Thursday, January 31, 2008

4 Ds of Information loss – Death

Death comes to us all. And from a legal perspective, death doesn't stop data. Data is property. Digital photographs are the same as physical photographs from an ownership perspective.

However, the law and reality split.

Getting your hands on your data

Lets assume that Aunt Bessie has died. What now... well as her only heir you get everything.
All her encrypted files. All her data accounts. All her data is yours, but you can't get to it.

Unless Bessie provided something for you...

As Ellybabes pointed out in her Death and Divorce in the Digital World presentation, unless you leave someone the password, they are going to stay locked out.

There is a method... as was pointed out in the ‘Security Now!’ podcast (episode 72):

Today, while alive, I don’t want to give my sensitive stuff or passwords to anyone, including my wife. But when I eventually die or become very ill, I need to make sure that my family has access.
But I know my wife wouldn’t be able to figure it out to save her life. If I have TrueCrypted all of my data, have complex unguessable password schemes and so forth, how do I unwind all of that for the benefit of other people I care about in my life?


So what you could do would be give to your attorney who has your will, or in a safety deposit box, something where access will be granted in the event of something bad happening to you without your taking any action.
Here’s what I’m thinking is that you separate the information out. So one of the things TrueCrypt lets you do is have an image file and a password. You need both; right? Maybe give the attorney the password, maybe even put it in your will, and store the image file in a safety deposit box. Separate the two, to be opened on your death or whatever.


But if you change your password regularly... then the copy with the attorney is probably out of date.
You could always try to break in to the machine, or maybe you don't need to, after all, if the hard drive is not encrypted, you just need to put it in another machine. Right?

What if the machine isn't local. What if the data is on a remote server. Do you need to go get a wig and break in somewhere.

Well, if you want to keep the data, the answer might be yet.

No right of survivorship

Under the terms of service of Yahoo, which includes the photograph sharing service Flickr,
(section 27 Paragraph 4)No Right of Survivorship and Non-Transferability. You agree that your Yahoo! account is non-transferable and any rights to your Yahoo! ID or contents within your account terminate upon your death. Upon receipt of a copy of a death certificate, your account may be terminated and all contents therein permanently deleted.


Or if you prove that she's dead, you loose access to all her stuff permanently.

For the record, a Flickr.com spokesperson detailed how their system works...
Flickr works with the Yahoo! Legal Compliance team to resolve these types of situations. You'll need to send them a copy of the death certificate in order to have the Flickr
account closed. Please include their Yahoo! ID as well as their Flickr screen name for removal of the Flickr account. Compliance can be reached [via telephone and fax].

After a death certificate is received we are not able to
give access to the account but we can close it.


Memorial State

Sites like Facebook are a little more accommodating. According to a Facebook spokesperson
When it comes to our attention that a user has passed away, put the profile in a Memorial State. In the Memorial State, certain profile sections and features are hidden from view to protect the privacy of the departed. We encourage users to utilize groups and group discussions to mourn and remember the deceased.

I don't know what "Memorial State" means, but it does mean that the data is retained.

Not everywhere has such a formal response... I contacted the Irish based life data organizerPutPlace.com and the photo and social network Pix.ie.

When I posed the question to Marcus MacInnes of Pix.ie he replied...
We do not have a specific policy dealing with the death of one of our users. Our policy on account access however is as follows:
We provide access to a user’s account only under one of the following conditions:
1.via our automated password recovery method;
2. if instructed to do so by a user’s legal personal representative (which may be the user themselves);
3. if we are required to do so by law.

In the event that the owner of an account dies, upon request, we would be obliged to surrender that account to the user’s legal personal representative (usually the executor of their will). The legal representative would then act in accordance with the wishes of the deceased and may for instance request deletion of the account.

And Joe Drumgoole of PutPlace.com explained that
we haven't put the legal framework in place yet. Our intention is that all content gets assigned to the probate or estate and the executor gets to do his stuff. In situations where no estate exists or legal structures don't support it we will allow appropriate next of kin (spouse, children, siblings, parents etc.) with supporting documentation to take over the account. We will support an alternate contact to allow somebody else to recover the account but we depend on the user to keep this up to date.

Its definitely a tricky area and something we will be coming across more and more in the future.


Messages from beyond

Another complicating factor is that with more and more of s spending our lives on line. Frequently out virtual network of friends and "friends" are the only ones that the next of kin cannot contact, because all this data exists on remote servers. Do you have a local or hard copy of all your friends contact e-mail addresses or IM names? (Actually do you have a list of all your accounts?)

If you got access to Aunt Bessie's social network account, should "she" be the one sending the funeral notice. Is parking the account in a "Memorial State" the answer? Marcus MacInnes of Pix.ie explained
[the] moral issue which until your question, we had not fully considered. How would friends react to receiving an on-line message from someone whom they knew had recently died. We cannot assume that the custodian of the account would act in any given manner and it is not clear whether or not we have a moral responsibility to provide reasonable protection to our users from receiving messages via our platform which are likely to cause distress. An example of this may be when a custodian acts irresponsibly, either intentionally or unintentionally.


Because of my questions, their policies are being reviewed.

I would have loved to include details of the policies of other vendors, but only the above companies contacted my in time. If I get any more details I'll include them in the comments.

Take care,
William Knott

With kind thanks to John Looney of Google (for the tech and social angles) and Simon McGarr of Tuppenceworth.ie (for the legal questions and answers) and for all the people quoted above for providing their perspectives.

tags : , , , legal, , , , , , , , , , , , , , , ,

Labels: , , , , , , , , , , , , , , ,

Wednesday, October 03, 2007

Breaking up

Dear Will,

Forgive me, but I'm taking it slow. You see, when I first met T, it was wonderful. All the attention I got, all the stories we shared. Even friends of friends became my friends as the conversation flowed like cheap wine at a party.

But things changes. For no reason all contact would be lost. It would last all day, calls going unheeded, connections being refused. It was almost as if all the focus was on a different time zone.

Then, old messages started to go. Friends didn't want anything to do with T any more and moved elsewhere. I realised that I simply couldn't rely on T.
And that's when I met Jaik. Not as easy as T. Things were more complicated (on occasion sleep keeps being interrupted, but I'll forgive that). I still see T sometimes. But my friends don't call around as often. They seem to prefer Jaik.

I'm not sure I should rush headlong in to this! Am I being unfaithful by seeing two systems at the same time? Should I take things slow?

Yours,
Burnt.


Dear Burnt,

Social media is all about relationships. If a system abuses you, should you keep using it? What do you get out of it. Sometimes it's OK to be selfish.

As for using multiple systems at the same time. No problem. Do what feels right for you. If taking things slow make sense to you, then take things slow. Build or prune your "friend" list as yo see fit. No one will take it badly (but if you're following over 150 people, you may want to make sure you actually care about all 400 of them).

Despite what some people say social media isn't a fad or a phase. More importantly its not about business value either. It's about links to other real people.

True, some are for geeks, and some really appeal to the cool kids or the business set. However each group will welcome you in it's own way. Or not. You should at least take a look at each group before you decide it's not for you. And if the site treats you badly, you don't have to continue.

If you feel you need to leave; leave. You have nothing to loose but your chains of friends... and if they are leaving too, you really have nothing to loose.

break free,
Will


tags : , , , , , , ,

Labels: , , , , , , ,

Wednesday, September 12, 2007

Pixenate your book

Let me tell you about Walter Higgins...

Walter created the Pixenate site which allows you to do online photo editing (so no need to download Gimp et al).

I think Walter explains it better in his interview with Intruders.TV

Well, at 9.30pm last night, after a bit of annoying him, he started working on a FaceBook version of Pixenate. At 3.30pm today he finished the FaceBook edition of Pixenate... yes folks that's 18 hours later and that time included a full nights sleep and at least on school run.

So now you can edit the photos you uploaded to FaceBook (or like me, failed to upload due to Java incompatibilities with my FireFox)

So please tell me how well it works...

Hopefully I can get to congratulate him in person at tomorrows Open Coffee. unless of course he's gone off celebrating with the Junior certs tonight.

take care,
Will Knott

tags : , , , ,

Labels: , , , ,