Ethical Design

From a talk given at MakingWeb in September 2016

Transcript

1. Ethical Design @laurakalbag @indie https://ind.ie https://better.fyi
2. PERFORMANCE!
7. .html
8. .js
9. .js
10. .css
11. .js
12. .jpg
13. addthis.com
14. addthis.com
15. perfectmarket.com
16. taboola.com
17. taboola.com
18. doubleclick.net
19. krxd.net
20. moatads.com
21. googlesyndication.com
22. googlesyndication.com
23. optimizely.com
24. googleadservices.com
25. 2mdn.net
28. t 269 requests 5.11 MB 12.97 seconds caused by third party trackers
29. Your web performance effort means nothing
33. …?
38. Did any of you tell your friends on Facebook? Facebook has started showing me creepy funeral director ads… 12/08/2015 14:07
39. Not me! Jessica Kalbag Might just be coincidence… Hmm
40. sorry, that was me I think - I face booked Madds cos she’s in Australia now xxx Nini Ellis
49. Lightbeam
50. https://mozilla.org/lightbeam
55. *but also possibly not
60. Privacy Policy
61. “ — The Trade Desk Privacy Policy The Trade Desk Technology allows our Clients to buy ad space on websites for online advertising and allows for the use of proprietary and third party data in the purchase of that media.
62. “ — The Trade Desk Privacy Policy Our Technology collects Non-Personally Identifiable Information (“Non-PII”) that may include, but is not limited to…
63. “ — The Trade Desk Privacy Policy your IP host address, the date and time of the ad request, pages viewed, browser type, the referring URL, Internet Service Provider, and your computer’s operating system,
65. Non-Personally Identifiable Information (“Non-PII”) “
66. your IP host address, age, gender, income, education, interests “your IP host address
67. your IP host address 37.46.188.154
68. 37.46.188.154
69. 37.46.188.154 29
70. 37.46.188.154 29
71. “ 29 Non-Personally Identifiable Information (“Non-PII”)
72. “ — “Why ‘Anonymous’ Data Sometimes Isn’t” — Bruce Schneier http://archive.wired.com/politics/security/commentary/securitymatters/2007/12/securitymatters_1213
73. it takes only a small named database for someone to pry the anonymity off a much larger anonymous database “ — “Why ‘Anonymous’ Data Sometimes Isn’t” — Bruce Schneier http://archive.wired.com/politics/security/commentary/securitymatters/2007/12/securitymatters_1213
76. Facebook knows you better than your members of your own family — Sarah Knapton, Science Editor, Daily Telegraph. January 2015 “ http://www.telegraph.co.uk/news/science/science-news/11340166/Facebook-knows-you-better-than-your-members-of-your-own-family.html
77. Computer-based personality judgments are more accurate than those made by humans http://www.pnas.org/content/112/4/1036.abstract “
78. The team found that their software was able to predict a study participant's personality more accurately than a work colleague by analysing just 10 'Likes'. — Sarah Knapton, Science Editor, Daily Telegraph. January 2015 “ http://www.telegraph.co.uk/news/science/science-news/11340166/Facebook-knows-you-better-than-your-members-of-your-own-family.html
79. Inputting 70 'Likes' allowed it to obtain a truer picture of someone's character than a friend or room-mate, while 150 'Likes' outperformed a parent, sibling or partners. — Sarah Knapton, Science Editor, Daily Telegraph. January 2015 “ http://www.telegraph.co.uk/news/science/science-news/11340166/Facebook-knows-you-better-than-your-members-of-your-own-family.html
80. http://www.pnas.org/content/112/4/1036/F2.large.jpg
82. http://www.independent.co.uk/life-style/gadgets-and-tech/news/facebook-reactions- belgian-police-warn-citizens-not-to-react-to-posts-on-social-media-a7027786.html
83. “ Belgian police now says that the site [Facebook] is using them as a way of collecting information about people and deciding how best to advertise to them. As such, it has warned people that they should avoid using the buttons if they want to preserve their privacy.
84. “ “By limiting the number of icons to six, Facebook is counting on you to express your thoughts more easily so that the algorithms that run in the background are more effective,” the post continues. “By mouse clicks you can let them know what makes you happy.”
87. “ “ LexisNexis helps uncover the information that commercial organizations, government agencies and nonprofits need to get a complete picture of individuals, businesses and assets…
88. “ “ Only Acxiom connects people across channels, time and name change at scale by linking our vast repository of offline data to the online environment
91. “ When an individual applies for a loan, the lender examines the credit ratings of members of the individual’s social network who are connected to the individual through authorized nodes. If the average credit rating of these members is at least a minimum credit score, the lender continues to process the loan application. Otherwise, the loan application is rejected.
92. “ When an individual applies for a loan, the lender examines the credit ratings of members of the individual’s social network who are connected to the individual through authorized nodes. If the average credit rating of these members is at least a minimum credit score, the lender continues to process the loan application. Otherwise, the loan application is rejected.
94. Ad Blockers
95. Ads are not the problem. Trackers are the problem.
96. google-analytics.com 64.1% of sites researched doubleclick.net 54.4% of sites researched google.com 41.9% of sites researched gstatic.com 32.8% of sites researched googleadservices.com 32.3% of sites researched facebook.com 29.0% of sites researched googlesyndication.com 26.9% of sites researched facebook.net 26.4% of sites researched google.se 23.0% of sites researched
97. google-analytics.com 64.1% of sites researched doubleclick.net 54.4% of sites researched google.com 41.9% of sites researched gstatic.com 32.8% of sites researched googleadservices.com 32.3% of sites researched facebook.com 29.0% of sites researched googlesyndication.com 26.9% of sites researched facebook.net 26.4% of sites researched google.se 23.0% of sites researched google-analytics.com 64.1% of sites researched doubleclick.net 54.4% of sites researched google.com 41.9% of sites researched gstatic.com 32.8% of sites researched googleadservices.com 32.3% of sites researched facebook.com 29.0% of sites researched googlesyndication.com 26.9% of sites researched facebook.net 26.4% of sites researched google.se 23.0% of sites researched 78.7%
98. google-analytics.com 64.1% of sites researched doubleclick.net 54.4% of sites researched google.com 41.9% of sites researched gstatic.com 32.8% of sites researched googleadservices.com 32.3% of sites researched facebook.com 29.0% of sites researched googlesyndication.com 26.9% of sites researched facebook.net 26.4% of sites researched google.se 23.0% of sites researched
102. Ads are not the problem. Trackers are the problem.
105. https://adblockplus.org/en/acceptable-ads
106. — https://adblockplus.org/en/acceptable-ads#criteria we share a vision with the majority of our users that not all ads are equally annoying “
107. Ads are not the problem. Trackers are the problem.
109. — https://adblockplus.org/acceptable-ads-agreements we are being paid by some larger properties that serve non-intrusive advertisements that want to participate in the Acceptable Ads initiative “
110. http://boingboing.net/2016/09/13/adblock-now-selling-ads.html
111. Ad networks don’t have to be bad
112. http://decknetwork.net
113. http://decknetwork.net/privacy/
114. — http://decknetwork.net/privacy/ We don’t track our readers in any way or allow any other behind-the-scenes shenanigans. We just serve useful, relevant ads in a simple, unobtrusive way to support independent publishers. “
115. But what about behavioural ads?
126. http://www.0pii.com
127. https://flattr.com https://flattr.com/
128. But who is going to use these systems when your personal information is so lucrative?
129. Analytics
130. google-analytics.com 64.1% of sites researched
131. Is it ethical or necessary to track visitors to our site?
132. Ethics on the web
133. ethic |ˈɛθɪk| noun [ in sing. ] a set of moral principles, especially ones relating to or affirming a specified group, field, or form of conduct
134. We build the new everyday things
135. 90 minutes
136. 2 hours 51 minutes https://www.iabuk.net/about/press/archive/definitive-time-people-spend-online-2hrs-51-mins-a-day
137. we need to take responsibility
138. Use your powers for good
139. Code is not neutral
140. http://www.theverge.com/2015/7/1/8880363/google-apologizes-photos-app-tags-two- black-people-gorillas
141. http://www.cambridge-news.co.uk/cambridge-paediatrician-8217-s-outrage-pure-gym/ story-26188693-detail/story.html
142. We’re not just building cool stuff
143. Designer?
150. decentralised, private, open, interoperable, accessible, secure & sustainable
151. decentralised, private, open, interoperable, accessible, secure & sustainable respects human rights
152. decentralised, private, open, interoperable, accessible, secure & sustainable respects human rights
153. decentralisation
156. Not under our control
158. The NSA woke up and said “Corporations are spying on the Internet, let’s get ourselves a copy” “ — Bruce Schneier https://www.schneier.com/news/archives/2014/04/surveillance_is_the.html
159. decentralised, private, open, interoperable, accessible, secure & sustainable respects human rights
160. private
161. Decentralisation + Analytics
163. Self-hosted analytics http://piwik.org
164. decentralised, private, open, interoperable, accessible, secure & sustainable respects human rights
165. open
167. Open + Analytics
169. decentralised, private, open, interoperable, accessible, secure & sustainable respects human rights
170. interoperable
173. Interoperability + Analytics
174. respects human rights decentralised, private, open, interoperable, accessible, secure & sustainable
175. accessible
176. Accessibility + Analytics Accessibility + Anything
177. Never stop looking for ways to make our work more accessible
178. respects human rights decentralised, private, open, interoperable, accessible, secure & sustainable
179. secure
181. Security + Analytics
182. respects human rights decentralised, private, open, interoperable, accessible, secure & sustainable
183. sustainable
186. decentralised, private, open, interoperable, accessible, secure & sustainable functional, convenient & reliable respects human rights
187. functional, convenient & reliable
188. decentralised, private, open, interoperable, accessible, secure & sustainable functional, convenient & reliable respects human rights respects human effort
189. decentralised, private, open, interoperable, accessible, secure & sustainable functional, convenient & reliable delightful respects human rights respects human effort
190. decentralised, private, open, interoperable, accessible, secure & sustainable functional, convenient & reliable delightful respects human rights respects human effort respects human experience
191. delightful
192. Quit painting a thin layer of cuteness over fundamentally broken interfaces. “ — “Dear Tech, You Suck at Delight” — Sara Wachter-Boettcher https://medium.com/@sara_ann_marie/dear-tech-you-suck-at-delight-86382d101575
193. respects human rights respects human effort respects human experience The 3 Rs of Ethical Design decentralised, private, open, interoperable, accessible, secure & sustainable functional, convenient & reliable delightful
194. functional, convenient & reliable delightful respects human effort respects human experience decentralised, private, open, interoperable, accessible, secure & sustainable does not respect human rights
195. functional, convenient & reliable delightful does not respect human rights respects human effort respects human experience
196. does not respect human rights respects human effort respects human experience 99.99999% of Silicon Valley
199. We need to disrupt the disruptors
200. So what about analytics?
201. Do we need analytics?
202. Are we analysing more than we need?
203. We need to ask ourselves these questions
204. We are the gatekeepers of the web
205. We can’t defer responsibility
206. But if don’t like what Google/Facebook/ Other Corporations are doing, I don’t have to use their services…
207. NOPE OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N
208. Social networks are society
209. Email, booking services, ecommerce are our new everyday things
210. We deserve to be able to take part in society, and use everyday things without our privacy being compromised
211. But what if I trust Google/ Facebook/Other Corporation with my data?
212. Google isn’t your lover. You shouldn’t have to trust them.
213. If it fits with the Ethical Design Manifesto, you don’t need to trust it.
214. Not worrying about your data is privilege
215. Not worrying about your data is privilege
216. You’re not just making these decisions for yourself
217. If you support your business with tracking, you are making that decision for your visitors
218. As developers we need to make wise decisions on behalf of our visitors
222. https://www.wired.com/2014/11/whatsapp-encrypted-messaging/
223. https://www.privateinternetaccess.com/blog/2014/11/whatsapp-encryption-shows-value-of- metadata/
224. “ Would Facebook really allow WhatsApp to throw away the business value in a 19-billion acquisition? Of course it wouldn’t. This demonstrates that the snoop value was in the metadata all along: the knowledge of who talks to whom, when, how, and how often. Not in the actual words communicated. — Rick Falkvinge
225. http://www.theverge.com/2016/8/25/12638698/whatsapp-to-start-sharing-user-data-with-facebook
226. http://www.theverge.com/2016/5/18/11701030/google-io-2016-keynote-highlights- announcements-recap
227. http://www.theverge.com/2016/9/21/12994362/allo-privacy-message-logs-google
230. https://www.exchangewire.com/blog/2016/05/18/why-threes-partnership-with-shine-makes- publishers-more-vulnerable-than-ever/
231. “ The web, as it is today, exists because of an implicit understanding that ads pay for the content consumers love and, therefore, need to be seen. — Ben Barokas, co-founder and CEO, Sourcepoint
232. NOPE OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N OPE NOPE NOPE NOPE NOPE N
233. Ads are not the problem. Trackers are the problem.
234. Corporations need to stop treating us like we’re greedy lab rats
235. Question and challenge unethical practices
236. See past the PR
237. t
238. Save our jobs
239. The average Facebook user spends 50 minutes on Facebook a day http://www.nytimes.com/2016/05/06/business/facebook-bends-the-rules-of-audience-engagement-to-its-advantage.html
243. Build and support alternatives
244. Let’s have a positive impact on the world
245. Let’s build products that make the web better
246. Thank you @laurakalbag @indie https://ind.ie https://better.fyi