I've had a blogging hiatus of late because I was heavily involved last week with Singularity University a new teaching institution about the future created by Nasa, Google, Autodesk and various others. We've got 80 students, most from outside North America, here for the summer graduate program, and they are quite an interesting group.

Last week, on my trip to Berlin, I managed to drop my passport. I don't know where -- it might have been in the bathroom of Brussels airport trying to change clothes in a tiny room after a long red-eye, or it might have been when Brussels Air made me gate check a bag requiring a big rearrangement of items, or somewhere else. But two days later, arriving at a Pension in Berlin I discovered it was missing, and a lot of calling around revealed nobody had turned it in.

In today's document hungry world this can be a major calamity. I actually have a pretty pleasant story to report, though there were indeed lots of hassles. But it turned out I had prepared for this moment in a number of ways, and you may want to do the same.

The upshot was that I applied for a passport on Wednesday, got it on Thursday, flew on Friday and again on Monday and got my permanent passport that same Monday -- remarkable efficiency for a ministry with a reputation for long bureaucracy.

After concluding it was lost, I called the Canadian Embassy in Berlin. Once you declare the passport lost, it is immediately canceled, even if you find it again, so you want to be sure that it's gone. The Embassy was just a couple of U-bahn stops away, so I ventured there. I keep all my documents in my computer, and the security guy was shocked I had brought it. He put all that gear in a locker, and even confiscated my phone -- more on that later.

The lastest Facebook flap has caused me to write more about privacy of late, and that will continue has we head into the June 15 conference on Computers, Freedom and Privacy where I will be speaking on privacy implications of robots.

Social networks want nice easy user interfaces, and complex privacy panels are hard to negotiate by users who don't want to spend the time learning all the nuances of a system. People usually end up using the defaults.

As many expected would happen, Mark Zuckerberg did an op-ed column with a mild about face on Facebook's privacy changes. Coming soon, you will be able to opt out of having your basic information defined as "public" and exposed to outside web sites. Facebook has a long pattern of introducing a new feature with major privacy issues, being surprised by a storm of protest, and then offering a fix which helps somewhat, but often leaves things more exposed than they were before.

For a long time, the standard "solution" to privacy exposure problems has been to allow users to "opt out" and keep their data more private. Companies like to offer it, because the reality is that most people have never been exposed to a bad privacy invasion, and don't bother to opt out. Privacy advocates ask for it because compared to the alternative -- information exposure with no way around it -- it seems like a win. The companies get what they want and keep the privacy crowd from getting too upset.

Sometimes privacy advocates will say that disclosure should be "opt in" -- that systems should keep information private by default, and only let it out with the explicit approval of the user. Companies resist that for the same reason they like opt-out. Most people are lazy and stick with the defaults. They fear if they make something opt-in, they might as well not make it, unless they can make it so important that everybody will opt in. As indeed is the case with their service as a whole.

Neither option seems to work. If there were some way to have an actual negotiation between the users and a service, something better in the middle would be found. But we have no way to make that negotiation happen. Even if companies were willing to have negotiation of their "I Agree" click contracts, there is no way they would have the time to do it.