Tweet

Cory Doctorow

14 Jul, 33 tweets, 8 min read

@sheeraf

In @sheeraf and @ceciliakang's "An Ugly Truth: Inside Facebook's Battle for Domination," the authors recount the company's long history of insider threats in which employees (mostly men) used the company's tools to stalk people (mostly women).

harpercollins.com/products/an-ug…

1/

If you'd like an unrolled version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

pluralistic.net/2021/07/14/who…

2/

The stalking targets included both strangers and intimate partners - for example, an engineer used FB's tools to locate his partner after she fled their shared vacation hotel room in order to "confront her."

businessinsider.com/facebook-fired…

3/

Another FB engineer stalked a woman who didn't return his messages after a date, accessing years of private messages and photos, including photos that his target believed she had permanently deleted, but which Facebook had secretly retained.

4/

All told, Facebook fired 52 employees for data abuses between Jan 2014 and Aug 2015, after a policy change eliminated many access safeguards in the name of eliminating "the red tape that slowed down engineers."

5/

In other words, Facebook was in a situation in which its users' interests were at odds with its shareholders. By eliminating protections for its users, it allowed its engineers to work more efficiently, and increased its profits.

6/

These kinds of conflicts - between shareholder and stakeholder interests - are the norm in business. Think of a busy retailer that cuts its cashiers: reducing payroll costs increases profits, at the expense of worker stress and longer waits for customers.

7/

The question of how much value can be shifted from employees and customers to shareholders isn't really an economic one - it's really a POLICY question.

8/

If we have strong labor laws - protecting cashiers from undue stress, extending unemployment benefits to workers who quit bad jobs, protecting workers from non-compete clauses, separating health-care from employment - then a business that screws its cashiers will lose them.

9/

Meanwhile, the balance between customers' interests and shareholders' is likewise a creature of policy. If a retailer is the only game in town - if it's a Walmart that used predatory pricing to create a retail desert - then they can force customers to wait in longer lines.

10/

Or if the business has a regulated monopoly - a patent, a trademark or some other exclusive right that makes it the only game in town (say, the sole right to sell snacks in an airport), it can shift more value from customers to shareholders before the customers walk away.

11/

Facebook - and other tech monopolists - have engineered a world where they get to side with shareholders over users, again and again, to the users' great detriment, without losing those users.

12/

Economic analysis of tech monopolies focuses on "network effects" - the way more users make Facebook more valuable (you join FB because your friends are there, more friends sign up because YOU'RE there).

13/

Taken on their own, network effects are cause for despair, predicting that tech will produce "natural monopolies" - an inevitable winner-take-all market. But that's obviously not true - I'm not typing this on a Cray or using Altavista to look up facts while I do.

14/

Far more important than network effects for antimonopoly analysis is SWITCHING COSTS - the things you give up when you quit a service. In FB's case, quitting means leaving behind your friends, communities and customers.

15/

Now, this needn't be the case. You can switch phone companies or email providers without shattering your social connections. FB has engineered a high switching cost, blocking other services from connecting to it.

16/

After all, the more you stand to lose by leaving FB, the worse FB can treat you before you're willing to leave. Zuck didn't abolish the safeguards that protected us from rogue FB employees because he's nosy - he did it because it's profitable.

17/

He was betting (probably correctly) that no matter how unhappy the ensuring scandals made his users, it wouldn't make so many of them unhappy enough to quit that the losses would outweigh the gains from exposing us to predatory Facebookers.

18/

Which is why proposals like the #ACCESSAct, currently working its way through Congress, are such a big deal. It's a law that would force FB to let third parties plug into it, so you could leave FB but stay in touch with the people who stay behind.

eff.org/deeplinks/2021…

19/

In response to this (and the EU's Digital Markets and Digital Services Act), FB (and some lawmakers) warned that allowing third parties to connect to monopoly platforms would expose users to privacy risks, by reducing tech companies' control over their services.

20/

There's an element of truth to this, but left unsaid is that reducing the switching costs for leaving Facebook will protect users FROM FACEBOOK.

21/

When FB says that it needs total control over its servers or Cambridge Analytica will steal our data, we have to remember that FB ALREADY let Cambridge Analytica steal our data.

22/

@alexstamos

When FB gutted its internal controls to increase profitability by decreasing user protections, senior employees went to Mark Zuckerberg to warn him against it. @alexstamos, then FB's then-CSO, reportedly strenuously objected, but was personally overruled by Zuck.

23/

Like many sociopathic business-leaders Zuck is not swayed by arguments about the immorality of otherwise profitable conduct - but he IS responsive to arguments about business-losses arising from his abusive behavior. Money talks, bullshit walks.

24/

If the argument against loosening controls over employee access to user data had been, "We will lose ten million users per month to an upstart interoperator for so long as we do this," THAT might have stayed Zuck's hand. Unlike ethics, user-loss is a factor he cares about.

25/

@BusinessInsider

Contacted by @BusinessInsider's @SarahM_Jackson, an anonymous FB spokesperson (literally the only kind of person FB allows anonymity to!) said "We've always had zero tolerance for abuse and have fired every single employee ever found to be improperly accessing data."

26/

But that's a dodge. "Zero tolerance" isn't the same as "top priority." If FB wants to prioritize preventing employees from stalking users, it would collect less data from users, delete data as quickly as possible, and put very strict barriers between employees and data.

27/

If preventing stalking was FB's TOP priority, it would collect NO data, and/or NEVER let employees access it. Obviously, FB won't do that. it will always have to balance its users' privacy and safety against its shareholders' interests.

28/

I am skeptical that FB will EVER be a trustworthy guardian of its users' safety and privacy. I don't think the problem is that Mark Zuckerberg is the wrong self-appointed czar of 3B peoples' lives - I think the problem is that no one should have that job.

29/

But if you disagree - if you want to fix, rather than abolish, Facebook - then you need to figure out which policies will tip the balance in favor of the public interest.

30/

Policies like interoperability impose immediate, meaningful, concrete costs on FB every time it sides against the public and with its shareholders. If you're worried that interop will expose FB users to rogue companies or state actors, then regulate who can connect to FB.

31/

But don't leave that up to FB. FB will side with shareholders over users whenever it's profitable to do so. Putting FB in charge of interoperability shifts that balance dramatically in favor of shareholders and against the public.

32/