Skip to main content

'Stalker economy' here to stay

By Bruce Schneier
updated 12:53 PM EST, Tue November 26, 2013
STORY HIGHLIGHTS
  • Bruce Schneier: It's no surprise that companies are tracking us more aggressively
  • Schneier: Keep in mind that you're the product; their real customers are the advertisers
  • He says for example, the "Do Not Track" law is essentially useless to protect consumers
  • Schneier: Many sites run on advertising; companies have little incentive to provide privacy

Editor's note: Bruce Schneier is a security technologist and author of "Liars and Outliers: Enabling the Trust Society Needs to Thrive."

(CNN) -- Google recently announced that it would start including individual users' names and photos in some ads. This means that if you rate some product positively, your friends may see ads for that product with your name and photo attached -- without your knowledge or consent. Meanwhile, Facebook is eliminating a feature that allowed people to retain some portions of their anonymity on its website.

These changes come on the heels of Google's move to explore replacing tracking cookies with something that users have even less control over. Microsoft is doing something similar by developing its own tracking technology.

More generally, lots of companies are evading the "Do Not Track" rules, meant to give users a say in whether companies track them. Turns out the whole "Do Not Track" legislation has been a sham.

Bruce Schneier
Bruce Schneier

It shouldn't come as a surprise that big technology companies are tracking us on the Internet even more aggressively than before.

If these features don't sound particularly beneficial to you, it's because you're not the customer of any of these companies. You're the product, and you're being improved for their actual customers: their advertisers.

This is nothing new. For years, these sites and others have systematically improved their "product" by reducing user privacy. This excellent infographic, for example, illustrates how Facebook has done so over the years.

The "Do Not Track" law serves as a sterling example of how bad things are. When it was proposed, it was supposed to give users the right to demand that Internet companies not track them. Internet companies fought hard against the law, and when it was passed, they fought to ensure that it didn't have any benefit to users. Right now, complying is entirely voluntary, meaning that no Internet company has to follow the law. If a company does, because it wants the PR benefit of seeming to take user privacy seriously, it can still track its users.

Really: if you tell a "Do Not Track"-enabled company that you don't want to be tracked, it will stop showing you personalized ads. But your activity will be tracked -- and your personal information collected, sold and used -- just like everyone else's. It's best to think of it as a "track me in secret" law.

Of course, people don't think of it that way. Most people aren't fully aware of how much of their data is collected by these sites. And, as the "Do Not Track" story illustrates, Internet companies are doing their best to keep it that way.

The result is a world where our most intimate personal details are collected and stored. I used to say that Google has a more intimate picture of what I'm thinking of than my wife does. But that's not far enough: Google has a more intimate picture than I do. The company knows exactly what I am thinking about, how much I am thinking about it, and when I stop thinking about it: all from my Google searches. And it remembers all of that forever.

As the Edward Snowden revelations continue to expose the full extent of the National Security Agency's eavesdropping on the Internet, it has become increasingly obvious how much of that has been enabled by the corporate world's existing eavesdropping on the Internet.

The public/private surveillance partnership is fraying, but it's largely alive and well. The NSA didn't build its eavesdropping system from scratch; it got itself a copy of what the corporate world was already collecting.

There are a lot of reasons why Internet surveillance is so prevalent and pervasive.

One, users like free things, and don't realize how much value they're giving away to get it. We know that "free" is a special price that confuses peoples' thinking.

Google's 2013 third quarter revenue was nearly $15 billion with profit just under $3 billion. That profit is the difference between how much our privacy is worth and the cost of the services we receive in exchange for it.

Two, Internet companies deliberately make privacy not salient. When you log onto Facebook, you don't think about how much personal information you're revealing to the company; you're chatting with your friends. When you wake up in the morning, you don't think about how you're going to allow a bunch of companies to track you throughout the day; you just put your cell phone in your pocket.

And three, the Internet's winner-takes-all market means that privacy-preserving alternatives have trouble getting off the ground. How many of you know that there is a Google alternative called DuckDuckGo that doesn't track you? Or that you can use cut-out sites to anonymize your Google queries? I have opted out of Facebook, and I know it affects my social life.

There are two types of changes that need to happen in order to fix this. First, there's the market change. We need to become actual customers of these sites so we can use purchasing power to force them to take our privacy seriously. But that's not enough. Because of the market failures surrounding privacy, a second change is needed. We need government regulations that protect our privacy by limiting what these sites can do with our data.

Surveillance is the business model of the Internet -- Al Gore recently called it a "stalker economy." All major websites run on advertising, and the more personal and targeted that advertising is, the more revenue the site gets for it. As long as we users remain the product, there is minimal incentive for these companies to provide any real privacy.

Follow @CNNOpinion on Twitter.

Join us at Facebook/CNNOpinion.

The opinions expressed in this commentary are solely those of Bruce Schneier.

ADVERTISEMENT
Part of complete coverage on
updated 9:05 AM EDT, Tue September 16, 2014
LZ Granderson says Congress has rebuked the NFL on domestic violence issue, but why not a federal judge?
updated 7:49 AM EDT, Tue September 16, 2014
Mel Robbins says the only person you can legally hit in the United States is a child. That's wrong.
updated 1:23 PM EDT, Mon September 15, 2014
Eric Liu says seeing many friends fight so hard for same-sex marriage rights made him appreciate marriage.
updated 3:38 PM EDT, Mon September 15, 2014
SEATTLE, WA - SEPTEMBER 04: NFL commissioner Roger Goodell walks the sidelines prior to the game between the Seattle Seahawks and the Green Bay Packers at CenturyLink Field on September 4, 2014 in Seattle, Washington. (Photo by Otto Greule Jr/Getty Images)
Martha Pease says the NFL commissioner shouldn't be judge and jury on player wrongdoing.
updated 9:15 AM EDT, Tue September 16, 2014
It's time for a much needed public reckoning over U.S. use of torture, argues Donald P. Gregg.
updated 8:25 AM EDT, Tue September 16, 2014
Peter Bergen says UK officials know the identity of the man who killed U.S. journalists and a British aid worker.
updated 7:28 AM EDT, Tue September 16, 2014
Joe Torre and Esta Soler say much has been achieved since a landmark anti-violence law was passed.
updated 4:55 PM EDT, Fri September 12, 2014
David Wheeler wonders: If Scotland votes to secede, can America take its place and rejoin England?
updated 8:41 AM EDT, Tue September 16, 2014
Jane Stoever: Society must grapple with a culture in which 1 in 3 teen girls and women suffer partner violence.
updated 4:36 PM EDT, Fri September 12, 2014
World-famous physicist Stephen Hawking recently said the world as we know it could be obliterated instantaneously. Meg Urry says fear not.
updated 6:11 PM EDT, Fri September 12, 2014
Bill Clinton's speech accepting the Democratic nomination for president in 1992 went through 22 drafts. But he always insisted on including a call to service.
updated 6:18 PM EDT, Fri September 12, 2014
Joe Amon asks: What turns a few cases of disease into thousands?
updated 1:21 PM EDT, Thu September 11, 2014
Sally Kohn says bombing ISIS will worsen instability in Iraq and strengthen radical ideology in terrorist groups.
updated 6:31 PM EDT, Tue September 16, 2014
Analysts weigh in on the president's plans for addressing the threat posed by the Islamic State of Iraq and Syria.
updated 9:27 AM EDT, Thu September 11, 2014
Artist Prune Nourry's project reinterprets the terracotta warriors in an exhibition about gender preference in China.
updated 9:36 AM EDT, Wed September 10, 2014
The Apple Watch is on its way. Jeff Yang asks: Are we ready to embrace wearables technology at last?
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT