Such a familiar phrase. I'm so tired of hearing it from people I know. This is exactly like saying "I'm too broke for anyone to steal my credit card".

What you think of your own importance has zero bearing on how some unknown third party perceives you. Neither can you predict how they will use your information or how it will affect you. It's insane that people spend time and energy on keeping secrets from their relatives and friends (which everyone does) and yet can't see that a third party that actively seeks your information is more likely to cause you harm than people you know. This is a trivial deduction, yet so many people can't comprehend it. They think that because they can't imagine how someone else could screw them up using their personal info, no one could possibly screw them up using their personal info.

Apparently, I'm not eloquent enough to convey this in a verbal conversation. I've tried. Funny thought: maybe I should print the paragraph above on a card and hand it out when someone says the key phrase.

I think this deduction is actually wrong. Ask yourself why you hide some things from your relatives and friends. Could it be because quite a lot of people are really bigoted, and the immediate social costs of them learning more about you would be dire? Whereas data collection currently has only one visible consequence on the individual level: what kind of ads & spam you get, and how much. People correctly recognize this as mostly harmless.

People do react to things that affect them directly. In my country it is widely known that people trying to cheat our IRS or social insurance got busted over Facebook photos, so they know not to present a lifestyle that's different than the one they report to the government. (E.g. if you're consistently reporting low income, don't post photos of your two limos. If you're on a (paid by social insurance) medical leave that restricts you to bed, you'd better not get tagged on a photo placing you in a restaurant.)

EDIT: I don't mean to imply that the government has a backdoor access to this data; it's just there were cases of people dumb enough to share incriminating evidence of fraud that found its way to government investigators, by e.g. being posted publicly.

Net Neutrality in the US was obviously gamed in favour of ISPs, telecoms and large corporations, and the population didn't lift a finger behind posting sanctimoniously on Reddit/HN, and arguing with each other about the semantics of free/un-free markets.

There are definitely some parallels here to the way people now often friend their bosses on Facebook, leading to uncomfortable knowledge sharing.

The key words are "visible" and "currently". There are less visible consequences like identity theft, scams and all kinds of sneaky profiling that affect you without your knowledge. And no one really knows how this data will be used in the future.

I noticed that Americans and part of Europeans (mostly Germans I believe but probably others as well) perceive leaks of personally identifiable information as outrageous but everybody I know here in Eastern Europe are indifferent. Unless they lose money or their company gets a negative PR, they could not care less.

Fellow Eastern European here, I remember I was made fun of by my former colleagues back in 2005-2006 when I was saying that the United States requiring bio data in order to get a traveling visa (I think fingerprints became mandatory for US visa applicants back around that time) was very not ok, I received the same responses that you mention.

Nowadays that the bio thing has started reaching and directly affecting people more to the West the subject is fortunately debated on websites like this one and also in some parts of the Western mainstream media, but back in EE the subject is still ignored or at best is made fun of. I remember attending a street march/protest against bio ID cards/passports a couple of years ago, and the majority of participants were religious people that believed things like "666 the number of the Devil" and all that + a couple of tech people like myself which are still seen as paranoid by our friends and work colleagues. Unfortunately the civil society from this part of the world is totally mute on this type of subjects.

But most people in EE are also way too cynical and demeaning by default and yeah, that's a real problem when issues like these arise. Nobody takes them seriously until something monumental happens.

I know the primary issue is that the SSN wasn't intended for the use case it is used in, but we're at the point now that it is so probably best to protect it in a manner that protects the user/owner.

"If he's this good at making people love him, why didn't he do it before? Because these fools always look up for power. People above you, they never want to share power with you. Why you look to them? People below you, you give them hope, you give them respect, they give you power, 'cause they don't think they have any, so they don't mind giving it up."

You're more likely to get murdered by your spouse than by a stranger. Your kid is more likely to get kidnapped by its parent than a stranger. Statistically speaking, it's the people who fear the unknown bogeyman who are irrational, not those who fear their friend, relative or neighbour.

1) Issues resulting from privacy loss mostly have nothing to do with murder and kidnapping statistics. Far more relevant would be the note that as of 2019 identity theft affected 23% of all US internet users [1]. And that's just one way to misuse your information. There are countless others.

2) Loss of privacy means loss of control over who interacts with your data and when that happens. I don't understand why this simple fact is so hard to grasp.

If your information ends up on sale or in a public data dump, anyone who wants to misuse it will have an opportunity to do so, probably forever. It's up to them to decide whether your info is "worth it" or how to use it.

Something you consider trivial today can be used in an elaborate scam tomorrow. Or it could be used for a social media stink campaign by your unhappy ex. Or something else.

The point is, "I am not important enough to be spied on" is a stupid statement, because whether you are important is determined by context. When you loose your privacy, you lose control over that context.

--

[1] https://www.statista.com/statistics/763130/internet-identity...

Says who? That's not deduction at all. As an example, if you get broken into its far more likely it was someone you know than completely random.

To me, the story reads a lot like a media narrative that has very little to do with users’s actual lives. And I’ve been reading variations on “Why Facebook sucks” and “Why Facebook is doomed” for a very long time. It’s like the “Why this is the year of Linux on the desktop,” but for media companies.

Does anyone else remember reading on Slashdot about how Microsoft is evil and any day now, we're going to move to Linux and revolt? Except that normal people didn't care and didn't notice?

This will not change overnight. Or even after several years. If Facebook fades into irrelevance it will likely be a death by a million paper cuts and not after a short-lived revolution.

What's IE's market share today vs 10 years ago?

How many Windows Phones are in people's pockets?

How many people opened Hotmail/Live accounts in the last year?

People do care, it just takes a long time to see the effects play out.

Your engagement might be low -- mine is almost zero -- but you are still a source of data even if a reduced one. I am not sure even disabling Javascript altogether will help; I am pretty sure they fall back to techniques like your IP history, known devices from which you logged in and few other such techniques.

My gut feeling is they are holding on very tight to their personally identifiable information harvesting practice and won't let go of it anytime soon. Hope I am wrong.

[0] https://curia.europa.eu/jcms/upload/docs/application/pdf/201...

1) Politically. While most users don't care enough to stop using the service, users in the US and Western Europe care enough that politicians who stand up to FB get praise and potentially votes. Looking tough on tech is now a quick political win and that will eventually hurt them, most likely in the EU.

2) Talent wars. HN might not a good proxy for the general population but it's reasonable proxy for people FB wants to hire and the general sentiment around here seems to be I don't want to work for FB anymore. IRL most of my engineering friends don't want to work for FB either.

It's already happening. See last month's New York Times story "‘I Don’t Really Want to Work for Facebook.’ So Say Some Computer Science Students." [1]

1. https://www.nytimes.com/2018/11/15/technology/jobs-facebook-...

Facebook goes to the best schools in the country and hires the best of the best.

They then get 6-figure offers, and shit, have to pay those student loans somehow.

I fear that (1) might turn into a witch hunt -- "all tech is bad". Mass population is not very good at distinguishing nuance, especially when charismatic politicians tell them what to think. But I guess in this case this will work to Facebook's detriment.

As for (2), I haven't thought of that because I don't live in the USA and lack the perspective. Thanks for providing it! I think this might actually hurt FB a lot.

That made me nostalgic for 2013, which at the time felt like a bad year. I wonder how I'll feel about 2018 in 2023.

(Context: "I'm not important enough" was the standard rebuke to Snowden's leaks)

He replied that when he was starting out, he was small fry, so he didn't face anything beyond what he would as an average, non-comedian African American. In the comedy circuit, he was mostly ignored, but not explicitly discriminated against.

Once he reached a certain popularity level, and he was in the running for spots on talk shows, SNL, TV episodes, he started to notice it. The stakes are a lot higher, and there are lots of people coveting those TV appearances. So suddenly, people who would otherwise never even notice him, were acting in ways to specifically exclude him from the running in areas that were traditionally reserved for white comedians.

Just because you aren't important enough to be spied on today doesn't mean that you won't appear on someone's threat radar later.

But looking at it another way, the sheer volume of incidents has got to some how desensitize the vast majority of people out there. Personally, probably half of the companies that I regularly do business with have had some major data breach within the last few years. But nothing ever comes of it - no real punishment, no new meaningful requirements to protect their infrastructure, and no specific harm to me personally. So should I stop interacting with these companies? What about all the other companies out there where it’s just a matter of time before their own data breach? Should I eschew all technology and go back to the barter system? I think the genie has already been let out of the bottle and maybe we need to look at solutions assuming that data breaches will happen and how to protect people after the fact rather than preventing them in the first place.

I don't think they will lose users progressively. Nothing will happen until something does, and then everyone will leave en masse (or simply stop logging in, without deactivating their account).

We should just work to make that happen as soon as possible.

True - but I still think there's a big difference between understanding that your info isn't private and not being bothered versus assuming that your info IS private. The real question is your #1: Is the group of people with this understanding growing by any significant margin?

But I'd argue Uber is largely replaceable -- you still have public transport and taxis while Facebook has no alternative and most people are too inert to even think of replacing it...

We can all see how the media grows bolder and reports quite negatively on Facebook but I wonder if that even makes any difference.

Facebook has changed from that useful platform it once was to basically nonstop custom-tailored commercials, but the alternatives that it sought to replace have not and never will. Want to keep in touch with your relatives or friends? Directly engage people again. This can be as simple as an email thread, group text messaging, or an application like GroupMe. Need to plan events with your group? Throw it on a google calendar, who cares about who said they are going or who left your invite on read? Contacts? Your phone and address book on your computer. Keep your photos on something nonproprietary and therefore future proof; contrary to popular belief, no one will remember all the likes your pictures from Cabo got you in two weeks anyway.

At https://Qbix.com we have spent our own money on a free open source alternative platform to Facebook.

I think we’re still pretty bad at marketing it. Would appreciate some feedback if you check out the site and watch the video.

It’s far far ahead of Mastodon, Solid, OwnCloud or whatever else is out there. It has full documentation (https://qbix.com/platform and https://qbix.com/platform/guide and https://qbix.com/platform/tutorials) and can be tried out of the box. It has been audited by third party security firms and come out with flying colors.

Here is a laundry list of features: https://qbix.com/features.pdf

But it needs a huge effort to make it as nice and appealing as say stripe.com is for payment integrations. Those guys are amazing.

We recently released version 1.1 on github. We have chatrooms, galleries, events, trips, back end and front end components which all work together like BSD systems all work together. Just slap them on pages, theme it and there u have your own social network. It took us years and nearly $1M in funding. But you can’t see much of that at a glance, or play around with it, yet. That should change in 2019.

PHP? I'll pass.

Don't bother with any arguments that PHP powers huge sites including Facebook and Wordpress. The whole point of this thread, and presumably Qbit's very existence, is that they are not good role models.

If you are trying to be a modern, secure, respectful replacement for Facebook, be modern, secure, and respectful.

Finally, about being modern and chasing trends. Wordpress is not modern but it powers 1 in every 3 websites. Ghost is modern and is used on 0.1% of websites. Thanks but we’ll pass.

I am not even sure how PHP is disrespectful, so I’ll leave that one alone.

If it makes you feel better, we are also working on an app hosting the whole network from a random computer or a mobile phone on a local network.

[1] https://serverfault.com/questions/922074/list-of-most-popula...

[2] https://www.quora.com/Is-Node-js-killing-PHP

PHP has a lot of very well documented problems.

Also, do you have a source when claiming that most PHP installations use more modern versions? I seriously doubt that particular claim is true. Most business people think of IT as a one-time expense. You can still find a ton of 5.0 - 5.3 installations out there. Hell, in my country there are good amount of PHP 4.x websites as well.

Sure it does—Instagram.

You switch FB for FB, basically. :)

Right now, yes.

I’m responding to your “most people are too inert to even think of replacing [Facebook]” comment. My point is, they already have. That presents an easy regulatory solution to Mark Zuckerberg. Break up Facebook.

“Then surely you wouldn’t mind sharing your fb password with me, with your spouse and your manager at work. Moreso, we would like to have access to all your messaging activity in real time.”