News for hackers. Stuff that matters.
Re:Intel's CIP wants to collect the “categories of websites ... by rswail on Monday November 18, 2019 @08:58AM (#21564319)
Why on earth would the "category of web sites" be of possible use other than selling the data?

Telemetry is now an attack vector for privacy in general because no one can be trusted with the data.

Re:Intel's CIP wants to collect the “categories of websites ... by SamuelAdams on Monday November 18, 2019 @09:05AM (#21564358)
Not trying to defend intel, just trying to offer a (somewhat justified) answer:

If people are using more streaming services, that means Intel should focus more on their Integrated Graphics platforms. If people are downloading significantly more data than ever before, they should probably make sure their networking drivers receive more support.

Knowing how people use their PC's, even by category, can help Intel manage its driver development.

Re:Intel's CIP wants to collect the “categories of websites ... by jiofih on Monday November 18, 2019 @11:36AM (#21565665)
That’s a very poor excuse for mass collection of personal data. They can easily figure that out from commercial datasets, or even a small-scale research effort.
Re:Intel's CIP wants to collect the “categories of websites ... by gowld on Monday November 18, 2019 @12:00PM (#21565918)
> a small-scale research effort.

Like the Computing Improvement Program, hosted on an obscure web page and systray menu?

Re:Intel's CIP wants to collect the “categories of websites ... by heavyset_go on Monday November 18, 2019 @01:16PM (#21566637)
Typically research is voluntary and involves getting informed consent from involved parties.
Re:Intel's CIP wants to collect the “categories of websites ... by hcs on Monday November 18, 2019 @02:00PM (#21567059)
Is this not voluntary?

> Q: How do I participate in the Intel® Computing Improvement Program?

> A: When you download and install the Intel® Computing Improvement Program, click Accept on the invitation to join.

Re:Intel's CIP wants to collect the “categories of websites ... by piracy1 on Monday November 18, 2019 @08:36PM (#21570016)
Ya, I think the key bit of spook that can be derived from the title is that they're using the CPUs to do this, maybe like they're baking it into Intel ME. That's what I first thought until I read the article. It's just intel saying, hey come install our spyware. However it's worth nothing that I bet this will come preinstalled on a ton of devices which is in fact spooky.
Re:Intel's CIP wants to collect the “categories of websites ... by shrimp_emoji on Monday November 18, 2019 @01:24PM (#21566737)
Yeah; why not just buy that data from Microsoft? :3
Re:Intel's CIP wants to collect the “categories of websites ... by mixedbit on Monday November 18, 2019 @09:08AM (#21564379)
Right, because if you are using your computer mostly to download stuff, you are OK if your GPU occasionally hangs.
Re:Intel's CIP wants to collect the “categories of websites ... by SamuelAdams on Monday November 18, 2019 @09:22AM (#21564478)
It doesn't have to be that bad. Every organization has constraints - particularly people's time. If Netflix, Amazon, and Hulu come up with some new video codec and plan on releasing it in 12 months into their services, and I know 80% of my consumers use video streaming services, then I know that I should allocate most of my development resources / people towards enabling the new codec on GPU's my company sells.

Knowing how people use your products helps allocate new development features. This problem isn't unique to intel.

Re:Intel's CIP wants to collect the “categories of websites ... by Angostura on Monday November 18, 2019 @12:38PM (#21566266)
If you have 80% of the desktop market, you can just aggregate web traffic statistics - your customers will be a representative sample
Re:Intel's CIP wants to collect the “categories of websites ... by markstos on Monday November 18, 2019 @10:23AM (#21564947)
Every organization has constraints and in Intel's case they are constrained to only $70 billion in revenue.
Re:Intel's CIP wants to collect the “categories of websites ... by cylon13 on Monday November 18, 2019 @10:36AM (#21565089)
That sounds like a finite number to me.
Re:Intel's CIP wants to collect the “categories of websites ... by mikeyouse on Monday November 18, 2019 @11:40AM (#21565719)
In 2018, Intel spent $15B on share repurchases and dividend issuances... if more cash could improve their offerings, they aren’t acting like it.
Re:Intel's CIP wants to collect the “categories of websites ... by JetSpiegel on Tuesday November 26, 2019 @07:38PM (#21644250)
Over 20%. Is there a P/E ratio-analogue, but for this kind of dead weight financialization?
Re:Intel's CIP wants to collect the “categories of websites ... by mistermann on Monday November 18, 2019 @09:41AM (#21564615)
Is this codec scenario plausible, that something so significant would be broadly adopted and Intel would need user usage data to decide whether to support it?
Re:Intel's CIP wants to collect the “categories of websites ... by gnode on Monday November 18, 2019 @10:16AM (#21564891)
Usage data could be very useful for decisions on what to dedicate die area to, and how to price products.

They might find that a market segment doesn't do a lot of playing 3D games, but does spend a lot of time watching Youtube on battery, and so make the decision to drop integrated GPU shader cores and dedicate more die area to video decoding, to make energy efficiency better when watching video.

Re:Intel's CIP wants to collect the “categories of websites ... by Faark on Monday November 18, 2019 @12:11PM (#21566014)
But now we are not speculating about potential new additions, we want to know utilization of existing circuits to allocate resources & improve in the future. I'd hope this could be measured without collecting a ton of personal data.
Re:Intel's CIP wants to collect the “categories of websites ... by gnode on Monday November 18, 2019 @01:21PM (#21566692)
These goals blur together. R&D effort, and usage of die area are all justified by market potential. Knowing how large the market for a technology or tradeoff actually is has value.

> I'd hope this could be measured without collecting a ton of personal data.

Intel's claim is that they don't: "we would like your permission to collect [...] The categories of websites you visit, but not the URL itself" also the privacy safeguarding statement at the top of the page.

The whole purpose of CIP is to gather data on actual users' computing needs. For many computer users, the web is most of their computing experience -- it seems appropriate therefore to include usage of the web in the program.

Much like any customer experience study, privacy is an issue. Intel do at least claim to be mitigating the impact to privacy.

Re:Intel's CIP wants to collect the “categories of websites ... by ryacko on Monday November 18, 2019 @11:53AM (#21565839)
I'm of the opinion they should add FPGAs to everything. Every chip now has an insane amount of die area dedicated to the northbridge or the L3 cache. Anything else turns the junk we buy into garbage the moment everyone switches to a new standard.
Re:Intel's CIP wants to collect the “categories of websites ... by colejohnson66 on Monday November 18, 2019 @03:15PM (#21567721)
Aren’t FPGAs slower than ASICs though?
Re:Intel's CIP wants to collect the “categories of websites ... by fhars on Monday November 18, 2019 @03:35PM (#21567900)
That depends a bit on whether you count the fabrication time for a new ASIC towards the application startup time when switching applications or not.
Re:Intel's CIP wants to collect the “categories of websites ... by ryacko on Monday November 18, 2019 @06:49PM (#21569377)
Certainly propagation delay is higher. But for many applications it is cheaper to implement them in software than ASICs.

And besides, FPGAs are used for web scale applications, many of them applicable to small computers.

Re:Intel's CIP wants to collect the “categories of websites ... by user858584 on Monday November 18, 2019 @09:47AM (#21564668)
Edit: so they need to know every URL I access because they what to improve GPU or their drivers?
Re:Intel's CIP wants to collect the “categories of websites ... by SamuelAdams on Monday November 18, 2019 @10:20AM (#21564920)
That's not what Intel is collecting. From the article:

> what data is collected and how is it used?

> The categories of websites you visit, but not the URL itself

> If I participate in the program, is there any personal information in the data collected?

> Will not include the URL (web address) for specific sites visited

Re:Intel's CIP wants to collect the “categories of websites ... by TallGuyShort on Monday November 18, 2019 @11:19AM (#21565461)
Unless they're shipping a fairly complete domain -> category map to your machine and doing all categorization offline, unlikely, then they absolutely have the ability to collect it, and will "accidentally" do so at some point. We've all seen this movie now, multiple times.

edit: also the knee-jerk reaction most people are going to have to this, is concern about certain categories of websites.

Re:Intel's CIP wants to collect the “categories of websites ... by throwanem on Monday November 18, 2019 @01:07PM (#21566550)
Third party services (e.g. https://www.webshrinker.com/apis/) exist to perform this kind of classification. They'll be doing the classification API calls from the client (CIP-enrolled) machine, then sending the results (and not the domains or URLs that generated them) back to their own endpoint.
Re:Intel's CIP wants to collect the “categories of websites ... by rvnx on Tuesday November 19, 2019 @03:40AM (#21571484)
Then webshrinker would know everything you visit right ?
Re:Intel's CIP wants to collect the “categories of websites ... by gregmac on Monday November 18, 2019 @11:38AM (#21565690)
> The information collected includes categorized web browsing history that shows how long and how often you visited specific categories of sites (i.e. social media, personal finance, or news). All site visits are classified into one of 30 categories. We do not collect URLs, web pages titles, or user-specific content without explicit permission from you.

From a technical perspective, how does this work? I can only think of two ways:

(1) Intel downloads a big "map" file containing a huge list of pre-defined domains and categories. This means either the categories are pretty slim or you have a GB's big file

(2) Each URL is sent to Intel (aka "collected"). Maybe they don't "store" it ("We promise") but as soon as it leaves your system you have no control on this

Re:Intel's CIP wants to collect the “categories of websites ... by shawnz on Monday November 18, 2019 @12:50PM (#21566379)
They could use a technique like Google Safe Browsing where you send a partial hash of the url, and they send back the subset of the map containing only urls which could match that hash
Re:Intel's CIP wants to collect the “categories of websites ... by dandelo1953 on Monday November 18, 2019 @11:48AM (#21565809)
They can strip the request down to the domain name, hash that with a OTP to do a fuzzy lookup on their end which would be difficult (not impossible) to reverse per reference, but would require APT to do en masse.

There is probably some flaw with this method... curious if others think there's a "safe enough" way to do something like this...

Re:Intel's CIP wants to collect the “categories of websites ... by used74919 on Monday November 18, 2019 @12:26PM (#21566161)
Yes they can, but they can not
Re:Intel's CIP wants to collect the “categories of websites ... by 9dl on Monday November 18, 2019 @10:18AM (#21564904)
Yes

And intel want it for free

Re:Intel's CIP wants to collect the “categories of websites ... by joshspankit on Monday November 18, 2019 @10:15AM (#21564881)
No server-supplied metadata is trustworthy enough to base your business decisions on. If 80% of the internet traffic was illegal server-based video streaming, those providers would simply be changing the metadata every time they got “profiled”. Some probly even do it proactively. Intel would be much better off to focus on what the cpu is asked to do (decode 4:4:4 h265 and/or aggressively tune for low latency, for example).
Re:Intel's CIP wants to collect the “categories of websites ... by adavis321 on Monday November 18, 2019 @01:04PM (#21566519)
Exactly. Why do they need to know categories of websites? They should be collecting the things your computer is doing from a technical standpoint. Then I could be convinced that they were trying to learn how to improve their products from an engineering perspective. As it stands CIP looks like a way to use the large installed base of their products to improve the marketing/partnership side of their business.
Re:Intel's CIP wants to collect the “categories of websites ... by sizzzzlerz on Monday November 18, 2019 @09:30AM (#21564529)
And I should include my private data in this collection because why? I'm not getting paid for it.
Re:Intel's CIP wants to collect the “categories of websites ... by gnode on Monday November 18, 2019 @10:20AM (#21564931)
You should turn it off; others won't, and their sacrifice will help Intel design products for real world usage.
Re:Intel's CIP wants to collect the “categories of websites ... by used74919 on Monday November 18, 2019 @12:26PM (#21566155)
Yes but they might be people you love and care about
Re:Intel's CIP wants to collect the “categories of websites ... by Dylan16807 on Monday November 18, 2019 @10:51AM (#21565225)
Thy could do that with histograms of GPU load and network load. And that would be far less worrying or abusable.
Re:Intel's CIP wants to collect the “categories of websites ... by tomcooks on Monday November 18, 2019 @09:38AM (#21564595)
Ask to the providers, not the customers.
Re:Intel's CIP wants to collect the “categories of websites ... by heavyset_go on Monday November 18, 2019 @01:15PM (#21566625)
Then they can pay to do focus groups, case studies, research and surveys instead of violating the privacy of their users.
Re:Intel's CIP wants to collect the “categories of websites ... by SerLava on Monday November 18, 2019 @01:01PM (#21566484)
That is a very, very broad piece of data that could just as easily be found with a simple survey or by buying the flat statistics from ISPs.
Re:Intel's CIP wants to collect the “categories of websites ... by disintegore on Monday November 18, 2019 @11:44AM (#21565757)
I don't think this is even "somewhat" justified.

The legitimate way to acquire this information would be to purchase it from partners who have a legitimate reason to collect it. If you want to know how popular 4K streaming is, for instance, Netflix, Twitch (etc) can provide that information.

My uninformed guess is that the information would be far less costly and of far better quality than using some large-scale spyware deployment instead. Unless there's something more that can make it worth Intel's while.

Re:Intel's CIP wants to collect the “categories of websites ... by gowld on Monday November 18, 2019 @12:02PM (#21565930)
Why is Netflix selling my data better than Intel collecting it directly?
Re:Intel's CIP wants to collect the “categories of websites ... by disintegore on Monday November 18, 2019 @12:19PM (#21566085)
Because collecting data about streaming service usage makes sense when you operate a streaming service. I don't see anything inherently wrong with it so long as the information is anonymous.
Re:Intel's CIP wants to collect the “categories of websites ... by snarf21 on Monday November 18, 2019 @09:48AM (#21564670)
It seems like you could buy this data anonymously from ISP or the Cloudflares of the world without infringing on privacy.
Re:Intel's CIP wants to collect the “categories of websites ... by codedokode on Monday November 18, 2019 @11:32AM (#21565610)
Intel has thousands of employees. They could spy on them and not on external users.
Re:Intel's CIP wants to collect the “categories of websites ... by dbdjfjrjvebd on Monday November 18, 2019 @01:38PM (#21566862)
Also not OK!
Re:Intel's CIP wants to collect the “categories of websites ... by hosteur on Monday November 18, 2019 @09:54AM (#21564735)
How is your isp spying on you not infringing on privacy?
Re:Intel's CIP wants to collect the “categories of websites ... by snarf21 on Monday November 18, 2019 @10:26AM (#21564982)
Sorry, my response was a little short. I should have said that people like your ISP and cloud hosting are/can already spying on us. If Intel wanted this data solely for the purposes of improving drivers, they could buy it from internet connectivity companies. We don't also need them tracking everything we do.
Re:Intel's CIP wants to collect the “categories of websites ... by jraph on Monday November 18, 2019 @09:56AM (#21564750)
They know what servers are accessed from their network by design. They don't need to spy and to give data on an individual level.
Re:Intel's CIP wants to collect the “categories of websites ... by penagwin on Monday November 18, 2019 @10:08AM (#21564834)
Yeah the word "spy" might be debatable but it's certainly something like "snooping".

Just because they process the data doesn't mean they need to record it. I feel like a good analogy here is the ISP is your secretary. Sure they must have access to your documents to do their job, but if they're reading through your stuff for "gossip" or snapping photos of your documents, that'd still be an invasion of privacy.

Re:Intel's CIP wants to collect the “categories of websites ... by jraph on Monday November 18, 2019 @10:14AM (#21564872)
Yes but ISPs are huge and can limit logging to outbound connections. No individual recording would be done. Privacy is kept -- with a big caveat that deanonymisation of aggregated data is possible in a number of cases, of course, granted.
Re:Intel's CIP wants to collect the “categories of websites ... by jaywalk on Monday November 18, 2019 @09:57AM (#21564756)
Because it would be totally anonymous! Trust them!
Re:Intel's CIP wants to collect the “categories of websites ... by jgrahamc on Monday November 18, 2019 @10:20AM (#21564926)
Cloudflare doesn't sell, barter, exchange, etc. data about web browsing. No clue where you get that idea from.
Re:Intel's CIP wants to collect the “categories of websites ... by TeMPOraL on Monday November 18, 2019 @11:20AM (#21565475)
GP says "Cloudflares of the world", i.e. companies providing similar services. We can take your word when it comes to Cloudflare itself, but that doesn't mean your competitors don't sell, barter or exchange data - and frankly, at this point, just possessing this data is grounds for reasonable suspicion. At least it seems to me that whatever value or code of behavior can be broken for profit will get broken by someone eventually.

(And even as we trust Cloudflare of 2019 doesn't do it, who's to say Cloudflare of 2021 will still live by this code? Can you guarantee that? I often find myself wishing for an established way for a company to make legally enforceable vows about its behavior. Maybe there is something like this already?)

Re:Intel's CIP wants to collect the “categories of websites ... by stevenicr on Monday November 18, 2019 @05:22PM (#21568764)
Suprisingly recently, I learned that cloudflare does hand over data about browsing and also inspects the data that is being exchanged by the user and the web site - and pro-actively hands the data to various gov agencies.

I do not think most webmasters or web surfers know this.

see "Among other things, that resulted in us cooperating around monitoring potential hate sites on our network and notifying law enforcement when there was content" - and more, via: https://blog.cloudflare.com/terminating-service-for-8chan/

Re:Intel's CIP wants to collect the “categories of websites ... by nerdponx on Monday November 18, 2019 @09:05AM (#21564360)
Maybe it could have to do with different kinds of CPU workloads imparted by different mixes of HTML, CSS, and Javascript functionality. After all web browser performance is a common complaint.

But realistically it's just for advertising.

Re:Intel's CIP wants to collect the “categories of websites ... by olliej on Monday November 18, 2019 @09:36AM (#21564578)
Intel has cared a lot about things like JS performance so may want to directly observe what js is being run.

I recall that being a big challenge when I worked on browsers - it’s very difficult to see what users actually encounter beyond “top X website” lists, which are of questionable value.