News for hackers. Stuff that matters.
Re:Advanced Denanonymization through Strava by wallace_f on Tuesday January 30, 2018 @09:40AM (#16265593)
I agree, but what I'm saying is that it's not at all "advanced deanonymization" skills that's a problem. It's the default standars way we share data is capable of undermining privacy, and even military op sec, quite easily, that needs to be changed.
Re:Advanced Denanonymization through Strava by drstewart on Tuesday January 30, 2018 @12:03PM (#16266888)
Strava is opt-in, so I don't know what default standards you mean. You can track activities on other platforms that aren't designed to be social networks.
Re:Advanced Denanonymization through Strava by maxerickson on Tuesday January 30, 2018 @12:25PM (#16267057)
I think I haven't come to a conclusion about it, but I think it is more complicated than Strava just being opt-in.

This op-ed makes the argument that it is difficult for users and even the companies offering services to fully understand the impact of their privacy choices:

https://www.nytimes.com/2018/01/30/opinion/strava-privacy.ht...

A sort of concrete scenario here would be the app asking the user before uploading an activity and whether the user wants the activity and segments to be visible on the public parts of the service. Strava probably doesn't want to introduce that friction into their product, but maybe that is a better balance than having a setting allowing users to opt out.

Re:Advanced Denanonymization through Strava by radix07 on Tuesday January 30, 2018 @12:55PM (#16267310)
There is a pretty accessible and obvious checkbox on every activity to make it private if you wish.
Re:Advanced Denanonymization through Strava by wallace_f on Thursday February 01, 2018 @10:44PM (#16288239)
Imagine every car accident was treated with the same attitude: "the car has breaks and a steering wheel so I don't know what your problem is."

People make mistakes, do things by accident. If the conequences are this bad, we should question the standards which led us to them.

Re:Advanced Denanonymization through Strava by contender_x on Tuesday January 30, 2018 @02:21PM (#16268115)
It's too complex, and to keep a govt/ site secure, you'd need every person who runs round it to keep their info locked down. I think Strava will end up having specific "national-state privacy zones" where no runs ever appear in heatmaps and segments cannot be created