They have no Idea what they are doing … Prof. Hendrik Speck Prof

Transcrição

Data Protection Commissioner. Principality of Liechtenstein.
Prof. Hendrik Speck
Prof. Hendrik Speck
University of Applied Sciences Kaiserslautern
They have no Idea what they are doing …
Third European Data Protection Day.
January 29th, 2009
Vaduz, Principality of Liechtenstein
Fachhochschule Kaiserslautern – University of Applied Sciences
Prof. Hendrik Speck
Social Networks
Kaioo.com: Nie wieder StasiVZ! Video. 2008.
Source: Stasido MC. Kaioo.com: Nie wieder StasiVZ! Die Wahrheit über StasiVZ. YouTube. 3 min 31 sec.
Available: http://www.youtube.com/watch?v=B92sDagwZ1I
Prof. Hendrik Speck
Social networks and other companies’ “aggressive”
attempts to target advertising according to users’
search behaviour risk damaging the internet
industry’s reputation.
Sergei Brin and Larry Page, Founder of Google
Source: Edgecliffe-Johnson, Andrew. Google founders in web privacy warning. Financial Times. May 19 2008,
http://www.ft.com/cms/s/0/9a877256-25de-11dd-b510-000077b07658.html
Introduction
1.
2.
3.
4.
5.
6.
Social Media
Social Networks and Privacy
Data and Statistics
Social Network Analysis
Implications/Conclusion
HelloWorld
Prof. Hendrik Speck
Social Media
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Profiles and Platforms.
Social
Video Sharing
Social
Bookmarking
Social Photo
Sharing
Social
Community
Social
Encyclopedia
Social Music
Community
Prof. Hendrik Speck
Social Networking Statistics
Social Media Audience Worldwide. 15+
June 2007 vs. June 2008.
Total Unique Visitors (000)
Total Internet
Social Media
1.
2.
3.
4.
5.
6.
7.
Facebook
MySpace
Hi5.com
Friendster
Orkut
Bebo
Skyrock
Jun-2007
778,310
464,437
52.167
114,147
28,174
24,675
24,120
18,200
17,638
Change
Jun-2008
860.514
580,510
11 %
25 %
132,105
117,582
56,367
37,080
34,028
24,017
21,041
153 %
3%
100 %
50 %
41 %
32 %
19 %
Source: ComScore. Social Networking Explodes Worldwide as Sites Increase their Focus on Cultural Relevance.
ComScore. August 12, 2008, Available: http://www.comscore.com/press/release.asp?press=2396
Prof. Hendrik Speck
Social Networking Statistics
Selection of Leading Social Networking Sites in Germany. July 2007.
Total German
Internet Audience
32,924,000
Social Networking
14,804,000
MySpace
StudiVZ Sites
JUX.DE
Piczo
Stayfriends
Netlog
Sevenload
Xing
Skyrock Network
MSN Groups
3,650,000
3,113,000
2,614,000
2,004,000
1,335,000
1,251,000
1,143,000
685,000
507,000
440,000
Source: Comscore. German Social Networking Community Reaches 14.8 Million.
September 19, 2007, Available: http://www.comscore.com/press/release.asp?press=1737
Prof. Hendrik Speck
Social Networks
Social Features. Google, Amazon and Beyond. Amazon.com. 2007
1.
2.
3.
4.
Rating
5.
6.
7.
Sales Rank
Customer Reviews
Share Your Images
8. Sell Yours Here
9. Add to Lists
10. Tell a Friend
Also Bought
Update Info
Sponsored Links
11. Write a Review
12. Give Feedback
13. Citations
Prof. Hendrik Speck
Social Networks
14. Click a Tag
15. Your Tags
16. Customer Reviews
17. Rate of Review
18. Comment Review
19. Discuss Product
20.Amapedia
21. Listmania
22. Help Others/ Tag Item
23. Rate Item
24.Video Review
25. Avg. Customer Review
26.Customer Review
27. Rate Review
Prof. Hendrik Speck
Social Networks
28.Category Directory
29.Subject Directory
30.Update Info
31. Your Account
32. Your History
33. Your Searches
34. Sponsored Links
35. Careers
36. Contact Us
37. Feedback
38.Also Bought
39. Sell Item
40. Join
41. Advertise
Prof. Hendrik Speck
Social Networks and Privacy
Social Networks
Data Mining. Data Layers.
1.
User Information and Interests
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
User Identifiers and Attributes. Social Network Analysis.
1. Account ID
2. User Name
3. First Name
4. Last Name
5. Academic Title
6. Academic Degree
7. Sex/Gender
8. Birth/Maiden Name
9. Relationship Status
10. Sexual Preferences
11. Birthday
12. Sign of the Zodiac
13. Hometown
14. Country
15. Time Zone
16. Political Views
17. Religious Views
Social Networks
Contact Information. Social Network Analysis.
18. Address
19. City
20. Zip
21. Country
22. Website
23. Email
24. Mobile Phone
25. Land Phone
26. Fax
27. Skype ID
28. ICQ ID
29. AIM ID
30. Yahoo ID
31. WindowsLive ID
32. GoogleTalk ID
33. Gadu-Gadu ID
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Work. Social Network Analysis.
34. Status
35. Employer
36. Position/Title
37. Company Website
38. Address
39. City
40. Zip Code
41. State
42. Country
43. Industry
44. Description
45. Wants
46. Haves
47. Time Period From
48. Time Period To
49. Business Organization
Social Networks
Education. Social Network Analysis.
50. College/University 59. High School
51. Class Year
60. Class Year
52. Attended for
53. Degree
54. College/Graduate School
55. Concentration
56. Second Concentration
57. Third Concentration
58. Degree
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Personal Information and Interests. Social Network Analysis.
61. Activities
62. Interests
63. Hobbies
64. Favorite Music
65. Favorite TV Shows
66. Favorite Movies
67. Favorite Books
68. Favorite Quotes
69. About Me
70. Pictures
71. Uploaded Picture(s)
72. Picture Tags
73. Audio
74. Uploaded Audio
75. Audio Tags
76. Video
77. Uploaded Video(s)
78. Video Tags
Social Networks
Prof. Hendrik Speck
Connection and Usage Information. Social Network Analysis.
79. Location
88. Online Status
80. Contacts
89. Login Time
81. # of Contacts
90. Usage
82. Messages
91. IP Address
83. # of Messages
92. Network
84. Events
93. Operating System
85. # of Events
94. Browser
86. Guestbook Entries 95. Screen Size
87. # of Guestbook Entries 96. Language
Prof. Hendrik Speck
Prof. Hendrik Speck
Private Sphere and Privacy
Census (Volkszählung) 1987.
Source: Deutsche Bundespost. Volkszählung 1987. Stamp. April 1987
Prof. Hendrik Speck
Prof. Hendrik Speck
Immigration. Visa Waiver Form. I-94W.
Prof. Hendrik Speck
Social Networks
Data Mining. Data Layers.
1.
User Information and Interests
2.
3.
4.
5.
6.
User Generated Content, Interaction
Third Party Associations and Content
Access and Connectivity
API's, Beacons, and Data Feeds
Merger of Social, Mobile and Local
Prof. Hendrik Speck
Data and Statistics
Prof. Hendrik Speck
Prof. Hendrik Speck
Statistics. StudiVZ. December 2006.
Source: Hagen Fritsch. StudiVZ. Inoffizielle Statistikpräsentation. December 2006, Available: http://studivz.irgendwo.org/
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Analysis
Gender Distribution in Percent. StudiVZ. 2006/2008.
15
Total 2008
Total 2006
12.5
2008
2006
2008
2006
10
7.5
5
2.5
0
Source: Hagen Fritsch. StudiVZ. Inoffizielle Statistikpräsentation. December 2006, Available: http://studivz.irgendwo.org/ and
University of Applied Sciences Kaiserslautern. Analysis of Large Scale Communities. January 2008
Prof. Hendrik Speck
Analysis
Male. Age and Relationship Status in Percent. StudiVZ. 2008.
Married
Relationship
5
Romance
Open Relationship
2.5
Single
No Data
0
Source: University of Applied Sciences Kaiserslautern. Analysis of Large Scale Communities. January 2008
Prof. Hendrik Speck
Security Mechanisms.
1. Account / Cookies
2. Captcha
3. Login / HTTPS/ SSL
4. IP Address / Logfile Analysis
5. Privacy Settings
6. Link / Friendships
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Die Lokalisten. Social Network. 2007.
Source: Heinen, Felix. Datenvisualisierung eines sozialen Netzwerks. Die Lokalisten. University of Applied Sciences Nürnberg.
Diploma Thesis. 2007, Available: http://www.felixheinen.de/020.html
Prof. Hendrik Speck
Die Lokalisten. Social Network. 2007.
Source: Heinen, Felix. Datenvisualisierung eines sozialen Netzwerks. Die Lokalisten. University of Applied Sciences Nürnberg.
Diploma Thesis. 2007, Available: http://www.felixheinen.de/020.html
Implications
Prof. Hendrik Speck
Prof. Hendrik Speck
Die Kehrseite der Medaille ist aber, dass Kriminelle
solche Portale zum Datendiebstahl oder zur Verbreitung
von Viren und Trojanern für sich entdeckt haben und
Verbraucher allzu sorglos ihre Daten preisgeben und
diesen im wahrsten Sinne des Wortes Tür und Tor
Öffnen.
eco-Geschäftsführer Harald A. Summa
Source: Verband der deutschen Internetwirtschaft eco. eco warnt vor steigendem IT-Sicherheitsrisiko in so genannten Social Networks.
Pressemitteilung. February 15, 2008, http://www.eco.de/verband/202_4290.htm
Social Networks
Centralization of Data. StudiVZ Hack. 2007.
Prof. Hendrik Speck
Prof. Hendrik Speck
Privacy
Prison Presidio Modelo. Panopticon.
Source: Prison Presidio Modelo. Isla de la Juventudý, Cuba. Wikipedia. User: Friman. 2005,
Available: http://en.wikipedia.org/wiki/Panopticon
Prof. Hendrik Speck
Fingerprint Schäuble. Inverse Panopticon and Sousveillance Society. 2008.
Source: Netzeitung. “Aktion des Chaos Computer Clubs. Hacker veröffentlichen Fingerabdruck Schäubles.“ Netzeitung.
March 29, 2008, Available: http://www.netzeitung.de/internet/953597.html
Social Networks
Prof. Hendrik Speck
Democratization of Personality Management. Mobbing in StudiVZ . 2008.
Prof. Hendrik Speck
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Application/Data Market Place. Facebook.
Selling 13000 Oxford Students by hanno
200,000 British users, 10k daily active, $121.31 made yesterday by sourcecode
175000 user app for sale - Dating and Sex Test by goldfinger
App for sale: 2M+ users by appdev2008
Over than 6000$ December Revenue - App For Sale by Tiger
105,308 adds yesterday with over $400 revenue - in one day! by Temporary
250k users / 2000$ by tolga
Facebook App + Website 90,000 users $25,000 income since August by darbsllim
apps making 1000.00 a day! by webguy2008
My Clothing Label - 200k+ Users - $0 starting bid by trianaglobal
Source: Facebook Platform Developer Forum. Application Marketplace. Available: http://forum.developers.facebook.com/
Prof. Hendrik Speck
Social Networks
Rights Reserved by Platform. Zoomer.de
(2) Der Nutzer räumt zoomer.de ein räumlich und zeitlich
uneingeschränktes, kostenloses Nutzungsrecht an den von ihm auf dem
Internetportal zoomer.de veröffentlichten Inhalten, insbesondere an den
Diskussionsbeiträgen in Wort und Bild, den Bewertungen und
Kommentaren ein. Das Nutzungsrecht erfasst insbesondere
• das Recht, die Inhalte zu speichern und zu vervielfältigen und online im
Internet auf zoomer.de sowie auf weiteren Internetportalen öffentlich
zugänglich zu machen, soweit diese Internetportale auch von Unternehmen
der Holtzbrinck-Gruppe (verbundene Unternehmen im Sinne von §§ 15 ff.
Aktiengesetz) betrieben werden;
Source: Holtzbrinck. Nutzungsbedingungen. Zoomer.de. Available: http://www.zoomer.de/news/nutzungbedingungen
Prof. Hendrik Speck
Social Networks
Rights Reserved by Platform. Zoomer.de
• das Recht, die Inhalte anderen Unternehmen, die jetzt oder zukünftig zur
Holtzbrinck-Gruppe gehören, online per Datenübermittlung oder offline auf
Datenträger gespeichert zu übermitteln und zur Speicherung und
Vervielfältigung sowie zur Veröffentlichung online im Internet auf deren
Homepages und Portalen zur Verfügung zu stellen; der Nutzer willigt
deshalb bereits jetzt darin ein, dass zoomer.de die eingeräumten
Nutzungsrechte an andere Unternehmen der Holtzbrinck-Gruppe weiter
überträgt bzw. weiterlizenziert.
Prof. Hendrik Speck
Social Networks
Duties of User. Zoomer.de
§ 8 Rechte an den von dem Nutzer veröffentlichten Inhalten,
Nutzungsrechtseinräumung, Haftung des Nutzers für die
Inhalte
(1) Der Nutzer hat sicherzustellen, dass er über die
Nutzunsgrechte an den von ihm auf dem Portal zoomer.de
veröffentlichten Inhalten, insbesondere den Materialien,
Texten, Bildern, Audio-Files oder Videos usw. verfügt.
Prof. Hendrik Speck
Directive 95/46/EC of the European Parliament.
1.
2.
3.
4.
5.
6.
7.
8.
Data must be Fairly and lawfully processed.
Processed for limited purposes.
Adequate, relevant and not excessive.
Accurate.
Not kept longer than necessary.
Processed in accordance with the data subject's rights.
Secure.
Not transferred to countries without adequate protection.
Source: Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the
processing of personal data and on the free movement of such data. Official Journal. L 281, November 23, 1995, P. 0031 – 0050, Available:
http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:31995L0046:EN:HTML
Prof. Hendrik Speck
No tested platform was really convincing. In many
cases the usage of certain services or functions can not
be recommended. Amongst all private platforms
facebook received the best evaluations, but even this
platform revealed significant weaknesses.
The services myspace, studiVZ and werkenntwen
received average results. Positive evaluations were
compensated by different weaknesses and gaps in the
privacy control, usage or lacking encryption.
Andreas Poller and Dr. Thorsten Henkel, Fraunhofer Institut
Source: Poller, Andreas. Privatsphärenschutz in Soziale-Netzwerke-Plattformen. Fraunhofer Institut für Sichere Informationstechnologie
SIT. September 23, 2008, Available: http://www.sit.fraunhofer.de/Images/SocNetStudie_Deu_Final_tcm105-132111.pdf
Prof. Hendrik Speck
Social Networks
Evaluation
1.
2.
3.
4.
5.
6.
7.
8.
Requires to much private information
Pseudonyms are not supported
Communication is not encrypted
Concept avoids privacy protection
Privacy options not implemented
Access of confidential multimedia files outside of platform
Resignation process complicated or difficult to find
Incomplete deletion of private data
Source: Poller, Andreas. Privatsphärenschutz in Soziale-Netzwerke-Plattformen. Fraunhofer Institut für Sichere Informationstechnologie
SIT. September 23, 2008, Available: http://www.sit.fraunhofer.de/Images/SocNetStudie_Deu_Final_tcm105-132111.pdf
HelloWorld
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Brand Damage. StudiVz vs. StasiVz. 2007.
Source: Mack, Daniel. StasiVZ: StudiVZ startet Spionage Werbung. Bündnis 90/Die Grünen. December 15, 2007, Available:
http://danielmack.de/2007/12/15/stasivz-studivz-startet-spionage-werbung/
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Brand Awareness. StudiVz vs. Facebook. 2008.
3.788
3.779
2.769
1.177
Widerspruch gegen die neuen AGB (12/07)
Neue studiVZ AGB (12/07) - ich bin dann mal weg!!!
Revolution im Studivz - gegen die neue AGB
Stell dir vor, StudiVZ ändert die AGB und keiner stimmt zu 2
733
Endlich wieder Studentenproteste - AGB FTW
690
+++ Dieses Profil ist im Rahmen der neuen AGB
bereinigt! ++
664
! Datenklau abstellen ! Vorgehen gegen Datenschutzerklärung/AGB!
481 StasiVZ | Bist Du schon verwanzt?
437
Neue Agb ab Januar.Studivz, der letzte macht das Licht
aus!
367
Ich verkaufe die echten Namen meiner AGB-paranoiden
Freunde
365 Nein zum stasiVZ - Nein zu den neuen AGB's
241 Ich lösch trotz neuer AGB den Namen nicht, du paranoider
Lemming Source: StudiVz. Protest Against Modified Terms of Use. 2008.
220 Wehrt euch
gegen die
neue AGB-Bestimmung
Fachhochschule
Kaiserslautern
– University of Applied Sciences
Prof. Hendrik Speck
Social Networks
Community Response against StudiVz Marketing. 2006.
Source: Eggert, Eric. Bye, bye, StudiVZ. (Update). November 26, 2006. Available: http://yatil.de/Weblog/bye-bye-studivz
Social Networks
Cease and Desist Letters. StudiVz vs. Academe. 2008.
Prof. Hendrik Speck
Prof. Hendrik Speck
HelloWorld
Goals and Objectives
1.
2.
3.
4.
Decentralized Network and Data Storage.
5.
6.
7.
Security / Expiration of Data.
Encryption and Privacy Settings per Default
Open Source and Open Standards (OpenID, OpenSocial)
Informational self-determination /
User regain Control over Image/Representation.
Modularity, Scalability
Mobile, Customizable, User Friendly
Prof. Hendrik Speck
HelloWorld
Comparison Email, Browser, Social Networks
Microsoft Hotmail
versus
Mozilla Thunderbird
AOL Browser
versus
Mozilla Firefox
Social Network
versus
HelloWorld Network
Prof. Hendrik Speck
We have analyzed your concept of a distributed social
network and believe, that you have already implemented
all aspects that we consider relevant. …
Integral in your concept is for instance the usage of
pseudonyms as well as the user control of any data shared
with other users. Through consequent encryption the user
can even hide the data from service providers.
From a data protection point of view your project is ideal.
We would be satisfied if only a few of your planned
considerations, ... could realistically be expected from the
social networks as we know them.
Data Protection Commissioner of Berlin, Germany
Source: Berthold, Oliver . Evaluation of HelloWorld. Datenschutz in Sozialen Netzwerken.
Data Protection Commissioner of Berlin, Germany. Personal Email. September 18, 2008.
Prof. Hendrik Speck
HelloWorld
Login
Import / Networks
Groups/Identities
Prof. Hendrik Speck
HelloWorld
Profile
Friend Profile
Send Message
HelloWorld
Friend Finder
Localizer
Prof. Hendrik Speck
Prof. Hendrik Speck
Social Networks
Recommendations
1.
Users:
Control, Media Competency, Minimalisation, Privacy and
Security, Anonymization, Compartmentalisation
2.
Regulation Authorities: Education, Awareness,
Moderation, Guidelines/Regulation,
Enforcement and Punishment
3.
Network Provider:
Code of Conduct, Compliance, Security and
Encryption,
Privacy and Default Settings, Pseudonyms and Anonymisation,
Informational Self Determination, Information and Education,
Customer and Quality Support, Board of Advisors
End
Prof. Hendrik Speck
Conclusion
Contact Information
Thank you for your attention.
I will gladly answer your questions.
Prof. Hendrik Speck
contact (at) hendrikspeck [dot] com
University of Applied Sciences Kaiserslautern
Information Architecture Lab
Amerikastrasse 1
66482 Zweibrücken
Tel: +49 6332 914 360
Skype: hendrikspeck
Prof. Hendrik Speck
Conclusion
Prof. Hendrik Speck
Attribution-ShareAlike 3.0 Unported. License Information.
License Information. You are free to share (to copy,
distribute and transmit the work) and to remix (to adapt
the work) under the following conditions: Attribution.
(You must attribute the work in the manner specified by
the author or licensor but not in any way that suggests
that they endorse you or your use of the work) Share
Alike. (If you alter, transform, or build upon this work,
you may distribute the resulting work only under the
same, similar or a compatible license.)

They have no Idea what they are doing … Prof. Hendrik Speck Prof

Transcrição

Documentos relacionados

Ansässigkeitsbestätigung

KL-Anfahrt mit der DB

zum Beraterprofil

Anfahrt zur Gartenschau Kaiserslautern Übersicht

Setzen uns sehr intensiv für Frauen ein

Mühle am Schlossberg Schlossberg 16 67681 Wartenberg/Pfalz Tel

Abmeldeformular - SWK Stadtwerke Kaiserslautern

GEA Happel Klimatechnik GmbH

Asset Protection in Liechtenstein

Kartenvorverkauf - Zirkus Charles Knie