Lock Your Windows

Microsoft says it’s spying on you with only the purest of intentions. At least for now…

Fight disinformation: Sign up for the free Mother Jones Daily newsletter and follow the news that matters.


To understand how Microsoft can learn all about you, visit one of the company’s new city-guide Web sites, known as Sidewalk. There are now 10 of them, including Boston, New York, San Francisco, and Sydney (Australia), with more on the way, and they’re chock-full of information about restaurants, movies, and other ways to spend your leisure time. If you have a fondness for topless bars, those are listed; if you’re curious about gay bars, you can find those as well. You can even customize a site to update with new activities that fit your interests. It is undeniably convenient.

But at the very bottom of Sidewalk New York’s opening page, there is a small, almost unnoticeable blurb that reads “Terms of Use.” It begins rather murkily:

This Web site is offered to the user conditioned on the user’s acceptance without modification of the terms, conditions, and notices contained herein. By accessing and using this Web site, the user is deemed to have agreed to all such terms, conditions, and notices.

That’s a little weird: After all, the instant you land on the site, you’ve accessed and used it, thereby agreeing to Microsoft’s terms before you even know what they are. Then, if you scroll farther down, you come to a line simply titled “Use of Information.” It reads:

By being a user of this Web site, the user agrees that Microsoft may share with other parties both aggregate information, individual information, and locator information gathered by Microsoft in the course of the user’s continuing individual use of this Web site.

That seems inoffensive enough, until you come to the part about “locator information.” Locator information, according to Microsoft, “consists of a user’s name, e-mail address, physical address, and/or other data about the user that enables the recipient to personally identify the user.”

If this line doesn’t stop you in your cybertracks, well, then Microsoft loves you for it. After all the hard-to-find legalese, Microsoft’s intentions become bluntly clear: You are giving Microsoft permission to collect specific, highly personal information on who you are and what you do—collected as you surf. Microsoft learns your taste in film, culture, politics, sex. And then it can do whatever it wants with that information.

Microsoft can preserve such data indefinitely, for its own use, until you die. And it’s a safe bet that, sooner or later, Microsoft will sell it to other businesses because such information is a valuable commodity. Microsoft could sell it to a direct-marketing company; it could sell it to your health insurer or your employer; it could, theoretically, give it to the FBI, which is conducting a background check on you. Or Microsoft could simply use the data for its own commercial purposes, collecting as much information about you as, say, the government does—but with far less oversight.

You don’t have to be a privacy rights fanatic to find such information collection alarming. “Microsoft has the ability to automate data collection in a way that no one else does,” says Paul Saffo, a director at the Institute for the Future in Menlo Park, California. Lauren Weinstein, the moderator of the Web site Privacy Forum, adds, “Consumers feel that Microsoft takes a parental attitude: ‘Trust us, we know what’s best, we’ll take good care of you.'”

Saffo and Weinstein say that what Microsoft can do isn’t qualitatively different from what, for example, banks and credit card companies try to do. But “because Microsoft has such a wide reach,” Weinstein explains, “the amount of potential power and the amount of potential problems are multiplied.” Admits Megan Bowman, Microsoft’s government affairs manager: “We’re hard to compare to some of the other actors just because of the breadth of our business.”

The inevitable domination of its Internet Explorer browser means that Microsoft has another way of gathering information about you: The browser can keep track of your stopping points along the Web—your “clickstream”—and that information could be transferred to Microsoft when you visit one of its Web sites. Given the lack of government Internet oversight, it’s completely legal. In a new ad campaign, Microsoft describes I.E. 4 as a “faster, more personalized Web browser” and promotes “content that can only be viewed with Internet Explorer 4.” It’s a seamless horizontal ladder: You use Windows to open Explorer to access, say, Carpoint, Microsoft’s online car-buying service, and details of the sites you’ve visited previously can be sent to Microsoft—like a pipeline from your brain to Redmond.

This, of course, can all sound a little paranoid. But Microsoft has given experts who follow privacy issues ample reason to worry in the past.

Most notorious is the Windows 95 “Registration Wizard.” Back when Microsoft was releasing early versions of the operating system, it introduced a rather remarkable feature: To register your software, the system calls up Microsoft via modem. During the process, Windows asks whether it can send Microsoft information about your computer. If you agree, Windows, exploring your computer, will tell the company what other products you use.

But savvy users pointed out that Windows doesn’t just send back information about Microsoft programs on your hard drive; it will also send back data about competitors’ programs. After furious protests by developers, Microsoft defended the program, saying it was for the consumer’s benefit: If you have a compatibility problem, Microsoft will know what software you have and can help you diagnose the problem.

The company has still another means of accessing information from your computer: Internet Explorer contains a “File Upload” feature, which allows users to send information to Web sites. But the feature also reportedly can allow Web servers to upload files from your hard drive without your knowledge. (To be fair, Netscape used it first, in Navigator.)

And then there are “cookies,” small text files that a Web site can write onto your hard drive. The cookie can retain information about whatever you do on that Web site, such as using your credit card to buy a magazine subscription. The next time you visit that site, the cookie enables the Web site’s owner to determine who you are and sometimes even what other sites you’ve been visiting. (Due to complaints—and probably to fend off government regulation—Netscape and Microsoft built tools into their browsers that let you block cookies.)

The likelihood of Microsoft becoming a major information clearinghouse grows with the number of services it provides. In addition to Sidewalk, Microsoft also operates Slate, an online magazine; Expedia, an Internet travel business; Investor, a financial services site; and Carpoint.

“The only sensitivity they have about privacy is that it could present obstacles to some business venture,” says James Love, director of Ralph Nader’s Consumer Project on Technology.

Says Microsoft’s Bowman: “A lot of the promise of the Internet is in personalization. When people understand what value they get for providing information, and that that information is protected, they will feel quite comfortable providing it.”

So how does Bowman, who says Microsoft does not now sell user information, explain Sidewalk’s Terms of Use, which can also be found on Microsoft’s other online services? “The language is just designed to be fairly open to anticipate a number of ways in which we might provide you with more information and benefits,” she says.

Consider, for example, the different ways Slate learns about its readers. The magazine recently posted and e-mailed to registered Slate readers an extremely detailed survey.

An accompanying note from Rogers Weed, Slate‘s publisher, downplays any privacy concerns: “Contrary to what some people believe, we in cyberspace do not secretly scan your hard drive while you surf Slate.” And many of the questions seem fairly standard (What is your total household income? Do you read your newspaper’s editorial page?). But the information also helps Microsoft understand the potential for new online markets, possibly to develop future Web sites, and allows the company to integrate itself into your life, so that you find it as hard to live without Microsoft as, say, to extricate Explorer from Windows.

For Microsoft, there is a massive amount of valuable information out there, and little standing in its way. As Love puts it, “From a privacy point of view, Microsoft is a very big deal—and a lot of what’s a big deal hasn’t even happened yet.”

Richard Blow is a Mother Jones contributing writer and a senior editor at George magazine.

WE'LL BE BLUNT

It is astonishingly hard keeping a newsroom afloat these days, and we need to raise $253,000 in online donations quickly, by October 7.

The short of it: Last year, we had to cut $1 million from our budget so we could have any chance of breaking even by the time our fiscal year ended in June. And despite a huge rally from so many of you leading up to the deadline, we still came up a bit short on the whole. We canā€™t let that happen again. We have no wiggle room to begin with, and now we have a hole to dig out of.

Readers also told us to just give it to you straight when we need to ask for your support, and seeing how matter-of-factly explaining our inner workings, our challenges and finances, can bring more of you in has been a real silver lining. So our online membership lead, Brian, lays it all out for you in his personal, insider account (that literally puts his skin in the game!) of how urgent things are right now.

The upshot: Being able to rally $253,000 in donations over these next few weeks is vitally important simply because it is the number that keeps us right on track, helping make sure we don't end up with a bigger gap than can be filled again, helping us avoid any significant (and knowable) cash-flow crunches for now. We used to be more nonchalant about coming up short this time of year, thinking we can make it by the time June rolls around. Not anymore.

Because the in-depth journalism on underreported beats and unique perspectives on the daily news you turn to Mother Jones for is only possible because readers fund us. Corporations and powerful people with deep pockets will never sustain the type of journalism we exist to do. The only investors who wonā€™t let independent, investigative journalism down are the people who actually care about its futureā€”you.

And we need readers to show up for us big timeā€”again.

Getting just 10 percent of the people who care enough about our work to be reading this blurb to part with a few bucks would be utterly transformative for us, and that's very much what we need to keep charging hard in this financially uncertain, high-stakes year.

If you can right now, please support the journalism you get from Mother Jones with a donation at whatever amount works for you. And please do it now, before you move on to whatever you're about to do next and think maybe you'll get to it later, because every gift matters and we really need to see a strong response if we're going to raise the $253,000 we need in less than three weeks.

payment methods

WE'LL BE BLUNT

It is astonishingly hard keeping a newsroom afloat these days, and we need to raise $253,000 in online donations quickly, by October 7.

The short of it: Last year, we had to cut $1 million from our budget so we could have any chance of breaking even by the time our fiscal year ended in June. And despite a huge rally from so many of you leading up to the deadline, we still came up a bit short on the whole. We canā€™t let that happen again. We have no wiggle room to begin with, and now we have a hole to dig out of.

Readers also told us to just give it to you straight when we need to ask for your support, and seeing how matter-of-factly explaining our inner workings, our challenges and finances, can bring more of you in has been a real silver lining. So our online membership lead, Brian, lays it all out for you in his personal, insider account (that literally puts his skin in the game!) of how urgent things are right now.

The upshot: Being able to rally $253,000 in donations over these next few weeks is vitally important simply because it is the number that keeps us right on track, helping make sure we don't end up with a bigger gap than can be filled again, helping us avoid any significant (and knowable) cash-flow crunches for now. We used to be more nonchalant about coming up short this time of year, thinking we can make it by the time June rolls around. Not anymore.

Because the in-depth journalism on underreported beats and unique perspectives on the daily news you turn to Mother Jones for is only possible because readers fund us. Corporations and powerful people with deep pockets will never sustain the type of journalism we exist to do. The only investors who wonā€™t let independent, investigative journalism down are the people who actually care about its futureā€”you.

And we need readers to show up for us big timeā€”again.

Getting just 10 percent of the people who care enough about our work to be reading this blurb to part with a few bucks would be utterly transformative for us, and that's very much what we need to keep charging hard in this financially uncertain, high-stakes year.

If you can right now, please support the journalism you get from Mother Jones with a donation at whatever amount works for you. And please do it now, before you move on to whatever you're about to do next and think maybe you'll get to it later, because every gift matters and we really need to see a strong response if we're going to raise the $253,000 we need in less than three weeks.

payment methods

We Recommend

Latest

Sign up for our free newsletter

Subscribe to the Mother Jones Daily to have our top stories delivered directly to your inbox.

Get our award-winning magazine

Save big on a full year of investigations, ideas, and insights.

Subscribe

Support our journalism

Help Mother Jones' reporters dig deep with a tax-deductible donation.

Donate