SchoolCIO | K-12 Blueprint | 21st Century Connections | Model Intelligent Classroom | Digital Learning Environments
New Bay Media
Teachers Technology Coordinators Administrators
left slice

Requires
Flash Player 9

Version Test
Download Flash


Home Publications eBooks Resources Events Hot Topics About Us Subscribe

Tech Learning Discussions Forums Meet our School & District Partners Write for Educators eZine Write for Educators eZine
RSS Feed: Learn more



Second Life

  Please Visit Our Other   Web Sites

TL Blog TL Podcasts

July 1, 1997

Cookies and The Web: The Goal is Rich Interactivity

by Dave Evans and Heidi Johnson

Overview:

This article reviews the use of "Cookies" on your computer! It's not about peanut butter or chocolate chip, but you'll learn how cookies affect your rights to privacy as well as access to information.

Cookies: A Quick Primer

A cookie is a little piece of information that a web site may use to identify your computer. Sites that create cookies typically store information about your use of that site in a database. When you return to the site, the cookie is used to find your information and to tailor your current visit based on what you did on your prior visits.

Cookies are used in a few places on the The Global Schoolhouse site. They allow more then one person access to a database at the same time, and allow each user to search for what he or she ise looking for without affecting others accessing the same database. This is why cookies are important for you.

The following example describes the "cookie" process in more familiar terms.

When you enter a store for the first time, a professional salesperson will greet you, ask your name, and offer to help you. When you return to the store, that same professional will remember your name, and will recall what you purchased, what you liked and didn't like, and will use that information to make your subsequent visits more enjoyable. Cookies allow web developers to create the same environment in a web application.

The Benefits of Cookies

Cookies allow a web application to respond to you as an individual. By gathering and remembering information about your preferences, the web application can tailor its operation to your needs, likes and dislikes.

For example, a cookie can be used to remember your name and the colors and fonts that you prefer to see. To be fair, a password could do the same thing, but doesn't it just feel nice to be greeted by name when you walk into a store? Sure it does! Cookies can keep track of what you are doing while using the application. When you visit an electronic store, a cookie makes it easy to shop by allowing you to drop things into a virtual "cart." The cookie actually keeps track of your cart versus others in use at the same time.

The benefits of cookies can be summed up simply: cookies allow web developers to create better web applications, applications that are more personal, easier to use and richer in their degree of interactivity. Of course, cookies do not in themselves make a winning application, and many great sites exist that don't use cookies at all. Cookies are simply one technology out of a range of tools that developers use to improve your experience on the Web.

Your Right to Privacy

You have a right to privacy: you have a right to expect that the information you share will be used for purposes reasonable related to the context in which you offered the information. Think about the salesperson again: you would expect that, having purchased a classical CD, the salesperson may let you know about an upcoming symphony performance. However, you would be likely be offended if someone representing the symphony called you and said "based on your purchase last week, we would like to ask_" This example illustrates the difference between the proper and improper use of your personal information.

When visiting web sites, you have been asked to sign guest books, register for promotions or free downloads, or to provide personal information under similar conditions. What happens to that information? The answer—and there are as many as there are web sites—can be surprising.

For many years, long before the Internet and the World Wide Web became popular, a common site in many businesses was a contest form and entry box: "Fill out this form for a chance to win a car!" Did you ever win a car? Did anyone you know ever win a car? The contest wasn't about the car—the contest was about getting your name and address, which was then sold to mail order solicitation firms, who in turn sold advertising and contact information. The same holds true on the Internet: your personal information is worth money, and there are businesses set up to gather that and re-distribute that information.

Your Right to Know

Let's pull a couple of things together now: cookies, which allow a developer to create an application that learns about you and about your preferences, and the business of reselling information. There is an immediate and obvious problem: but it is not the technology, it is the way in which the technology might be used. Cookies did not create the information re-selling business, nor did a cookie gather the information that someone else may be willing to pay for. Instead, the cookie created the link between your name—obtained when you signed the guest book at the web site—and the pages that you browsed while at the site.

The important point is that you provided the information—most likely based on your perception of how that information would be used. Imagine that you are walking down the street and someone you've never seen asks to see your driver's license. "I just want to look at it, honest!" Sure. Bye. Now imagine that the person is a cashier, that you are in a store and that you are writing a check. "I'll need to see your driver's license." Without a thought, you present it and complete the transaction. The difference is the context—and your expectation of how and for what purpose the information would be used.

When you visit a web site, before you offer any personal information, think about the site. Is it a site you visit often? What happens to the information collected? Does the site offer a written policy about its use of personal information? You have the right to know, and you have the option of not providing personal information until you do know.

What You Can Do To Protect Your Privacy

We live in an information-based society. While that is no reason to give up hope of privacy, trying to shield yourself from all intrusive behaviors is probably not the most practical solution either. Remember these points, and you'll have blocked the majority of invasive practices:

  1. Don't give information to strangers. Sure, it's the Internet, but a quick call to friend or a letter to the web master will often shed light on the motives of a web site you've not visited before
  2. Don't provide anything until you are comfortable with how it will be used. Look for the site's policy, and if you don't see it, write to the web master and ask for it. If you don't get a response, do you really want to do business at that site?
  3. Do try to understand the benefits and exposures of new technology. It is your responsibility to decide how you will use the Internet, and for what purposes.
  4. Don't assume that by rejecting cookies you are safe. Cookies are merely the technology—the danger is the re-use of the information that you provide.
  5. Do take the time to report businesses that misrepresent themselves, either in the services they deliver, or in the way in which they use information that you provide.

Other Information

On behalf of all developers, we very much appreciate your taking the time to read this article, and for your efforts in educating yourself on the responsible use of emerging web technologies.

Note: Dave Evans is the System Administrator for The Global Schoolhouse, which includes The Well Connected Educator. Heidi Johnson is The Global Schoolhouse Site Manager for Microsoft.

Email: Dave Evans
Heidi Johnson

Return to the Columns page.





advertisement

Security Software Training
Offers training courses on software security testing and secure software development for software testers, developers, and QA managers.

IT Training University Program
Offers Information Technology education online as part of an Associate's, Bachelor's, or Master's degree program.

Instructor-Led Microsoft Certification Preparation
Hands-on courses in 75 cities in the US, Canada, and the UK. Instructor-led training quickly prepares you for your MCSE, MCDBA, MCSA, MCTS, and more.