Privacy is dead. Can I have your password?

PRIVACY IS DEAD

Can i have your password?

TLA APR 2019

bryan.n.jones@nashville.gov

ETHICS

UN DeclaratIon
of Human RIghts

Code of Ethics for Librarians and Other Information Professionals, Item 3: Librarians and other information workers respect personal privacy, and the protection of personal data, necessarily shared between individuals and institutions.The relationship between the library and the user is one of confidentiality and librarians and other information workers will take appropriate measures to ensure that user data is not shared beyond the original transaction. Librarians and other information workers support and participate in transparency so that the workings of government, administration and business are opened to the scrutiny of the general public. They also recognize that it is in the public interest that misconduct, corruption and crime be exposed by what constitute breaches of confidentiality by so-called ‘whistleblowers’.

IFLA Code
of EthIcs
for LIbrarIans &
Other InformatIon
Workers

US ConstItutIon

Amendment #1

US ConstItutIon

Amendment #4

ALA Code of EthIcs

Article #3

ALA BIll of RIghts

Article #7

TLA Core Values

Value #2

TLA IF
CommIttee
charter

ETHICS

& THE LAW

"Privacy policies are legal statements to get us out
of our ethical obligations."

The

Privacy

PARADOX

HOW DID WE
GET HERE?

dark patterns

What is bad
about it?

malware / phishing / doxing

What does
this have to do
with libraries?

crappy vendor contracts

public internet

public nets

more public nets

I'll just leave
this here.

What can we
do about it?

DuckDuckGo

Tor Browser

Wipe'em!
Wipe'em good!

Google Analytics

Turn off 'Display Features'

Turn off 'Remarketing'

Turn off 'Advertising Reporting'

Anonymize IP settings

Set the data retention
to the shortest period

Make opting-out
as easy as possible

What you collect & why

How you protect it

Who you share it with

Make "opt-in" the default

Make "opt-out" easy

gnarly vendor contracts

Communities trust libraries. If we don't protect patrons' privacy we violate that trust. Not only in digital spaces. The physical space of the library should be a non-surveilled space. You might hear that privacy is dead. This ship has sailed. Well, can I have your password? Climate change is bad, does that mean we are going to stop? A few high profile men have brought to justice for sex crimes, does that mean we've solved the problem of sexual violence? Grand juries rarely recommend charges against the police. Does that mean were going stop fighting for justice in our communities? We're libraries. We fight. I love and respect my mom. She's a senior citizen with a high school education. She uses an Android tablet that no longer gets security updates. She doesn't deserve annoying, misleading ads. She does not deserve her 4th amendment rights violated for ads. She does not deserve malware, identity theft, fakes news or a loan with criminally bad terms. More importantly she has a human right not be surveilled.

I love and
respect my mom.

Phones are fundamentally insecure. If you are using a phone your phone company knows your general location at all times. And we know now the sell this info. The text function in your phone is unencrypted unless you use a special app. We know on Android many apps collect data even without you knowing. Apple isn't open source so it is harder to study. A lot of apps have remote microphone access. The phone knows when you sleep, when you poop, who your friends are, who you work with, that what you think about, what music and tv shows you like, what porn you like, what church you feel guilty about not going to, and if you wear a fitness tracker it knows when you dream, it knows a lot more. No one has more info about you than your phone. Not your doctor, not your mom, not your spouse. Well, maybe Google if your phone was made by Google. DMCA makes it illegal for you to root your phone. You are only allowed to root your phone and change its software because of a special exception to DMCA determined by Librarian of Congress as recommended by the Register of Copyrights.

Phones are a dumpster fire.

i don't know where
to put this slide.

PRIVACY IS DEAD

TLA APR 2019

ETHICS

UN DeclaratIon of Human RIghts

IFLA Code of EthIcs for LIbrarIans & Other InformatIon Workers

US ConstItutIon

US ConstItutIon

ALA Code of EthIcs

ALA BIll of RIghts

TLA Core Values

TLA IF CommIttee charter

ETHICS

& THE LAW

The

Privacy

PARADOX

HOW DID WE GET HERE?

dark patterns

What is bad about it?

malware / phishing / doxing

What does this have to do with libraries?

crappy vendor contracts

public internet

public nets

more public nets

I'll just leave this here.

What can we do about it?

DuckDuckGo

Tor Browser

Wipe'em! Wipe'em good!

Google Analytics

Turn off 'Display Features'

Turn off 'Remarketing'

Turn off 'Advertising Reporting'

Anonymize IP settings

Set the data retention to the shortest period

Make opting-out as easy as possible

What you collect & why

How you protect it

Who you share it with

Make "opt-in" the default

Make "opt-out" easy

gnarly vendor contracts

I love and respect my mom.

Phones are a dumpster fire.

i don't know where to put this slide.

UN DeclaratIon
of Human RIghts

IFLA Code
of EthIcs
for LIbrarIans &
Other InformatIon
Workers

TLA IF
CommIttee
charter

HOW DID WE
GET HERE?

What is bad
about it?

What does
this have to do
with libraries?

I'll just leave
this here.

What can we
do about it?

Wipe'em!
Wipe'em good!

Set the data retention
to the shortest period

Make opting-out
as easy as possible

I love and
respect my mom.

i don't know where
to put this slide.