Article in process…
A previous posting, “Will Google Do The Right Thing” resulted in an outpouring of questions & feedback. Many readers asked for an explanation of methods cited. This follow-up is incomplete. It is still being written and amended.
In the article directly beneath this one, I claimed that Google can protect individual user data and privacy without detriment to their revenue model. In fact, it would be a great stride in the user perception of trust and a commitment to privacy. I also claimed that Google could modify their services in such a way that would prevent any leak of personal information, even if compelled to turn over data by totalitarian governments around the world.
The article has become popular. I have been asked by readers to peel back the cover and even approached by Google. (Perhaps it will lead to an affiliation. I admire Google, and would love to work with the company).
The magic behind my claims is a method of collecting and storing data that prevents anyone but the intended party from making sense of what is stored. It’s not based on just data encryption, but rather a clever outgrowth of encryption technology that I call blind signaling and response.
Before we can understand blind signaling and response, it helps to understand classic signaling.
When someone has a need, he can search for a solution. When an individual is aware of their needs and problems, that’s typically the first step in marrying a problem to a solution. But in a marketing model, a solution (sometimes, one that a user might not even realize he would desire) reaches out to individuals.
Of course the problem with unsolicited marketing is that the solution being hawked may be directed at recipients who have no matching needs. Good marketing is a result of careful targeting. The message is sent or advertised only to a perfect audience, filled with Individuals who are glad that the marketer found them. Poor marketing blasts messages at inappropriate lists or posts advertisements in the wrong venue. For the marketer (or Spam email sender), it is a waste of resources and sometimes a crime. For the recipient of untargeted ads and emails, it is a source of irritation and an involuntary waste of resources, especially of the recipient’s attention.
Consider a hypothetical example of a signal and its response:
Pixar animators consume enormous computing resources creating each minute of animation. Pixar founder, John Lasseter, has many CGI tools at his disposal, most of them designed at Pixar. As John plans the budget for Pixar’s next big film, let’s suppose that he learns of a radical new animation theory called Liquid Flow-Motion that may streamline some of the most complex and costly animation processes. His team has yet to build or find a practical application that benefits animators, but John is determined to search everywhere.
Method #1: A consumer in need searches & signals
Despite a lack of public news on the nascent technique, John Lasseter is convinced that there must be some workable code in a private lab, a university, or even at a competitor.
And so, Lasseter creates a web page and uses SEO techniques to attract attention. The web page is a signal. It broadcasts to the world (and hopefully to relevant parties) that Pixar is receptive to contact from anyone engaged in Liquid Flow-Motion research. With Google’s phenomenal search engine and the internet’s reach, this method of signaling may work, but a successful match involves a bit of luck. Individuals engaged in the new art may not be searching for outsiders. In fact, they may not be aware that their early stage of development would be useful to anyone.
Method #2: Google helps marketers target relevant consumers
Let’s discuss how Google facilitates market-driven signaling and a relevant marketing response today and let us also see if there is room for an improvement.
At various times in the past few weeks, John had Googled the phrase “Liquid Flow-Motion” and some of the antecedents that the technology builds upon. John also signed up for a conference in which there was a lecture unit on the topic (the lecture was not too useful. It was given by his own employee and covered familiar ground). He also mentioned the technology in a few emails.
Google’s profile for John made connections between his browser, his email and his searches. It may even have factored in location data from John’s Android phone. In Czechoslovakia, a grad student studying Flow-Motion has created the first useful tool. Although he doesn’t know anything about Google Ad Words, the university owns 75% of the rights to his research. They incorporate key words from research projects and buy up the Google Ad Words “Liquid Flow-Motion”.
Almost immediately, John Lasseter notices very relevant advertising on the web pages that he visits. During his next visit to eBay, he notices a home page photo of a product that embodies the technique. The product was created in Israel for a very different application. Yet it is very relevant to Pixar’s next film. John reaches out to both companies–or more precisely, they reached out in response to his signal, without even knowing to whom they were replying.
Neat, eh? What is wrong with this model?
For many users, the gradual revelation that an abundance of very personal or sensitive data is being amassed by Google and the fact that it is being marketed to unknown parties is troubling. Part of the problem is perception. In the case described above and most other cases in which the Google is arbiter, the result is almost always to the user’s advantage. But this fact, alone, doesn’t change the perception.
But consider Google’s process from input to output: the collection of user data from a vast array of free user services and the resulting routing of ads from marketing partners. What if data collection, storage and manipulation could be tweaked so that all personal data, including the participation of any user were completely anonymized. Sounds crazy, right? If the data is anonymized, it’s not useful.
Wrong.
Method #3: Incorporate blind signaling & response into AdWords
— and across the board
A signaling and response system can be constructed on blind credentials. The science is an offshoot of public key cryptography and is the basis of digital cash (at least, the anonymous form). It enables a buyer to satisfy a standard of evidence (the value of their digital cash) and also demonstrate that a fee has been paid, all without identifying the buyer or even the bank that guarantees cash value. The science of blind credentials is the brainchild of David Chaum, cryptographer and founder of DigiCash, a Dutch venture that made it possible to guaranty financial transactions without any party (including the bank) knowing any of the other parties.
The takeaway from DigiCash and the pioneering work of David Chaum is that information can be precisely targeted–even with a back channel–without storing or transmitting any data that aids in identifying the source or target. Even more interesting is that the information that facilitates replying to a signal can be structured in a way that is useless to both outsiders and even to the database owner (in this case, Google).
XXXXX (choose the boogeyman: Google, the government, your employer, your grandmother, whatever)
If you travel to another country and walk into a bar (and if you are not a criminal, nor a particularly famous or newsworthy person), it’s reasonable to assume that you can ask another customer if he knows where to find a good Cuban cigar. When you return to your country, your interest in cigars will probably remain private and so will the fact that you met with this particular individual or even walked into that bar.
Gradually, the internet is facilitating at a distance the privileges and empowerment that we take for granted in a personal meeting. With end-to-end encryption, it has already become possible to conduct a private conversation at a distance. With a TOR proxy and swarm routing, it is also possible to keep the identities of the parties private. But today, Google holds an incredible corpus of data that reveals much of what you buy, think, and fantasize about. To many, it seems that this is part of the Faustian bargain:
- If you want the benefits of Google services, you must surrender personal data
- Even if you don’t want to be the target of marketing,* it’s the price that you pay for using the Google service (Search, Gmail, Drive, Navigate, Translate, Picassa, etc).
Of course, Google stores and act on the data that it gathers from your web habits. But both statements above are false!
a) If Google incorporates Blind signaling technology into its services, you will get all the benefits of each Google service without anyone discovering a useful piece of personal data.
b) Surrendering personal data in a way that does not anonymize particulates it is not “the price that you pay for Google services”. First, Google is paid by the marketer and not individual end users. But more importantly, the marketers can still get the full advantage of sending you relevant, targeted messages while Google protects your privacy en toto! They can take steps to make the data useless to any other party and for any other purpose. Google and their marketing partners will continue to benefit exactly as they do now.
Article in process…
* This is also a matter of perception. You really do want targeted messaging. Even if you hate spam and, like me, prefer to search for a solution instead of have marketers push a solution to you. In a future article, I will demonstrate that every individual is pleased by relevant messaging, even if it is unsolicited, commercial or sent in bulk.


At the end of 2009, Google Chairman, Eric Schmidt made a major gaffe in a 







But now, the NTSB has gone too far. They are recommending a complete ban on the presence of mobile phones in cars. What’s next? Why not Prohibit drivers from talking with passengers? (Apparently, they believe that talking with a caller is more dangerous). Even if studies demonstrate a link between talking and safety, the research technique cannot possibly factor in the dramatically increased safety and reduced driving of those who keep in touch with business and loved ones, especially if the call pertains to their reason for driving in the first place.
At first, the towns fought back, arguing that a Latin cross in the corner of a city seal, an angel or a reference to God represents an aspect of town heritage and history. In fact, some towns were settled for religious reasons during colonial times. They also pointed out that US currency displays the words “In God We Trust” and that religious motifs are enshrined in government documents, buildings, history and even cited by our founding fathers.






What about your health records, magazine subscriptions, tax filings, legal disputes, mortgage records, banking transactions including charge card purchases? Now add your internet use – not just the sites at which you are registered, but every site you have ever visited. Suppose we add videos from convenience stores, traffic enforcement cameras and every ATM that you pass. Don’t forget the snapshot at the toll booth. They have one camera pointed at your face and another at the license plate. Of course, there is also a log entry from the toll payment device on your windshield and the key chain FOB that you use when you buy gas.
As patterns emerge from all of this data, the computer finds converging threads based on individual behavior. Taken alone, the data points are meaningless — someone in Oregon signs for a package; someone using a different name in Rhode Island makes a plane reservation; someone in Pakistan fitting both descriptions checks into a motel and visits a convicted arms smuggler. The mobile phone carried by the last person accepts a phone call at a number previously used by one of the other individuals. Normally, no one could have ever fit these pieces together.

Today, this model has been widely adopted and greatly enhanced by an open source project called 
Example #1



there is an active market for codes issued to small vendors. Here too, the story is the same. You can by the code from owners in any country and they don’t ask for what products you intend to use the code.




I really don’t want to get into a debate about porn, and so, in the past, I would bite my tongue on the issue. I have an unorthodox ap-proach to the issue of online safety, sexual stereotypes and child rearing.
