Spectrum on the Floor (Not Pink Floyd)

You’ve probably heard about Instagram’s new terms of service, which claim the right to sell your photos. [Update: Instagram has posted a “that’s not what we meant!” statement and promised to revise that section.]

To help us deliver interesting paid or sponsored content or promotions, you agree that a business or other entity may pay us to display your username, likeness, photos (along with any associated metadata), and/or actions you take, in connection with paid or sponsored content or promotions, without any compensation to you.

Monetization is one thing, but selling my creative output, using it or my likeness for advertising, without my permission? That’s stepping over the line. Add this to the recent decision to hide image previews from Twitter, and a pattern emerges of a service that was once open and free starting to close ranks.

I’m not personally worried about Instagram in particular. I’ve only really dabbled in it over the last few months, treating it most of the time as a first draft for Flickr. I have maybe 50 photos and a handful of followers, and most of the people I follow there are also on other networks. If Instagram doesn’t back down or clarify the language [Update: they did], I can easily repost the photos I want to keep online and go somewhere else.

I am worried about the trend it highlights: You can’t always rely on social media.

And I am worried about the fact that these changes were announced after the Facebook acquisition went through, and after Facebook revised their terms so that they no longer have to put new terms of service to a vote. I’ve got a lot more invested in Facebook than I have in Instagram.

Where Have All The Photos Gone?

GloomI used to blog about web browsers at Spread Firefox and Opera Watch. Both sites are long gone. Countless articles I’ve linked to have vanished as publishers restructured or went out of business.

I’ve got an extensive LiveJournal from a few years back. It’s still there, but when I let my paid account lapse, I started moving over some of the less personal, more tech- and entertainment-focused posts (like convention reports) to this site, just in case a BOFH deletes it, or they change their terms of service to something unacceptable.

The question “Who owns your data?” has been repeated so often over the years that I can’t look up the post I’m thinking about, which advocated open file formats over proprietary ones (like Microsoft Office) on the basis that you should always be able to find a reader for a text document, but if you lose access to Word, or if Microsoft decides to drop support for an older format, you’re at their mercy.

The problem with social networks as services is that, like with those proprietary file types, you’re at their mercy. Want to search for a three-year-old Tweet? Tough. Facebook changed their privacy settings again? Oops. Twitter decides they don’t want apps like yours to exist, so they close off part of their API? Bye! The site you posted all your photos to decides to close up shop? *Poof!* There go your photos.

So What’s the Alternative?

Train ArrivingWhen it comes down to it, the only way to be sure you aren’t going to be exploited or abandoned is to do it yourself.

Blogging is basically the same as social networking, except distributed:

  • People publish written posts, photos, videos, and more.
  • Other people comment on them.
  • You can “share” a post by linking to it, and pingbacks/trackbacks will let them know you’ve done so.
  • You can subscribe to someone’s updates through RSS, and services like RSSCloud and PubSubHubub can make updates appear quickly.
  • Services like OpenId make it possible to authenticate visitors, which means you can start locking down who gets to see what.

The upside is that you, not Facebook or Google or Twitter, have full control of your content. The downside is that you have to exercise that control. You have to maintain the infrastructure, you have to guard against attackers, you have to filter out spam, you have to do your own backups, and you have to know at least something about the system under the hood.

We keep going to social networks because they’re so damn convenient. They take care of all that, and make your stuff easier for people to discover as a bonus.

But when you leave the network — or when it leaves you — what happens to all your photos, status updates, rants, raves, and commentary?

Who owns your profile?

Some recent linkblogging. (Thank you, StumbleUpon)

Art

Privacy

Scott Pilgrim

  • Geek Merit BadgesFanboy Scouts has launched a series of Merit Badges for Geeks including achievements for Speedster, Mt. Doom, Tie Fighter Pilot, Away Team, and more.
  • Privacy in terms of contextual identity. How you present yourself to your friends is not how you present yourself to your colleagues, and what you’re willing to share in each context is going to be different.
  • XKCD is probably right about the future of “old-timey” speech. “Forsooth, do you grok my jive, me hearties?” We have a hard enough time getting the mid-twentieth century right, and that’s with people around who lived it!
  • Darryl Cunningham debunks the Moon Hoax in comic-strip form.
  • The new Kindle looks nice. They’re starting to get to the price/feature/polish point where I’d be tempted. (Well, except for that pesky DRM…) Also, Amazon launched Kindle for Android recently, but I haven’t tried it out. While it will run on Android 1.6, it’s a bit big for my G1 unless I clear out some other apps.
    Kindle Wireless 3G+WiFi.

Here’s something I just don’t understand about the whole electronic eavesdropping controversy.

Given that FISA warrants are:

  • Easy to obtain
  • Secret
  • Obtainable retroactively, so you can legally start listening in immediately

Why is it necessary to eavesdrop without one? What’s so hard about getting a warrant?

While we’re at it, given that the bad guys almost certainly knew we were spying on them as much as we could already, what’s so dangerous about revealing the warrantless spying program?

Instead of these endless self-justifications, it would be nice to see President Bush or Attorney General Gonzales say, “You’re right, we should have gotten warrants. From now on, we will.” End of story. Instead of digging in their heels and insisting on powers that should scare the hell out of anyone, no matter what their party affiliation.

Many web browser add-ons have features that require contacting a central server. The Google Toolbar will show you a site’s PageRank. Amazon’s A9 Toolbar will show you information from Alexa. If you want this, that’s great—but if you only want it occasionally, you might not want someone tracking your entire browsing session.

After installing the A9 toolbar for testing, I decided I wanted to know just when they were contacting their server. I installed the Firefox versions of four toolbars and used netstat to see when they connected.

  • A9 Toolbar: Constant connections to hosts at amazon.com and alexa.com, but only when the toolbar is visible.
  • Google Toolbar: Opens initial connection to a Google-owned IP address. If PageRank display is enabled, or was earlier in the session, maintains continuous connections—even when the toolbar is hidden!
  • Yahoo! Toolbar: Opens initial connections to a Yahoo server and to unknown.Level3.net (which, based on traceroute, appears to be on the way from here to Yahoo). Sometimes the latter remains open for a long time before closing. It does not appear to reconnect on its own.
  • StumbleUpon: Only connects when you press its buttons.

Overall, these toolbars seem to behave in a privacy-friendly way. But it was disturbing that the Google toolbar keeps a connection open even when it’s hidden, and that disabling PageRank display doesn’t seem to stop the connections until you restart Firefox. (Maybe it does eventually, and I didn’t wait long enough.) If I’ve hidden the toolbar, I don’t need the functionality right then. There’s no reason to hold a network connection open until I re-show the toolbar.

If I only want to use these toolbars occasionally, I can just hide most of them through the View→Toolbars submenu. But to keep the Google Toolbar from phoning home, I have to either disable PageRank and restart Firefox, or disable the toolbar in the Extensions—and restart Firefox.