Whatsapp must never be public infrastructure

For the longest time I have avoided using Meta’s Whatsapp.

Recently its become more difficult with more and more services using Whatsapp as there default way to communicate. Luckily my partner has become a bit of a human bridge to some Whatsapp groups.

To be really clear this is not good! I’m very aware of the mental load women shoulder in society and relationships. I struggle with it but we have talked about it and how I do a lot in our relationship too.

I am finding it almost inconceivable that WhatsApp has become (de-factor) something like public infrastructure. It was refreshing to see a ton of people using signal, the fediverse and heck email to swap details…

Which leads me the PublicSpaces conference, where people who strategise, build and encourage; a future which is democratic and fair for everyone. Unlike a lot of conferences I have been to, this had the actual builders alongside policymakers, all considering how this can actually practically work.

Usually PublicSpaces is 2 days of conference but this year there was a extended day of conference on Friday (added the open social awards) and also a series of unconferences, social events and workshops the day before and the day afterwards. We were fully immersed and perfectly created.

Robin with a slide on a big screen saying fediverse heart matrix heart atmosphere
Foreshadowing later announcements

Robin Bjon’s opening keynote set the mood, I especially loved this quote from Audre Lorde…

But I do have hope. To face the realities of our lives is not a reason for despair—despair is a tool of your enemies. Facing the realities of our lives gives us motivation for action. For you are not powerless.

Then in the afternoon, during a panel which I was chairing came the European social stack. It was all live streamed so you will see the chaos which unfolded and myself trying to manage it (I felt I did a reasonable job)

Ultimately the European social stack is an attempt to standardise a stack of open social platforms and private messaging. Based around core principles of… Autonomy, diversity, decentralisation, democracy, open source and more.

But this isn’t some blind manifesto, this has aims which are defined. It’s also not about being in Europe but rather the values, and represents a 3rd way between the other super powers vision of the internet.

Later on the same day during the Social web awards, Rudy from Black Sky algorithms gave ActivityPub some props in his talk, similar to Robin from Eurosky. I’m sure I wasn’t the only one who was impressed the two break off skies (Eurosky & Blacksky) were positioning themselves in a very different space than the big mainstream Bluesky. Reminding me, I should just move off Bluesky…

His talk was framed as a talk with dangerous ideas and honestly there was a lot of excellent ideas. For example I was looking into Blacksky cash a while back and it’s something which takes an old traditional way of sharing wealth and puts it in the modern world; but relies on strong community and democracy.

It feels like the protocol wars are cooling between Activitypub and ATProto. But better still is the formulation of a social stack, which is logical and still gives plenty of room for creativity and experimentation without taking liberties with people’s data, attention and democracy.


Looking forward to open social becoming a reality for more people. I would also add this was one of the best publicspaces conferences I have been to and likely one of the best conferences in recent times.

Where to go next in 2017?
The Eurostack adopts the European social stack live at PublicSpaces 2027?!

Public Service Internet monthly newsletter (Oct 2022)

Bus stop in bladerunner style using AI
Created with Midjourney

We live in incredible times with such possibilities that is clear. Although its easily dismissed seeing the ongoing fight around ransomware. 2fa social engineered and youtube dislike meaning very little.

To quote Buckminster Fuller “You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.

You are seeing aspects of this with the EU ramping up its open source code access, South Korea’s win for privacy violations and solutions like Watomatic providing out of office replies for WhatsApp to aid with stopping using it.


Recommendations for a Digital Future to the EU

Ian thinks: Exit Platforms over the past year have brought together a group of experts, To chart out what a public service internet could looks like from a policy point of view. The last meeting being a hackathon in the European parliament. This is the report is a detailed from the last year of meetings.

Jack Dorsey realising the mistakes of twitter

Ian thinks: Jack’s thought about the mistakes are further clarified when Kevin Marks making it super clear how Twitter killed twitter as a API in favour of control and profit.

The future of Solar panels? Everywhere!

Ian thinks: Its fantastic to see solar panels in places I thought were simply a no go. Although the cost of panel is dropping there is still a need for a bigger drop.

Bus shelters turned into garden

Ian thinks: Although Manchester has had a bus shelter like described since 2016 and people point out its advertising driven. I do think its generally a good idea and better than looking at a metal frame in the pouring rain.

Escape Fantasies of the Tech Billionaires (nsfw)

Ian thinks: Aspects of team human, this interview with Rushkoff is entertaining but its hard to see fault in the logic behind the new book.

EU puts its foot down around mobile waste and upgrades

Ian thinks: Although in draft form, its a move which may have serious consequences in many different industries.

Bluetracking around the city for better transport but at what cost?

Ian thinks: Contactless travel sounds fantastic but I’m not sure the trail will consider privacy and abuse cases. Something they really should.

Chris’s challenging talk about crypto gave me a bad taste

Ian thinks: Mydata is a good conference but this talk gave me a taste but I can’t exactly point at one thing. A lot of what Chris says is correct, but I can’t get his position over the keynote. Or maybe its just the bored ape t-shirt?

AI art has changed the game quietly

Ian thinks: I have personally been using mid-journey and dall-e2 for some personal works. It feels like something has changed, and we haven’t really acknowledged the effect yet.

What can be learned from Google’s smart city project?

Ian thinks: Sobering talk from Josh O’Kane about Google’s sidewalk labs project with plenty of insights for future smart city projects.


Find the archive here

Public Service Internet monthly newsletter (Dec 2021)

Morpheus with agent smith

We live in incredible times with such possibilities that is clear. Although its easily dismissed how Google & Deepmind used patients data without permissionhow aesthetics has dominated technology reviews and comparing social media’s effects to alcohol.

To quote Buckminster Fuller “You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.

You are seeing aspects of this with seeing the EU’s first steps in creating a Interoperable Marketthe open source approach to solar power and the understanding technology won’t solve the coming climate collapse.


The metaverse is a zoo and a silicon valley surveillance dream

Ian thinks: I have many thoughts about the metaverse, but there is so much about the matrix which is apt for Silicon Valley’s metaverse, Agent Smith says “I hate this place, this zoo, this prison, this reality, whatever you want to call it.” While Morpheus says “What is the Matrix? Control.” Both fitting.

The absolute importance of trust and accountability

Ian thinks: As more and more of public services go online, the absolute importance of trust and accountability needs to be established. We can’t leave it to private enterprises as you see with meta, to provide trusted services

Rushkoff & Javis’s invite to redesign the internet

Ian thinks: I like the idea of the course, the reading list is very good. With such heavy weights I’m keen to see what may come from it?

What comes after the social feed?

Ian thinks: Its good to see some early positive public research about aspects of social we all take for granted. Look forward to further development.

The goldmine of data on our phones

Ian thinks: The EFF’s latest podcast on what the police and malicious actors do with the data on our phones once they have it for a short while is quite something to hear and think about.

Is Venture Capital as harmful as we suspect?

Ian thinks: The Freakonomics give a balanced view on venture capital. I’m less positive but also hopefully with some of the details in the podcast.

Can crypto provide wealth to black communities or is it all a trap?

Ian thinks: I’m personally deeply conflicted about crypto but very concerned at how its being pushed as a way to rebuild generational wealth within the black community. Especially by the community its self. Crypto and the Neo-liberalism narrative doesn’t seem to fit neatly.

Whats the difference between Sky, Whatsapp, Anom, Signal, etc?

Ian thinks: Sky suing the US Government is a interesting point of reference, but also begs the question of whats ok and not in the encrypted messaging future.

The enemy in the home breaking relationships?

Ian thinks: The amount of IOT device in our home and their impact on our homes and human relationships is a ongoing concern, with no little good outcome on the horizon. On a similar branch Stacey outlines her problems with her IOT home.

 


Find the archive here

Public Service Internet monthly newsletter (Feb 2021)

Survillence everywhere
Photo by Matthew Henry on Unsplash

We live in incredible times with such possibilities that is clear. Although its easily dismissed, seeing the de-platforming and even the royals snubbing social media.

To quote Buckminster Fuller “You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.

You are seeing aspects of this the privacy first search engine duck duck go surpassing 100 million daily searches, the move to Signal messager from Whatsapp causing it to fall over temporarily and Facebook forced to rethinking their strategy.


Its the Internet’s health check up time!

Ian thinks: Mozilla’s well researched look at the state of the internet is a one of those reports which spurs thought and action for the coming year. Its been a tricky year with lots of up and downs, nicely documented in this massively detailed report/playbook. You might recognise someone in the report.

How can we achieve public spaces online?

Ian thinks: on 11-12 March a online conference by a number of partners including BBC R&D bring together organisations and vendors who are interested in the development of a public stack in line with the principles of democratic, sustainable etc. This is all part of the Mozilla Festival 2021 which is in Amsterdam for the next 3 years. Tickets are now available for Mozfest. and the publicspaces conference.

The new state of the self sovereign internet

Ian thinks: A deep dive but also accessible look at the current state of decentralised technology like self sovereign identity. Maybe one of the better summaries.

Some of the challenges to decetralisation

Ian thinks: The post has quite a few errors within it, like how they keep referring to Mastodon as a single network and missed the memo how Gab removed themselves off Mastodon. BlueSky sounds only slightly interesting, but the core of this post is focused around the risk of extreme groups using decentralised technology.

Imagine a Buddhist-inspired AI

Ian thinks: A truly real rethink of AI ethics based around Buddhist ethos is something worth pursuing. There is a lot of modern life which could be re-thought with a eastern view.

Do Facebook really think we won’t notice?

Ian thinks: Will the name change from Libra to Diem make any difference? Its still got Facebook behind the scenes and almost all the original backers have left.

The future of shopping faces the same dilemma as everyone else

Ian thinks: Its later in the video when Ian talks privacy and luxury but also luxury and personalisation. Its good to hear these discussions happening in the retail world too.

(How) will Public Service survive Silicon Valley?

Ian thinks: Although this well written paper focuses on public service broadcasting, I would consider the wider question of publicservice full stop.  Its clear the likes of Uber, Airbnb, Amazon, Facebook etc are aiming to replace public utilities  Of course I think so but publicservice needs to double down on things which break silicon valley

How eXistenZ, Pizzagate, Qanon and Augmented reality all fit together?

Ian thinks: Mark Pesce is interviewed by Douglas Rushkoff for team human, and its quite a fascinating interview linking all these topics together.

Ring doorbells get on the E2E train

Ian thinks: Well its about time, but expect more E2E and Zero-knowledge buzz words to be thrown around this year. Question will always be, are they actually doing what they say they are? Looking at you Zoom.


Find the archive here

Signal what are you up to?

I love Signal and never used Whatsapp because of many reasons included in this great opinion piece. Its gotten better and better but the recent pin number is a worry. I’m not the only one.

“Notably, things we don’t have stored include anything about a user’s contacts (such as the contacts themselves, a hash of the contacts, any other derivative contact information), anything about a user’s groups (such as how many groups a user is in, which groups a user is in, the membership lists of a user’s groups), or any records of who a user has been communicating with,” Signal wrote in 2016.

That, according to critics, has now changed.

“They should have a dumb network that knows nothing because it can’t be compromised then,” The Grugq told Motherboard. “[Having contacts] is a lot. It isn’t messages, sure. But I don’t like it. I don’t want them to have anything. Make the networks dumb and the clients smart.”

I do understand why they have done it, but I don’t know where its going next. Marlnspike (head dev of Signal) replies.

Marlinspike defended the decision to enable PINs and give users a way to migrate to a new device and keep certain data, and will increase the security of users’ metadata, “new features Signal users have been asking for.”

“The purpose of PINs is to enable upcoming features like communicating without sharing your phone number. When that is released, your Signal contacts won’t be able to live in the address book on your phone anymore, since they may not have phone numbers associated with them,” Marlinspike told Motherboard. “For most users, this also increases the security of their metadata. Most people’s address book is syncing with Google or Apple, so this change will prevent Google and Apple from having access to your Signal contacts.”

Smartphone use
Photo by Gilles Lambert on Unsplash

The changes Signal has made show how there can be a tension between messenger usability and feature set and security. It’s too early to say whether you should stop using the messenger. For most users’ threat models, it’s still one of the best options. But one of the key things that set Signal apart—that it collects almost no information about its users, appears to be changing.

Convenience is the enemy of security and I would say privacy. I wouldn’t be surprised if signal gets forked.

It was always clear to me Twitter direct messages was never secure in anyway, hence why I tried to move private conversations over to another medium. If thats not email or signal what else? Recently I have been looking at a couple others…

Session which is decentralised messaging and Criptext, which is actually secure email. Both need work but have decent security.

Not even an epidemic will stop the scammers

The other day I got a request to book my Airbnb spare room. I had completely forgot that I had blocked it out for my holiday to South Korean and Japan, which were cancelled. But hadn’t done anything after those dates, not really thinking my airbnb was still technically open.

The message was a mess…

Hello! Due to the situation in the country, I was sent from my company as a nurse to your city. I really liked your place, it seems really nice. It will be very suitable for me. I’m already waiting for this trip. But I have a couple questions. Please text me in Vhat is a * pp number + F0-ur, tvvo and z-еrrо, then sееve’ntys even, then goes tth_ree, 1’ 5” and 0ne, thre;e, ends with 98. See you soon!

Of course I could smell a scam from a mile away and responded, why don’t you ask the questions you have in Airbnb chat? Then added its lockdown in the UK and I won’t be taking any guests till things change with Covid19.

No reply of course and I rejected the request. But a week later airbnb contacted me.

Hi, Ian,

We’re reaching out because you were recently in contact with an account that was removed for violating the Airbnb Terms of Service.

Airbnb will never ask you to verify a listing or pay for anything outside of our site, through email, or through a third-party booker. If you sent money outside of Airbnb, you may have paid for a fraudulent reservation. Let us know what happened, and we’ll recommend next steps.

If someone asked you to communicate directly by email or through Facebook, or copy and paste a URL (http://www…) into a new browser window, or otherwise pay or communicate outside of the Airbnb website or app, we ask that you stop communication with them immediately.

If you did share personal information, like a password, please update your password immediately. If you use that same password for any other accounts (like your email), we recommend changing your password there too.

Of course I shared zero but I did find it interesting the scammer pulled on the strings with some urgency and being a nurse. Of course they had only signed up to be on Airbnb that same Month of April (meaning they had only signed up a few days before), had no vertifications, no reviews and the pretext of whatsapping them was straight from the airbnb scammers book.

I imagine there is a lot of desperate Airbnb hosts who might have sent a message to see whats possible?

Public Service Internet monthly newsletter (Mar 2020)

Microphones on a desk

We live in incredible times with such possibilities that is clear. Although its easily dismissed by looking at the sorry state of the UK during our EU withdrawal or the tech press panic over the corona-virus.

To quote Buckminster Fuller “You never change things by fighting the existing reality. To change something, build a new model that makes the existing model obsolete.

You are seeing aspects of this happening with the rise in unions and labor rights in the gig economy.


Google users in UK dropped into GDPR limbo

Ian thinks: I always thought this was going to happen, once out of the EU our data privacy laws won’t be respected by the GAFFA’s and why would they?

Signaling to the masses, leave whatsapp

Ian thinks: Signal as a behemoth is concerning but its clearly made the best use of open source licenses to keep itself in check. Love the new systems which are being built on the protocol, real opportunity for something very new.

A future without public service media?

Ian thinks: All public service is under treat and hearing the words of the CEO of the CBC, really sends the message loud and clear

Governments who lockout their Public service broadcasters

Ian thinks: Following the previous link, a look at the sorry state of American’s public service broadcasting. The up lift of donations is good but for how long, how sustainable is public donations?

Making the digital economy working for the 99%

Ian thinks: 3 words – Transparency, auditing, diversity.

Spotify’s plans to take over podcasting?

Ian thinks: The comparisons are spot on and its clear podcasting is going through a massive change right now. Spotify’s play to commodify and dominate is hard to break unless there is experiences they can not own.

Centralising podcasting with trapping techniques

Ian thinks: The writer makes a good point about Spotify taking decentralised open media and locking inside a closed proprietary system. Lessons to be learned for future services we use.

The utopian vision of Airbnb vs the harsh reality

Ian thinks: I like Airbnb, I’m even a host but its clear there isn’t just a problem but its fundamentally broken and actively exploited by too many.

Could containers for web browsing benefit you too?

Ian thinks: Been using Firefox containers for the last 6-8 months and find them incredibly useful. The user experience is a mess and provides an opportunity for design disruption.

If you are using whatsapp… update now and consider swapping to Signal!

Whatsapp on a mobile phone

Whatsapp, never used it never will. But I know many many of my friends do – please do update! Or even better dump it and use Signal messenger.

A security flaw in WhatsApp can be, and has been, exploited to inject spyware into victims’ smartphones: all a snoop needs to do is make a booby-trapped voice call to a target’s number, and they’re in. The victim doesn’t need to do a thing other than leave their phone on.

The Facebook-owned software suffers from a classic buffer overflow weakness. This means a successful hacker can hijack the application to run malicious code that pores over encrypted chats, eavesdrops on calls, turns on the microphone and camera, accesses photos, contacts, and other information on a handheld, and potentially further compromises the device. Call logs can be altered, too, to hide the method of infection.

The issue affects WhatsApp for Android prior to v2.19.134, WhatsApp Business for Android prior to v2.19.44, WhatsApp for iOS prior to v2.19.51, WhatsApp Business for iOS prior to v2.19.51, WhatsApp for Windows Phone prior to v2.18.348, and WhatsApp for Tizen prior to v2.18.15.

Whats that? Peer pressure?

Whatsapp on a phone

I recently came back from mobile roaming in Sarajevo; its been a while since I’ve been to a county where data roaming wasn’t as straight forward as its become. Even doing the standard replying to the automatic text didn’t work. (Although this isn’t about roaming data, although I have a long history when it comes to international roaming data).

It was kinda weird the assumption that everyone would be on Whatsapp. I understand the limitations of text messages and the greed of the mobile operators in the past around MMS and EMS, has crippled its use. Especially at 50p per message when internationally roaming on EE.

My colleagues ask over and over again, why am I not on Whatsapp? To be fair many others have asked the same question. So here’s some of my reasons.

  1. I simply don’t trust Facebook (owners of Whatsapp); I removed FB from my mobile devices and only put the lite version of messenger with all its permissions removed (inlcuding contact access)
  2. I read the Whatsapp End User Licence Agreement, a few years ago and then didn’t  agree with the terms especially around who they share the metadata with. I assume its changed but I don’t see a compelling reason to do it again.
  3. I don’t trust Whatsapp’s security implentation of Signals end to end message encryption; and is it all mute if Whatsapp is sharing the metadata anyway?
  4. This isn’t just because its FB; I don’t use Googe Allo either. I use certain systems for certain things. I get for most people Whatsapp is their ICQ but the benefit isn’t enough to make me use it.
  5. I don’t like the net neutrality issue, with certain mobile operators giving it priority over other services.

End of the day, everyone needs to make their own decision based on real information; not on social & peer pressure. Happy for you to be on Whatsapp but I won’t be joining you.

I wonder about the effect of Instagram on our minds

I have been having a discussion with Tim about Instagram recently. Interestingly its also the launch of Ingrid Goes West.

From tmdb

Ingrid becomes obsessed with a social network star named Taylor Sloane who seemingly has a perfect life. But when Ingrid decides to drop everything and move west to be Taylor’s friend, her behaviour turns unsettling and dangerous.

It doesn’t sound great, something like Friend Request and Unfriended.

Anyway…

I don’t use it because I have issues with the whole setup of instagram. Without going into too much detail, here’s the main points.

  1. I don’t agree with Instagram’s end user licence, which includes using your photos in almost anyway they like.
  2. I don’t like the creation of instagrams is all within the same app (for example I use a Plume on Android and Corebird on Ubuntu) to access Twiter and I create, edit and post to twitter not within twitter (it a important distinction)
  3. I don’t like the fact Instagram isn’t really public, indexable or accessible unless you are on instagram.
  4. I have a problem with filtered views of real life. Its bad enough that every photo you see has been doctored/photoshopped/filtered/algorithmicilly messed. But I don’t want to see them everyday.

Photoshopping

And the last point is a key one, as its clear there are serious problems with seeing this level of fakeness everywhere. Like it or not, it becomes normalised.

I hear some of you say this is no more than what Twitter or Facebook do/enable? and I would somewhat agree… but I have built ways to deal with this partly due to being able to use other apps or types of behaviours which run against the way it was engineered.

For example I don’t really look at the Facebook timeline, as I know its trying to lock me into a filter bubble, somewhat of my own making. Yes I could do a Robert Scoble and manage it into a better bubble, but I just don’t think its worthy of attention; plus Facebook doesn’t share this data in their data portability exports meaning all that work isn’t transferable at all. I know being without Facebook makes things very tricky but I can manage my activity within it right now, this might change of course as FB gets more greedy

Its easy to blame Instagram for all types of ills but its not solely them. Its a combination of Instagram and its share holders, the silicon valley push for winner takes all adoption of everything (dare I say anything about Uber in London) but most of all; ourselves for being suckers to peer pressure, advertising and patterns which are so established others are telling us exactly how they work!

We blindly follow suit without thinking about the long term effects. Mark Manson suggests the smartphone is going to be this generations cigarettes. When thinking about most peoples experience of the smartphone with Instagram, Facebook and Whatsapp preloaded, I can’t help but think actually he’s got a good point. Its the perfect Black Mirror episode, total fantasy as Rachel said!

Black MIrror s3ep1

We seem to be playing with fire without a true understanding of the consequences. Even if we do, how do you make this clear to others who are suckered in? How do you make this clear in the face of peer & social pressure? How do we make this clear to the next generation, the ones born with visions of a unattainable perfection all around them?

I’m not a sucker and won’t be joining to be a poster or lurker just so I can scroll through my friends fake reality pictures.