News for hackers. Stuff that matters.
Re:How to stay private when using Android by danShumway on Wednesday January 01, 2020 @11:28AM (#21928726)
1. Google tracked user location even when location history was turned off.

2. Most people don't understand the full extent of Web and App Activity permissions -- they don't understand that this will allow Google to do things like parse search queries out of DuckDuckGo searches on Chrome.

3. Similarly (until recently) most people didn't realize that Google was using email info for advertising, including purchases made at competitors. This is the reason why none of your Amazon purchase confirmations list the items you purchased any more. They didn't want Google to be able to read them. Also no way to opt out until enterprise pressure forced Google to eventually promise to stop using the data... for ads.

4. On the subject of Siri, Google's voice assistant was also responsible for giving recordings to 3rd party contractors without the ability to disable it, and most users weren't aware this was happening.

5. Until consumer backlash forced them to stop, Google Maps also aggregated user wifi network names. This would open the door to determine location information based purely on what Wifi networks were stored on your device.

> I'm sure it'll be easy, easier than downvotes.

The reason you're getting downvotes is because this stuff is really easy to research[0], and other commenters don't believe you're engaging in good faith -- they think you're just trying to waste their time by asking them to list out examples that are common knowledge. A downvote is much easier and faster for them.

[0]: https://en.wikipedia.org/wiki/Privacy_concerns_regarding_Goo...

Re:How to stay private when using Android by hydgv on Wednesday January 01, 2020 @02:02PM (#21929798)
>This is the reason why none of your Amazon purchase confirmations list the items you purchased any more

Just checked a recent email from Amazon I received on a Gmail account and that is false.

Re:How to stay private when using Android by danShumway on Wednesday January 01, 2020 @02:21PM (#21929905)
I just checked the emails I received from Amazon from Christmas purchases, and it is not false. I don't doubt you, but I'm curious what the difference is. I'm looking at order confirmation emails and package ship/delivery emails. They only list order numbers for me, and I need to click through to the Amazon account to see the actual items.

Is there a different category of purchase that you're looking at, or is there something I'm missing?

Edit: I am looking online and I'm not seeing any articles that reference Amazon hiding orders specifically to thwart Gmail tracking, so it's very possible I'm wrong and that's just anecdote. But that being said, they definitely aren't showing individual items in my email confirmations. Is there a preference for this that I forgot I toggled?

Re:How to stay private when using Android by grzm on Wednesday January 01, 2020 @02:32PM (#21929973)
In my experience, I’ve noticed that order confirmation includes order details: shipping confirmation not. Took me a while to notice the pattern, and I still find it frustrating.
Re:How to stay private when using Android by hydgv on Wednesday January 01, 2020 @02:26PM (#21929932)
Re:How to stay private when using Android by eezurr on Wednesday January 01, 2020 @03:20PM (#21930317)
Do both of you use gmail?
Re:How to stay private when using Android by danShumway on Wednesday January 01, 2020 @05:07PM (#21931066)
I'm on Fastmail. I looked back at some of my old Gmail emails and they do list items. The Fastmail emails do not. This strikes me as really weird, if anything I would expect it to be the opposite.

Regardless, it's pretty clear that Amazon doesn't universally hide order information, so my assertion that they're doing it to avoid Gmail tracking seems to be pretty objectively wrong. If they were, they would do a better job.

Note that Gmail is still tracking your purchases, that's pretty widely established, and until recently, they were using your purchase history for ads. But I'm definitely wrong about Amazon's response, and I can't track down whatever source gave me that idea.

Re:How to stay private when using Android by lazzlazzlazz on Monday January 06, 2020 @09:42PM (#21976278)
My confirmation emails contain zero product information.
Re:How to stay private when using Android by thawaway1837 on Wednesday January 01, 2020 @11:57AM (#21928926)
I did not know #3. That’s messed up.

Email privacy should be sacrosanct.

Re:How to stay private when using Android by Buge on Wednesday January 01, 2020 @01:44PM (#21929673)
See news articles about it from the time, and a petition telling Google to stop:

https://usatoday30.usatoday.com/tech/news/2004-03-31-google_...

https://web.archive.org/web/20040604175545/https://www.priva...

And a Microsoft ad criticizing Google for it:

https://www.youtube.com/watch?v=9x4_dozWkq0

Re:How to stay private when using Android by lern_too_spel on Wednesday January 01, 2020 @12:45PM (#21929248)
> 1. Google tracked user location even when location history was turned off.

This is disingenuous. If the user uses a Google app that needs location data, of course that location will be sent to Google. This also happens on iOS.

> 3. Similarly (until recently) most people didn't realize that Google was using email info for advertising

That's how Gmail was marketed when it launched. Ads were shown based on the contents of emails. Everybody knew this.

> 5. Until consumer backlash forced them to stop, Google Maps also aggregated user wifi network names

No, Location Services collects WiFi names. Unlike on iOS [1], this is disable-able on Android, and the checkbox to do so is even shown during device setup. If you mean the Street View vans collect WiFi SSIDs, Apple does exactly the same but worse because nobody has any idea if they respect "_nomap" in the SSID (obeyed by both Mozilla and Google), and Apple won't say.

I find Apple to be far more deceptive on privacy. In addition to the location data that, unlike with Android, you cannot stop Apple from collecting, you also have the problem of having to send banking details to Apple to develop apps for your own devices. For an even bigger deception, look at Tim Cook's weasel words in interviews when asked about China's access to iCloud data. He talks about who has the keys for iMessage communications, which has absolutely nothing to do with the problem. [2]

[1] https://news.ycombinator.com/item?id=21725216

[2] https://www.vice.com/en_us/article/43eqpw/tim-cook-insists-c...

Edit for MarioMan: Wifi Services is not the system that collects this data but a user of Location Services. Turning it off won't stop Apple from collecting location data off your device.

Re:How to stay private when using Android by danShumway on Wednesday January 01, 2020 @01:02PM (#21929383)
> that needs location data, of course that location will be sent to Google

It's surprising enough that articles were written about it, and Google had to clarify its privacy policy to explain it.[0] It is not intuitive or natural to a normal user to believe that location data will be stored when they have a permission entitled "location" turned off. That's deceptive on Google's part, plain and simple.

On that note, I don't really care what Apple does, why would bad privacy policies on iPhone make me feel better about Google spying on me?

> That's how Gmail was marketed when it launched. Ads were shown based on the contents of emails. Everybody knew this.

Literally the next comment alongside yours is someone who didn't know this.

> If you mean the Street View vans collect WiFi SSIDs, Apple does exactly the same.

Yes, that's what I mean[1], and, again, who cares whether or not Apple does the same? We're supposed to believe this was totally expected behavior that was entirely fine, which is why Google was forced to respond and change their policies after public backlash.

Why do people do this? Why do people look at public, documented controversies and say, "there wasn't a controversy, everyone was OK with it"? This stuff isn't public knowledge, or else it wouldn't be newsworthy.

I've written about this pattern in the past[2], but I'm not going to rehash it in detail here. The short version is that every privacy accusation is denied vigorously until the story breaks that it's actually real. And then suddenly the conversation shifts and those privacy violations were all public knowledge and the controversy was overblown and nobody smart was ever surprised by them. People are paranoid until it's proven they're not, and then they're accused of over-reacting.

[0]: https://www.theverge.com/2017/11/21/16684818/google-location...

[1]: https://www.theguardian.com/technology/2010/may/15/google-ad...

[2]: https://news.ycombinator.com/item?id=21778234

Re:How to stay private when using Android by lern_too_spel on Wednesday January 01, 2020 @01:08PM (#21929430)
> Google had to clarify its privacy policy to explain it.[0]

Google didn't update any privacy policies in this article. It is about background collection of location data when location services was disabled that has since stopped. Meanwhile, Apple continues to collect your location data in the background with no way to disable it.

> why would bad privacy policies on iPhone make me feel better about Google spying on me?

Because you're saying that Google is uniquely deceptive on privacy when the main competitor is provably worse.

> Google was forced to respond and change their policies after public backlash.

As I showed, Apple still hasn't changed its policies on WiFi collection. Responding to privacy concerns is better than not responding to privacy concerns by any definition.

Re:How to stay private when using Android by danShumway on Wednesday January 01, 2020 @01:14PM (#21929482)
Google isn't uniquely deceptive on privacy. It's just deceptive on privacy. Google isn't uniquely bad on privacy. It's just bad on privacy.

It is possible for multiple companies to be bad at the same things.

Re:How to stay private when using Android by lern_too_spel on Wednesday January 01, 2020 @01:17PM (#21929510)
This I agree with. There are also degrees of deception and badness on privacy, and Apple is by far the worst among the major tech companies, even beyond Facebook, which has not given the Chinese government wholesale access to a subset of its users' data and then lied about it.
Re:How to stay private when using Android by MarioMan on Wednesday January 01, 2020 @01:29PM (#21929586)
If you’re referring to the crowd-sourced collection and contribution of Wi-Fi SSIDs, iOS has the “Wi-Fi Networking” toggle in location services that turns this on or off. If you’re referring to the use of that data, it is one of several components in the locations API that cannot be separated out.
Re:How to stay private when using Android by yrro on Thursday January 02, 2020 @05:37AM (#21934289)
So if I don't want Google telling the world where I live, I can no longer tell Windows users to not upload my WiFi passwords to Microsoft (_optout)... what a world we live in!
Re:How to stay private when using Android by lern_too_spel on Thursday January 02, 2020 @09:49AM (#21935746)
Google and Mozilla. Apple will continue to tell the world where you live.

Microsoft no longer uploads WiFi passwords, but when it did, you could opt out by putting _optout anywhere in the SSID.