American data pimper exposes ad equation

26,000 tracked, 15 opt out


How much notice did American ISPs provide when testing NebuAd's Phorm-like behavioral ad targeter? Not as much as NebuAd CEO Bob Dykes would have you believe.

Responding to an open letter from three big-name US Congressman, Middle American ISP Embarq Corp. has admitted that before activating NebuAd's deep packet inspection hardware, it notified customers with no more than an update to its 5,000-word privacy policy.

Bob Dykes has always claimed that NebuAd's ISP partners provide "direct notice" to customers. Speaking to The Reg in April, he was adamant that a paragraph posted to an ISP's website or buried in its terms of service does not qualify as direct notification. And when he testified before Congress last week, he said that ISPs customers always receive an email or a letter or some extra words in their billing statements.

Of course, even these methods are less then adequate. As Ed Markey, chairman of the House Subcommittee on Telecommunications and the Internet, told Dykes during last week's Congressional hearing, NebuAd should always require an opt-in. In an effort to target online ads, NebuAd's deep packet inspection hardware tracks the search and browsing activity of web surfers from inside an ISP's network.

At one point during the hearing, Markey accused Dykes of "beating consumers." But Dykes insisted his system maintains user privacy by anonymizing IP addresses and offering an opt-out.

Earlier in the week, Markey and fellow Congressmen John D. Dingell (chairman of the House Committee on Energy and Commerce) and Joe Barton (ranking member of the House Committee on Energy and Commerce) fired a letter at the Kansas-based Embarq, demanding details on the NebuAd test it performed earlier this year. Since The Reg first contacted the company in April, it has openly acknowledged the test, but refused to give specifics.

As it turns out, Embarq tested the technology on about 26,000 broadband customers in Gardner, Kansas over the course of about two weeks. During that time, only 15 customers opt-ed out.

Chances are, most of the 26,000 didn't realize there was brand new language buried somewhere in the company's privacy policy.

Nonetheless, Embarq says it provided customers with adequate notice. "Embarq followed the prevailing industry practices of the most similar business model, that of online advertising networks, which also collect anonymous information across multiple unrelated web sites and use it to serve personalized display advertisements," the company explained this week in a letter to Markey, Dingell, and Barton.

But ordinary ad networks aren't tracking all your browsing activity from inside your ISP. In failing to require an opt-in, NebuAd and other behavioral ad targeters may run afoul of the Communications Act of 1934, the Cable Act of 1984, the Electronic Communications Privacy Act, and other wiretapping-related US statutes.

Of course, Embarq says it conducted its very own legal analysis of the situation, and the company has no doubt that an opt-out is enough.

It should be noted, however, that NebuAd's cookie-based opt-out isn't quite an opt-out. Ars Technica has spoken with a network engineer who's worked with NebuAd's hardware, and he confirmed that even if you opt-out, NebuAd continues to collect your browsing activity.

"When the user opts out, NebuAd does not collect the data on that user, and we do not serve targeted ads to that user," NebuAd has told us. "The data flowing through the system is immediately and permanently flushed out." The key words here are "data flowing through the system." Your info is still leaving your ISP for a third party. ®

Similar topics

Broader topics

Narrower topics


Other stories you might like

  • US, UK, Western Europe fail to hit top 50 cheapest broadband list
    Syria, Sudan, Belarus, Ukraine came top. Are you starting to see a pattern?

    In an analysis of 3,356 fixed-line broadband deals in 220 countries, price comparison website Cable.co.uk found that the UK has the 92nd cheapest internet, beating the US, which came in 134th place.

    Based on 41 packages, the average cost per month for broadband in Britain came in at $39.01. Stateside, this rose to $55, from 34 packages measured.

    For these bulwarks of western democracy, 92nd and 134th place isn't particularly impressive. But if you really want to shave the dollars off your internet bill, you have a number of options.

    Continue reading
  • The right to repairable broadband befits a supposedly critical utility
    A bolt of lightning has caused me days of misery, because the fix requires too much proprietary tech

    Column I heard an electric discharge, a bit like a Jacob's ladder, immediately before a deafening crack of thunder. I'd never been so close to a lightning strike! All of the lights in the house went bright, then dimmed, then went back to normal. "Uh-oh," I thought, "I'm in trouble now." Everything in the house had been hit by a nasty surge and the oft-spoken aphorism that broadband services are now a utility to rank with water and electricity was suddenly very, very, real to me.

    But it was electricity I worried about first. I use top of the line surge protectors so my most sensitive devices – computers and monitors, of which I have many – all seemed fine. But I'd overlooked two other connections that come into nearly every home: the antenna and the phone line.

    My television seemed to have taken a direct hit. It still worked – mostly – but appeared unable to receive any digital broadcasts. That circuit, lying on the other side of the antenna lead, likely took a big hit from the lightning strike. But the rest of the television seemed fine – at first. After a few days, and several spontaneous reboots, I began to intuit that devices don't always immediately fail when hit by lightning. Sometimes they gradually shed their functions and utility.

    Continue reading
  • Telecoms growth forecast for 2022 may be optimistic
    Analyst view: 4Q21 drop plus strains from war mean component shortages drag on

    The telecoms kit market had a good 2021 with revenues close to $100bn, up more than 20 percent since 2017, but growth is now slowing, according to analyst Dell'Oro Group. Huawei is also starting to feel the effect of sanctions, but still leads the global market by a fair margin.

    However, the Dell'Oro Group's prediction of slightly less growth for 2022 may turn out to be optimistic amid warnings that the Ukraine war is already having an impact on the fragile supply chain recovery.

    Dell'Oro's analysis is based on the telecoms market sectors it monitors, including Broadband Access, Microwave & Optical Transport, Mobile Core Network (MCN), Radio Access Network (RAN), and Service Provider Router & Switch.

    Continue reading
  • Fibre broadband uptake in UK lags behind OECD countries
    Not very 'world-beating'

    Optical-fibre internet now makes up 32 per cent of fixed broadband subscriptions across the OECD countries, and is the fastest growing broadband technology. However, there is a mixed picture with cable still dominant in the Americas and the UK still predominantly DSL.

    These figures come from an update to the OECD's broadband portal, indicating that fibre subscriptions grew by 15 per cent across the OECD countries between June 2020 and June 2021, with demand for faster internet speeds as employees worked remotely due to COVID-19 restrictions cited as one reason.

    Fixed broadband subscriptions in OECD countries totalled 462.5 million as of June 2021, up from 443 million a year earlier, while mobile broadband subscriptions totalled 1.67 billion, up from 1.57 billion a year earlier.

    Continue reading

Biting the hand that feeds IT © 1998–2022