Ballmer kitteh sez: I Can Haz Flickr?

February 8, 2008 at 12:01 am | Posted in Blogging | Leave a comment
Tags: , , ,

Ha! Everyone and their dog were blogging about Microsoft’s bid to buy Yahoo this week – even Austrian ‘quality’ newspaper Der Standard dedicated its front page to this topic. The internet is really having a stranglehold on our minds and economy, isn’t it? Today I’ll add my five cents as well: by reposting Knowprose’s icanhascheezburger variation:

I can haz flickr

Originally uploaded by TaranRampersad a.k.a. Knowprose

Advertisements

An Email to Yahoo/Flickr regarding privacy leak

January 26, 2008 at 12:44 am | Posted in privacy | 2 Comments
Tags: , , , ,

Here is a copy of my email to Yahoo (for Flickr) Germany (they automatically forward me to the German site, due the my IP I suppose), addressing the privacy issue raised by the 30boxes mashup (I wrote about that here). I picked the ‘Infringement of Privacy’ label, hopefully I’ll get a response, hopefully they’ll fix that problem.

Dear Yahoo,

I just learned that, due to an open API at Flickr, it is now possible to extract and MATCH ones nickname and email address and make that connection public. That means: Knowing someone’s email address suffices to retrieve that person’s flickr account.

This is currently possible using the services of a website called www.30boxes.com. 30boxes offers a calendar services and claims to allow people to do the following:

* organize your stuff
* plan your day
* keep up with your friends

Unfortunately, in their interpretation, a friend is someone whose email address you know (an unfortunate misunderstanding that could also be witnessed in the recent disclosure of shared items to everyone in your contact list at Googlemail)

Similarly, keeping up with your friends at 30 boxes works the following way: Once you have signed up, you can “Find buddies” by entering the email addresses of people you know (of course, knowing someone’s email address does _not_ mean that you are friends!)

30boxes then attempts to retrieve data from the APIs of – among others – Flickr, Twitter, Myspace.

What is disconcerting here is that it, in the case of flickr – matches nicknames and emailaddresses, meaning that the privacy that the nickname offers is jeopardized.

I, for instance, entered the email of a friend (which I am not going to type in here, as I am also going to publish a copy of this email on my blog) and immediately received a link to her flickr account – I am very sure that she isn’t too pleased about this.

I am probably lucky that 30boxes wasn’t able to match my email address with my flickr account (for which ever reason) – nonetheless, I wonder whether:

a) Flickr knows about this vulnerability of their API

b) this vulnerability is covered by the terms and services (I doubt that I would understand the legal language that defines the use of APIs, hence I haven’t checked myself).

In any case: The fact that one HAS the opportunity to chose a nickname does, in my view, suggest that the connection between nickname and email address should also NOT be revealed to third parties nor made public, e.g. publicized in the 30 boxes mashup.

Furthermore: If a user gives out his or her email address, that does not necessarily mean that he or she also meant to allow this person to see his or her flickr account. This is, however, the consequence of opening your api to third parties like 30 boxes.

Your feedback is very much appreciated.

Best wishes

Anaj Blog

I might have to send emails to Twitter, Myspace etc. as well.

Blogging on halt again

July 19, 2007 at 12:43 pm | Posted in Blogging | Leave a comment
Tags: ,

And I’ve just maxed out my number of free photos on flickr – arf…

Too busy right now

My brother’s photographs 31/40

March 29, 2007 at 7:12 am | Posted in Photography | 4 Comments
Tags: , , , ,

In terms of ‘career’ and ‘professional development’, my brother and I couldn’t be any more different. He’s just four years older than me but has been working for the past 19 years in a full time job. I am in my 4.5th year now of working full-time. I’m an English teacher (not justified to call me lecturer, although it says so on my card), he has been employed as cleaning staff for the past 15 years. But the photographs he takes keep amazing me. He has never had any form of training, and you can sometimes see that his take on framing, for instance, is very unconventional. Which contributes to the photos’ fascination. And the collages he comes up with are also absolutely independent. He only had five years of English at school and that was 20 years ago. This notwithstanding, he keeps writing me emails in English and knows how to use the language to describe his pictures. Today I’d just like to present some of the pictures on his flickr portfolio:












Create a free website or blog at WordPress.com.
Entries and comments feeds.