Brad Feld

Tag: cambridge analytica

A law with good intentions, but horrible side effects, passed yesterday. You probably haven’t heard about it because of the brouhaha over 97,513 other things. It’s called SESTA/FOSTA and the EFF has a good summary of how Lawmakers Failed to Separate Their Good Intentions from Bad Law. Craigslist responded immediately (and rationally) by taking Craigslist Personals offline.

Oh, and as a bonus, the CLOUD Act was buried in the Omnibus spending bill. EFF has an article from six weeks ago that explains why it is A Dangerous Expansion of Police Snooping on Cross-Border Data. The CLOUD Act is an aggressive undermining of existing privacy laws, but no one really cares about online privacy or your data, right?

If you want a glimpse as to the data Facebook has on you, take a look at the analysis Dylan McKay just posted. And then, it a magic trick of epic proportions, it turns out that ‘Lone DNC Hacker’ Guccifer 2.0 Slipped Up and Revealed He Was a Russian Intelligence Officer. I’m shocked – just shocked – that something like this could be true (actually, I’m not – I’ve been saying the DNC / Wikileaks stuff was Russian hackers since the beginning, even after several friends gave me tinfoil caps to keep me safe.)

I don’t expect the Trump campaign knew anything about any of this. Well, except for the news today that showed the Cambridge Analytica’s blueprint for Trump victory. And now, the news that Trump’s new security adviser John Bolton also relied on Cambridge Analytica. Scandalous, just scandalous (well – not really – how about “predictable, just predictable …”)

If you want to understand what can happen to your Facebook data, the Cow Clicker story is both fun and instructive. I remember Cow Clicker well because it was a spoof on FarmVille. And yes, the explanation in the article is very accurate from my perspective. If you want a more mainstream explanation, How Trump Consultants Exploited the Facebook Data of Millions is pretty good.

Expect more outrage and Facebook bashing on all media channels. And lots of talking heads and discussion about what needs to be done. We might even have hearings in Congress. But my guess is that not much will change, the outrage will move onto something else (hey – what happened to North Korea?), Facebook will make a few incomprehensible changes to their security settings, and the laws that get created won’t keep up with the technology.


In 2008, I gave a talk at my 20th-year reunion at MIT Sloan. The title of the talk was something like “Privacy is Dead” and my assertion, in 2008, was that there was no longer any data privacy, anywhere, for anyone.

I’ve been living my life under that assumption since then.

The current Facebook scandal around Cambridge Analytica, and – more significantly – data privacy, shouldn’t be a surprise to anyone. All of my experiences with companies around Facebook data over the years have been consistent with what is nicely called “data leakage” from Facebook out into the world. Facebook’s privacy and data settings have always been complex, have changed regularly over the years, and are most definitely not front and center in the Facebook user experience. And, that data has been easily and widely accessible at many moments in time to any developer who wanted access to it.

Answer the following questions:

  • Do you know what your Facebook privacy settings are?
  • Are your Facebook privacy settings to your liking?
  • Do you understand the implications of your Facebook privacy settings?
  • Do you think your data has always been subject to these current settings?

If the answer to all of these questions is yes, good on you. But, my answers are no to all of them and, unless you do some real work, you probably are answering no to at least two or three of them.

I haven’t used Facebook for a while. I broadcast my blog posts to it, but I’ve never really figured out how to engage properly with it in a way that is satisfying to me. Periodically I think about deleting my Facebook account, but since I’ve been operating under the assumption that privacy is dead since 2008, it doesn’t really bother me that my Facebook data is out in the world.

As I read articles about the current version of the Facebook Data Privacy Meltdown (or whatever name it is ultimately going to get this time around), I’m fascinated by the amplification of “nothing new going on here, but now we are outraged.” A pair of  articles that are a little off the beaten path (just watch CNN if you want the beaten path on this one) include:

The meme of #DeleteFacebook is making the rounds but it’s not new either. Here’s one from 2012.

I’m not sure what I’m going to do, but I do know that I’m not surprised.