News for hackers. Stuff that matters.
Re:The Color of Surveillance: Monitoring of Poor and Working... by vorpalhex on Wednesday November 27, 2019 @09:52AM (#21648271)
Could also be labeled "Meta-Surveillance: How to make a list of everyone interested in Surveillance" given that it's hosted as a google drive document instead of _any other sane format in the world_.
Re:The Color of Surveillance: Monitoring of Poor and Working... by DyslexicAtheist on Wednesday November 27, 2019 @10:25AM (#21648609)
or those who shared it simply wanted to distribute this to anyone who participated in the event (this reading list seems to be a follow-up deliverable):

https://lawweb.colorado.edu/events/details.jsp?id=8376

and

https://twitter.com/alvarombedoya/status/1168933978029678592...

fwiw, there is no need to authenticate with google to download the pdf (tor works fine too if anyone is too paranoid).

Re:The Color of Surveillance: Monitoring of Poor and Working... by dalore on Wednesday November 27, 2019 @11:54AM (#21649529)
There is no need true, but if clicked and was logged into google, they now know. True I should have use an incognito but the point is there.
Re:The Color of Surveillance: Monitoring of Poor and Working... by rhizome on Wednesday November 27, 2019 @12:53PM (#21650179)
Your ISP knows what IP you use, and Google has your ISP's phone number.
Re:The Color of Surveillance: Monitoring of Poor and Working... by hackerbrother on Wednesday November 27, 2019 @11:31AM (#21649292)
? It's a cheap way to host a file
Re:The Color of Surveillance: Monitoring of Poor and Working... by jascii on Wednesday November 27, 2019 @11:59AM (#21649578)
>given that it's hosted as a google drive document

While an amusing irony, the reality is that -- without special measures -- 99% of content either is hosted on or routed through infrastructure owned by companies with less than stellar history regarding privacy..

Re:The Color of Surveillance: Monitoring of Poor and Working... by paggle on Wednesday November 27, 2019 @11:15AM (#21649109)
The signal value of “being exposed to a link about surveillance and clicking it” is pretty darn low. Unless you’re in North Korea I wouldn’t worry about it.
Re:The Color of Surveillance: Monitoring of Poor and Working... by testuser66 on Wednesday November 27, 2019 @10:16AM (#21648514)
It's a PDF.
Re:The Color of Surveillance: Monitoring of Poor and Working... by cousin_it on Wednesday November 27, 2019 @10:24AM (#21648595)
I know what PDFs look like, they don't have my Google account in the upper right corner. It's a Google page wrapped around a PDF.
Re:The Color of Surveillance: Monitoring of Poor and Working... by Hitton on Wednesday November 27, 2019 @11:06AM (#21649012)
>they don't have my Google account in the upper right corner

I don't understand how can someone who doesn't even bother to logout out of his google account or use something like firefox containers care about privacy. The document has to be hosted somewhere no matter what and google drive isn't any worse than random web page which uses google analytics.

Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @11:44AM (#21649431)
Doesn't Google Drive show the identity of someone reading the document to other people reading it, or at least the owner? That's worse than just collecting analytics internally at Google.
Re:The Color of Surveillance: Monitoring of Poor and Working... by shadowgovt on Wednesday November 27, 2019 @11:48AM (#21649466)
No. If you aren't authenticated, it shows your presence in a shared document as "anonymous [metastable animal designator]"
Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @11:49AM (#21649486)
I should have made it clear I was assuming that people were authenticated to their Google account. I think most people who use GMail never log out, and might not check the URL and realize they were navigating to a Google doc.
Re:The Color of Surveillance: Monitoring of Poor and Working... by andrepd on Wednesday November 27, 2019 @12:05PM (#21649641)
Hit right-click > open in private window rather than left-click. I'm with the other poster, if you haven't de-googlified your digital life and you don't even bother opening this in private / firefox container, then I don't know what you expect.
Re:The Color of Surveillance: Monitoring of Poor and Working... by SiempreViernes on Wednesday November 27, 2019 @11:54AM (#21649531)
Then you entirely missed the point of the comment you replied to: that if you willingly impose google surveillance on yourself you really don't have any space to complain about being reminded of it.
Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @11:56AM (#21649561)
I think you're missing my point that even if you willingly impose Google surveillance on yourself, Google Drive is still worse than Google Analytics because your personally identifiable activity is visible to the author and/or other readers, not just Google.
Re:The Color of Surveillance: Monitoring of Poor and Working... by Xorlev on Wednesday November 27, 2019 @02:01PM (#21650861)
> personally identifiable activity is visible to the author and/or other readers

View activity is not surfaced to users. View activity is tracked, and in a _GSuite domain_ (such as your job) an admin can audit that activity. For a standard Google account, a user cannot know whether another user has viewed that document, let alone which user. Is there a way you're seeing this that I'm missing? If so I'd like to know about it so I can raise it as an issue.

If you're thinking about docs/sheets/slides presence, unless you've been shared directly on the document the owner (and other users) only see "Anonymous <Animal>".

If the document is shared to you comment/edit access, that comment/edit activity _will_ show up in the document's activity stream, but at that point the owner of the document already knows you have access by virtue of sharing it to you.

I realize you probably don't have much incentive to believe me, but as an engineer on Drive I can say that we take privacy incredibly seriously.

Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @03:27PM (#21651729)
Thanks for the response. I'm mostly familiar with Google Docs in the workplace, where it was apparent who was reading what document at a particular moment from a list of users at the upper-right.

Separately, on my personal account, at some point I viewed a publicly shared document from a well-known person, and that ended up in my "shared documents" (or "documents shared with you"?) for ages. I wasn't sure if that sharing was evident in both directions. I've avoided clicking on shared Google Drive documents since then.

If it's not the case that the owner of the doc can audit activity, I stand corrected.

EDITED TO ADD: I suppose the root of my confusion is that it's pretty hard to distinguish the behavior of Google Drive from Google Docs; and once the lack of privacy has been observed anywhere (e.g. using Docs the workplace), it's hard not to assume it's also happening with PDF's shared via Google Drive, simply because you can't know what the other person is seeing.

It's especially hard when there is an asymmetry (e.g. in a non-GSuite environment, I can see some publicly shared document in my "shared with me" list, but I guess the sharer can't see me).

Re:The Color of Surveillance: Monitoring of Poor and Working... by Xorlev on Wednesday November 27, 2019 @04:48PM (#21652475)
> Thanks for the response. I'm mostly familiar with Google Docs in the workplace, where it was apparent who was reading what document at a particular moment from a list of users at the upper-right.

Right, which is the notion behind the Activity Dashboard in Docs too (GSuite only). If you left a doc open and watched who popped up, you can effectively know who views a document, so it was exposed as a panel instead. You can disable your own activity showing up for document editors (which applies retroactively) from that same pane. (https://i.imgur.com/AOGmj40.png)

Obviously, in GSuite especially, view activity is recorded and your GSuite admin can audit that activity, but that's kind of an obvious need for a business.

> Separately, on my personal account, at some point I viewed a publicly shared document from a well-known person, and that ended up in my "shared documents" (or "documents shared with you"?) for ages. I wasn't sure if that sharing was evident in both directions. I've avoided clicking on shared Google Drive documents since then.

If you open a link-shared document, it add it to your Shared With Me list (and Recent list), but none of that is visible to the sharer. If you're worried about even "Anonymous Fox" showing up, go to the /preview url, e.g. https://docs.google.com/document/d/<docid>/preview. This still adds it to Shared With Me/logs events on your account (it'll show up in your Quick Access results), but none of it is visible to the sharer and they won't even see your icon.

> it's hard not to assume it's also happening with PDF's shared via Google Drive, simply because you can't know what the other person is seeing.

This is a struggle, I agree. I work on it and sometimes I struggle to remember what applies on GSuite vs. consumer. It's a complicated product and therefore doesn't have one straightforward answer, especially in light of the myriad of policies that GSuite admins can enable/disable. For instance, whether we even record your search queries in Drive (for showing as recent searches in Drive) is controlled by a policy your admin can set.

> It's especially hard when there is an asymmetry (e.g. in a non-GSuite environment, I can see some publicly shared document in my "shared with me" list, but I guess the sharer can't see me).

Right. Consumer: shows up in SWM, GSuite: shows up in SWM & you show up in Activity Dashboard to editors (unless you turn it off as shown in https://i.imgur.com/AOGmj40.png -- it may default to off in your organization anyways).

Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @04:12PM (#21652184)
Also if you sit near the Android people, let them know I'm going to be irritated if I find that my parents have been tricked into activating location tracking on their phones again! It seems like I have to shut off all the various Google privacy settings every time I visit them. They don't want to be tracked.
Re:The Color of Surveillance: Monitoring of Poor and Working... by shadowgovt on Wednesday November 27, 2019 @04:56PM (#21652559)
Why do they have phones with GPS circuits in them it they don't want to be tracked?
Re:The Color of Surveillance: Monitoring of Poor and Working... by SiempreViernes on Wednesday November 27, 2019 @06:46PM (#21653330)
Presumably to be able to know where they themselves are, a gps circuit is only a passive receiver and a bit of compute.
Re:The Color of Surveillance: Monitoring of Poor and Working... by semiotagonal on Wednesday November 27, 2019 @05:11PM (#21652676)
There's nothing about GPS that says it should provide continuous information to others about one's location.
Re:The Color of Surveillance: Monitoring of Poor and Working... by soup10 on Wednesday November 27, 2019 @11:28AM (#21649267)
Privacy and convenience don't have to be trade-offs.
Re:The Color of Surveillance: Monitoring of Poor and Working... by dsfyu404ed on Wednesday November 27, 2019 @11:35AM (#21649338)
If you set up containers to quarantine all Google stuff in one container this is still going to open in that container.
Re:The Color of Surveillance: Monitoring of Poor and Working... by brudgers on Wednesday November 27, 2019 @11:13AM (#21649099)
If your Google account is in the corner it’s because you’re surfing the web while logged into Google.
Re:The Color of Surveillance: Monitoring of Poor and Working... by ForHackernews on Wednesday November 27, 2019 @10:18AM (#21648537)
Hosted on Google drive for some reason. It'd be interesting to see what inferences Google makes about people accessing files on g-drive.
Re:The Color of Surveillance: Monitoring of Poor and Working... by prophesi on Wednesday November 27, 2019 @10:42AM (#21648767)
Yeah, if you're logged in to Google and access this file, it will now appear in your list of recent Drive files.