Thursday, October 14, 2010

HTML5’s New Privacy Concerns

HTML5, the new webcode poised for dominance on the internet, comes with a bevy of features to enhance our online experience. With the ability to imbed multimedia without relying on plug-ins like Quick Time, application caches that allow offline access to online apps, and geolocation features, HTML5 can provide a robust, integrated end-user experience.

But the superior user experience does not come without cost. In her New York Times article, Tanzinia Vega highlights some of the privacy concerns inherent in HTML5.

Most of us are familiar with the ubiquitous cookies, which save our usernames and passwords (I, for one, would be lost without this feature), permit the use of online shopping carts, and so on. I remember a time when my spyware tracker was constantly popping up “allow cookie?” messages as I went about the web. Initially, I was very cautious about my cookies, and routinely cleared them. As time has gone by, I find that I don’t even think about them; I accept them as almost a cost of doing business. HTML5 allows trackers to set super cookies that can track weeks of personal data, including “a user’s location, time zone, photographs, text from blogs, shopping cart contents, e-mails and a history of the Web pages visited” (Vega). One hacker has created an “evercookie” that is difficult for even experts to delete. He claims it is in the interest of preventing unauthorized tracking, but such a persistent and stealthy tool is hardly something most of us are comfortable with.

Where should the burden of privacy protection lie? With the enduser? It gets harder and harder to find, let alone manage, privacy settings. With the browser, the provider, or the developer? That seems against their own self interest. With an external regulatory body? Perhaps ease of privacy settings should be mandated. Or, maybe, the public will consider the flash and ease of the new technology worth the trade off of privacy. After all, the browser Opera tried to implement more stringent cookie controls, but users complained that it disrupted use of a social networking site.

8 comments:

  1. I don't know about all of you, but I'm becoming paranoid about what I put on and enter into the computer. I cringe when my husband does our banking online. The doubt of security is always in the back of my mind. A year ago, I set up a Facebook account and have become suspicious of Facebook because of all the privacy issues surfacing over the last several months.

    If the burden of privacy protection rests with the end user, I'm in big trouble. Not being tech savvy, I have no idea where to begin or how to go about meeting the computer "safety" requirements. How many people do?

    It's just a matter of society deciding what's more important--social networking or privacy protection. To me, there's no question. I'd have to say goodbye to Facebook and LinkedIn.

    ReplyDelete
  2. I think my problem with computer privacy is that I’m too lax. I do all my banking online, even if I’m on a public computer. I don’t take the time to clear my cookies from time-to-time. My Facebook profile is open for any and everyone to see. I hate being prompted to increase my password strength or update my profile due to increased security precautions.

    This is all despite having my email and Facebook hacked into. The result was emails and virus links being sent to all my contacts. I even know of someone who is still feeling the aftermath of identity theft many years later. My brother, who is the computer science/information systems expert, gets on my case sometimes. I know I need to be more mindful of my cyber privacy but sometimes I feel invincible.

    I get scared for my mother not being computer savvy. She occasional enjoys to freely surf the web and I feel that she is very vulnerable. With so much danger out there, I feel as though she can fall victim to a scam. Devri raises some good questions as to where the privacy responsibility should lie. With the responsibility currently resting on the end-user, I could be in danger unless I take more accountability.

    ReplyDelete
  3. The problem is that many applications, services, and organizations are going online with everything they have. The accessibility and convenience that the online process offers allows much of society to perform at a higher rate of productivity.
    I honestly believe that you are putting yourself at risk every single time you enter the world wide web.
    Furthermore, many online sites these days require the use of password and user names. I know that I have to pay my bills on line and I don't use multiple passwords for each bill. I also have to enter information to get into my accounts that my University host.
    There are many young users who are unaware of the dangers associate with privacy, so they put there parents information at risk also.
    All of the different times that organization prompt us to enter private information is very unsafe. I believe that the hosting server/browser should be responsible it's constituents use of there online sites.

    There are a large amounts of implications that come with accepting new technology, but there will always be problems with privacy.

    ReplyDelete
  4. I think the posts already show that people tend to fall on one end of the spectrum or the other when it comes to protecting themselves online. It took my father years to convince me to do my banking online, even though research showed that it was safer and more secure than checks in the mail. I will not go back after letting go of the problem of "Where did I put those stamps?" I do, however, check in with my actions online often to make sure the action is worth the risk involved. Facebook applications collecting personal information scare me more. The purpose of the end user is for amusement only; not quite worth the risk for the exposure in my opinion. While I am probably of the generation that is vulnerable to scamming, I still believe the end user must be held accountable for actions that put him/her at risk.
    I think the privacy concern I have with HTML5 is that of end user choices. My understanding from the article was the language would allow access to private information without the end user making this choice. I believe in order to maintain end user responsibility, a company must give the consumer these choices and/or inform him/her of vulnerability from the use of their product. If this is not the case, perhaps it is time to shift the responsibility to the other side.

    ReplyDelete
  5. This is a difficult question. When it comes to my personal views, I am always pretty trusting with my information on the Internet. Now, this is not to say I am not aware of certain dangers and scams, but I do all my banking online, shopping, etc. It is very easy for me to transfer funds and any type of information I may need, and I like this. I prefer lax security settings making my life easier. I like to think I am capable of managing myself online and able to protect myself against anything harmful. There are many people online however that are not capable of defending themselves against security threats. With this in mind, I believe a company should have to create security options for the end user. It is never in a company's best interest for their consumers to be in a vulnerable position. It is their responsibility to make the product as safe and secure as possible. It is also the responsibility of the consumer to understand what they are using, and know the possible dangers and threats they could be vulnerable to.

    ReplyDelete
  6. I hate to admit it, but I hardly use safety precautions when using the internet. Of course I have created passwords for different sites, but like Ray they are all pretty similar. I have never deleted a cookie in my life and prior to this class I had no clue of its meaning. Like Lin, if privacy settings were mandated by the end user I too would be in trouble. Perhaps such restrictions should be in the hands of the browser developers.

    I will say however, that I am quite skeptical when entering my address and bank card information online. If I am not that familiar with the site or the organization, I am always hesitant. Despite my skepticism it seems as if everything is being converted to the internet and having to enter personal information online is inevitable.

    ReplyDelete
  7. I agree with many previous comments. For most part, the end user should be held accountable for their actions. This is only the case if the end user has the choice to protect their information when on the web. I think education and discussions like this one is key to increase awareness. I agree with Bradford, it is the company’s responsibility to make the product safe. I also believe as end users, we need to be mindful of what information could be vulnerable to attack. Personally, I am more lax when it comes to this stuff, but after reading this post, I will check on my cookies and continue to be mindful.

    ReplyDelete
  8. I'm very cautious when on the net in regards to my personal info. Even on my own laptop, I don't usually save cookies. I rarely leave my computer unattended while I'm logged into a personal site. I am not really worried about who I let use my laptop etc, my worry is just in the event that it's ever stolen, they will have access to y entire life if all those passwords are saved etc.

    I was told a long time ago to have a printed copy of all that stuff, passwords, account/credit card numbers, etc. In that case, you always have a backup should your wallet/laptop be stolen. I'll probably stay set in my ways. Old habits die hard.

    ReplyDelete