News for hackers. Stuff that matters.
Re:Protections Against Fingerprinting and Crypto Mining in F... by JohnFen on Tuesday April 09, 2019 @01:54PM (#19617297)
> Targeting this advert to most likely be seen by people who actually had been thinking of buying a hat shaped like sporting equipment is still a good idea too.

Not if that targeting is done using data gathered about me without my consent -- as it almost universally is.

Targeting based on context (what sort of website the ad is on, for instance), is fine.

Re:Protections Against Fingerprinting and Crypto Mining in F... by bad_user on Tuesday April 09, 2019 @02:52PM (#19617824)
Google’s primary revenue source is AdWords, meaning ads served on their own properties, the bulk of it being in Google Search and most if that is contextual, most ads being served based on the search you’re making.

Google doesn’t actually have a problem in serving contextual ads on their own properties, since they have plenty of context. The problem is with AdSense since there advertisers need some sort of user profile, plus in the EU bidding exchanges are in jeopardy due to the GDPR.

Re:Protections Against Fingerprinting and Crypto Mining in F... by crummy on Tuesday April 09, 2019 @07:41PM (#19620154)
> Targeting based on context (what sort of website the ad is on, for instance), is fine.

Why? I didn't consent for that.

Re:Protections Against Fingerprinting and Crypto Mining in F... by joemag on Wednesday April 10, 2019 @03:22AM (#19622560)
Do you object when sports TV channels show ads related to sports or people who enjoy sports?
Re:Protections Against Fingerprinting and Crypto Mining in F... by JohnFen on Wednesday April 10, 2019 @11:17AM (#19625526)
Because that sort of target is based on the context the ad is appearing in, not on any data gathered about you specifically.
Re:Protections Against Fingerprinting and Crypto Mining in F... by jimmaswell on Tuesday April 09, 2019 @04:03PM (#19618419)
I don't understand this new position (that GDPR follows) that consent is required for information to be gathered on someone. If someone sees me wearing a blue shirt and writes in their notebook that I wore a blue shirt then I don't feel like I have some inherent right to coerce them to erase it or prevent them from selling that information to Blue Shirt Emporium.
Re:Protections Against Fingerprinting and Crypto Mining in F... by bravoetch on Tuesday April 09, 2019 @06:20PM (#19619560)
If they wrote 'person wearing blue shirt', fine. But if they followed you home, took note of the address, cross referenced that to find your name and other personal info, then stored all that data to a company that decides who gets loans based on shirt color - not fine. Etc.
Re:Protections Against Fingerprinting and Crypto Mining in F... by arthur_pryor on Tuesday April 09, 2019 @04:42PM (#19618757)
sometimes it is right to treat scenarios that are fundamentally similar as different beasts in practice when those scenarios are actually happening at very different scales.

i (and many others) believe that surveillance is like this. the effort that it takes to do what your describing does not scale, and cannot be used to implement dragnet surveillance and data collection (unless it's a police state and you have a lot of notetakers). lots of people (myself and many others) think dragnet surveillance (whether by private entities or governments) is a thing to be avoided (because it creates really bad power asymmetries, which i think are inherently a bad thing).

also, i don't think that large companies should be granted the same rights as individuals. just because a person can do a thing on their own doesn't mean that a large entity should be able to do something similar in spirit at thousands or millions of times the scale.

Re:Protections Against Fingerprinting and Crypto Mining in F... by joemag on Wednesday April 10, 2019 @03:33AM (#19622612)
Many laws and societal norms don’t require universal acceptance. So it’s totally reasonable for you to not care, while society in general feels the opposite. Or vice versa.

And in your case of the note taker, a better example would be somebody that frequently follows you, and takes notes about what you wear. In many places, that could be grounds for harassment claim. In other words, it’s not the act that matters to most people, but the frequency and scale at which the act takes place.

Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Tuesday April 09, 2019 @04:40PM (#19618733)
Data about you is not your data. Anyone can stand outside and watch what people do and take notes. That doesn't need your consent. It's the same thing here.
Re:Protections Against Fingerprinting and Crypto Mining in F... by M2Ys4U on Wednesday April 10, 2019 @05:48AM (#19623165)
>Data about you is not your data.

Stop thinking about data ownership. Ownership is irrelevant.

It's illegal to process any data about an identified or identifiable person unless you have a lawful basis to do so, and there are only a half dozen of those. "Because I own the data" is not one of them.

Re:Protections Against Fingerprinting and Crypto Mining in F... by Tsubasachan on Wednesday April 10, 2019 @03:28AM (#19622587)
Following someone around all day taking notes would be considered stalking.

I think the fundamental problem here is that people in the EU will choose privacy over the ability of companies to make money. Its a different outlook on life. When its my interests versus the interests of business I choose me.

Re:Protections Against Fingerprinting and Crypto Mining in F... by Yizahi on Wednesday April 10, 2019 @05:54AM (#19623193)
Metadata = Surveillance

https://www.schneier.com/blog/archives/2014/03/metadata_surv...

Quote:

"An easy thought experiment demonstrates this. Imagine that you hired a private detective to eavesdrop on a subject. That detective would plant a bug in that subject's home, office, and car. He would eavesdrop on his computer. He would listen in on that subject's conversations, both face to face and remotely, and you would get a report on what was said in those conversations. Now imagine that you asked that same private detective to put a subject under constant surveillance. You would get a different report, one that included things like where he went, what he did, who he spoke to -- and for how long -- who he wrote to, what he read, and what he purchased. This is all metadata, data we know the NSA is collecting. So when the president says that it's only metadata, what you should really hear is that we're all under constant and ubiquitous surveillance."

Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Wednesday April 10, 2019 @09:57AM (#19624643)
I'm not sure of your point.

My point is that surveillance is not illegal and does not require any consent to accrue information through public observation.

Re:Protections Against Fingerprinting and Crypto Mining in F... by JohnFen on Wednesday April 10, 2019 @11:18AM (#19625540)
I think whether or not it's legal is irrelevant. Things can be wrong -- even unconscionable -- and still be legal.
Re:Protections Against Fingerprinting and Crypto Mining in F... by JohnFen on Tuesday April 09, 2019 @05:56PM (#19619365)
> It's the same thing here.

I disagree completely.

Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Tuesday April 09, 2019 @05:57PM (#19619376)
Why?
Re:Protections Against Fingerprinting and Crypto Mining in F... by bravoetch on Tuesday April 09, 2019 @09:04PM (#19620714)
In this case the clue is the word fingerprinting. If someone outside your door was taking fingerprint impressions, your name, and then writing down your license plate and selling that info to anyone with money - would you just let that continue? Unlikely.
Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Tuesday April 09, 2019 @09:40PM (#19620943)
In the real world they can't physically touch you so let's replace that with passive facial recognition. In that case, yes they can do that all today. Someone can follow you all day from the moment you step out into public.

We might not like it but it is legal and they own their observations.

Re:Protections Against Fingerprinting and Crypto Mining in F... by GoblinSlayer on Wednesday April 10, 2019 @09:35AM (#19624455)
Wut. Stalking is literally a criminal offense.
Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Wednesday April 10, 2019 @09:51AM (#19624585)
You should look up the legal definition of stalking. Making public observations isn't it.
Re:Protections Against Fingerprinting and Crypto Mining in F... by DanBC on Wednesday April 10, 2019 @09:55AM (#19624624)
Stalking: https://www.cps.gov.uk/legal-guidance/stalking-and-harassmen...

> Whilst there is no strict legal definition of 'stalking', section 2A (3) of the PHA 1997 sets out examples of acts or omissions which, in particular circumstances, are ones associated with stalking. For example, following a person, watching or spying on them or forcing contact with the victim through any means, including social media.

--begin here--

Definition of stalking

Stalking is not legally defined but section 2A (3) of the PHA 1997 lists a number of examples of behaviours associated with stalking. The list is not an exhaustive one but gives an indication of the types of behaviour that may be displayed in a stalking offence. The listed behaviours are:

    (a) following a person,
    (b) contacting, or attempting to contact, a person by any means,
    (c) publishing any statement or other material relating or purporting to relate to a person, or purporting to originate from a person,
    (d) monitoring the use by a person of the internet, email or any other form of electronic communication,
    (e) loitering in any place (whether public or private),
    (f) interfering with any property in the possession of a person,
    (g) watching or spying on a person.

--end here--

I mean, that's pretty clear.

Re:Protections Against Fingerprinting and Crypto Mining in F... by JohnFen on Wednesday April 10, 2019 @11:23AM (#19625583)
For two reasons.

First, most of this sort of spying involves using my own equipment as a weapon against me -- and actively subvert my defenses in order to do it. This is, in my view, not much different than them breaking into my home and installing surveillance equipment.

Second, the data gathered about me (even if it doesn't involve subverting my own equipment) is not kept in isolation. It is combined with a lot of other data about me and then mined for further insights. Every little data gathering act may be insignificant in isolation, but the end result is a degree of surveillance that is deeply immoral if done without my consent.

Re:Protections Against Fingerprinting and Crypto Mining in F... by GoblinSlayer on Wednesday April 10, 2019 @09:18AM (#19624328)
It is by Berne convention. Gathering doesn't need my consent, but I can disallow it. In an ideal world DoNotTrack request would be honored, but since nobody did it, denial had to become the default.
Re:Protections Against Fingerprinting and Crypto Mining in F... by manigandham on Wednesday April 10, 2019 @09:51AM (#19624594)
Berne convention is about copyright which has nothing to do with this topic.
Re:Protections Against Fingerprinting and Crypto Mining in F... by GoblinSlayer on Thursday April 11, 2019 @08:27AM (#19633677)
Copyright is ownership of data.