Announcement

Collapse
No announcement yet.

Sometimes the greatest threat to privacy is yourself

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Sometimes the greatest threat to privacy is yourself


    Recently, a blogger named Simon Owens ran a social experiment on Craigslist. He wandered into the "Casual Encounters" section of the personal ads where countless men and women were soliticing for no-strings-attached sex and wondered, Is it really that easy? As a test, he composed several ads with different permutations of assumed identity and sexual orientation: straight/bi men/women looking for the opposite/same sex. He then posted it to New York, Chicago, and Houston, and tallied the results.

    Overwhelmingly and instantly, the ads from the fake women looking for male partners were inundated with responses, sometimes several per minute. All the other ads received lukewarm responses, at best. These results weren't surprising, but some of the observations were... Many of these men used their real names and included personally identifiable information, including work email addresses and home phone numbers. Several admitted they were married and cheating on their spouses. Many included photos, often nude.

    His first conclusion was very reasonable: "If a really malicious person wanted to get on craigslist and ruin a lot of people's lives, he easily could."


    Jason Fortuny's Craigslist Experiment
    On Monday, a Seattle web developer named Jason Fortuny started his own Craigslist experiment. The goal: "Posing as a submissive woman looking for an aggressive dom, how many responses can we get in 24 hours?"

    He took the text and photo from a sexually explicit ad (warning: not safe for work) in another area, reposted it to Craigslist Seattle, and waited for the responses to roll in. Like Simon's experiment, the response was immediate. He wrote, "178 responses, with 145 photos of men in various states of undress. Responses include full e-mail addresses (both personal and business addresses), names, and in some cases IM screen names and telephone numbers."

    In a staggering move, he then published every single response, unedited and uncensored, with all photos and personal information to Encyclopedia Dramatica (kinda like Wikipedia for web fads and Internet drama). Read the responses (warning: sexually explicit material).

    Instantly, commenters on the LiveJournal thread started identifying the men. Dissenters emailed the guys to let them know they were scammed. Several of them were married, which has led to what will likely be the first of many separations. One couple in an open marriage begged that their information be removed, as their religious family and friends weren't aware of their lifestyle. Another spotted a fellow Microsoft employee, based on their e-mail address. And it's really just the beginning, since the major search engines haven't indexed these pages yet. After that, who knows? Divorces, firings, lawsuits, and the assorted hell that come from having your personal sex life listed as the first search result for your name.

    Possibly the strangest thing about this sex baiting prank is that the man behind it is unabashedly open about his own identity. A graphic artist in Kirkland, Washington, Jason has repeatedly posted his contact information, including home phone, address, and photos. He's already received one threat of physical violence. Is he oblivious to the danger, or does he just not care? Since his stated interest is "pushing people's buttons," I'm guessing the latter. (See update: Jason's been removing contact information from his sites, so some of these links are now broken.)


    Legality and Privacy
    But was any law actually broken? Fortuny obviously misrepresented himself under false pretenses, which is itself possibly actionable, but the privacy implications beyond that are very interesting. Does emailing someone your personal information act as an implicit waiver of your right to privacy? I'm not a lawyer, but as far as I can tell, no.

    If taken to court, he's at risk of two primary civil claims. "Intentional infliction of emotional distress," while notoriously hard to prove in court, is certainly easier here based on his own writings. The second, more relevant claim, is "public disclosure of private facts." This Findlaw article on the Washingtonienne scandal sums it up nicely:

    The disclosure must be public. The facts must be private. The plaintiff must be identified. The publication must be "highly offensive." And there must be an "absence of legitimate concern to the public" with respect to the publication.

    It certainly seems like this clearly fits the criteria for a tort claim, but I'd love to hear some legal interpretation from the law bloggers out there. Does volunteering your information in a private context somehow invalidate your privacy rights? I don't think so. (For more information, see the EFF's Bloggers' FAQ on Privacy.)

    I contacted Anil Dash, VP of LiveJournal's parent company Six Apart, to see how he felt about the breaking drama. He was clearly disturbed by it, but after contacting LJ's support staff, realized there wasn't much they could do. If they find abusive information, they act quickly to remove it, but in this case, all the identifiable information is on a third-party site. "There are always people who aren't going to be productive members of a community. We try to be consistent in honoring requests if an individual's personal info is being posted without their permission," said Anil. "The hard part, of course, is that nobody can control every site on the web, so there's always somewhere else for a person to go if they really want to be malicious or destructive.."

    I haven't contacted Craigslist, but it's clear that as this story develops, it will inevitably have a profound impact on the community. A friend put it simply: "Adults are stupid on the Internet." More likely, their expectations of privacy just haven't been fundamentally challenged yet. They send naked photos of themselves to strangers because it helps get them noticed by the women they're emailing, and it's never backfired on them.

    On a final note, this is just getting started. Sex baiting is so simple and so effective, I thought immediately that others would be inspired to do the same thing. And yesterday morning, a commenter confirmed that the first copycat prank is already complete in Craigslist Portland. 94 replies so far, with 60 photos. It won't be the last.

    September 10: Jason Fortuny modified his homepage to remove all references to his professional life: portfolio, resume, and references to past clients are all gone. (Compare to the older versions on the Internet Archive.) It also looks like he's been scrubbing his personal contact information from his Livejournal comments and homepage. For example, this link from my post originally went to a comment with his contact information, but it's been removed entirely. (Strangely, he didn't remove his home address and phone number from this entry.) Also, Encyclopedia Dramatica has been down intermittently all day, presumably because of the traffic.

    September 11: Jason Fortuny's web server is now down entirely, possibly because of today's Slashdot coverage. (One commenter claims to live in the same apartment building as Fortuny.) Other recent notable media mentions: BBC News, and Wired's Ryan Singel has coverage and a response to commenters. The New York Times article is slated for tomorrow.

    Update, Part 2: Jason Fortuny sent an email to Tucker Max for advice (himself Internet-famous for posting his sexual exploits online). In the email, Jason notes that he's been flooded with thousands of phone calls and has since changed his phone number. In a followup post to that message board, he states clearly he wants to capitalize on the controversy: "Let's milk this. All the way... There must be a way to combine this. Into money. Money is important. Money is good." He's planning on setting up a dedicated website for his exploits, either on his Rfjason.com site or on the Craigslistsexbaits.com domain registered by Tucker Max.

    He also distances himself from Encyclopedia Dramatica, claiming that they scraped his Livejournal and that he has little control over the site, but is "working to get the personally identifiably information redacted." (This doesn't make sense, since he claims to have editing rights on the protected page.) For more information, read the complete set of his posts and his friend Wendy Miller.

    Update 3: My site's been down for the last hour, but it was completely unrelated to this entry or the recent Slashdotting. EV1 Servers, my usually reliable web host, had an hour of downtime affecting hundreds of thousands of websites.

    Update 4: The Associated Press just published an article, which will be syndicated in newspapers everywhere tomorrow. Some good quotes from Craigslist CEO Jim Buckmaster, Kurt Opsahl from the Electronic Freedom Foundation, and the ubiquitous Jonathan Zittrain.

    Also, a couple more interesting comments from the Slashdot thread from people who claim to know Fortuny in real life. The first from someone who went to high school with him, and the second from an anonymous former friend.
    so a bunch of guys send naked photos and whatnot to a fake ad and get mad at the results. are they really entitled to be upset about this?
    "I hope I get to punch you in the face one day" - MRT144, Imran Siddiqui
    'I'm fairly certain that a ban on me punching you in the face is not a "right" worth respecting." - loinburger

  • #2
    Short answer: Yes.
    Click here if you're having trouble sleeping.
    "We confess our little faults to persuade people that we have no large ones." - François de La Rochefoucauld

    Comment


    • #3


      If taken to court, he's at risk of two primary civil claims. "Intentional infliction of emotional distress," while notoriously hard to prove in court, is certainly easier here based on his own writings. The second, more relevant claim, is "public disclosure of private facts." This Findlaw article on the Washingtonienne scandal sums it up nicely:

      The disclosure must be public. The facts must be private. The plaintiff must be identified. The publication must be "highly offensive." And there must be an "absence of legitimate concern to the public" with respect to the publication.

      It certainly seems like this clearly fits the criteria for a tort claim, but I'd love to hear some legal interpretation from the law bloggers out there. Does volunteering your information in a private context somehow invalidate your privacy rights? I don't think so.


      Publicizing that information prevents you from claiming the person publically disclosed private facts. The facts aren't private when you put them in the public realm.
      “I give you a new commandment, that you love one another. Just as I have loved you, you also should love one another. By this everyone will know that you are my disciples, if you have love for one another.”
      - John 13:34-35 (NRSV)

      Comment


      • #4
        that's what happens when you think with your dick.

        'nuff said.

        Comment


        • #5
          When it comes to more... regular privacy issues, I do agree, citizens and individuals are party to blame. After all, as long as we let personal privacy to be thrown around without putting up walls, built from arguments and debate, we fail ourselves and thus allow our privacy to be endangered.

          In short, you deserve the what ever phone program you have in there, and have a good day
          In da butt.
          "Do not worry if others do not understand you. Instead worry if you do not understand others." - Confucius
          THE UNDEFEATED SUPERCITIZEN w:4 t:2 l:1 (DON'T ASK!)
          "God is dead" - Nietzsche. "Nietzsche is dead" - God.

          Comment


          • #6
            Long Answer: These guys are pretty stupid. Being loose with your personal information is never a good idea. They don't deserve what they get, but they should probably think about potential consequences before they commit to an action.

            But! People should be able to go through life with the reasonable expectation that not everyone is trying to screw them. It's not exactly decent of this guy to publish information that those people expected to be private. Social contract theory and all that jazz.
            Click here if you're having trouble sleeping.
            "We confess our little faults to persuade people that we have no large ones." - François de La Rochefoucauld

            Comment


            • #7
              Don't play around if you don't want to get caught

              But seriously-- A question for Imran-- Is it considered the public realm if you email or IM certain information to a single other person?

              Alsio I thought that the "intentional infliction of emotional distress" is interesting. My impression is that it is a little used claim ( mainly in Canada because damage awards are small) -- But in the US, perhaps it would have some bite.


              I also wondered at the possibility for an additional wrinkle. Someone that hates someone collects some information on them including a picture ( non-nude) and then responds to a few of these ads from willing women with the INTENT to be caught by a prankster and embarrass their target.

              With very very many professionals it is easy to get work numbers and email addresses from their own sites plus a picture. It would proably not even be 10 minutes work .
              You don't get to 300 losses without being a pretty exceptional goaltender.-- Ben Kenobi speaking of Roberto Luongo

              Comment


              • #8
                everyone isn't out to screw you? that's a damned dirty lie, you're just screwing with me
                "I hope I get to punch you in the face one day" - MRT144, Imran Siddiqui
                'I'm fairly certain that a ban on me punching you in the face is not a "right" worth respecting." - loinburger

                Comment


                • #9
                  Originally posted by Flubber
                  Don't play around if you don't want to get caught

                  But seriously-- A question for Imran-- Is it considered the public realm if you email or IM certain information to a single other person?

                  Alsio I thought that the "intentional infliction of emotional distress" is interesting. My impression is that it is a little used claim ( mainly in Canada because damage awards are small) -- But in the US, perhaps it would have some bite.
                  Well, IIRC, you have to have a reasonable expectation of privacy. A personal email or IM to someone you know will definately give you a better case than simply responding to an online ad (and knowing what the potential risks are of online ads).

                  I think the nature of internet ads makes it far more likely for it to be considered placing it in a public arena.

                  Intentional infliction of emotional distress is always tacked on to cases but never, ever (well, hardly ever is probably a better term to use) wins.

                  I also wondered at the possibility for an additional wrinkle. Someone that hates someone collects some information on them including a picture ( non-nude) and then responds to a few of these ads from willing women with the INTENT to be caught by a prankster and embarrass their target.

                  With very very many professionals it is easy to get work numbers and email addresses from their own sites plus a picture. It would proably not even be 10 minutes work .
                  Now that would be actionable, under placing the person in a false light.
                  “I give you a new commandment, that you love one another. Just as I have loved you, you also should love one another. By this everyone will know that you are my disciples, if you have love for one another.”
                  - John 13:34-35 (NRSV)

                  Comment


                  • #10
                    Well, for anyone of those people actually cheating on someone, meet the law of karma.
                    I've allways wanted to play "Russ Meyer's Civilization"

                    Comment


                    • #11
                      Originally posted by Imran Siddiqui



                      Now that would be actionable, under placing the person in a false light.
                      But try to prove it-- Someone could go to an internet cafe-- create an account and do their mischief. To find them, someone would have to track the signup of one of these sites to the cafe and then try to find who did it. Practically there is no chance
                      You don't get to 300 losses without being a pretty exceptional goaltender.-- Ben Kenobi speaking of Roberto Luongo

                      Comment


                      • #12
                        Originally posted by Imran Siddiqui
                        .

                        Intentional infliction of emotional distress is always tacked on to cases but never, ever (well, hardly ever is probably a better term to use) wins.

                        .
                        I see we have similar low views of the tort of intentional infliction of mental distress. I wonder why that is. Its on the books as a tort and this situation seems to be a classic case where someone intentionally attempted to upset and embarrass a specific person.

                        I could see a judge gettiing pissed and ordering decent damages. I could also see a judge ruling that posting stuff on the net that the plaintiff had already freely posted on the net . . . is not actionable at all
                        You don't get to 300 losses without being a pretty exceptional goaltender.-- Ben Kenobi speaking of Roberto Luongo

                        Comment


                        • #13
                          Men can be so stupid, ie, thinking with your dick. I find it disturbing that so-called responsible people don't show an ounce of responsibility
                          Speaking of Erith:

                          "It's not twinned with anywhere, but it does have a suicide pact with Dagenham" - Linda Smith

                          Comment


                          • #14
                            Originally posted by Flubber


                            I see we have similar low views of the tort of intentional infliction of mental distress. I wonder why that is. Its on the books as a tort and this situation seems to be a classic case where someone intentionally attempted to upset and embarrass a specific person.

                            I could see a judge gettiing pissed and ordering decent damages. I could also see a judge ruling that posting stuff on the net that the plaintiff had already freely posted on the net . . . is not actionable at all
                            or a group of people?
                            "I hope I get to punch you in the face one day" - MRT144, Imran Siddiqui
                            'I'm fairly certain that a ban on me punching you in the face is not a "right" worth respecting." - loinburger

                            Comment


                            • #15
                              That stuff is still on Encyclopaedia Dramatica, together with pictures and all.

                              Privacy bye bye.

                              Comment

                              Working...
                              X