Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Execs at AOL Approved Release of Private Data? 156

reporter writes "The New York Times has published a report providing further details about the release of private AOL search queries to the public. According to the report: 'Dr. Jensen, who said he had worked closely with Mr. Chowdhury on projects for AOL's search team, also said he had been told that the posting of the data had been approved by all appropriate executives at AOL, including Ms. [Maureen] Govern.' The report also identifies the other two people whom AOL management fired: they are Abdur Chowdhury and his immediate supervisor. Chowdhury is the employee who did the actual public distribution of the private search queries. He, apparently, has retained a lawyer."
This discussion has been archived. No new comments can be posted.

Execs at AOL Approved Release of Private Data?

Comments Filter:
  • by Anonymous Coward on Tuesday August 22, 2006 @10:47AM (#15955401)
    Good Morning Silicon Valley's got two internal AOL e-mails [siliconvalley.com] announcing the CTO's "resignation" as well as AOL's 4 part plan to become an industry leader in privacy. Excerpt:

    1. Creation of a task force, led by Ted Leonsis and Randy Boe, with senior representatives from corporate communications, integrity assurance, product and marketing, to develop new best practices in this rapidly evolving area. Among other issues, the task force will look specifically at how long we should save data, including search data, and will make recommendations to improve the AOL Privacy Policy and our privacy practices company-wide.
    2. Additional restrictions on access to databases containing search data and any other potentially sensitive member data, regardless of whether that data is linked to individual member accounts.
    3. Evaluation and development of new systems to help ensure that sensitive information is not included in research databases.
    4. Education and awareness programs for employees -- at all levels -- on how to protect sensitive information and address privacy issues.
  • by Anonymous Coward on Tuesday August 22, 2006 @10:54AM (#15955454)
    The reason that the exec's approval is an issue is not because we expect the execs to know what the heck they are looking at, but because they are the custodians of the "process".

    I can entirely believe that the execs didn't know the full implications of what they were looking at, or didn't have a clear idea of what could be done with the data. I'm sure that they cared that the data was anonymized, and it *was*, just not well enough.

    However, even though they sometimes like to come off as knowing what they are talking about technically, execs didn't *need* to be able to project all the possible uses of the data set. The problem is that they did not ensure that it was referred to the right internal specialist agency that did know what could be done with it.

    When this hit inside AOL, everyone was surprised by it. Initially the only alarm inside AOL was some calls where the NetOps people were saying that traffic had taken down a switch, and could you please investigate. At the same time, Operations Security opened an investigation because they thought there was an intrusion on the machine. The release of the data wasn't even really more than a blip on anyone's radar until some people started reading the news. The interest for this was supposed to be so low, that no one really even set up any sort of high bandwidth solution for it. It was just on a 100Mbit switch that had various other hosts on it. The flood of data from the requests actually took down a registration server on the same switch, which had an effect on other AOL services.

    Everyone in Search, Ops and Dev, I talked to mentioned that this information had been demoed to the execs, which I assume included the CTO (Govern). I will say, though, that it is interesting that she has had to fall on her sword for this, because really, she's was the least likely exec in the company to have known the full privacy procedures, having been only recently hired and focused on Video Search. Not to mention with Video Searchbeing released, this is a really crappy time to lose the CTO.

    Chowdhry was mentioned in discussions as probably the most likely person to be canned, but it's surprising that they actually did it, because he has a fairly decent footprint in the Search organization. I suppose he probably should have "known better", but I don't know if firing him was the best idea for the company.

    People at AOL don't like how the execs are trying scapegoat people for this. Miller is trying to make a PR statement that "we got the bad apples". Well, none of those "apples" were "bad", as far as I can tell. The process is what failed, and AOL has a lot of process problems. Hopefully they decide to fix those without simply making us go to some stupid class about the existing process (which failed).

    Anyway, looks like we'll be getting a new CTO... and I was just done unpacking from the last re-org (instituted by Govern). Fun times ahead.

  • by TFGeditor ( 737839 ) on Tuesday August 22, 2006 @11:46AM (#15955897) Homepage
    "AOL did not provide any of the information necessary to identify the searchers."

    Oh, really? A couple of NY Times reporters didn't let that stop them. They used the search data to find and interview User No. 4417749, Thelma Arnold, a 62-year-old widow who lives in Lilburn, Ga. Link to story below. Bugmenot login works.

    http://www.nytimes.com/2006/08/09/technology/09aol .html?ex=1156392000&en=4908a895fec7a6a7&ei=5070 [nytimes.com]

  • Yes Im sure they did (Score:2, Informative)

    by talledega500 ( 994228 ) on Tuesday August 22, 2006 @06:36PM (#15958983)
    And the solution is to stop trusting these guys and use your own head. Heres a good way to do just that with a search proxy.
    http://www.blackboxsearch.com/ [blackboxsearch.com]

Always draw your curves, then plot your reading.

Working...