News for hackers. Stuff that matters.
Re:Privacy not included: Holiday gift list for privacy and s... by krferriter on Wednesday November 14, 2018 @04:56PM (#18454428)
I don't really get some of these ratings. They give a thumbs-down to fitbit and other gps watches because they track location and speed, etc. Yes that is the entire purpose of buying those products, so I don't really get the presenting of that as a negative feature. It's like rating an email app poorly because it processes your emails.
Re:Privacy not included: Holiday gift list for privacy and s... by ndnxhs on Thursday November 15, 2018 @01:55AM (#18457420)
Tracking your location and speed is fine. What is creepy is sending that data off to fitbits servers where they do whatever they want with it. Fitbit have also been known to hand over your health data to police when requested.

There is literally no reason a fitness device could not do everything locally.

Re:Privacy not included: Holiday gift list for privacy and s... by a_imho on Thursday November 15, 2018 @03:13AM (#18457683)
There is literally no reason a fitness device could not do everything locally.

Would be interested in such a device if they were available.

Re:Privacy not included: Holiday gift list for privacy and s... by ndnxhs on Thursday November 15, 2018 @06:42AM (#18458508)
Gadgetbridge is an open source app that reverse engineers the protocols from many popular watches but the health page on the app is super basic. Could really do with a clean up and better charts
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @05:38PM (#18454857)
Disclaimer: I work for Fitbit but speak only for myself.

The guide says of Fitbit Versa, "Shares your information with 3rd parties for unexpected reasons: yes". This is false.

The rating may just be by vote, but there's no excuse for getting the facts wrong.

Re:Privacy not included: Holiday gift list for privacy and s... by craftyguy on Wednesday November 14, 2018 @07:04PM (#18455549)
> This is false

Since the software is proprietary, and you are not making an official announcement on behalf of fitbit, why should we believe you? What you say directly contradicts the privacy policy[0] on your employer's website, which certainly states that they have the freedom to share your information 'with others': "You may also authorize us to share your information with others" and "We transfer information to our corporate affiliates, service providers, and other partners who process it for us"

0. https://www.fitbit.com/legal/privacy-policy#how-info-is-shar...

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @07:33PM (#18455732)
Please stay on topic. The claim I said was false was "shares your information with 3rd parties for unexpected reasons".
Re:Privacy not included: Holiday gift list for privacy and s... by craftyguy on Wednesday November 14, 2018 @08:06PM (#18455979)
Who expects a fitness tracker to share information to 3rd parties at all? I bet if you asked any of fitbit's customers if they expected fitbit to share their information with <insert random 'data processing' company here>, they would not have expected that.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @08:20PM (#18456059)
Who? Anyone who knows that companies contract work out. At very few companies is every single function performed by employees.
Re:Privacy not included: Holiday gift list for privacy and s... by cyphar on Wednesday November 14, 2018 @08:49PM (#18456211)
I don't see what employing contractors has to do with sharing user data with third-parties.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @09:16PM (#18456316)
A contractor is a third party.
Re:Privacy not included: Holiday gift list for privacy and s... by cyphar on Wednesday November 14, 2018 @09:23PM (#18456352)
But a contractor working on your codebase (which is what I believe you were implying) isn't the same as providing user data to a third party (for processing or for advertising and so on).

Providing data to third parties for processing is clearly different (and as an ex-user of one of Fitbit's products I definitely wouldn't have expected that this is the case -- Fitbit's fitness tracking is so core to the company that I wouldn't expect the processing of said data to be outsourced.) Yeah, it's in your privacy policy but that's just a cop-out (by that metric, no product can unexpectedly send data to third-parties).

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @11:18PM (#18456826)
I think you're making assumptions about the kind of information that's shared. The kind of example to think of is when you buy from Fitbit and your information gets sent to a payment processor.

Here's the whole paragraph:

We transfer information to our corporate affiliates, service providers, and other partners who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures. These partners provide us with services globally, including for customer support, information technology, payments, sales, marketing, data analysis, research, and surveys.

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @09:49PM (#18456473)
I was talking about customer service and the other examples listed in the policy.
Re:Privacy not included: Holiday gift list for privacy and s... by sincerely on Wednesday November 14, 2018 @08:02PM (#18455950)
If I'm using a fitness tracker watch, I'd expect that the functionality doesn't involve sharing my data with 3rd parties.
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @11:24PM (#18456845)
I'll spell this out since downvotes seem to indicate some people do not get it. "You may also authorize us to share your information with others" is not an unexpected reason for information to be shared. For example, if you install Strava and authorize Fitbit to share your information with Strava, the sharing is expected.
Re:Privacy not included: Holiday gift list for privacy and s... by oarsinsync on Thursday November 15, 2018 @08:59AM (#18459243)
Tangential to this discussion, but given that you're a Fitbit employee...

Do you have any particular insight as to why Fitbit still doesn't support the Apple Watch at all?

I've made my choice of wearable (mostly due to forgetting to take my Charge HR off when going swimming) and don't particularly want to be in a fitness-tracker-akimbo situation again.

The primary value proposition of the Fitbit app (to me) is the social/competition aspect. MobileTrack clocks in anywhere between 2000-9000 steps/day short compared to my watch or my old Fitbit (as I don't carry my phone everywhere I go).

I guess this might not be totally tangential to the sibling thread that followed, as I guess the reason is my activity data isn't valuable enough to Fitbit as a business, which relies primarily on equipment sales?

Eitherway, I'd love to keep using the Fitbit app. The competitions, the badges, they're all great, and way better than the Apple Watch's social/competition functions. Unfortunately, the rest of the product lineup no longer appeals now that I have the AW.

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Thursday November 15, 2018 @09:22AM (#18459388)
I'm happy to share my personal opinions on a lot of topics. This one I don't know about and don't have any more insight than you. Your question kind of touches on future product direction, and in that area I'll keep quiet, not even saying what I do or don't know.
Re:Privacy not included: Holiday gift list for privacy and s... by lozaning on Wednesday November 14, 2018 @05:51PM (#18454964)
Zigbee devices don't use the security of your home wifi for encryption either. There are many technical inaccuracies across the ratings.
Re:Privacy not included: Holiday gift list for privacy and s... by mediocrejoker on Wednesday November 14, 2018 @07:01PM (#18455520)
Just to play devil's advocate, does Fitbit Versa share your information with third parties for any reason, expected or otherwise?
Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @07:39PM (#18455780)
Re:Privacy not included: Holiday gift list for privacy and s... by function_seven on Wednesday November 14, 2018 @08:15PM (#18456028)
Let me condense that to the relevant bit. All emphasis is mine.

> How Information Is Shared

> We do not share your personal information except in the limited circumstances described below.

> For External Processing

> We transfer information to our corporate affiliates, service providers, and other partners (so, basically anybody) who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures. These partners provide us with services globally, including for customer support, information technology, payments, sales, marketing, data analysis, research (so we can ad target you), and surveys.

If I buy a gadget to track my personal exercise routine, it is definitely unexpected that my whereabouts are being monitored by advertising companies. Does Apple do the same with their fitness data on the watch?

Re:Privacy not included: Holiday gift list for privacy and s... by brlewis on Wednesday November 14, 2018 @08:24PM (#18456086)
Does Apple do the same with their fitness data on the watch?

You're free to speculate on the worst possible implications of their privacy policy too. Here's an excerpt from https://www.apple.com/legal/privacy/en-ww/

Service Providers

Apple shares personal information with companies who provide services such as information processing, extending credit, fulfilling customer orders, delivering products to you, managing and enhancing customer data, providing customer service, assessing your interest in our products and services, and conducting customer research or satisfaction surveys. These companies are obligated to protect your information and may be located wherever Apple operates.