User Driven Services – joeandrieu.com
type: channel
description: My personal space
date: 2011-04-22T08:24:32Z
update period: hourly
update frequency: 1
update base: 2000-01-01T12:00+00:00
generator agent: https://wordpress.org/
items: Trust Me… Things Change.
items: Constellations of Privacy
items: Asymmetry by Choice
items: Beyond Data Ownership to Information Sharing
items: User Driven Services: 10. Duty of Care
items: User Driven Services: 9. Self-managed Identity
items: User Driven Services: 8. Improvability
items: User Driven Services: 7. User Generativity
items: User Driven Services: 6. Self Hosting
items: User Driven Services: 5. Service Endpoint Portability

Trust Me… Things Change.
type: item
creator: Joe Andrieu
date: 2011-04-22T08:24:32Z
subject: Information Sharing
subject: Personal Data Store
subject: Shared Information
subject: User Driven Services
subject: Vendor Relationship Management
subject: consent
subject: revocation
subject: trust
description: Trust is complicated. But for some reason, online trust mechanisms assume it is outrageously simple. For example, firewalls imply that once you’re in the network, you’re trusted. It’s baked into the framing of the problem. Similarly, Trust Frameworks assume that … Continue reading →
encoded: Trust is complicated. But for some reason, online trust mechanisms assume it is outrageously simple. <img decoding="async" class="alignleft size-medium wp-image-980" title="black and white handshake" src="https://blog.joeandrieu.com/wp-content/uploads/2011/04/black-and-white-handshake.dreamstime_18851240-300x225.jpg" alt="black and white handshake" width="210" height="158" srcset="https://blog.joeandrieu.com/wp-content/uploads/2011/04/black-and-white-handshake.dreamstime_18851240-300x225.jpg 300w, https://blog.joeandrieu.com/wp-content/uploads/2011/04/black-and-white-handshake.dreamstime_18851240.jpg 480w" sizes="(max-width: 210px) 100vw, 210px" /> For example, firewalls imply that once you’re in the network, you’re trusted. It’s baked into the framing of the problem. Similarly, Trust Frameworks assume that once you are in the Framework, you’re trusted (although you could build a framework that is dynamic). Even a user directed approach like Facebook Connect assumes that once you click “allow”, you trust that website to use your information appropriately, essentially forever… even if you revoke that permission later. Trust isn’t broad-based and it isn’t static. It is directed and dynamic. Think about it. We don’t trust our accountant to babysit and we don’t trust our babysitter with our finances. Trust is given for specific purposes and in specific contexts and it changes as quickly as we can fire that babysitter. <img decoding="async" class="alignright size-medium wp-image-983" title="multiple multi color handshakes" src="https://blog.joeandrieu.com/wp-content/uploads/2011/04/multi-multi-color-handshakes.dreamstime_4062545-300x300.jpg" alt="multiple multi color handshakes" width="180" height="180" srcset="https://blog.joeandrieu.com/wp-content/uploads/2011/04/multi-multi-color-handshakes.dreamstime_4062545-300x300.jpg 300w, https://blog.joeandrieu.com/wp-content/uploads/2011/04/multi-multi-color-handshakes.dreamstime_4062545-150x150.jpg 150w, https://blog.joeandrie…

Constellations of Privacy
type: item
creator: Joe Andrieu
date: 2011-04-10T17:45:46Z
subject: Information Sharing
subject: Shared Information
subject: User Driven Services
subject: Vendor Relationship Management
subject: context
subject: privacy
subject: public v private
description: Privacy issues dominate the global debate about protecting the rights of individuals online. Yet, the conversation almost entirely misses a vital point: public or private isn’t a black or white choice and it never has been. Sociologists have long recognized … Continue reading →
encoded: <img loading="lazy" decoding="async" class="size-full wp-image-960 alignright" style="margin-left: 10px; margin-right: 10px;" title="public v private" src="https://blog.joeandrieu.com/wp-content/uploads/2011/04/public-v-private.dreamstime_267400.jpg" alt="Public v Private" width="216" height="288" srcset="https://blog.joeandrieu.com/wp-content/uploads/2011/04/public-v-private.dreamstime_267400.jpg 360w, https://blog.joeandrieu.com/wp-content/uploads/2011/04/public-v-private.dreamstime_267400-225x300.jpg 225w" sizes="auto, (max-width: 216px) 100vw, 216px" />Privacy issues dominate the global debate about protecting the rights of individuals online. Yet, the conversation almost entirely misses a vital point: public or private isn’t a black or white choice and it never has been. Sociologists have long recognized that there is no single “public”, no monolithic context where social norms congeal and deviant behavior is shunned. Instead, we’ve recognized that each of us engages in multiple, distinct publics, with their own boundaries and rules of etiquette. We act one way at PTA meetings, another in Las Vegas, yet again a third way at work. These are different flavors of public behavior and yet we expect most people to respect boundaries between these areas. We manage these publics as easily and naturally as we greet a newcomer to the workplace. We do it without conscious effort, but with a sensitivity to the place and moment. We also constantly manage any number of private contexts, where certain topics and behaviors are understood to be held in confidence, from family matters and Santa Claus to corporate secrets. Just as there is no monolithic “public”, there is no single “private” domain, where insiders know everything and outsiders know nothing. We share confidences with our kids, our spouses, our lawyers, our doctors, our psychiatrists, our bartenders, our business partners, all with certain, often unstated, rules about appropriate use and redistribution. Sure, these…

Asymmetry by Choice
type: item
creator: Joe Andrieu
date: 2010-08-24T12:42:40Z
subject: Information Sharing
subject: Personal Data Store
subject: ProjectVRM
subject: Shared Information
subject: User Driven Services
subject: Vendor Relationship Management
description: Perhaps the most powerful form of asymmetric information is missing from JP Rangaswami’s post addressing whether the web is making us dumber. I agree with the core point of JP’s article, but I think he oversimplifies the argument on asymmetry … Continue reading →
encoded: Perhaps the most powerful form of asymmetric information is missing from JP Rangaswami’s post addressing whether the web is making us dumber. I agree with the core point of JP’s article, but I think he oversimplifies the argument on asymmetry in a way that misses something important about the power of information. JP defines four types of informational asymmetry, which he argues is key for information to have power: Asymmetry-by-access — You can get it, they can’t. Asymmetry-in-creation — You create it, you can control access or have unique benefit from it. Asymmetry-in-education — The information may be symmetrically available, but only “experts” can make effective use of it.This could also be called asymmetry-by-capability: the capability to utilize information more effectively than others. Asymmetry-by-design — Take abundant information and design a system to create scarcity. For example, the iPhone (or Android) app store as the only – (or dominant) way to get new apps on your phone. JP goes on to argue that This approach, asymmetry-by-creation, and its alter ego, asymmetry-by-design, are about creating artificial scarcity. This is fundamentally doomed. I’ve said it many times. Every artificial scarcity will be met by an equal and opposite artificial abundance. With all due respect, I must politely disagree. At first, I thought it was a flaw in the argument about asymmetry, but then I realized it was perhaps because I was considering a fifth asymmetry that simply didn’t fit JP’s mold. Asymmetry-by-choice – The information is shared with mutual agreement by all parties to respect certain limits, typically requested by the discloser, although often required by regulators. This asymmetry is typically bootstrapped from asymmetry-by-creation and maintained as asymmetry-by-access. One example: I tell my therapist things because I know they won’t get revealed. The therapist agrees to keep that information in confidence because she knows that if she doesn’t, I won’t reve…

Beyond Data Ownership to Information Sharing
type: item
creator: Joe Andrieu
date: 2010-01-21T22:32:19Z
subject: Information Sharing
subject: Intention Economy
subject: Personal Data Store
subject: ProjectVRM
subject: Shared Information
subject: User Driven Services
subject: Vendor Relationship Management
subject: CRM
subject: data ownership
subject: Doc Searls
subject: privacy
subject: project VRM
subject: User Driven
subject: VRM
description: The question of who owns our data on the Internet is a challenging problem. It can also be a red herring, distracting us from building the next generation of online services. The term “ownership” simply brings too much baggage from … Continue reading →
encoded: The question of who owns our data on the Internet is a challenging problem. It can also be a red herring, distracting us from building the next generation of online services. The term “ownership” simply brings too much baggage from the physical world, suggesting a win-lose, us-verses-them mentality that retards the development of rich, powerful services based on shared information. Anyone up for sacred cow cheeseburgers? I’m a member–and a big fan–of Steve Holcombe‘s “Data Ownership in the Cloud” LinkedIn group and I love the efforts of the Dataportability guys and am a big supporter of the Privacy and Public Policy work group at Kantara. There is a lot of good work being done by folks trying to figure out how to give people greater control over the use of data about them (privacy) and gain access to data they use or created (dataportability). Unfortunately, sometimes the arguments behind these efforts are based on who owns–or who should own–the data. This is not just an intellectual debate or political rallying call, it often undermines our common efforts to build a better system. Consider this: Privacy as secrecy is dead Data sharing is data copying Transaction data has dual ownership Yours, mine, & ours: Reality is complicated Taking back ownership is confrontational Privacy as secrecy is dead First, the data is pretty much already out there. The issue isn’t “How do we keep data from bad people,” it’s “How do we keep people from doing bad things with data?” DRM and crypto and related technology as the sole means to prevent data leakage and data abuse are failures. Sooner or later, the bad guys break the system and get the data. Sure, there are smart things we can do to protect ourselves. Just like we wear seatbelts and lock our front doors, we should also use SSL and multi-factor authentication, but we can’t count on technology to keep our secrets. We need solutions that work even when the secret is out. In fact, privacy isn’t about information we keep secret. It…

User Driven Services: 10. Duty of Care
type: item
creator: Joe Andrieu
date: 2009-05-14T10:58:21Z
subject: User Driven
subject: User Driven Services
subject: duty of care
description: 10. Duty of Care User Driven Services look out for their users’ well-being. If a service is truly acting in our best interests, it will take appropriate measures to protect us from dangers resulting from our use of the service. User … Continue reading →
encoded: 10. Duty of Care User Driven Services look out for their users’ well-being. <img loading="lazy" decoding="async" class="alignright size-full wp-image-618" title="Lifegaurd on Duty" src="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_671475lifegaurd-on-dutycropped.jpg" alt="Lifegaurd on Duty" width="229" height="191" srcset="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_671475lifegaurd-on-dutycropped.jpg 382w, https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_671475lifegaurd-on-dutycropped-300x250.jpg 300w" sizes="auto, (max-width: 229px) 100vw, 229px" />If a service is truly acting in our best interests, it will take appropriate measures to protect us from dangers resulting from our use of the service. User Driven Services continually work to minimize user exposure to liability, risk, and potential harm. Minimal identity information should be acquired and what is acquired should be retained for a minimal period of time, to help reduce the possibility of inappropriate identity correlation and theft. Services should acquire and maintain a minimum amount of confidential data—identity or otherwise—and where feasible, should store that data in an encrypted form. Services should also endeavor to minimize the possibility that their system becomes as vector for attacks of any kind on users, including phishing, viruses, Trojans, and malware. User Driven Services should also expend appropriate duty of care in protecting their systems from hacking and attacks, not simply out of self-interest, but to protect their users’ interests as well. Examples Google and Firefox help prevent users from unwittingly visiting potentially malicious websites, working with the StopBadware program at the Berkman Center for Internet and Society. The PCI Security Standards Council oversees payment card industry (PCI) data security standards designed to protect credit card data. Classically, Doctors adhere to the Hippocratic Oath, with its essen…

User Driven Services: 9. Self-managed Identity
type: item
creator: Joe Andrieu
date: 2009-05-13T09:54:08Z
subject: Identity
subject: User Driven
subject: User Driven Services
subject: information cards
subject: OpenID
description: 9. Self-managed Identity User Driven Services let users manage their own online identity. Unless we control our identity online, we risk unnecessary exposure to identity theft and unwanted correlation of online activity. At the same time, online services increase the … Continue reading →
encoded: 9. Self-managed Identity User Driven Services let users manage their own online identity. <img loading="lazy" decoding="async" class="alignright size-full wp-image-587" title="Name tag" src="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped.jpg" alt="Name tag" width="288" height="196" srcset="https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped.jpg 480w, https://blog.joeandrieu.com/wp-content/uploads/2009/05/dreamstime_4473313hello-my-name-iscropped-300x203.jpg 300w" sizes="auto, (max-width: 288px) 100vw, 288px" />Unless we control our identity online, we risk unnecessary exposure to identity theft and unwanted correlation of online activity. At the same time, online services increase the risk of attacks when using the same identifier for multiple functions. User Driven Services allow users to be in maximum control of their identity by distinguishing between the four different types of identifiers used online: Authentication IDs Presentation IDs Reference IDs Internal IDs Users should be able choose their own third-party identity service and have complete control over the three external identifiers used by any User Driven Service: their authentication IDs, their reference IDs, and their presentation IDs. The internal ids relating these external identifiers should never be exposed. Identity Providers should operate in non-correlation modes—so that different services providers automatically receive different authentication tokens, and all presentation IDs should be hand selected by the user for each service whenever possible. The ideal service will enable intentional correlation only upon user directive, allowing individuals to claim blog posts, social profiles, and microblogging accounts as their own, after initially anonymous or psuedonymous use. Services are also more flexible when they allow users to use multiple distinct identifiers within a given class, e.g., having more t…

User Driven Services: 8. Improvability
type: item
creator: Joe Andrieu
date: 2009-05-12T12:22:56Z
subject: User Driven
subject: User Driven Services
subject: customization
subject: hacking
subject: improvability
subject: open source
description: 8. Improvability User Driven Services can be improved by users. A closed system can’t predict and satisfy all the needs of all its users, all the time. Sooner or later, someone will eventually desire a new feature or capability beyond … Continue reading →
encoded: 8. Improvability User Driven Services can be improved by users. A closed system can’t predict and satisfy all the needs of all its users, all the time. Sooner or later, someone will eventually desire a new feature or capability beyond the resources or interest of the service provider. User Driven Services take advantage of that motivation, allowing users to directly improve the service itself, both for themselves and others. Through source code modifications, plugins or extensions, API calls or webhooks, or client-side scripts or macros, users should be able improve the real-time experience of services, without breaking the services and without violating their Terms of Service. Mechanisms should also exist for developers to contribute to improving the standard specifications upon which interoperability and portability rely. Examples CGI scripts enable custom code to generate web pages for webservers such as Apache. Open Source projects provide full source code so users can directly modify a service application. Excel macros let users define sophisticated data operations across spreadsheet data. Facebook’s FBML and OpenSocial allow customized widgets integrated into web pages at social networks. The iPhone lets users download and install new applications. Internet Explorer and Firefox allow users to write or install custom plugins like Google Toolbar, Acrobat Reader, Flash, and Quicktime. Questions Can users add functionality to the service through custom code, plug-ins, or extensions? Does the service allow interactive access via APIs so that third party applications can provide enhanced, wrap-around or integrating functionality? Does the services support webhooks or other callbacks for integration with other online services? Do client-side applications allow for client-side scripting or macros? This article is part of a series. It is the eighth of ten characteristics of User Driven Services: Impulse from the User Control Transparency Data Portability Service Endpoi…

User Driven Services: 7. User Generativity
type: item
creator: Joe Andrieu
date: 2009-05-10T19:49:48Z
subject: User Driven
subject: User Driven Services
subject: user generativity
description: 7. User Generativity Users contribute to User Driven Services. User Driven Services build on active, engaged participation in value creation. Users should be empowered to augment, annotate, and contribute to the underlying service as much as possible. By enabling users … Continue reading →
encoded: <!--[if gte mso 9]><xml> <o :OfficeDocumentSettings> <o :RelyOnVML /> <o :AllowPNG /> </o> </xml>< ![endif]--><!--[if gte mso 9]><xml> <w :WordDocument> </w><w :View>Normal</w> <w :Zoom>0</w> <w :TrackMoves /> <w :TrackFormatting /> <w :PunctuationKerning /> <w :ValidateAgainstSchemas /> <w :SaveIfXMLInvalid>false</w> <w :IgnoreMixedContent>false</w> <w :AlwaysShowPlaceholderText>false</w> <w :DoNotPromoteQF /> <w :LidThemeOther>EN-US</w> <w :LidThemeAsian>X-NONE</w> <w :LidThemeComplexScript>X-NONE</w> <w :Compatibility> <w :BreakWrappedTables /> <w :SnapToGridInCell /> <w :WrapTextWithPunct /> <w :UseAsianBreakRules /> <w :DontGrowAutofit /> <w :SplitPgBreakAndParaMark /> <w :DontVertAlignCellWithSp /> <w :DontBreakConstrainedForcedTables /> <w :DontVertAlignInTxbx /> <w :Word11KerningPairs /> <w :CachedColBalance /> </w> <m :mathPr> <m :mathFont m:val="Cambria Math" /> <m :brkBin m:val="before" /> <m :brkBinSub m:val="--" /> <m :smallFrac m:val="off" /> <m :dispDef /> <m :lMargin m:val="0" /> <m :rMargin m:val="0" /> <m :defJc m:val="centerGroup" /> <m :wrapIndent m:val="1440" /> <m :intLim m:val="subSup" /> <m :naryLim m:val="undOvr" /> </m> </xml>< ![endif]--><!--[if gte mso 9]><xml> <w :LatentStyles DefLockedState="false" DefUnhideWhenUsed="true" DefSemiHidden="true" DefQFormat="false" DefPriority="99" LatentStyleCount="267"> <w :LsdException Locked="false" Priority="0" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Normal" /> <w :LsdException Locked="false" Priority="9" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="heading 1" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6" /> <w :L…

User Driven Services: 6. Self Hosting
type: item
creator: Joe Andrieu
date: 2009-05-09T20:30:43Z
subject: User Driven
subject: User Driven Services
subject: co-location
subject: hosting
subject: independence
subject: services
description: 6. Self Hosting User Driven Services can be hosted on users’ own machines. If we can’t host our own services, we become beholden to those who can. This creates an artificial barrier to portability, limiting user choice and allowing service … Continue reading →
encoded: 6. Self Hosting User Driven Services can be hosted on users’ own machines. If we can’t host our own services, we become beholden to those who can. This creates an artificial barrier to portability, limiting user choice and allowing service providers to charge unnecessarily high costs for their services. User Driven Services assure users credible alternatives to traditional hosted services. This means that there exist multiple, independent options for users to host their own service running on their own machines, and there also exist hosting solutions that allow users to run their own service on hardware at a co-location facility or running the service on a generically available website hosting provider. These options may be commercial or free, proprietary or open source. Preferably there is at least one open source, free option. It is even better if there are multiple such implementations for different platforms, different programming languages, and different storage and network technologies. Examples The LAMP (Linux, Apache, MySQL, Perl/PHP) stack allows anyone to host and run their own advanced web service with custom capabilities. If you own your own machine and have a connected IP address, you can host your own server for email, FTP, gopher, website, Jabber, MUD services, etc. You can host your own blog, fully integrated via pings and trackbacks into the global conversations occurring throughout the blogosphere. Free and commercial software enable you to host any number of services, either on your own hardware or hosted at standard hosting providers online. Questions Can users host their own implementation of the service on their own hardware? Can users host their own service at third party hosting companies? Are there free or low-cost licenses available for self hosting? Can users host on a variety of hardware and operating system platforms? This article is part of a series. It is the sixth of ten characteristics of User Driven Services : Impulse from the User …

User Driven Services: 5. Service Endpoint Portability
type: item
creator: Joe Andrieu
date: 2009-05-07T02:27:26Z
subject: User Driven
subject: User Driven Services
subject: interoperability
subject: mail forwarding
subject: number portability
subject: open standards
subject: portability
subject: service endpoint portability
subject: service portability
subject: undeliverable
subject: united states postal service
subject: user dirven services
subject: USPS
description: 5. Service Endpoint Portability People can painlessly switch between User Driven Service providers. High switching costs create a barrier to choice and freedom; we should be able to move our services seamlessly from one provider to another without unnecessary interruptions, … Continue reading →
encoded: <!--[if gte mso 9]><xml> <o :OfficeDocumentSettings> <o :RelyOnVML /> <o :AllowPNG /> </o> </xml>< ![endif]--><!--[if gte mso 9]><xml> <w :WordDocument> </w><w :View>Normal</w> <w :Zoom>0</w> <w :TrackMoves /> <w :TrackFormatting /> <w :PunctuationKerning /> <w :ValidateAgainstSchemas /> <w :SaveIfXMLInvalid>false</w> <w :IgnoreMixedContent>false</w> <w :AlwaysShowPlaceholderText>false</w> <w :DoNotPromoteQF /> <w :LidThemeOther>EN-US</w> <w :LidThemeAsian>X-NONE</w> <w :LidThemeComplexScript>X-NONE</w> <w :Compatibility> <w :BreakWrappedTables /> <w :SnapToGridInCell /> <w :WrapTextWithPunct /> <w :UseAsianBreakRules /> <w :DontGrowAutofit /> <w :SplitPgBreakAndParaMark /> <w :DontVertAlignCellWithSp /> <w :DontBreakConstrainedForcedTables /> <w :DontVertAlignInTxbx /> <w :Word11KerningPairs /> <w :CachedColBalance /> </w> <m :mathPr> <m :mathFont m:val="Cambria Math" /> <m :brkBin m:val="before" /> <m :brkBinSub m:val="--" /> <m :smallFrac m:val="off" /> <m :dispDef /> <m :lMargin m:val="0" /> <m :rMargin m:val="0" /> <m :defJc m:val="centerGroup" /> <m :wrapIndent m:val="1440" /> <m :intLim m:val="subSup" /> <m :naryLim m:val="undOvr" /> </m> </xml>< ![endif]--><!--[if gte mso 9]><xml> <w :LatentStyles DefLockedState="false" DefUnhideWhenUsed="true" DefSemiHidden="true" DefQFormat="false" DefPriority="99" LatentStyleCount="267"> <w :LsdException Locked="false" Priority="0" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="Normal" /> <w :LsdException Locked="false" Priority="9" SemiHidden="false" UnhideWhenUsed="false" QFormat="true" Name="heading 1" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5" /> <w :LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6" /> <w :L…