This note attempts to put a valuation on the Site Finder hack. I estimate it’s worth about $3 Billion dollars, to Verisign. I don’t make any attempt to estimate it’s cost to it’s victums. One reason I got to thinking about this was that since it leverages people’s typo’s and misspellings I, as a dyslexic, find it particularly offensive. About one in five people suffer from dyslexia. Think of us as a market segment.
Computing the value of things is hard but necessary work. For example google needs to rank sites to decide which site to present first in a query. They want to have the ‘highest quality’ response to the query come first. Their solution is to use links as a proxy for quality. Sites with more links are presumed better than sites with fewer links. Of course their algorithums aren’t as simple as that.
The success of a standard is similar. You can measure how many people have adopted, linked up with, the standard. A better measure is how much traffic is moving over the standard. A number of people may speak Latin, but how many words of Latin are spoken each day? A number of people many know the secret boy scout handshake, but how many secret handshakes are actually consumated each day?
In the web world traffic statistics are collected by sampling. Alexia, a venerable firm acquired by Amazon some years ago, does that. They collect the data by signing up volunteers and installing something into their web browser that reports back traffic data.
If you want to value a company you have the same problem. You can count how many people link to the company (i.e. how many customers it has) or you can try to measure the amount of traffic the company has with those customers (i.e. how much money each customer hands over in a given unit of time). For example the Visa system has around 1,023,707,000 cards issued; but that doesn’t tell you much about the volume of traffic moving thru their system. They report that they do about 36,284,000,000 transactions a year.
Of course, Latin speakers will, for example, argue that their conversations are higher value than the conversations in many more pedestrian languages.
Currency exchange standards are unique because you can actually do better than even the amount of traffic. You can measure the value of those transactions. For example Visa reports they moved $2,668,821,000,000 thru the system in one year.
Web traffic is power-law distributed, and if we assume that the exponent of this distribution is 1 then AOL get’s a tenth the traffic of Yahoo. And if we assume that all traffic is equally valuable (the Latin speakers will point out that this is obviously false) then we can roughly estimate that AOL is worth $2.7 Billion. On reason this is obviously false is that AOL has a subscription relationship with it’s users where as Yahoo doesn’t; and a subscription relationship is clearly more durable than a non-subscription one.
Ok, now notice this article from Alexia about the traffic levels that Site Finder managed to garner. It’s a little hard to see exactly how much traffic they managed to capture; but if you look at can see they managed to move up to aproximately the same rank as AOL.
The site finder hack appears to be worth about $3 Billion dollars.
Of course that number should be discounted by what ever you think the chances are that they are able to turn it back on.
The operation of the internet domain registry is a beautiful example of a public good platform or standard. The number of beneficiaries is huge, there are for example at least 44 million web sites that benefit along with at least a few hundred of million users.
The goverance of such a public good is a complex mess. But in this case it surprises me that the top twenty web sites haven’t made more of a fuss about the Site Finder’s arival as a major competitor. Well maybe it doesn’t; the beneficaries of the Internet standards have a ways to go before they realize how much of their fate is in the hands of standards bodies that don’t necessarily report back to them.
It’s interesting to look at this from Verisign’s point of view. If the hack is worth $3 Billion and they figure they have only a 10% chance of winning the day and being allowed to get away with it. Then that’s still enough money, $300 million, to make it worth spending a few million sending your advocates to the various standards bodies to argue the case. They can probably buy some pretty good advocacy for that kind of money.