Comments on: Protecting Data by Being More Open http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/ security, privacy, transparency. Thu, 17 May 2012 19:16:00 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Benlog » Bad and Good News on the “just give me your password” front http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-233362 Benlog » Bad and Good News on the “just give me your password” front Sat, 08 Mar 2008 18:35:13 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-233362 [...] written about how it’s a really bad idea to have web sites asking for your gmail password, “just to load your contacts!” I like the name Jeremy Keith gave it: the Password [...] [...] written about how it’s a really bad idea to have web sites asking for your gmail password, “just to load your contacts!” I like the name Jeremy Keith gave it: the Password [...]

]]> By: Benlog » The Password Anti-Pattern and the Login Redirection Anti-Pattern http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-135228 Benlog » The Password Anti-Pattern and the Login Redirection Anti-Pattern Fri, 12 Oct 2007 18:07:37 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-135228 [...] few weeks ago, I wrote about about how web sites that manage your data should be more open in order to better protect you. Not so surprisingly, I’m not the only one thinking about this [...] [...] few weeks ago, I wrote about about how web sites that manage your data should be more open in order to better protect you. Not so surprisingly, I’m not the only one thinking about this [...]

]]> By: Michael http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-125558 Michael Sun, 30 Sep 2007 15:56:07 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-125558 Hey Ben, I also have at least one friend who caught virus or spyware that took her outlook address book and sent mail on behalf of quechup to all her contacts. ALSO, even "nice" companies make "mistakes". My wife removed her account at LinkedIn but people can still search for her on their site and they will contact her on their behalf. MJM Hey Ben,

I also have at least one friend who caught virus or spyware that took her outlook address book and sent mail on behalf of quechup to all her contacts.

ALSO, even “nice” companies make “mistakes”. My wife removed her account at LinkedIn but people can still search for her on their site and they will contact her on their behalf.

MJM

]]> By: Michael http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-631949 Michael Sun, 30 Sep 2007 15:56:00 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-631949 Hey Ben, I also have at least one friend who caught virus or spyware that took her outlook address book and sent mail on behalf of quechup to all her contacts. ALSO, even "nice" companies make "mistakes". My wife removed her account at LinkedIn but people can still search for her on their site and they will contact her on their behalf. MJM Hey Ben,

I also have at least one friend who caught virus or spyware that took her outlook address book and sent mail on behalf of quechup to all her contacts.

ALSO, even “nice” companies make “mistakes”. My wife removed her account at LinkedIn but people can still search for her on their site and they will contact her on their behalf.

MJM

]]> By: ben http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-114089 ben Mon, 17 Sep 2007 19:22:18 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-114089 Hi Danny, I had not personally used Shelfari, but I did receive an invite from a friend who immediately followed up with a "I'm sorry about the Shelfari spam, I didn't realize it was going to send out emails to everyone, I have just closed my account with them." I just tried your site, and I do see that the message says "invite friends," so it was wrong of me to put you in the same category as Quechup. I will shortly add an update to this blog entry. That said, I would suggest being even clearer and making it less easy to mistakenly spam everyone in your address book: don't select everyone by default, and add one more warning that emails are going to be sent. That's as much as you can do, of course, the rest needs to be done by the email providers. Hi Danny,

I had not personally used Shelfari, but I did receive an invite from a friend who immediately followed up with a “I’m sorry about the Shelfari spam, I didn’t realize it was going to send out emails to everyone, I have just closed my account with them.”

I just tried your site, and I do see that the message says “invite friends,” so it was wrong of me to put you in the same category as Quechup. I will shortly add an update to this blog entry.

That said, I would suggest being even clearer and making it less easy to mistakenly spam everyone in your address book: don’t select everyone by default, and add one more warning that emails are going to be sent. That’s as much as you can do, of course, the rest needs to be done by the email providers.

]]> By: ben http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-631948 ben Mon, 17 Sep 2007 19:22:00 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-631948 Hi Danny, I had not personally used Shelfari, but I did receive an invite from a friend who immediately followed up with a "I'm sorry about the Shelfari spam, I didn't realize it was going to send out emails to everyone, I have just closed my account with them." I just tried your site, and I do see that the message says "invite friends," so it was wrong of me to put you in the same category as Quechup. I will shortly add an update to this blog entry. That said, I would suggest being even clearer and making it less easy to mistakenly spam everyone in your address book: don't select everyone by default, and add one more warning that emails are going to be sent. That's as much as you can do, of course, the rest needs to be done by the email providers. Hi Danny,

I had not personally used Shelfari, but I did receive an invite from a friend who immediately followed up with a “I’m sorry about the Shelfari spam, I didn’t realize it was going to send out emails to everyone, I have just closed my account with them.”

I just tried your site, and I do see that the message says “invite friends,” so it was wrong of me to put you in the same category as Quechup. I will shortly add an update to this blog entry.

That said, I would suggest being even clearer and making it less easy to mistakenly spam everyone in your address book: don’t select everyone by default, and add one more warning that emails are going to be sent. That’s as much as you can do, of course, the rest needs to be done by the email providers.

]]> By: Danny http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-114015 Danny Mon, 17 Sep 2007 18:01:33 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-114015 I am an employee of Shelfari and found your blog a bit disconcerting. Shelfari offers its members an option to access their email account through its website solely for the purpose of making it easier for its members to share Shelfari with their friends. We do note that we do not save passwords. We offer two alternative options to inviting friends without importing email addresses from your contact list: 1. Send invites individually http://www.shelfari.com/schaufferwaffer/friends/import?InviteManually=true 2. Copy and paste the text below into an email then send the email to friends you would like to invite. I just joined Shelfari to connect with other book lovers. Come see the books I love and see if we have any in common. Then pick my next book so I can keep on reading. We also offer Members to send an invite with a personalized message. Per the instructions in the invitation we do not that a follow-up email will be sent out and give the option to block it.No more emails are sent to friends after the follow up email. I am an employee of Shelfari and found your blog a bit disconcerting.
Shelfari offers its members an option to access their email account through its website solely for the purpose of making it easier for its members to share Shelfari with their friends. We do note that we do not save passwords.
We offer two alternative options to inviting friends without importing email addresses from your contact list:
1. Send invites individually
http://www.shelfari.com/schaufferwaffer/friends/import?InviteManually=true
2. Copy and paste the text below into an email then send the email to friends you would like to invite.

I just joined Shelfari to connect with other book lovers. Come see the books I love and see if we have any in common. Then pick my next book so I can keep on reading.

We also offer Members to send an invite with a personalized message.

Per the instructions in the invitation we do not that a follow-up email will be sent out and give the option to block it.No more emails are sent to friends after the follow up email.

]]> By: Danny http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-631947 Danny Mon, 17 Sep 2007 18:01:00 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-631947 I am an employee of Shelfari and found your blog a bit disconcerting. Shelfari offers its members an option to access their email account through its website solely for the purpose of making it easier for its members to share Shelfari with their friends. We do note that we do not save passwords. We offer two alternative options to inviting friends without importing email addresses from your contact list: 1. Send invites individually http://www.shelfari.com/schaufferwaffer/friends/import?InviteManually=true 2. Copy and paste the text below into an email then send the email to friends you would like to invite. I just joined Shelfari to connect with other book lovers. Come see the books I love and see if we have any in common. Then pick my next book so I can keep on reading. We also offer Members to send an invite with a personalized message. Per the instructions in the invitation we do not that a follow-up email will be sent out and give the option to block it.No more emails are sent to friends after the follow up email. I am an employee of Shelfari and found your blog a bit disconcerting.
Shelfari offers its members an option to access their email account through its website solely for the purpose of making it easier for its members to share Shelfari with their friends. We do note that we do not save passwords.
We offer two alternative options to inviting friends without importing email addresses from your contact list:
1. Send invites individually
http://www.shelfari.com/schaufferwaffer/friends/import?InviteManually=true
2. Copy and paste the text below into an email then send the email to friends you would like to invite.

I just joined Shelfari to connect with other book lovers. Come see the books I love and see if we have any in common. Then pick my next book so I can keep on reading.

We also offer Members to send an invite with a personalized message.

Per the instructions in the invitation we do not that a follow-up email will be sent out and give the option to block it.No more emails are sent to friends after the follow up email.

]]> By: ben http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-111471 ben Fri, 14 Sep 2007 08:20:59 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-111471 Adam: sure, I didn't mean to imply that Google is keeping my data completely hostage. What I mean by an API is something that a 3rd-party site can integrate with using a web user interface. You click on "integrate with gmail," you get sent to gmail, where you authorize the app to read your contacts, and it gets a token to access you contacts, or maybe an interface to directly send mail to your contacts if you authorize it. A bit like the Flickr API, or the Facebook platform. But it has to be something that your average user can use. You shouldn't have to download and re-upload a file. Adam: sure, I didn’t mean to imply that Google is keeping my data completely hostage. What I mean by an API is something that a 3rd-party site can integrate with using a web user interface. You click on “integrate with gmail,” you get sent to gmail, where you authorize the app to read your contacts, and it gets a token to access you contacts, or maybe an interface to directly send mail to your contacts if you authorize it. A bit like the Flickr API, or the Facebook platform.

But it has to be something that your average user can use. You shouldn’t have to download and re-upload a file.

]]> By: ben http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/comment-page-1/#comment-631946 ben Fri, 14 Sep 2007 08:20:00 +0000 http://benlog.com/articles/2007/09/13/protecting-data-by-being-more-open/#comment-631946 Adam: sure, I didn't mean to imply that Google is keeping my data completely hostage. What I mean by an API is something that a 3rd-party site can integrate with using a web user interface. You click on "integrate with gmail," you get sent to gmail, where you authorize the app to read your contacts, and it gets a token to access you contacts, or maybe an interface to directly send mail to your contacts if you authorize it. A bit like the Flickr API, or the Facebook platform. But it has to be something that your average user can use. You shouldn't have to download and re-upload a file. Adam: sure, I didn’t mean to imply that Google is keeping my data completely hostage. What I mean by an API is something that a 3rd-party site can integrate with using a web user interface. You click on “integrate with gmail,” you get sent to gmail, where you authorize the app to read your contacts, and it gets a token to access you contacts, or maybe an interface to directly send mail to your contacts if you authorize it. A bit like the Flickr API, or the Facebook platform.

But it has to be something that your average user can use. You shouldn’t have to download and re-upload a file.

]]>