01st Feb2012

Are You Employable in 2012?

by iSpit
Are You Employable in 2012?
Do you have community management skills? Can you set up and man listening posts? Are you an expert at setting up and processing Google Alerts? Can you cleanup, size and manipulate digital pictures and graphics? Are you a PowerPoint Ninja? Do you have more than half of the PC Keyboard macros for Excel under your fingers? Can you write a SQL query? Can you craft custom reports in salesforce? Do you have expertise in a particular kind of CRM software? Can you interpret and respond to questions regarding Google Analytics? Are you facile with FTP software? Are you a master of digital communication in your industry?

These are just a few of the questions you might field in a job interview this year. I just listed a job opening for an administrative assistant and, to be honest, I am appalled at the lack of understanding of how to apply for a job, let alone what might be required to obtain one.

 

Here are a few tips to applying for a job in the information age.

 

Cover Letters Matter — Your cover letter should be in pure text and in the body of an email. No fancy fonts, no images, just text. The topic sentence should be awesome and separate you from the pack. The supporting paragraph should make me want to hire you without looking at your resume. It must, must, must mention the things your prospective employer is seeking and describe why you are the perfect candidate. Proof read this document several times. “I lernt frm xperience that i’m a realy grate receptionist,” is an actual sentence from an actual cover letter I received this week. I have no idea what this person’s résumé looked like, I just copied the sentence for this article and deleted the email.

 

Résumés Matter — Take the time to craft the résumé for the job you are applying for. If you haven’t worked in the industry before, say it in the cover letter and say why you think your experience will apply. If you have worked in the industry, take a moment and figure out what your résumé should look like for this opportunity. Résumés should be .pdf files — do not send word documents or .txt files or PowerPoint documents or anything other than a one-page (two page max) .pdf file.

 

Honesty Matters — Don’t put “Expert in Microsoft Office” on your résumé if you are just “proficient.” During our telephone interview, I will ask you a question that an expert can answer, when you can’t — you’re out. I have no time for people who cannot do honest self-assessments of their capabilities.

 

Skills Matter — This is the Information Age, you need Information Age skills. Yes, you will learn a great deal on the job, but you need to come to the opportunity with very high-level digital skills. Why? Because there are literally a dozen digitally skilled candidates that will apply for this position. They are more cost-effective for me to hire because they can do more for the same money I will have to pay you.

 

Work Ethic Matters — I want people around me who are self-starters and who know that the sentence, “Can I help you?” is the least helpful sentence you can utter. What’s the right way to impress me? “Shelly, I’ve identified this issue. I have three solutions, please tell me which one you would like me implement.” I will do anything for people who approach work in this manner — they are awesome!

 

Understand What Work Is — If you are looking for a skilled job, understand what work is — a mechanism to translate the value of your intellectual property into wealth. This is a non-trivial distinction between a “job for a paycheck” and a career. If you want a job, you are not someone I want to hire for a full-time position. If you have a career, and you are looking to grow by acquiring knowledge, tempering it with wisdom and forging it with failure, I want you on my team!

 

Understand The Value of What You Know — There’s an old cliché, “Youth is wasted on the young.” When you’re looking for a job in 2012, don’t waste the value of your youth. Yes, you may be young and inexperienced, but you have a valuable asset in your age. If you are born after 1989, you are a digital native. This means that you think differently, act differently, and, in fact, are different than the middle-aged hiring manager you’re speaking with. Your inexperience and youth is also a liability. Get smart and use this combination of strength and weakness to your advantage. Our culture aspires to be young — it’s news you can use.

 

What If You Don’t Have The Necessary Skills — This is the key to everyone’s future. You must acquire them. No one can afford to hide behind the affectation that “Digital is for the kids.” It’s nonsense, and it is a virtual guarantee that you are unemployable in the 21st century. You no longer have the luxury of saying it. In fact, you cannot even think it. Social media are being used to “Occupy” places and overthrow governments. If you’re not a social media expert, you are at a strict disadvantage. Facebook and LinkedIn (and 500 other social networks) are replacing email. Google is mapping the interiors of retail stores. Amazon is giving people $5 off of any purchase made by taking a picture of an item in a brick and mortar store and then making the purchase via your mobile device. There is no more analog — the world is digital. And, more to the point, there are now only two kinds of people and two kinds of devices: connected and not connected.

 

Job One — I’m still looking for an administrative assistant with awesome digital skills to work for my executive admin. Will we find the right person? Of course we will. For all of the horrible résumés and cover letters submitted, there were several gems. But the sheer volume of worthless communication from unemployable candidates has been remarkable. If job creation is our number one national priority, maybe we should start by helping people learn how to properly prepare for employment in the Information Age and then, teach some basic job-hunting skills.

25th Jan2012

Manipulation of Prescription Drug Research Data: Merely an Ethical Breach or a Fraudulent Claim?

by iSpit

Pharmaceutical companies are intimately involved in the modern research and development (R&D) world. They conduct clinical trials to satisfy the Food and Drug Administration’s (FDA) regulatory requirements to file new drug applications (NDAs), prove the efficacy of new “uses” for existing products, and often design trials which compare the safety and effectiveness of their product to a competitor. These trials have the dual effect of advancing a body of evidence surrounding a particular therapy and serving as powerful advertising and marketing pieces. According to an insider article, “For a pharmaceutical company, getting research published in a peer-reviewed medical journal is like winning a stamp of approval from its most influential audience. It’s an automatic validation unmatched by any other medium.” 1 This research is used as a selling tool to validate claims made about prescription drugs, assuage worries about negative product effects, and at times, to provide proof that a product is superior to its competitor. At first blush, selling with peer-reviewed clinical trials seems to be the pharmaceutical industry’s way of presenting impartial scientific data about their products. However, when one looks behind the scenes as to how some of these trials are brought to fruition by the industry, it is prudent to question the ethics of this process and whether it is misleading to healthcare professionals (HCPs) and consumers.

The process of generating a string of clinical trials in the pharmaceutical industry has been referred to as “publication planning”. 2 This consists of a timeline of clinical trials studying the efficacy of a specific medical endpoint. This plan takes into account market dynamics, competitors, and other factors that may have an effect on a product throughout its post-NDA life cycle. It ostensibly predicts at what point in time the release of these publications will have the optimal promotional effect. Accounting for the above factors, a publication team determines not only publication timing, but also which authors will make the study most impressive and in what journal the article will be submitted. 3

In terms of authorship, many pharmaceutical companies employ in-house medical writers merely to refine articles and shorten time-to-publication while the principal investigator does most of the writing. In fact, some companies have drafted internal policies to reflect that this is the proper role of a medical writer. However, there is ample evidence that in many cases, internal pharmaceutical company publication teams, or external contract research organizations (CROs) are shaping every facet of the publication process – employing a process known as “ghostwriting. Throughout this article ghostwriting will refer to the process by which a pharmaceutical company or a CRO generates the methods by which data will be accumulated and analyzed; creates an outline for the manuscript; names a cherry-picked author to approve the final product; and pays that author to be listed on the journal submission. 4 Ghostwriting in the prescription drug arena is troublesome because it can conceal bias of the true author and in this context, where listed authors have contributed only marginally, if at all, to writing the manuscript, can constitute plagiarism. 5

An additional concern exists at the point of publication. It has been brought to light by several studies reviewing the medical literature that a significant proportion of safety and efficacy data generated and published in industry-sponsored clinical trials is biased in favor of that company’s product. 6 Furthermore, there is evidence that there has been considerable under-publication of unfavorable data by pharmaceutical companies with respect to specific products. 7 For example, it was recently reported that a German-based pharmaceutical company withheld from federal drug officials the results of a large clinical study indicating a widely used heart surgery drug increased the risks of death and stroke. 8 This is noteworthy because responsible treatment decisions founded on evidence-based medicine are only medically valuable when they rely on data that accurately presents the risk-benefit ratio for a particular product. Prescription by HCPs based on allegedly fraudulent data can pose a serious public health risk, as well as impose an unjust fiscal burden on federal healthcare programs such as Medicare.

To date there have been no legal sanctions against pharmaceutical companies for extreme forms of publication planning, including ghostwriting or underreporting of negative publication results. However, the scientific community has been clear about its position on these issues for some time and the industry has begun to follow. 9 In 2003, the International Committee of Medical Journal Editors (ICMJE), whose chief concern is to address ethical principles with relation to publication in biomedical journals, updated its non-binding uniform requirements for manuscripts submitted to biomedical journals. Applying the narrowest reading of the ICMJE guidelines, ghostwriters fall outside of their recommendations for ethical authorship. In virtually all cases, ghostwriters fail to meet ICMJE’s recommendation that authors make substantial contributions to conception and design of the trial. 10 It is evident that the industry is responsive to the ethical concerns surrounding ghostwriting as the Pharmaceutical Manufacturers of America (PhRMA) recently adopted the ICMJE’s guidelines as conditions for authorship as a suggested standard throughout the pharmaceutical industry. 11

While much of the scientific community, and now the pharmaceutical industry, has recognized that ghostwriting is outside the bounds of medical ethics, the question of whether this practice is fraudulent remains in a grey zone. With increased scrutiny by members of Congress and a political environment in which the government is emphasizing the importance of curbing fraud and abuse in the Medicare and Medicaid systems, it seems likely that an example could be made of a company involved in a ghostwriting scandal – particularly when it can be shown that a company not only hires ghostwriters, but has also keeps unfavorable scientific data from reaching the medical literature. 12

It is possible to get an idea about how the federal government is currently thinking about the issue of ghostwriting by noting Senator Charles Grassley’s recent inquiry into this practice. Senator Grassley has written several letters to several healthcare players, including a pharmaceutical company inquiring about ghostwriting. 13 It is interesting to note how the Senator frames his concerns. In each case, he characterizes ghostwritten studies as “subtle advertisements rather than publications of independent research”, and noted the significant impact this could have on physicians’ prescribing behavior, “which in turn affects the American taxpayer because the Medicare and Medicaid programs pay billions of dollars for prescription drugs.” 14 In short, the Senator seems to be following the federal dollars and subtly pointing out to parties benefiting from taxpayer funds that the practice of ghostwriting is unethical at best. Furthermore, Senator Grassley also uses language in his letter to a pharmaceutical company suggesting that taxpayer dollars should only be spent on those prescription drugs that are “safe and effective”. 15 This language tracks the Federal Food, Drug, and Cosmetics Act (FDCA) which mandates that each use of an approved prescription drug must be found to be safe and effective on the basis of adequate and well-controlled clinical trials. 16

Based on where this issue currently stands, attorneys may craft arguments alleging that these practices violate provisions of the False Claims Act (FCA). 17 Specifically, it may be argued that when a company submits a body of evidence skewed in its favor and reported in ghost-authored studies to the FDA for NDA-approval, the company is fraudulently and falsely inducing the FDA into believing that the risk-benefit calculus for its product is more favorable than the totality of the evidence demonstrates and is thus not safe and effective under the FDCA. Alternatively, under FDA’s exclusivity around “uses” regime, one could raise the argument that a company has been granted a new indication for its existing product based on fraudulent data as above. This can be construed as off-label promotion, which has been demonstrated to have severe FCA implications. 18 In both of the above scenarios, products determined to be unsafe and ineffective for any indication are ineligible for reimbursement under Medicare or Medicaid. Any federal dollars that have been spent on reimbursement for those products could be found to have been fraudulently induced under the FCA.

While there is ample room for pharmaceutical companies to defend themselves against these allegations, the current environment is one in which it is only a matter of time before research practices in the industry come under intense scrutiny – the adoption of new PhRMA guidelines suggests that this time has already come. Whether claims of fraudulent research practices will prevail under the FCA is unclear. What is also certain is the propensity for this type of publicity to have a significant negative impact on the image of pharmaceutical companies, as well as an undermining of the public’s trust in the integrity of the medical research system as a whole.

The new guidelines issued by PhRMA strengthening disclosure obligations for authors of medical manuscripts and adopting ICMJE guidelines for authorship is a step in the right direction. 19 While these guidelines have been criticized as doing no more than increasing the burden to disclose conflicts, they do recommend a thorough description of the study sponsor’s influence on study design, data collection and writing of the publication. 20 They do not go as far as banning third party authoring of manuscripts, but they do go a long way in increasing the transparency of the process. It is in the interest of corporate leaders to compare their research practices to the guidelines set forth by PhRMA and continue to question whether their research practices are developing an accurate body of evidence upon which to promote their products.


1Wendy Balter et al., The P’s and Q’s of Publication Planning, 23 Pharm. Exec. 130 (2000).
2Adriane Fugh-Berman & Susanna J. Dodgson, Ethical Considerations of Publication Planning in the Pharmaceutical Industry, 4 Open Med. 33, 33 (2008).
3Id.
4Sergio Sismondo, Ghost Management: How much of the Medical Literature is Shaped behind the Scenes by the Pharmaceutical Industry, 9 PLoS Med. 286, 286 (2007).
5Sheldon Krimsky, When Conflict-of-Interest is a Factor in Scientific Misconduct, 26 Med. & L. 447, 452 (2007).
6Sismondo, supra at note 4.
7Erick H. Turner, Selective Publication of Antidepressant Trials and Its Influence on Apparent Efficacy, 358 N. Eng. J. Med. 252, 252 (2008).
8Gardiner Harris, F.D.A. says Bayer failed to reveal drug risk study, N.Y. Times, Sept. 30, 2006.
9Natasha Singer & Duff Wilson, Medical Editors Push for Ghostwriting Crackdown, N.Y. Times, Sept. 18, 2009 at B1.
10International Committee of Medical Journal Editors, Uniform Requirements for Manuscripts Submitted to Biomedical Journals: Writing and Editing for Biomedical Publication (2003), http://www.icmje.org/urm_full.pdf.
11Pharmaceutical Research and Manufacturers of America, Principles on Conduct of Clinical Trials, Communication of Clinical Trial Results (2009), http://www.phrma.org/files/042009_Clinical%20Trial%20Principles_FINAL.pdf.
12John K. Inglehart, Finding Money for Health Care and Reform – Rooting Out Waste, Fraud, and Abuse, http://healthcarereform.nejm.org/?p=416#
13Letter from Senator Charles Grassley, Ranking Member, Senate Committee on Finance, to DesignWrite Inc. ( Dec. 12, 2008), http://finance.senate.gov/press/Gpress/2008/prg121208a.pdf.
14Letter from Senator Charles Grassley, Ranking Member, Senate Committee on Finance, to Wyeth Pharmaceuticals ( Dec. 12, 2008), 008/prg121208.pdf. (replies were received by Senator Grassley’s office responding to his inquiry surrounding their ghostwriting policies. In January 2009, Senator Grassley re-introduced S.301, Physician Payments Sunshine Act of 2009. The bill would amend Title XI of the Social Security Act to provide for transparency in the relationship between physicians and manufacturers of drugs, devices, biologicals, or medical supplies for which payment is made under Medicare, Medicaid, or SCHIP. This bill has been referred to the Senate Committee on Finance.
15Id.
16Federal, Food, Drug, and Cosmetics Act § 505(b)(1)(a), 21 U.S.C. § 355 (2000).
1731 U.S.C. § 3729(a) (2008).
18Press Release, Department of Justice, Justice Department Announces Largest Health Care Fraud Settlement in its History – Pfizer to Pay $2.3 Billion for Fraudulent Marketing ( Sept. 2, 2009), http://www.fbi.gov/pressrel/pressrel/pressrel09/justice_090209.htm.
19Pharmaceutical Research and Manufacturers of America, supra at note 8.
20Id.
18th Jan2012

US Congressmen Ask FTC To Investigate Facebook Cookies

by iSpit

Two US congressmen today asked the Federal Trade Commission (FTC) to investigate recent accusations that Facebook tracks its users even after they log out of the social network, an issue the company says it has since fixed. Edward Markey, a Massachusetts Democrat, and Joe Barton, a Texas Republican, want the FTC to take a closer look at Facebook’s business practices.

You can read the full two-page letter yourself: FTC Facebook Letter – September 28, 2011 (PDF). I’ve also typed up the relevant excerpt below:

Facebook has admitted to collecting information about its users even after its users had logged out of Facebook. Facebook was able to obtain this information when users visited websites that connect with Facebook, including websites with “Like” buttons. There are an estimated 905,000 sites that contain the “Like” button.

As co-Chairs of the Congressional Bi-Partisan Privacy Caucus, we believe that tracking user behavior without their consent or knowledge raises serious privacy concerns. When users log out of Facebook, they are under the expectation that Facebook is no longer monitoring their activities. We believe this impression should be the reality. Facebook users should not be tracked without their permission.

This past weekend, self-proclaimed hacker Nik Cubrilovic accused Facebook of tracking its users even if they log out of the social network. He explained that even after logging out of the service, whenever he visited a website that had a Facebook plugin, information including his account ID was still being sent to Palo Alto.

The company responded by denying the claims and offering an explanation as to why its cookies behave the way they do. The company explained that it does not track users across the Web and its cookies are used to personalize content. As for the logged-out cookies, Facebook said they are used for safety and protection.

Yesterday, Cubrilovic said Facebook made changes to the logout process, and that the cookies in question now behave as they should. They still exist, but they no longer send back personally-identifiable information after you log out. The company also took the time to explain what each cookie is responsible for.

Cubrilovic offered the following conclusion to the whole fiasco:

Facebook has changed as much as they can change with the logout issue. They want to retain the ability to track browsers after logout for safety and spam purposes, and they want to be able to log page requests for performance reasons etc. I would still recommend that users clear cookies or use a separate browser, though. I believe Facebook when they describe what these cookies are used for, but that is not a reason to be complacent on privacy issues and to take initiative in remaining safe.

Facebook engineer Gregg Stefancik made this concluding statement in a comment on this blog:

I’m an engineer who works on these systems. I want to make it clear that there was no security or privacy breach. Facebook did not store or use any information it should not have. Like every site on the internet that personalizes content and tries to provide a secure experience for users, we place cookies on the computer of the user. Three of these cookies on some users’ computers included unique identifiers when the user had logged out of Facebook. However, we did not store these identifiers for logged out users. Therefore, we could not have used this information for tracking or any other purpose. In addition, we fixed the cookies so that they won’t include unique information in the future when people log out.

10th Dec2011

Bullsh*t: “Carrier IQ Is Good For You, So Why Get So Spun Up?”

by iSpit

Carrier IQ provides software for carriers to track issues on your phone to help make the service you pay for better. So why in the world are so many people spun up about the software?

The major news of the week is obviously the Carrier IQ controversy (see ZDNet related links below for lots of coverage) and I held off posting something until I had a chance to read everything out there and see if this was one of those issues that gets blown out of proportion by the media or if this was a real concern. In my opinion, the media has made it more malicious than it really is and I am not concerned about my phone usage at all.

A few years back I was asked if I could install software on my phone so that a company could track my usage patterns to improve services. I accepted and was paid something like $5 to $10 a month for each phone used and sending this data. If the carriers need this data from consumers, they should have a pop-up that states you can opt out or opt in and get $5 per month off of your bill.

Then again, according to the Carrier IQ statement (here is another statement in PDF):

Three of the main complaints we hear from mobile device users are (1) dropped calls, (2) poor customer service, and (3) having to constantly recharge the device. Our software allows Operators to figure out why problems are occurring, why calls are dropped, and how to extend the life of the battery. When a user calls to complain about a problem, our software helps Operators’ customer service more quickly identify the specific issue with the phone.

It sounds to me like the software is designed to BENEFIT consumers and is not being used to track and target you. Consumers complain about these issues and if the carriers don’t do something about it then they will continue to complain. I don’t think we can complain about services and then not give the carriers any means to help resolve the issues. The software has apparently been running for some time on a number of handsets and I wonder if anyone has noticed any untoward behavior as a result. It today’s online world we give up a lot of privacy and it looks like the Carrier IQ issue is nothing to really be concerned about.

09th Dec2011

Finding And Cleaning Out Your Smartphone’s Carrier IQ Poison

by iSpit

Isn’t it wonderful? It turns out that a spyware rootkit from a company called Carrier IQ is on hundreds of millions of Android and iOS smartphones and tablets. Only Windows Phone-powered smartphones seems to have avoiding this program that reports on almosteverything you do with your phone.

In the case of iPhones, it appears that Apple bakes this snooper into every phone. With other smartphones, the carriers, such as AT&T and Sprint, add it into your phones’ firmware before it gets into your hands.

Carrier IQ and the carriers aren’t talking much about their snooping ways. In a press released published weeks ago Carrier IQ stated that,

Carrier IQ delivers Mobile Intelligence on the performance of mobile devices and networks(PDF Link) to assist operators and device manufacturers in delivering high quality
products and services to their customers. We do this by counting and measuring operational information in mobile devices – feature phones, smartphones and tablets. This information is used by our customers as a mission critical tool to improve the quality of the network, understand device issues and ultimately improve the user experience. Our software is embedded by device manufacturers along with other diagnostic tools and software prior to shipment.

While we look at many aspects of a device’s performance, we are counting and summarizing performance, not recording keystrokes or providing tracking tools. The metrics and tools we derive are not designed to deliver such information, nor do we have any intention of developing such tools. The information gathered by Carrier IQ is done so for the exclusive use of that customer, and Carrier IQ does not sell personal subscriber information to 3 rd parties. The information derived from devices is encrypted and secured within our customer’s network or in our audited and customer-approved facilities.

Our customers [which are the telephone carriers] have stringent policies and obligations on data collection and retention. Each customer is different and our technology is customized to their exacting needs and legal requirements. Carrier IQ enables a measurable impact on improving the quality and experience of our customers’ mobile networks and devices. Our business model and technology aligns exclusively with this goal.

In short, Carrier IQ is only providing network and end-point analysis tools, and what happens to your data they collect afterwards isn’t their concern. We know however that, far from simply collecting anonymous data, according to Carrier IQ’s own description of their Mobile Service Intelligence: “What’s more, the combination of the MSIP and IQ Insight lets you move seamlessly from broad trend data across many users, through comparative groups down to diagnostic data from individual devices. Now, not only can you identify trends, you have the power to drill down to specific instances, giving you the insight your specialists need to make a difference. That is the power of Mobile Service Intelligence.”

It all sounds so harmless… until you see among other things Carrier IQ’s tools are capturing your text messages.

Yes, there will be times when to troubleshoot a problem with your smartphone, you’re going to need to let your carrier look deeply into your network traffic. But, as a matter of course to let them snoop on your every click? And, the content of your messages!? I don’t think so!

So what can you do?

With iPhones, which we know have the program in them, turning off Carrier IQ’s service is easy if you’re running iOS 5.x Just head to:

Settings > General > About > Diagnostics & Usage

and click “Don’t Send” on.

On iOS3 or 4, I don’t know of any current way to disable the service. If anyone does know, do share.

With Android phones, it’s much trickier, but it can be done. First to see if Carrier IQ, or another remote logging program is running on your Android device, you need to root your phone. How you do that varies wildly from phone to phone. The “easiest” way to do this is to do a Google search for “How to root Your_specific_Phone.”

Then get a copy of Trevor Eckhart’s latest version of his Logging Test App. This program is not available on any Android app. store. It’s an Android application package (APK). To install this, or any other APK app, you need to first download and install an apps installer, like my personal favorite, Infolife’s Easy Installer.

Then download Logging Test to your SD card. For some reason when I tried to download it directly to my phone, the download kept failing. So, I ended up downloading the program first to my PC, and then e-mailed it to myself on my phone as an attachment.

No matter how you get it there when you try to install it, you may get several warning messages about allowing the installation of an application from an unknown source is not recommended. Go ahead and set your phone to allow an application to be installed from an unknown source. After you’re done installing Logging Test you can reset it to the safer setting that insists that an application comes from a known app store before it can be installed.

Once the program is installed, simply click the CIQ Checks button. In a few moments you’ll know if you have the Carrier IQ spy on your phone or if your data’s been safe from it.

 

This is what you want to see from the test: A clear screen.This is what you want to see from the test: A clear screen.

 

In my case, with a Motorola Droid 2 phone running Android 2.3 on the Verizon network, I’m pleased to report that Carrier IQ wasn’t present. According to Verizon, that’s exactly how it should be. In a GigaOM report, Verizon Wireless spokesperson Jeffrey Nelson said, “Any report that Verizon Wireless uses Carrier IQ is patently false.”

 

10th Nov2011

Facebook: Releasing Your Personal Data To YOU “Reveals Our Trade Secrets”

by iSpit

An Austrian group called Europe versus Facebook has so far made 22 complaints regarding the social network’s practices. In the process, the organization has stumbled upon an important tidbit: Facebook says it is not required to give you a copy of some of your personal data if it deems doing so would adversely affect its trade secrets or intellectual property.

On its website, Europe versus Facebook shows how to request a copy of your personal data on the social network. It explains that because of Ireland’s 1988 Data Protection Act (DPA), Facebook has to send you your data on a CD within 40 days of a request.

The organization managed to accidentally get Reddit involved, whose users recently overwhelmed Facebook with data requests by following a slightly altered version of the instructions. The company was forced to e-mail all users requesting data to say it was experiencing a significant delay in processing the requests and will be unlikely to respond within 40 days of the initial request.

Before Reddit found out about Facebook’s request tool, Max Schrems of Europe versus Facebook managed to receive a reply to his request. It was in the form of a CD-ROM storing over 1,222 pages. As he looked through the ridiculously long document however, Schrems noticed that important information was missing, and so he contacted Facebook again asking for the remaining data. Here’s Facebook response:

Dear Mr. Schrems:

We refer to our previous correspondence and in particular your subject access request dated July 11, 2011 (the Request).

To date, we have disclosed all personal data to which you are entitled pursuant to Section 4 of the Irish Data Protection Acts 1988 and 2003 (the Acts).

Please note that certain categories of personal data are exempted from subject access requests.
Pursuant to Section 4(9) of the Acts, personal data which is impossible to furnish or which can only be furnished after disproportionate effort is exempt from the scope of a subject access request. We have not furnished personal data which cannot be extracted from our platform in the absence of is proportionate effort.

Section 4(12) of the Acts carves out an exception to subject access requests where the disclosures in response would adversely affect trade secrets or intellectual property. We have not provided any information to you which is a trade secret or intellectual property of Facebook Ireland Limited or its licensors.

Please be aware that we have complied with your subject access request, and that we are not required to comply with any future similar requests, unless, in our opinion, a reasonable period of time has elapsed.

Thanks for contacting Facebook,
Facebook User Operations Data Access Request Team

When Reddit users started getting e-mails from Facebook about a delay for their data requests, Schrems got one as well. He also got the response above, but I only picked up on it now, after TechDirt linked to the a PDF of both e-mails.

It’s worth noting that also last month, Billy Hawkes, Ireland’s Data Protection Commissioner, announced that he will conduct a privacy audit of Facebook’s activities. Since Facebook’s international headquarters is in Dublin, all users outside the US and Canada could be affected by his findings.

His office decided to investigate the company after Europe versus Facebook’s 22 complaints were covered repeatedly in the media. For reference again, here are all the complaints:

  1. Pokes are kept even after the user “removes” them.
  2. Facebook is collecting data about people without their knowledge. This information is used to substitute existing profiles and to create profiles of non-users.
  3. Tags are used without the specific consent of the user. Users have to “untag” themselves (opt-out). Note: Facebook has announced changes for this.
  4. Facebook is gathering personal data e.g. via its iPhone-App or the “friend finder”. This data is used by Facebook without the consent of the data subjects.
  5. Postings that have been deleted showed up in the set of data that was received from Facebook.
  6. Users cannot see the settings under which content is distributed that they post on other’s pages.
  7. Messages (incl. Chat-Messages) are stored by Facebook even after the user “deleted” them. This means that all direct communication on Facebook can never be deleted.
  8. The privacy policy is vague, unclear and contradictory. If European and Irish standards are applied, the consent to the privacy policy is not valid. Facebook tried improving it earlier this year.
  9. The new face recognition feature is an disproportionate violation of the users right to privacy. Proper information and an unambiguous consent of the users is missing.
  10. Access Requests have not been answered fully. Many categories of information are missing.
  11. Tags that were “removed” by the user, are only deactivated but saved by Facebook.
  12. In its terms, Facebook says that it does not guarantee any level of data security.
  13. Applications of “friends” can access data of the user. There is no guarantee that these applications are following European privacy standards.
  14. All removed friends are stored by Facebook. This was reconfirmed recently.
  15. Facebook is hosting enormous amounts of personal data and it is processing all data for its own purposes. It seems Facebook is a prime example of illegal “excessive processing”.
  16. Facebook is running an opt-out system instead of an opt-in system, which is required by European law.
  17. The Like Button is creating extended user data that can be used to track users all over the internet. There is no legitimate purpose for the creation of the data. Users have not consented to the use.
  18. Facebook has certain obligations as a provider of a “cloud service” (e.g. not using third party data for its own purposes or only processing data when instructed to do so by the user).
  19. The privacy settings only regulate who can see the link to a picture. The picture itself is “public” on the internet. This makes it easy to circumvent the settings.
  20. Facebook is only deleting the link to pictures. The pictures are still public on the internet for a certain period of time (more than 32 hours).
  21. Users can be added to groups without their consent. Users may end up in groups that lead other to false impressions about a person.
  22. The policies are changed very frequently, users do not get properly informed, they are not asked to consent to new policies.

The Irish Data Protection Commissioner will have a tough time going through all of these complaints. Still, I would argue it will be even more difficult for Facebook to show that sending you certain parts of your personal data “would adversely affect trade secrets or intellectual property.”

I have contacted Facebook for more information about this issue and will update this article if I hear back.

05th Aug2011

House Panel Approves Bill Forcing ISPs To Log Users’ Web History

by iSpit

The House Judiciary Committee approved legislation on Thursday that would require Internet service providers (ISPs) to collect and retain records about Internet users’ activity.

CNET reported the bill would require ISPs to retain customers’ names, addresses, phone numbers, credit card numbers, bank account numbers, and temporarily-assigned IP addresses for 12 months.

The bill passed by a vote of 19 to 10, and is aimed at helping law enforcement track down pedophiles.

“The bill is mislabeled,” Rep. John Conyers (D-MI), a senior member of the panel told CNET. “This is not protecting children from Internet pornography. It’s creating a database for everybody in this country for a lot of other purposes.”

The Protecting Children from Internet Pornographers Act of 2011 (H.R. 1981) was sponsored by House Judiciary Committee Chairman Lamar Smith (R-TX) and Congresswoman Debbie Wasserman Schultz (D-FL)

“When investigators develop leads that might result in saving a child or apprehending a pedophile, their efforts should not be frustrated because vital records were destroyed simply because there was no requirement to retain them,” Smith said Thursday.

“This bill requires ISPs to retain subscriber records, similar to records retained by telephone companies, to aid law enforcement officials in their fight against child sexual exploitation.”

The American Civil Liberties Union and 29 other organizations sent a letter (PDF) to Rep. Smith on July 27, claiming that “any data retention mandate is a direct assault on bedrock privacy principles.”

“The data retention mandate in this bill would treat every Internet user like a criminal and threaten the online privacy and free speech rights of every American, as lawmakers on both sides of the aisle have recognized,” Senior Staff Attorney Kevin Bankston of the Electronic Frontier Foundation said.

“Requiring Internet companies to redesign and reconfigure their systems to facilitate government surveillance of Americans‘ expressive activities is simply un-American. Such a scheme would be as objectionable to our Founders as the requiring of licenses for printing presses or the banning of anonymous pamphlets.”

The bill is supported by the National Center for Missing and Exploited Children, the National Center for Victims of Crime, the National Sheriff’s Association, the Major County Sheriff’s Association, the International Union of Police Associations and the Fraternal Order of Police.

01st Jun2011

Children’s Book Parody “Go The F*ck To Sleep” Becomes An Amazon Bestseller

by iSpit

“Go The F— To Sleep”, a humorous book about, well, getting children to sleep, has shot to the number one bestseller on Amazon incredibly fast, and Fast Company thinks it’s because a pirated PDF of the book went viral.

“Go The F— To Sleep” is a “children’s book for adults”, a funny book for parents absolutely exhausted by their children who don’t want to go to sleep, and it struck a chord with many people.

Fast Company goes on to make the case that this shows that piracy can be great for book publishing, because it seems to be the case here. We wouldn’t go so fast.

First of all, “Go The F— To Sleep” is a picture book, not a novel, so the value of the physical object is higher than for a book which is just text.

Secondly, as Fast Company notes, this is the kind of book that many people are going to buy as gag gifts for baby showers and the like. So someone might read the pirated PDF and buy the book, not for themselves, but for a friend. Again, this isn’t applicable for most books.

So we’re not prepared yet to say that “Go The Fuck To Sleep” “exploded the old publishing model.” But it’s certainly a great success story for viral and online marketing. And it also sounds like a hilarious book.

18th Apr2011

Data-enabled Government: How Well Is Our Personal Information Used And Protected? (White Paper)

by iSpit

Data-Enabled Government How Well is Our Personal Information Used and Protected (White Paper)

 

Governments are continually expanding the breadth and depth of data they hold about their citizens, from the provision of public health and welfare services, to law enforcement and public security. In the pursuit of greater efficiency and improved public services, many are digitizing operations and sharing information. However, the issues surrounding how to both deliver better service and safeguard private citizen data are becoming increasingly complex. This white paper examines the key issues surrounding the use and protection of personal data and draws on in-depth interviews with experts working on the front lines of public sector data management, as well as academics and other authorities.

Data-enabled Government: How Well Is Our Personal Information Used And Protected? (White Paper)

23rd Feb2011

US Gov. Software Creates ‘Fake People’ on Social Networks to Promote Propaganda

by iSpit
The US government is offering private intelligence companies contracts to create software to manage “fake people” on social media sites and create the illusion of consensus on controversial issues.

The contract calls for the development of “Persona Management Software” which would help the user create and manage a variety of distinct fake profiles online. The job listing was discussed in recently leaked emails from the private security firm HBGary after an attack by internet activist last week.

Click here to view the government contract (PDF) (original)

According to the contract, the software would “protect the identity of government agencies” by employing a number of false signals to convince users that the poster is in fact a real person. A single user could manage unique background information and status updates for up to 10 fake people from a single computer.

The software enables the government to shield its identity through a number of (more…)

Pages:12»

Switch to our mobile site