Yahoo Changes Privacy Policy, Joins Google, Microsoft

Responding to concerns from privacy advocates and the public, Yahoo Inc. said Tuesday it will make user search data anonymous after 13 months.

The news comes shortly after other Internet companies, including Google Inc. and Microsoft, have taken similar steps to limit personal data.

"One of the core tenets of this company is the relationship and trust we have with our users," said Yahoo spokesman Jim Cullinan in a statement e-mailed to Computerworld.

Cullinan said Yahoo will make all search log data anonymous after 13 months except if users request otherwise or if Yahoo is required to retain the information for legal reasons.

"We believe the 13 month policy is the appropriate timeline to meet our commitment to our users' privacy while preserving our ability to continue to defend against fraudulent activity and improve our services to advertisers, publishers and users," Cullinan said in the statement.

On Tuesday, Microsoft said it will give users a way to search anonymously on its Microsoft Windows Live Web sites by the end of the year. Microsoft also said it will make all user search data anonymous after 18 months.

Last week, search portal Ask.com said it would introduce a feature to its Web portal later this year called AskEraser that will let users perform anonymous searches. When AskEraser is turned on, the Web site will not retain the user data it normally stores during a search.

Google last week said that it had hanged it privacy policy and that its cookies would expire after two years, instead of in 2038, when they were originally set to expire. However, observers dismissed the move as hype, saying the change only makes it appear that Google is taking steps to address privacy concerns.

Earlier this year, Google said it would make the data it stores about end users anonymous in its server logs after 18 months. That was a change from March, when the company said it would make user data anonymous after 18 to 24 months. The company's decision to change its policy came in response to a letter the company received last month from a European Union data protection working group regarding Google's privacy policies.

Job QnA: Software Engineer--Isn't it amazing

Brought to you by Google

Name: Niniane Wang
Title: Software Engineer
Company: Google

Monster: What led you to choose a career in engineering? Is it something you always wanted to do?

Niniane Wang: I excelled at math as a kid -- skipped three grades, started college math courses at 11. I figured I would go into science or engineering. One of my dad's friends taught me LISP when I was 10, and I was hooked. It took me a while to decide on computer science [as a major] in college, but after that, there was no looking back. I earned a BS at Caltech and an MS at the University of Washington, both in computer science.

M: What led you to choose software over hardware engineering?

NW: I took hardware classes in college. I designed a VLSI chip, built an audio recorder, did my share of soldering and wire wrapping. In the end, I just liked software more. It's a personal preference.

M: How did you wind up working at Google?

NW: I was working for a large Seattle-area software company. A friend from Caltech, Dan Egnor, had just joined Google. I asked for his assessment of the search space. Dan is usually a cynical guy, but he strongly advocated Google, saying, "I'm finally firing on all cylinders." I loved the people I met during the interviews.

M: What do you do in your position?

NW: As tech lead, Gmail Ads, I lead a team of engineers to assess Gmail revenue through improved ad targeting. I also just began a confidential new Gmail project.

M: Tell us about your typical day.

NW: I write code, attend meetings and talk to other engineers and project managers.

M: What are some of the satisfying things about your work?

NW: Impacting millions of customers; shipping quality products; working with brilliant engineers; making users happy.

M: What are some of the challenges you enjoy in your job?

NW: It is not simple to make a product that is polished, scalable and easy to use. There are technical considerations as well as establishing a long-term vision for the product.

M: What's the best advice you could give to someone looking to get into your field?

NW: Write code for the fun of it. Develop a good sense of what's useful to society, and within that realm, follow your passions. Don't develop databases if your true love is games -- or vice versa. This goes double for female engineers.

M: What do you enjoy most about working for Google?

NW: Engineers here are empowered. If an engineer at another company comes up with a wacky idea for a new project, he might be told by his boss: "Stop dreaming, and focus on your tasks." Here, they're given a chance to prototype their idea and sometimes pitch it to executives. Many of our best products came about this way. Also, there is so much interesting work and so many new projects that people don't fight each other for the best work.

M: What do you look for when you interview people on behalf of Google?

NW: I've done more than 150 interviews in two years at Google. I look for a creative spark, the ability to find innovative solutions to problems and deliver a quality product. I also look for coding ability -- algorithms and CS knowledge -- and cultural fit. I want to hire someone that I'd want to work with every day.

M: How important is it to have a life and interests outside work?

NW: It's crucial. You need to understand the user in order to create the best product. That means you need to live a balanced life, or you end up making products that will only be used by technical people. Also, people who work too much tend to get cranky, and that's hard on their coworkers! My main hobby is creative writing. I started a self-study creative writing group at Google.

M: What's the most inspiring book you ever read?

NW: Now, Discover Your Strengths, which teaches people to focus on their own strengths. Don't copy others or spend a lot of time repairing your weaknesses. Instead, focus on improving the areas at which you already excel so you can be world-class.

cheers Aurobindo

Choose a network troubleshooting methodology

Takeaway: Many network administrators don't use an official methodology when it comes to troubleshooting network problems, but there's something to be said for taking a more formal approach. David Davis examines three network troubleshooting methodologies and discusses the advantages of each approach.

A decent portion of every network administrator's job involves troubleshooting. Network problems are as certain as death and taxes—and while you can take steps to prevent issues, sometimes they're just unavoidable.

Network problems range in complexity. You could be dealing with one workstation unable to access the network or the entire network going down.

When you do encounter a network problem, how do you begin troubleshooting? Many admins have never even bothered to thing about it: They don't have a formal methodology—they just jump right in.

But there's something to be said for a formal troubleshooting methodology. For one, it gives you a place to start. And it never hurts to add one more trick to your administrator's toolkit.

Let's look at three common network troubleshooting methodologies. Cisco documents these in its Cisco Internetwork Troubleshooting guidebooks, and you can expect to see questions about them on the CIT 642-831 exam, which is required to achieve CCNP certification.

OSI model

The basis of each of these troubleshooting approaches is the seven-layer OSI Reference Model. If you're unfamiliar with the OSI model or just rusty on the details, here's a look at the seven layers:

• Layer 1: Physical
• Layer 2: Data Link
• Layer 3: Network
• Layer 4: Transport
• Layer 5: Session
• Layer 6: Presentation
• Layer 7: Application

Here's how the OSI model works: Traffic flows down from the application to the physical layer across the network using the physical medium (for example, an Ethernet cable) to the receiver's physical layer. It then moves up through the layers to the receiver's application.

Once on the receiver's side, the receiver becomes the sender, and the sender becomes the receiver. The response from the receiver traverses the reverse path and moves back to the original sender.

So if one of the layers of the OSI model doesn't work, no traffic will flow. For example, if the data link layer isn't working, the traffic will never make it from the application layer to the physical layer.

Bottom-up

The bottom-up approach is my personal favorite. As the name implies, start at the bottom—Layer 1, the physical layer—and work your way up to the top layer (application).

The physical layer includes the network cable and the network interface card. So if you encounter a broken or disconnected network cable, there's probably no need to do anymore troubleshooting.

You must resolve any physical layer problems before moving on. After fixing the problem, check to see if the trouble still exists. If so, move on to troubleshooting the data link layer.

For example, an Ethernet LAN has an Ethernet switch, which keeps a table of MAC addresses. If there's something wrong with that table—such as a duplicate MAC entry—then resolve that problem before looking at anything on the network layer (e.g., an IP address or routing).

Top-down

Once again, the name of this methodology implies the approach. With the top-down method, start at the top of the OSI model (i.e., the application layer) and work your way down to the bottom layer (i.e., physical).

Divide and conquer

This approach involves a little more intuition. With the divide and conquer method, start at whichever layer you best feel is the root cause of the problem. From there, you can go either up or down through the layers. (Yes, folks, even the "no-method method" has a name.)

Choosing an approach

Which approach you decide to use may depend on where you believe the problem lies. For example, if a user is unable to browse the Web and you think most users have a lot of problems with spyware and Internet Explorer settings, then you may want to start with the top-down approach. On the other hand, if the user mentions that he or she just connected a laptop to the network and can't browse the Web, you might want to use the bottom-up method since there's a good chance the user has a disconnected cable or similar problem.

Do you use a troubleshooting methodology when dealing with networking problems? If so, post your approach in this article's discussion. How important do you think it is to have a troubleshooting methodology?

Miss a column?

Check out the Cisco Routers and Switches Archive, and catch up on David Davis' most recent columns.

Want to learn more about router and switch management? Automatically sign up for our free Cisco Routers and Switches newsletter, delivered each Friday!

David Davis has worked in the IT industry for 12 years and holds several certifications, including CCIE, MCSE+I, CISSP, CCNA, CCDA, and CCNP. He currently manages a group of systems/network administrators for a privately owned retail company and performs networking/systems consulting on a part-time basis.

cheers Aurobindo

Troubleshooting the Blue Screen of Death in Windows XP

Have you every blue screened your computer and a cryptic stop code was delivered. What do you do now? Well, next time that happens, use Windbg to find out which application or driver is the culprit. You can download Windbg from Microsoft’s web site.

Simply set the debugger symbol path as follows, substituting your downstream store path for DownstreamStore.

SRV*DownstreamStore*http://msdl.microsoft.com/download

/symbols

For example, to download symbols to c:\websymbols, you would add the following to your symbol path: SRV*c:\websymbols*http://msdl.microsoft.com/

download/symbols and then click Files | Save Workspace..

Now you are ready to click File | Open Crash Dump and you can run diagnostics after a BSOD in safe mode.

Five steps to becoming the local security guru

It’s not difficult to become the local security expert — the guy to whom others look when they need network resources secured, the guy they point to when they want to source someone in their attempts to reform security policy, and the guy organizations like TechRepublic ask to write about security. In other words, barring perhaps the ability to compose a well-written essay without grammatical and spelling errors, it’s not too difficult to be me. There are really only five steps to it.

1. Get outside of your comfort zone. Use software that isn’t familiar to you. Learn about new technologies. I don’t mean you should try a different antivirus solution — I mean you should use something fundamentally different.

   If you’re an MCSE who’s done nothing but manage Active Directory domains professionally, set up a network at home using Linux and FreeBSD systems. If you’re a multi-OS geek who has Linux, Windows, and MacOS X desktops at home — and maybe even an old BeOS or Amiga system — take a shot at setting up a backup server and an automated logging server, and then go on to build a firewall and router from scratch.

   I’ve done much of that already, but I’ve got my eye on Plan 9 as a new operating system challenge. Just as I have, if you get out of your comfort zone and learn about different technologies, you’ll start to learn things about the technologies you already use when you find your old assumptions about how things work don’t hold up to scrutiny.

2. Learn some programming. Even just a little bit will help you understand more about how software architecture plays a major role in overall system security. More than a little bit will teach you even more about it.

   When you learn how to write drivers for a given operating system, for instance, you’ll learn something about the security weaknesses of that OS. When you learn how to write code that interacts with the file system, you’ll learn something about how file system design and OS privilege separation matters where the rubber meets the road, so to speak.

3. Read voraciously. Join some mailing lists, for a start. Good lists to join include open source community lists, programming lists, and the Security-Basics list at SecurityFocus.

   That’s for learning principles of security. To keep up with what’s shaking in the security realm, so you’re always on top of the latest security news, almost nothing can beat the BugTraq list. While you’re at it, read what other security experts such as Bruce Schneier have to say.

   Get your hands on some good books about security and read them. Security “cookbooks” are surprisingly useful, and a keen mind can grow to understand quite a lot about security principles from the “recipes” in these books by considering why and how they work.

4. Check your assumptions at the door. Secrecy does not equal security, you don’t always get what you pay for, and security features don’t always make you more secure. I’m not saying you should ignore everything you think you know — just double-check it, triple-check it, and always be open to the idea that what you think you know may be wrong.
5. Finally, think for yourself. Don’t just take someone’s word for it when you’re told something about security. Think it through, consider it carefully, and verify it for yourself, if at all possible. Consider what might be missing from what you’re told, and consider the source. Everyone has an agenda, so you need to consider the goals of your sources. You also need to be aware of your own agendas, so you can avoid the trap of confirmation bias.

Here’s a bonus, a sixth item to add to your list: Stay tuned. I’ll be providing a lot more for the would-be security guru to think about right here in the TechRepublic IT Security blog in the near future.

cheers Aurobindo

3 tips to improve your executive presence

One of the most frequent issues clients ask me for help with is “executive presence”. It’s one of those beauty-is-in-the-eye-of-the-beholder issues to some extent. What works for some people is a turnoff to others. Approaches or styles which are considered appropriate in one organization may be the fastlane to the exit door in another company. But there are a few guidelines which are consistent across most organizations.

If you are getting feedback that your “style” or “approach” needs some polishing, odds are that clear concise direction hasn’t come with the feedback because it’s often tough to package.

These are three of the key ones on which I focus my clients;

1. Men think to talk. Women talk to think. When genders are working together it can sound like a personal relationship on occasion. Women asking the guys why they don’t participate in a discussion but then leave the meeting and have a bunch of ideas; or men asking the gals why they take so long to make a point.

The way our brains are wired, according to recent research out of UC at Berkley really makes a difference in our processing. Women are more prone to thinking aloud and using that to come to a position while men go radio silent while they are noodling inside before making a statement.

If you’re a woman in a male dominated environment, don’t go processing aloud - it can frustrate the men who just want an answer. If your a man in a female dominated environment, don’t give the appearance that you’ve shutdown by processing internally without telling those around you what you’re thinking.

2. When in Rome wear a toga. Dress codes are really vague. Most senior company leaders say that they understand that the days of suits and dresses are long gone. I’m often told by them that they “get it” that their employees want fewer rules and regs which have little to do with performance.

But later, they will make comments which are inconsistent. Behind closed doors they get a little more forthcoming. I’ve been told that capri pants are too much for a work environment or that if so and so should stop wearing pants without his underwear showing if he ever expects to get ahead. “Flip flops? Not what future leaders should be wearing.” Lots of other comments in this vein about both genders.

The real world is that the boss really wants people to follow his or her lead when it comes to standards of dress. If the boss is wearing a sports coat with Dockers, or a businessy skirt with a cotton button down collar, they are sending a signal. Disregard such signals at your own peril.

3. Take your time before you answer. Or don’t. Ever notice how some bosses make a decision in a quarter of a second while others want to have endless meetings or papers written before any movement forward?

How we make our decisions has a lot to do with our personal value systems. Some leaders have learned that any important decision requires a lot of input and noodling, while others show disdain for anything but an immediate answer and direction.

If you have one approach but your boss has the other I suggest you change. Or at least give the impression that you have. Otherwise you risk making your boss nervous - and nobody succeeds when they have a nervous boss. If the boss believes in lengthy and thoughtful consideration before coming to a conclusion but you think that fast decisions are the best; (s)he may start to worry about the caliber of your thoughts and directions. This can lead to doubt about your promotional prospects as well. Same holds true if your boss is one of those shoot-from-the-hip types and you seem to be ponderous and slow off the mark. Don’t try to teach your boss that you have a better style - it doesn’t often work.

cheers Aurobindo

Do you still have a “twinkle” in your eye for cool technology?

A colleague of mine made a comment yesterday that I have heard a number of times from long-time IT veterans who have become CIOs. The comment was, “I’ve been in this business too long to be impressed by technology.” I started thinking about what this meant about someone who is a highly effective CIO, recognized by his peers as a leader in the field. I began to wonder if the “twinkle” in our eyes for technology that got us into the field in the first place is even necessary to be a CIO or whether it has been relegated to the realm of the CTO only.

When I first started thinking about this topic, I was equating the “twinkle” with passion for technology. But after further thought, I realized that the CIO described above certainly has a passion for his job and the effective use of technology in his organization.

Conversely, I still have that “twinkle” for the “coolness” (yes, I know the word dates me) of technology, and yet I believe I am equally effective as a CIO. I can make business decisions regarding technology based on quality, best features, ROI, etc., and still be excited about it. Does this make me different from my counterparts?

I then began to think about the two job roles (CIO and CTO) and also the time spent in those positions. If you wear the CIO title long enough, you will find that your actual connection to technology is through the media and your staff. Your days of daily hands-on work disappear — replaced with budgets, reports, meetings, decision making, posturing, politicking, networking, and the like. Do it long enough and you become jaded as to vendor’s promises, hardware and software performing as it should, promises of adequate funding, etc.

The CTO on the other hand is responsible for day-to-day operations and is much closer to the technology than the CIO. While a good CIO still has a strong handle on how technology works, the CTO is responsible for knowing more of the nitty-gritty detail. Thus they are perhaps more apt to retain the “twinkle?”

Both the CTO and CIO can become jaded by the unfulfilled promises of technology, but the CIO often shields the CTO from much of the unpleasantness that comes from being at the top of the pile. Unlike the proverb that “#$% rolls down hill,” most of the good CIOs I know actually are more like the little Dutch girl who struggles to keep the dike from overflowing, thus trying to protect their subordinates down stream.

The more I thought about the CIO position, the more I realized that the “twinkle” is not necessary to perform well. Knowledge of technology, understanding of the business, budgeting and communication skills, strategic thinking, and vision are important to success as a CIO.

For the CTO, however, having that passion for technology probably helps drive them to continue to explore new technologies that can be put into place in their organizations.

So does having the “twinkle” provide me with any advantages or disadvantages as a CIO? I guess I have a propensity to let the gee-whiz factor of technology affect my decision making — and I realize that could be a pitfall, but I don’t believe I am that naive. On the other hand, it does perhaps make me a little more curious as I approach new technologies and perhaps a bit braver in adopting a technology that isn’t mainstream.

I know from a management perspective that the “twinkle” allows me to instantly connect with my staff when they are wowed by a technological accomplishment or new tool and are hollering, “How cool is that?!!”

So in the final analysis, I have no definitive answer to the question of whether or not the “twinkle” can make you a better CIO or not. I can appreciate that it is not a required trait for an effective CIO. However, I think that having the “twinkle” makes the job more enjoyable and makes me a lot more fun to be around. All I know is that at the end of the day, I go home to a house that has seven PCs, a closet full of old hardware, two occupants, and we are both very happy. The “twinkle” may not be required, but I hope I never lose it.

How about you? Do you still have the “twinkle” in your eye for cool technology or are you too cynical (or busy!) to enjoy that aspect these days?

cheers Aurobindo

Steal this book? Don't bother

When it comes to outsmarting the content establishment, your library may be your best accomplice.

Libraries are offering more free search services, database access, articles, photos, eBooks, audiobooks, music and museum passes than ever. Chances are you are buying, subscribing to, or stealing something you can get for free with a library card.

The hardest part of using the wealth of free sources out there may be finding them. There are easy ways to locate these sources, but few people use them, according to Gary Price, founder and editor of the ResourceShelf blog and director of online resources at Ask.com.

While there are no hard numbers on usage of such free services, several resource specialists and librarians echo Price's comments.

"People who gather national statistics about libraries have started adding that, but it will take awhile for the libraries to aggregate the data and respond," said Leslie Burger, director of the Princeton Public Library in Princeton, N.J., and past president of the American Library Association.

But there is some evidence that people are beginning to access their local library home page more frequently. For instance, Massachusetts public libraries, which recently began tracking electronic access, report (PDF) that they received more than 248 million hits on their home pages in 2006.

Burger says there's a range of information that people are generally looking for, which typically dictates where they look first. "If it's simple and easy info the first is to go to Google because it's good to give quick factoids. But for more in depth things and info not freely available on the Web, people do find their way to libraries and use the subscription databases we provide," said Burger.

Burger said that while general search engines may seem more convenient, pointed search tools can provide more reliable information more quickly than repeated searches in which the user tries out different terms.

Casting that wide Web net can pick up spam and unreliable information presenting itself as an authority, Price said. It may also be burying or missing good information.

For example, do you call it soda or pop? The soft drink industry or the beverage industry? Databases have a structure to take care of that problem. Many have a controlled vocabulary of terms that a human indexer assigns to each article, said Price.

"The bottom line is people can't use what they don't know about. It's not just search. It's everything. Libraries need to do a better job of promoting themselves."

--Gary Price, Ask.com director of online resources

While indexes of articles from both general publications and academic journals can be found on the Internet, users are often brought to an abstract summary of the article including publication info, but not the full text. The majority of library databases offer full texts of articles, so when you do find what you are looking for, you can immediately have access to all of it.

"The payoff...is that you are finding a lot of info you could not find anywhere else and much more quickly. Libraries have more precise searching than you can do with a general search database," said Price.

Searching in an academic realm has also become more user friendly. You no longer have to bother with Boolean search terms or complicated retrieval options. Database search methods have been replaced with easy point and click filtering in addition to the usual time frame option. Results offer links.

The tools are not limited to large urban libraries. Small-town libraries are now able to carry many of the same databases and resources previously only available to patrons of large city libraries. They are doing this by either subscribing to database services on their own, or participating in library consortiums--groups of local libraries pooling resources. States are also offering access to online resources for all residents.

Libraries in Canada, the U.K. and Australia are also stepping up online services for residents from municipalities both large and small.

OK, so where are all the patrons?

With all this data at people's fingertips, why aren't the servers supporting these libraries overwhelmed due to popularity?

"The bottom line is people can't use what they don't know about. It's not just search. It's everything. Libraries need to do a better job of promoting themselves," Price said. "Unfortunately, it's been a challenge for the library world to get anyone's attention."

Price added there's also a hometown syndrome. "You go with what you know and this is a change. And that is a challenge."

The ALA's Burger seems to agree that the main reason people aren't flocking to all the free tools and content is simply a lack of publicity.

"Generally speaking, we could do a better job of publicizing that these things are unique. We need to come up with better words to explain it," said Burger.

"The beauty of the resources is that we can push that out to people. It's much better on the whole than when they had to come in person. The content is being provided in a different way and with less mediation. You don't have to go to the librarian, you can use these things independently," said Burger.

Another issue has been the library card number required to access to a public library's online services.

The U.S. library system is based on local libraries, consortiums of local libraries, or a state library with services restricted to residents. While it may not seem like a barrier to entry, people do have to make a slight effort by going to a library and showing proof of residency in order to get a library card. But that, too, is changing.

Many libraries, such as the New York Public Library, allow you to apply for your branch library card online and use a temporary password until it arrives by mail.

Several state library systems are waving the library card requirement altogether and using other means to verify residency.

Connecticut and Indiana use a computer's Internet Protocol (IP) address to determine if you qualify as a resident. The site will grant access to any computer that registers as coming from a server within the state. If your IP address is provided outside the state via a service like AOL, the library allows you to enter identifying information to gain a temporary password and then mails you a permanent one.

In Michigan, you can use your driver's license number or state identification number to gain access. Children can use the info of their parent or guardian.

"I think we're going to see more and more of this kind of content available. It's really just a matter of time before it becomes integrated in the way people use and seek information," said Burger.

cheers Aurobindo

YouTube role grows as U.S. election nears

In 2004, YouTube didn't exist. Three years later, politicians have learned to fear and revere the video-sharing Web site that has become a vital part of the campaign for the 2008 U.S. presidential election.

From rapid dissemination of political blunders, often with funny tunes, to a new wave of music videos featuring scantily clad women singing the praises of their presidential favorites, YouTube.com has sparked a new interest in politics.

More than 2.5 million people have viewed "I've Got a Crush...On Obama," about Democratic Sen. Barack Obama, since it was posted last month. A rebuttal video of women fighting over Obama and leading Republican contender Rudy Giuliani has been watched more than 500,000 times in four days.

While much on YouTube is skewed to a U.S. audience, the company--bought by Web search leader Google last year for $1.65 billion--now has local sites reflecting the fact that more than half its viewers are outside the United States.

Many candidates vying for their party's nomination to run for president have embraced the technological changes, holding polls via YouTube, asking for campaign input and making announcements on the site.

"In the past, the campaigns sort of stuck their toe into technology and innovation--it was a small detail of what was going on," said Phil Noble, founder of PoliticsOnline.

"The difference in this election is that technology has become fundamental. Every campaign has figured out ways to use YouTube all the time."

It's not just the candidates. YouTube members are getting in too, with thousands of people uploading video questions for upcoming CNN/YouTube debates.

Tough questions
By Friday midday, more than 1,700 videos had been put on YouTube's site for Monday's debate among Democratic candidates. The Republican debate will be on September 17.

Some 25 to 30 of the questions will be picked by a political team at CNN for the two-hour debate. Follow-up questions may also be asked by moderator Anderson Cooper.

Questions are about health care, Social Security, global warming and U.S. foreign policy. Some are serious, others are not. One man played a guitar and sang a song about whom the candidates would choose as running mates for vice president.

Will Wrigley, a 17-year-old who will turn 18 in time to vote in November 2008, asked the candidates for their views on stem cell research.

"I just decided I wanted to have one in," he said by e-mail.

The issue was important, Wrigley added, because it could "improve the health of the people in this nation and around the world."

Kim, a 36-year-old breast cancer patient from suburban New York, took off her wig while saying her chances for survival were not as good as they could have been because she -- like tens of millions of Americans -- had no health insurance.

"What would you as president do to make low-cost or free preventative medicine available for everyone in this country?" she asked.

CNN political director Sam Feist said the network decided to hold a YouTube debate in part to highlight the enormous impact the Internet has on politics.

"Clearly the YouTube phenomenon is the perfect opportunity to merge new media and old media in a presidential debate," he said, adding that the unpredictable nature of the questions will make it harder for candidates to prepare.

Feist said the questions were asked by a diverse group of people -- of all ages and from across the country and several foreign nations. He said he was surprised by the quality of the questions and that there were not more about the Iraq war.

Noble, who feels it is too early to call this a "YouTube election," said it will be fun to see even more innovation.

"What we're doing is putting the most powerful communications tools in the hands of millions of people all at one time and saying 'Tell us what you think about politics'."

cheers Aurobindo

Search engines race to update privacy policies

The major search engines are racing to outdo each other in updating their data retention policies in an attempt to assuage concerns that they keep consumer search data too long.

The latest to go public with their moves are Microsoft and Yahoo.

Microsoft and Ask.com also are proposing an industry effort to create voluntary standards for protecting consumer privacy with search and online ads, a move that is likely spurred by Google's plan to acquire a leader in the online ad market.

Microsoft is set to announce on Monday plans to permanently remove the Internet Protocol address and other identifying data associated with Web searches after 18 months unless the searcher wants the information stored for longer. The company will also store search terms separately from account information that personally identifies a user, such as name, e-mail address and phone number, gathered as part of other Microsoft services.

In addition, Microsoft is promising that it will give people the ability to opt out of behavioral ad targeting it offers on third-party Web sites and it will allow people to search and surf its Web sites without being associated with a personal and unique identifier used for such ad targeting.

Meanwhile, Yahoo is vowing to remove portions of IP addresses and personally identifiable cookie IDs within 13 months except when users want the data retained for longer or when the company is required to retain it for law enforcement or legal processes, said Yahoo spokesman Jim Cullinan.

Cookies are small files stored on a computer so that the computer can be recognized when it revisits Web sites, enabling the site to remember the user's preferences for things like e-commerce and sites that require a log-in.

The news comes days after changes at Ask and Google. On Thursday, Ask said it would allow people to search anonymously and would not retain a user's Web search history at all if the searcher didn't want it to. Searchers will be able to change their preferences using a new AskEraser tool, which will reside on the Ask servers and will work with all the major operating systems. Ask said it will retain the search log data for 18 months for people who don't want to be anonymous and then it will disassociate the search terms from the IP address.

Also last week, Google said it would have cookies expire after two years instead of 2038, although for anyone who visits Google even once in the next two years, the cookie expiration date will be extended another two years.

In March, Google said it would start anonymizing the final eight bits of the IP address and the cookie data after somewhere between 18 months and 24 months, unless legally required to retain the data for longer. That would make it much harder to identify the specific computers used for searches.

The risks associated with retaining search data were illustrated last year when AOL inadvertently exposed the searches of more than 650,000 users. The New York Times was able to discover the identity of at least one of the users, highlighting the risks associated with retaining search data logs.

Microsoft and Ask also said they would work together and are asking other companies and organizations to join them in creating industry guidelines for protecting consumer privacy in the areas of search and online advertising. They said they would provide an update on the effort in September.

The moves come amid discussion in the industry over privacy concerns related to Google's proposed $3.1 billion of online ad provider DoubleClick. Privacy advocates have questioned the deal; Microsoft opposes it on antitrust grounds; and the U.S. Federal Trade Commission is looking into it.

"It's a topical area right now, and (the Google-DoubleClick plan) had some influence on us looking at this" now, said Brendon Lynch, director of privacy strategy at Microsoft. "We believe privacy is a very important aspect for our business going forward."

But where do Yahoo and Google stand on the self-regulation effort? Neither company would give a straight answer to that question.

"We're certainly open to having conversations about technical issues, but we don't think this is the right time to participate in that," said Yahoo's Cullinan, without elaborating.

A Google spokeswoman provided this statement: "Our goal is to improve privacy protection and data security for all Internet users by continuing to innovate in the area of privacy."

chheers Aurobindo