News for hackers. Stuff that matters.
Re:Expensify sent images with personal data to Mechanical Tu... by ayw on Wednesday November 29, 2017 @07:45PM (#15812333)
For anyone interested in solving this problem in their own business—we take privacy extremely seriously at Scale API (http://www.scaleapi.com) and implement numerous safeguards operationally and technically to ensure this doesn't happen.
Re:Expensify sent images with personal data to Mechanical Tu... by mbesto on Wednesday November 29, 2017 @09:28PM (#15812978)
> we take privacy extremely seriously...implement numerous safeguards operationally and technically to ensure this doesn't happen

I hate that this is going to come off as snark, but a lot of tech startups make claims about executing "rigorous background checks" (Uber et al), which gets proven time and time again is not true at scale.

So what specifically do you do to ensure this? How do I trust your organization?

Re:Expensify sent images with personal data to Mechanical Tu... by goialoq on Wednesday November 29, 2017 @10:36PM (#15813270)
Just look at the reputation they've built up over the years.
Re:Expensify sent images with personal data to Mechanical Tu... by mbesto on Thursday November 30, 2017 @12:29AM (#15813691)
The company is a year old...
Re:Expensify sent images with personal data to Mechanical Tu... by narsil on Thursday November 30, 2017 @12:40AM (#15813736)
Probably forgot the /s
Re:Expensify sent images with personal data to Mechanical Tu... by deepGem on Wednesday November 29, 2017 @09:13PM (#15812891)
I'll be interested in understanding the technical safeguards as well, since I am breaking my head on how to do this. One of my projects was about doing OCR on some confidential satellite images and we didn't want to outsource the OCR process solely because we couldn't figure out a scalable way to obfuscate data selectively in images. One early attempt was to recognize numbers using MNIST, get the boundary and clip that boundary with a similar sized black square. This doesn't work for all forms of text though.
Re:Expensify sent images with personal data to Mechanical Tu... by jlgaddis on Wednesday November 29, 2017 @09:23PM (#15812944)
What text were you reading from a satellite?
Re:Expensify sent images with personal data to Mechanical Tu... by mulmen on Wednesday November 29, 2017 @09:35PM (#15813009)
Licence plates, credit card numbers, text messages, your page number in Game of Thrones, normal spy satellite stuff.

/s

Seriously though maybe the text wasn't in the image as much as metadata attached to it? Something like the lat/long and time of the image? I don't really know, it's a good question.

Re:Expensify sent images with personal data to Mechanical Tu... by deepGem on Wednesday November 29, 2017 @09:39PM (#15813030)
Ok these were regular land images (I think at 10m resolution) which had some text descriptions on the images. We deemed the text to be confidential enough not to outsource. Def, not spy satellite stuff :)
Re:Expensify sent images with personal data to Mechanical Tu... by ocrcustomserver on Wednesday November 29, 2017 @11:44PM (#15813529)
Are you still interested in this? I might be able to help.
Re:Expensify sent images with personal data to Mechanical Tu... by deepGem on Wednesday November 29, 2017 @09:35PM (#15813011)
I should clarify, we didn't use satellites directly, we just used the images given by a third party.
Re:Expensify sent images with personal data to Mechanical Tu... by goialoq on Wednesday November 29, 2017 @10:37PM (#15813275)
You had text that computers couldn't OCR?
Re:Expensify sent images with personal data to Mechanical Tu... by halflings on Wednesday November 29, 2017 @08:23PM (#15812595)
On your homepage: "Scale is the easiest way to build human-powered features. It's 100x better than Mechanical Turk."

What do you mean exactly by "100x better than Mechanical Turk"?

Re:Expensify sent images with personal data to Mechanical Tu... by dailyvijeos on Wednesday November 29, 2017 @09:49PM (#15813074)
LOL. They must also have a patent on quantifying qualitative BS while badmouthing their competition. So professional too.
Re:Expensify sent images with personal data to Mechanical Tu... by mLuby on Wednesday November 29, 2017 @08:01PM (#15812442)
Interesting. Can you describe these safeguards in any level of detail? Letting a human see clients' personal info seems fundamental to the OCR transcription process whether it's MTurk or Scale.
Re:Expensify sent images with personal data to Mechanical Tu... by sandmansandine on Wednesday November 29, 2017 @08:22PM (#15812584)
I'm also interested in this, looking at Scale and their jobs page I don't see that they're hiring for any of their transcribers or people to turk any of their other services, so the humans are outsourced I assume.
Re:Expensify sent images with personal data to Mechanical Tu... by sjg007 on Wednesday November 29, 2017 @08:47PM (#15812748)
Traditionally, this type of work is outsourced to the Philippines sometimes India and China (depending on language skills).
Re:Expensify sent images with personal data to Mechanical Tu... by lawrenceyan on Wednesday November 29, 2017 @11:18PM (#15813436)
The "Scale" in your name ScaleAPI seems somewhat disingenuous given the fact that you're company seems to be based purely on using humans to do things.
Re:Expensify sent images with personal data to Mechanical Tu... by ocrcustomserver on Wednesday November 29, 2017 @11:27PM (#15813472)
Or self-host it and never send out any data. (I'm offering a self-hosted solution for OCR)
Re:Expensify sent images with personal data to Mechanical Tu... by semerda on Thursday November 30, 2017 @12:58AM (#15813809)
Curious, how do you meet HIPAA compliance when dealing with PII? And don't tell me you don't have enough PII to be an issue. Think Social engineering.