Feeds

Congress accuses American Phorm of 'beating consumers'

NebuAd and J. Edgar Google

Build a business case: developing custom apps

When US Congressman Ed Markey asked NebuAd CEO Bob Dykes whether his Phorm-like ad targeting system should require an opt-in, Dykes refused to answer.

"Do you support a policy where the consumer must say 'yes' before you roam through all their personal data and then turn it into an information product that is then sold to other companies?" asked the chairman of the House Subcommittee on Telecommunications and the Internet.

"Mr. Chairman," Dykes replied, "you're forcing me to answer one of those Have-you-stopped-beating-your-wife-recently questions."

"No," Markey said. "The question is 'Have you stopped beating the consumer?'"

Congressman Ed Markey

Ed Markey

This morning, Markey presided over a Subcommittee hearing that explored the privacy implications of NebuAd's system - a deep-packet-inspection setup that tracks the search and browsing activity of web surfers from inside American ISPs - and Dykes was on hand to defend his baby. Though most of the gathered Congresspeople agreed the system should require an opt-in, he insisted they were missing the point.

"I don't think opt-in or opt-out is nearly as important as robust notice to the consumer, so they truly understand what is going on, and then the opportunity to control that," he said.

To translate: He doesn't want an opt-in. That "robust notice" bit was Dykes' refrain throughout the more-than-two-hour hearing. Basically, he's saying that if NebuAd's ISP partners make a point of telling ISP users the system is turned on, an opt-in isn't necessary.

"Opt-in is rare. It's just for situations involving sensitive information, personal information that can harm or embarrass somebody. We've made a particular point of not having any personally identifiable information, not having any sensitive information."

According to Dykes, NebuAd uses a one-way hash to anonymize each user's IP address, and all that search and surfing data is merely used to place users in certain advertising categories. One category might include web surfers looking for luxury cars, Dykes once told us, and another might pool people researching French vacations.

But NebuAd is still tracking all your search and browsing activity. And it looks like this data is shuttled to its servers even if you opt-out.

Plus, the opt-out is cookie-based. And that "robust notice" bit is just talk.

NebuAd has already tracked users on multiple American ISPs, including WOW!, Knology, and Embarq, and notice wasn't always robust.

The essential guide to IT transformation

Next page: Bootnote

More from The Register

next story
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
So, Apple won't sell cheap kit? Prepare the iOS garden wall WRECKING BALL
It can throw the low cost race if it looks to the cloud
Time Warner Cable customers SQUEAL as US network goes offline
A rude awakening: North Americans greeted with outage drama
Shoot-em-up: Sony Online Entertainment hit by 'large scale DDoS attack'
Games disrupted as firm struggles to control network
BT customers face broadband and landline price hikes
Poor punters won't be affected, telecoms giant claims
Netflix swallows yet another bitter pill, inks peering deal with TWC
Net neutrality crusader once again pays up for priority access
prev story

Whitepapers

Top 10 endpoint backup mistakes
Avoid the ten endpoint backup mistakes to ensure that your critical corporate data is protected and end user productivity is improved.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Backing up distributed data
Eliminating the redundant use of bandwidth and storage capacity and application consolidation in the modern data center.
The essential guide to IT transformation
ServiceNow discusses three IT transformations that can help CIOs automate IT services to transform IT and the enterprise
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.