Why the McGowan government will have an uphill battle rebuilding trust in the SafeWA app.

QR code contact-tracing apps are a crucial part of our defence against COVID-19. But their value depends on being widely used, which in turn means people using these apps need to be confident their data won’t be misused.

That’s why this week’s revelation that Western Australian police accessed data gathered using the SafeWA app are a serious concern.

WA Premier Mark McGowan’s government has enjoyed unprecedented public support for its handling of the COVID-19 pandemic thus far. But this incident risks undermining the WA public’s trust in their state’s contact-tracing regime.

While the federal government’s relatively expensive COVIDSafe tracking app — which was designed to work automatically via Bluetooth — has become little more than the butt of jokes, the scanning of QR codes at all kinds of venues has now become second nature to many Australians.

These contact-tracing apps work by logging the locations and times of people’s movements, with the help of unique QR codes at cafes, shops and other public buildings. Individuals scan the code with their phone’s camera, and the app allows this data to be collated across the state.

That data is hugely valuable for contact tracing, but also very personal. Using apps rather than paper-based forms greatly speeds up access to the data when it is needed. And when trying to locate close contacts of a positive COVID-19 case, every minute counts.

But this process necessarily involves the public placing their trust in governments to properly, safely and securely use personal data for the advertised purpose, and nothing else.

Australian governments have a poor track record of protecting personal data, having suffered a range of data breaches over the past few years. At the same time, negative publicity about the handling of personal data by digital and social media companies has highlighted the need for people to be careful about what data they share with apps in general.

The SafeWA app was downloaded by more than 260,000 people within days of its release, in large part because of widespread trust in the WA government’s strong track record in handling COVID-19. When the app was launched in November last year, McGowan wrote on his Facebook page that the data would “only be accessible by authorised Department of Health contact tracing personnel”.

Screenshot of Mark McGowan’s Facebook Page announcing the SafeWA App.
Mark McGowan’s Facebook Page

In spite of this, it has now emerged that WA Police twice accessed SafeWA data as part of a “high-profile” murder investigation. The fact the WA government knew in April that this data was being accessed, but only informed the public in mid-June, further undermines trust in the way personal data is being managed.

McGowan today publicly criticised the police for not agreeing to stop using SafeWA data. Yet the remit of the police is to pursue any evidence they can legally access, which currently includes data collected by the SafeWA app.

It is the government’s responsibility to protect the public’s privacy via carefully written, iron-clad legislation with no loopholes. Crucially, this legislation needs to be in place before contract-tracing apps are rolled out, not afterwards.

It may well be that the state government held off on publicly disclosing details of the SafeWA data misuse until it had come up with a solution. It has now introduced a bill to prevent SafeWA data being used for any purpose other than contact tracing.

This is a welcome development, and the government will have no trouble passing the bill, given its thumping double majority. Repairing public trust might be a trickier prospect.

Trust is a premium commodity these days, and to have squandered it without adequate initial protections is a significant error.

The SafeWA app provided valuable information that sped up contact tracing in WA during Perth’s outbreak in February. There is every reason to believe that if future cases occur, continued widespread use of the app will make it easier to locate close contacts, speed up targeted testing, and either avoid or limit the need for future lockdowns.

That will depend on the McGowan government swiftly regaining the public’s trust in the app. The new legislation is a big step in that direction, but there’s a lot more work to do. Trust is hard to win, and easy to lose.

Tama Leaver, Professor of Internet Studies, Curtin University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

The Future Of Children’s Online Privacy

I was delighted to join Dr Anna Bunn, Deputy Head of Curtin Law School, and the Future Of team for a podcast interview all about Children’s Online Privacy.

The half hour podcast is online here in various formats, including shownotes, or embedded in this post:

We discuss:

What’s the impact of parents sharing content of their children online? And what rights do children have in this space?

In this episode, Jessica is joined by Dr Anna Bunn, Deputy Head of Curtin Law School and Tama Leaver, Professor of Internet Studies at Curtin University to discuss “sharenting” – the growing practice of parents sharing images and data of their children online. The three examine the social, legal and developmental impacts a life-long digital footprint can have on a child.

  • What is the impact of sharing child-related content on our kids? [04:08]
  • What type of tools and legal protections would you like to see in the future to protect children? [16:30]
  • At what age can a child give consent to share content [18:25]
  • What about the right to be forgotten [21:11]
  • What’s best practice for sharing child-related content online? [26:01]

Web’s inventor says news media bargaining code could break the internet. He’s right — but there’s a fix

Tama Leaver, Curtin University

The inventor of the World Wide Web, Tim Berners-Lee, has raised concerns that Australia’s proposed News Media and Digital Platforms Mandatory Bargaining Code could fundamentally break the internet as we know it.

His concerns are valid. However, they could be addressed through minor changes to the proposed code.

How could the code break the web?

The news media bargaining code aims to level the playing field between media companies and online giants. It would do this by forcing Facebook and Google to pay Australian news businesses for content linked to, or featured, on their platforms.

In a submission to the Senate inquiry about the code, Berners-Lee wrote:

Specifically, I am concerned that the Code risks breaching a fundamental principle of the web by requiring payment for linking between certain content online. […] The ability to link freely — meaning without limitations regarding the content of the linked site and without monetary fees — is fundamental to how the web operates.

Currently, one of the most basic underlying principles of the web is there is no cost involved in creating a hypertext link (or simply a “link”) to any other page or object online.

When Berners-Lee first devised the World Wide Web in 1989, he effectively gave away the idea and associated software for free, to ensure nobody would or could charge for using its protocols.

He argues the news media bargaining code could set a legal precedent allowing someone to charge for linking, which would let the genie out of the bottle — and plenty more attempts to charge for linking to content would appear.

If the precedent were set that people could be charged for simply linking to content online, it’s possible the underlying principle of linking would be disrupted.

As a result, there would likely be many attempts by both legitimate companies and scammers to charge users for what is currently free.

While supporting the “right of publishers and content creators to be properly rewarded for their work”, Berners-Lee asks the code be amended to maintain the principle of allowing free linking between content.


Google and Facebook don’t just link to content

Part of the issue here is Google and Facebook don’t just collect a list of interesting links to news content. Rather the way they find, sort, curate and present news content adds value for their users.

They don’t just link to news content, they reframe it. It is often in that reframing that advertisements appear, and this is where these platforms make money.

For example, this link will take you to the original 1989 proposal for the World Wide Web. Right now, anyone can create such a link to any other page or object on the web, without having to pay anyone else.

But what Facebook and Google do in curating news content is fundamentally different. They create compelling previews, usually by offering the headline of a news article, sometimes the first few lines, and often the first image extracted.

For instance, here is a preview Google generates when someone searches for Tim Berners-Lee’s Web proposal:

Results page for the Google Search 'tim berners lee www proposal'.
This is a screen capture of the results page for the Google Search: ‘tim berners lee www proposal’.
Google

Evidently, what Google returns is more of a media-rich, detailed preview than a simple link. For Google’s users, this is a much more meaningful preview of the content and better enables them to decide whether they’ll click through to see more.

Another huge challenge for media businesses is that increasing numbers of users are taking headlines and previews at face value, without necessarily reading the article.

This can obviously decrease revenue for news providers, as well as perpetuate misinformation. Indeed, it’s one of the reasons Twitter began asking users to actually read content before retweeting it.

A fairly compelling argument, then, is that Google and Facebook add value for consumers via the reframing, curating and previewing of content — not just by linking to it.

Can the code be fixed?

Currently in the code, the section concerning how platforms are “Making content available” lists three ways content is shared:

  1. content is reproduced on the service
  2. content is linked to
  3. an extract or preview is made available.

Similar terms are used to detail how users might interact with content.

Extract showing the way 'Making content available' is defined in the Treasury Laws Amendment (News Media and Digital Platforms Mandatory Bargaining Code) Bill 2020
The News Media and Digital Platforms Mandatory Bargaining Code 2020 outlines three main ways by which platforms make news content available.
Australian Government

If we accept most of the additional value platforms provide to their users is in curating and providing previews of content, then deleting the second element (which just specifies linking to content) would fix Berners-Lee’s concerns.

It would ensure the use of links alone can’t be monetised, as has always been true on the web. Platforms would still need to pay when they present users with extracts or previews of articles, but not when they only link to it.

Since basic links are not the bread and butter of big platforms, this change wouldn’t fundamentally alter the purpose or principle of creating a more level playing field for news businesses and platforms.


In its current form, the News Media and Digital Platforms Mandatory Bargaining Code could put the underlying principles of the world wide web in jeopardy. Tim Berners-Lee is right to raise this point.

But a relatively small tweak to the code would prevent this, It would allow us to focus more on where big platforms actually provide value for users, and where the clearest justification lies in asking them to pay for news content.


For transparency, it should be noted The Conversation has also made a submission to the Senate inquiry regarding the News Media and Digital Platforms Mandatory Bargaining Code.The Conversation

Tama Leaver, Professor of Internet Studies, Curtin University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Facebook is merging Messenger and Instagram chat features. It’s for Zuckerberg’s benefit, not yours

Image by Annie Spratt on UnSplashTama Leaver, Curtin University

Facebook Messenger and Instagram’s direct messaging services will be integrated into one system, Facebook has announced.

The merge will allow shared messaging across both platforms, as well as video calls and the use of a range of tools drawn from both platforms. It’s currently being rolled out across countries on an opt-in basis, but hasn’t yet reached Australia.

Facebook CEO Mark Zuckerberg announced plans in March last year to integrate Messenger, Instagram Direct and WhatsApp into a unified messaging experience.

At the crux of this was the goal to administer end-to-end encryption across the whole messaging “ecosystem”.

Ostensibly, this was part of Facebook’s renewed focus on privacy, in the wake of several highly publicised scandals. Most notable was its poor data protection that allowed political consulting firm Cambridge Analytica to steal data from 87 million Facebook accounts and use it to target users with political ads ahead of the 2016 US presidential election.

In a statement released yesterday on the new merge, Instagram CEO Adam Mosseri and Messenger vice president Stan Chudnovsky wrote:

… one out of three people sometimes find it difficult to remember where to find a certain conversation thread. With this update, it will be even easier to stay connected without thinking about which app to use to reach your friends and family.

While that may seem harmless, it’s likely Facebook is actually attempting to make its apps inseparable, ahead of a potential anti-trust lawsuit in the US that may try to see the company sell Instagram and WhatsApp.

Together, with Facebook, 24/7

The Messenger/Instagram Direct merge will extend to features rolled out during the pandemic, such as the “Watch Together” tool for Messenger. As the name suggests, this lets users watch videos together in real time. Now, both Messenger and Instagram users will be able to use it, regardless of which app they’re on.

With the integration, new privacy challenges emerge. Facebook has already acknowledged this. And these challenges will present despite Facebook’s overarching privacy policy applying to every app in its app “family”.

For example, in the new merged messaging ecosystem, a user you previously blocked on Messenger won’t automatically be blocked on Instagram. Thus, the blocked person will be able to once again contact you. This could open doors to a plethora of unexpected online abuse.

Why this is good for Mark Zuckerberg

This first step – and Facebook’s full roadmap for the encrypted integration of WhatsApp, Instagram Direct and Messenger – has three clear outcomes.

Firstly, end-to-end encryption means Facebook will have complete deniability for anything that travels across its messaging tools.

It won’t be able to “see” the messages. While this might be good from a user privacy perspective, it also means anything from bullying, to scams, to illegal drug sales, to paedophilia can’t be policed if it happens via these tools.

This would stop Facebook being blamed for hurtful or illegal uses of its services. As far as moderating the platform goes, Facebook would effectively become “invisible” (not to mention moderation is expensive and complicated).

This is all great news for Mark Zuckerberg, especially as Facebook stares down the barrel of potential anti-trust litigation.

Secondly, once the apps are merged, functionally they will no longer be separate platforms. They will still exist as separate apps with some separate features, but the vast amount of personal data underpinning them will live in one giant, shared database.

Deeper data integration will let Facebook know users more intimately. Moreover, it will be able to leverage this new insight to target users with more advertising and expand further.

Finally, and perhaps most concerning, is that by integrating its apps Facebook could legitimately respond to anti-trust lawsuits by saying it can’t separate Instagram or WhatsApp from the main Facebook platform – because they’re the same thing now.

And if they can’t be separated, there’s no way Facebook could sell Instagram or WhatsApp, even if it wanted to.

100 billion messages a day

The messaging traffic across Facebook’s platforms is vast, with more than 100 billion messages sent daily. And this has only increased during the COVID-19 pandemic.

With the sheer size of its user database, Facebook continues to either purchase, or squash, its competition. Concerns about the company being a monopoly aren’t without merit.

Researchers and founding Facebook employees have called to have the company split up – and for Instagram and Whatsapp to become separate again.

Just a few months ago, Facebook released its Instagram-housed tool Reels which bears a striking resemblance to TikTok, another social app sweeping the globe.

It seems this is just another example of Facebook trying to use the sheer size of its network to stifle growing competition, aided (perhaps unwittingly) by Donald Trump’s anti-China sentiment.

If competition is important to encouraging innovation and diversity, then the newest development from Facebook discourages both these things. It further entrenches Facebook and its services into the lives of consumers, making it harder to pull away. And this certainly isn’t far from monopolistic behaviour.

The Conversation


Tama Leaver, Associate Professor in Internet Studies, Curtin University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Targeted PhD Projects with Scholarship in Internet Studies @ Curtin Uni (to start 2021, applications close 1 Sept 2020)

Opportunities exist to apply for a range of targeted PhD scholarships located within the Internet Studies Discipline at Curtin University. The window of opportunity for these is short, so if you’re interested, please email the contact person listed in the specific project pages as soon as you’re able!

If folks could share these opportunities with current and recent Masters and Honours completions (and those completing this year), we would be grateful!

The projects available:

1. An Ethnography of Influencers and Social Justice Cultures https://scholarships.curtin.edu.au/Scholarship/?id=4270
2. Analysing Virtual Influencers: Celebrity, Authenticity and Identity on Social Media https://scholarships.curtin.edu.au/Scholarship/?id=4324
3. Climate Action and the Internet https://scholarships.curtin.edu.au/Scholarship/?id=4285
4. Digital Disability and Disability Media https://scholarships.curtin.edu.au/Scholarship/?id=4318
5. Digital Disability Inclusion across the Lifecourse https://scholarships.curtin.edu.au/Scholarship/?id=4291
6. Digital intimacies and social media https://scholarships.curtin.edu.au/Scholarship/?id=4286
7. Diversity, Equity and Impact: Exploring the Open Knowledge performance of Universities https://scholarships.curtin.edu.au/Scholarship/?id=4341
8. Ethical and Sociocultural Impacts of AI/Autonomous Machines as Communicators https://scholarships.curtin.edu.au/Scholarship/?id=4360
9. Tracking Australia’s Research Response to the COVID Pandemic https://scholarships.curtin.edu.au/Scholarship/?id=4347
10. The Audio Internet https://scholarships.curtin.edu.au/Scholarship/?id=4322

To apply for these project opportunities applicants must submit an email to the contact Project lead listed on the project listing. The email must include their current curriculum vitae, a summary of their research skills and experience and the reason they are interested in this specific project.

The Project Lead will select one preferred applicant for this project and complete a Primary reference on their behalf.

After confirmation from the Project Lead that they will receive a primary reference for this project the applicant must submit an eApplication [https://study.curtin.edu.au/applying/research/#apply] for admission into the applicable HDR course no later than 1st September 2020.

All applicants must send an external referee template [https://scholarships.curtin.edu.au/wp-content/uploads/sites/8/2020/07/RTP2021-Round-2-External-Referee-Report.pdf] to their chosen external reference.

All references are confidential and must be submitted by the referee directly to HDRSCH-applications@curtin.edu.au no later than 1st September 2020.

Scholarship applications submitted without a primary reference or a completed application for admission will be considered incomplete.

For further information on the application process or for more RTP2021 Round 2 scholarship project opportunities visit: https://scholarships.curtin.edu.au/hdr-scholarships-funding/rtp-policy/

Thanks for sharing!

Twitter


Archives

Categories