Alas, Google does have the choice and unique opportunity to challenge those laws but it appears that they simply decline. That is why I think he's preparing for Google to be outed vis a vis the extent of its cooperation with government.
Next, asked about privacy concerns, he immediately reframes the question as if it were a question about government surveillance - neatly ducking any issues about private surveillance. Bartalomo fails to follow up.
The issue about private surveillance is significant in mundane (but serious) ways and in more speculative, cultural crisis kind of ways.
A mundane concern is the question of whether or not Google "leaks like a sieve". For example, if someone at Google dislikes me, how hard is it for them to scratch around for dirt in my (nominally) private information? If someone at Google is a friend or (black market) business partner of a recruiter at some other firm to which I apply for employment, is an unauthorized background check possible? Do such things happen? It's hard to imagine that they are technically hard to prevent....
A speculative but serious cultural crisis concern regards Google's deliberate and accidental implementation of what we could dub behavioral tracking and targeted manipulation. For example, let's suppose that one day I get a crazy suspicion from something I read on a blog. I think that there could possibly be a vast conspiracy and that my best chances for survival might be to liquify all of my assets and invest everything I have in personal caches of peppermint candy. I don't fully believe it but I start researching via Google. Google's AIs quickly figure out that I linger on ad-carrying content from backers of this conspiracy theory and, pretty soon, that stuff is at the top of all my searches and predicts 40% of the ads I see. From my perspective: that stuff is "all over the Internet" and I begin to wonder if my neighbors aren't in on the conspiracy since none of them talk about it. Pretty soon, Google has built me a personal, private channel of conspiracy news and peppermint candy ads. I sell my house, leave my family, cash out my retirement plan, by a van to live down by the river, and fill up a rent-a-store spot with boxes of candy.
Now, that same personal bug - my vulnerability to a conspiracy theory - may have been there all along. The change here is that back in, say, 1975 - the biggest mistake I might make is to subscribe to a few newsletters and magazines, perhaps hedge by buying a dozen boxes of candy rather than a gross. Meanwhile, the TV, the radio, all these other things are feeding me counter-evidence to the conspiracy and I'd eventually have a much better chance of coming to my senses.
But Google is unprecedented in its comprehensiveness as a source of monitoring and manipulating my attention. Like the Vegas slot machine that convinces me (wrongly) that I have a system to beat the slots because it pays out 49% of the time, so long as I pay it with my recognizable frequent-gambler credit card -- Google's AI can potentially really mess a person up.
That is a privacy concern. That's a privacy concern directly raised by Google's stated intentions of dabbling in behavioral tracking. And it's a concern that Schmidt deflects from attention by turning the question into a question about government surveillance.
Now, things can get even worse. Suppose that Google's AI doesn't cause large numbers of people to drop out of society and load up on peppermint candy but that, shucks, little discrete tweaks here and there can use the same behavioral science effects to, say, influence the next election for the local dog catcher. And one of the candidates for dog catcher has a slush fund, and a friend at Google.... Or, forget the friend at Google... suppose the dog catcher candidate has a friend who, this year at least, has found some underhanded tricks that currently work really well for SEO....
The ethics of running search and ad placement are unprecedented and difficult and hinge very much on how we update our understanding of "privacy". They hinge very much on the question of privacy vs. behavioral tracking. Schmidt appears uninterested in talking about these issues and very much interested in deflecting attention away from them.
At most only slightly exaggerating: we're all analogous to lab rats, now, in Google's massive-scale human-subject psychological research project with unprecedented amounts of automated surveillance and stimulus production. With money and power hinging on the outcome.
Bullshit argument for invading privacy. I prefer to hide my genitals from public view.
Since he has nothing to hide, let's set up a streaming webcam outside his house, zoomed in on his bedroom. Or better yet, let's implant a nano-camera up his rectum.
(see voter privacy)
Having a filter on your DNS client that excludes Google-related IPs might be more thorough.
That would be awesome!
What do you call that, if not ensuring privacy? The only thing different is that your level of trust is lower than others.
Because of that, this is a bad example.
Instead, we should be using an example of something which doesn't require any special facility, we have no cultural taboos against displaying[1], and isn't illegal, but which people want to hide, anyway. I'm not sure I can think of anything.
[1] As someone who was raised fundamentalist Christian, I can assure you that habits learned in childhood can still have lots of force in adulthood, even if you no longer agree with the reasons for them.
I believe it is universal, although I'm willing to accept there may exist cultures that don't have this desire.
In any case, everyone knowing everyone else's state of health sounds ok, until i think about people i don't like. It's a little too enticing to know about how X is sick, and i don't want X to know that i am sick.
Maybe this is to abstract to be useful.
This is explained very well in nfnaaron's post http://news.ycombinator.com/item?id=983997
http://www.computorney.com/anonarticle.htm
which concludes that "anonymity in cyberspace is a fundamental underpinning of democracy"
In 1995 the Supreme Court struck down an Ohio law that required the disclosure of personal identity on political literature.
http://lcs.www.media.mit.edu/people/foner/Essays/Civil-Liber...