News for hackers. Stuff that matters.
Re:Ring Doorbell App Packed with Third-Party Trackers by code4tee on Tuesday January 28, 2020 @04:05PM (#22174015)
Other product companies take note: the tide is turning on all this “tracking” nonsense. Clean up your house now or find yourself shamed into submission later.

Consumers increasingly don’t care that “the lawyers said it was OK because it’s on page 73 subsection C line 4 of the use agreement For the product.” Privacy is the new black.

Re:Ring Doorbell App Packed with Third-Party Trackers by baxtr on Tuesday January 28, 2020 @04:37PM (#22174319)
Ahh... I so much wish that this was true. However, there is just too much money involved and consumers don't seem to care, at least the "silent majority". This won't end anytime soon
Re:Ring Doorbell App Packed with Third-Party Trackers by bob1029 on Tuesday January 28, 2020 @07:00PM (#22175588)
I'm not so sure. I prefer to remain optimistic about this because it does seem positive progress is being made. No problem like this will be solved overnight, even with heavy-handed federal legislation made effective yesterday.

Things like this do take time. New companies are being built right now that plan to base their entire identity on personal privacy and respect. Someone is building the next generation of competing products that offer privacy as a priority feature. I would cite Apple as a potential candidate in this pack with some caveats and unknowns...

Trust is a tricky thing to establish and virtually impossible to regain. For me, it's not hard to initially gain my trust if the intent is clear. If I feel the vendor of my home security product is actually trying to use the best techniques, encryption schemes, etc. to protect me, I will be much more likely to trust the solution. If I see buzzwordy bullshit on the box or get a whiff of negative experience or intent from other users (whom I trust), you are immediately starting out with -10 to charisma. Good luck getting out of that hole.

Re:Ring Doorbell App Packed with Third-Party Trackers by kjs3 on Tuesday January 28, 2020 @10:51PM (#22177197)
I'm not so sure.

I'm sure.

My daughters generation isn't fazed in the least by being bombarded by ads, and I've even heard some of her friends express (paraphrased) "why worry...everyone has something embarrassing on the Net".

Ring is (apparently) wildly popular. I know dozens of houses in my neighborhood who have installed it, and many of them think the privacy invading parts are, at worst, a 'necessary evil', and some folks think the parts like "open access for LEA" are awesome. I've only talked to perhaps 2 homes where they were "I'm not comfortable with that".

Trust is a tricky thing to establish and virtually impossible to regain.

I don't disagree, but I don't think 'trust' is still built on the things it used to be built on.

Re:Ring Doorbell App Packed with Third-Party Trackers by tomc1985 on Tuesday January 28, 2020 @08:00PM (#22176048)
There's an entire generation that's growing up with "why bother with privacy I've already lost it". They're comfortable living their lives out in the open and prefer convenience

Just look at the popularity of streaming models, "I know Facebook listens to my conversations but what can I do?" type conversations, the prevalence of porn games on Steam (which broadcasts what you're currently playing to friends and anyone who looks at your profile), and the popularity of porn tube sites

Re:Ring Doorbell App Packed with Third-Party Trackers by derefr on Tuesday January 28, 2020 @09:25PM (#22176591)
This is the same generation that coined the term "side-piece phone", no? I don't think they're living their lives in public; I think they're just getting better at compartmentalizing their identity. Kids don't care if Facebook sees everything they post on Facebook, because they would only use Facebook for the kinds of things everyone should see. Other stuff goes on Snapchat.
Re:Ring Doorbell App Packed with Third-Party Trackers by tomc1985 on Tuesday January 28, 2020 @10:16PM (#22176966)
"Side-piece" as a concept has existed for a while. I don't think coining that term has any meaning; people have been compartmentalizing their dalliances since the dawn of time
Re:Ring Doorbell App Packed with Third-Party Trackers by mmcclure on Tuesday January 28, 2020 @11:15PM (#22177377)
I'm not so sure I'd be so quick to dismiss the differences here. Another example is the notion of having a "finsta" vs their normal Instagram. The finsta is a private Instagram they only show to real friends, while their normal Instagram account is for the world.

This isn't merely "compartmentalizing their dalliances," it's compartmentalization of public vs private (or at least quasi-private) self.

Re:Ring Doorbell App Packed with Third-Party Trackers by chiefalchemist on Tuesday January 28, 2020 @08:14PM (#22176138)
Yes. Generational trends are like a pendulum. They swing. This year's "We don't care" is next year's "No way man." The safest route is respecting privacy. A reputation as a violator won't be easy to shake.
Re:Ring Doorbell App Packed with Third-Party Trackers by woutr_be on Tuesday January 28, 2020 @11:27PM (#22177446)
> There's an entire generation that's growing up with "why bother with privacy I've already lost it". They're comfortable living their lives out in the open and prefer convenience

I really don't think that's a fair assessment. Yes, people are comfortable living their lives in the open, and people do prefer convenience, but is that really because they don't care about privacy? Or is it more because we have all the abilities to do this?

If you grew up before that ability, did you really have all that privacy? Or did you only have it because of the lack of technology, and not by choice.

> the prevalence of porn games on Steam (which broadcasts what you're currently playing to friends and anyone who looks at your profile), and the popularity of porn tube sites

What does this has to do with privacy? Maybe the current generation is just more open about the fact that they look at porn, or play some porn game. It's really not a taboo subject anymore, we all know everyone does it, so why hide it?

Re:Ring Doorbell App Packed with Third-Party Trackers by flukus on Tuesday January 28, 2020 @07:57PM (#22176030)
I'm not sure it counts as positive progress, it's a positive regression to what was normal 20 years ago and as such requires little to no problem solving.

The bigger challenge is making people care, they don't understand how their private information gets weaponized against them, usually to manipulate them to spend more.

Re:Ring Doorbell App Packed with Third-Party Trackers by tjoff on Tuesday January 28, 2020 @06:49PM (#22175503)
Until the industry realizes that the data was worthless all along.
Re:Ring Doorbell App Packed with Third-Party Trackers by judge2020 on Tuesday January 28, 2020 @07:02PM (#22175604)
Crashlytics/sentry is quite useful for tracking the impact a particular error has on your overall userbase. As for the other trackers, I haven't found statistics other than DAUs/MAUs useful (and these can almost always be tracked via server-side analytics).
Re:Ring Doorbell App Packed with Third-Party Trackers by derefr on Tuesday January 28, 2020 @09:27PM (#22176609)
The Hard Problem in analytics is getting data that lets you tell real users apart from bots, when bots are motivated to present themselves as real users. Usually can't be done purely server-side.
Re:Ring Doorbell App Packed with Third-Party Trackers by bob1029 on Tuesday January 28, 2020 @07:09PM (#22175662)
The time decay of data is something that is rarely discussed in my view. Facebook, Google, et. al. are sitting on mountains of archaeology. Why not purge it all and adapt to a new business model where you actually generate value for other market participants and, god forbid, maybe even the consumer.
Re:Ring Doorbell App Packed with Third-Party Trackers by zionic on Tuesday January 28, 2020 @04:59PM (#22174539)
Honestly what we need is an equifax-style hack at the NSA/Facebook/Google to absolutely shock people into reality about privacy.

Imagine being able to type in anyone's name and see their entire search history for the last 10 years. It would be total chaos. We'd have a constitutional amendment enforcing digital privacy within a few months.

Re:Ring Doorbell App Packed with Third-Party Trackers by A4ET8a8uTh0 on Tuesday January 28, 2020 @07:39PM (#22175902)
While I laud the call to be optimistic, Equifax debacle taught us that people can be desentized to seemingly constant stream of news about breaches. And that one breach actually affected people's money.. something sacred in US.

I am honestly not sure what would have to happen. Cynical part of me thinks a powerful senator needs to be seriously compromised, exposed and then, if he/she retains power, things might change a little.

Another option is to attempt to run yourself and be the change you want to see, but I have charisma of a wet blanket so it is not an option for me.

Re:Ring Doorbell App Packed with Third-Party Trackers by derefr on Tuesday January 28, 2020 @09:29PM (#22176636)
> Equifax debacle taught us that people can be desentized to seemingly constant stream of news about breaches.

Well, sure, because "a breach" isn't anything scary in-and-of-itself, it's just the possibility of something scary.

If tons of people were suddenly victims of credit-card fraud or identity fraud due to the breaches, I don't think that would have been desensitizing in the same way, because that's a real consequence, not just the possibility of one.

Re:Ring Doorbell App Packed with Third-Party Trackers by CraigJPerry on Tuesday January 28, 2020 @05:08PM (#22174637)
Equifax. The Uber God mode. Cambridge analytica.

Any one of these on its own should be enough but i'm not convinced the average person on the street could tell you what the deal was with any of these scandals.

Re:Ring Doorbell App Packed with Third-Party Trackers by incongruity on Tuesday January 28, 2020 @10:09PM (#22176920)
None of those things had meaningful impact - either at scale or in newsworthy level awful for a smaller group... without that, the story wasn’t sticky and didn’t scare the masses.

E.g.: When a wave of echo users are blackmailed after their private conversations or sexcapades are snooped on, then you’d see outcry.

Re:Ring Doorbell App Packed with Third-Party Trackers by als0 on Tuesday January 28, 2020 @05:06PM (#22174613)
I want to believe you but it seems that no matter what happens to Facebook they seem to consistently emerge unscathed.
Re:Ring Doorbell App Packed with Third-Party Trackers by hanniabu on Tuesday January 28, 2020 @06:54PM (#22175538)
Equifax was already pretty bad. After that, I imagine there's nothing that can happen to get things to change, even what you're stating. It will be a big deal for a week or two, then completely blow over.

The only way something even as bad as what you stated will cause a change is if it affects politicians directly and they have personal messages and DM's with back-door dealings revealed that make them look bad. Sadly this is typically the only way things get done now is if there's some personal vested interest in the lawmaker.

Re:Ring Doorbell App Packed with Third-Party Trackers by jason0597 on Tuesday January 28, 2020 @05:28PM (#22174793)
I'm already thinking of doing any "sensitive" searches (i.e. stuff i would rather google not know, e.g. my mental health state) on google through chrome's incognito mode, but then I think about it more and I realise that if I do a search on incognito mode, the browser probably knows and marks it as an extra special search and hence becomes even more "sensitive" (and reports back to Google)
Re:Ring Doorbell App Packed with Third-Party Trackers by eternalny1 on Tuesday January 28, 2020 @06:36PM (#22175392)
Tor browser.

Incognito mode does literally nothing. You're still doing your Google search from the same IP address so they still know it's you and store it the same as anything else.

Re:Ring Doorbell App Packed with Third-Party Trackers by panarky on Tuesday January 28, 2020 @05:48PM (#22174970)
Why fear super secret conspiracies like this? What we already know for a fact is horrible enough.
Re:Ring Doorbell App Packed with Third-Party Trackers by kdtsh on Tuesday January 28, 2020 @05:53PM (#22175021)
If you’re worried about Google knowing, you shouldn’t use Google’s browser. While they might not mark searches like that, we don’t know what Chrome does when we tell it to search for something we’re sensitive about.
Re:Ring Doorbell App Packed with Third-Party Trackers by buckminster on Tuesday January 28, 2020 @06:50PM (#22175511)
If you’re worried about Google knowing, you shouldn’t use Google’s search engine!
Re:Ring Doorbell App Packed with Third-Party Trackers by gsich on Tuesday January 28, 2020 @06:18PM (#22175253)
Same IP increases the likelihood of being the same user tremendously.
Re:Ring Doorbell App Packed with Third-Party Trackers by SlowRobotAhead on Tuesday January 28, 2020 @09:34PM (#22176670)
> Imagine being able to type in anyone's name and see their entire search history for the last 10 years. It would be total chaos.

South Park plot, Danish Trolls

Re:Ring Doorbell App Packed with Third-Party Trackers by digitalsushi on Wednesday January 29, 2020 @02:42PM (#22184940)
I wish someone would make a router with a subscription service for blocking these connections that in no way benefit me. Throw a nice cpu in the router, make it L7. Charge me 5 bucks a month, I'll pay it so long as you never once challenge my trust in you, future router OS provider.

I can't manage this per device. Some, I don't want to, and most, I can't. Let's move the bandaid from the fingers to the wrist. Sell me a privacy aware router that sends 30% of my packets to 0.0.0.0.

Yes, yes it will be another page from the arm's race. Yes, websites will stop rendering content for not letting the tracking get through. I don't care, I live a year at a time and that is how this race is run. We won't win it, but we can die before we finish.

Re:Ring Doorbell App Packed with Third-Party Trackers by Night_Thastus on Wednesday January 29, 2020 @03:07PM (#22185209)
This is the purpose of something like PiHole.

While an ad-blocker will only work on devices that can install one, a PiHole will drop traffic you don't want regardless of the device requesting it.

Very useful, and no subscription needed.

Is that not sufficient for what you need?

Re:Ring Doorbell App Packed with Third-Party Trackers by digitalsushi on Wednesday January 29, 2020 @05:46PM (#22186814)
Forgive me, I'm not familiar with pihole's feature set; would this protect from connections not relying on the DNS at all? There is no requirement to use DNS to phone home, and it is protection from that I am interested in - at the packet forwarding level.
Re:Ring Doorbell App Packed with Third-Party Trackers by caconym_ on Tuesday January 28, 2020 @05:01PM (#22174559)
Yeah, I wish they did, but nobody gives a shit in any way that actually matters (i.e. one that might change their purchasing decisions).
Re:Ring Doorbell App Packed with Third-Party Trackers by api on Tuesday January 28, 2020 @05:32PM (#22174832)
Absolutely this... if it doesn't affect buying decisions it doesn't matter. Whining about it without changing behavior is a waste of time.

From what I've seen the most important factors in customer use and purchasing behavior are user experience, user experience, user experience, user experience, and user experience, in that order. Did I mention user experience?

I've even been a little shocked in the B2B market by how rarely corporate customers ask about privacy or security. Only the most seriously security-conscious customers have ever asked my company about e.g. what kind of crypto we use, and these are people dealing with financial or national security data. Everyone else seems to not even care.

Re:Ring Doorbell App Packed with Third-Party Trackers by sixothree on Wednesday January 29, 2020 @09:41AM (#22180957)
No they do. They just don't know it until it happens to them. I have a perfect example.

Someone on reddit was making a statement about how they didn't care that X product was secure. So I entered their username into one of these reddit user analyzers. After I asked them how their dog was enjoying the weather in (wherever they were), they promptly deleted those messages and their account.

Re:Ring Doorbell App Packed with Third-Party Trackers by inamesh on Tuesday January 28, 2020 @09:17PM (#22176533)
I don't think the tide has turned yet. It's slowly turning, but it will take a couple of years and some more major incidents.

When people are willing to pay more for privacy focused products, then we'll know that the tide has turned.

Re:Ring Doorbell App Packed with Third-Party Trackers by guug on Tuesday January 28, 2020 @09:34PM (#22176675)
> When people are willing to pay more for privacy focused products, then we'll know that the tide has turned.

Or when politicians realize that people care and start including stricter laws as part of their electoral campaigns. Privacy shouldn't have to come at a cost.

Re:Ring Doorbell App Packed with Third-Party Trackers by sailfast on Tuesday January 28, 2020 @11:10PM (#22177333)
Or when this data is used against a politician in a campaign, so they start caring.
Re:Ring Doorbell App Packed with Third-Party Trackers by dumbfoundded on Tuesday January 28, 2020 @09:30PM (#22176642)
I don't think a few incidents would turn the tide over. Literally all of every American's personal information is out there. It's really just a question of targeting.

Decentralization seems like the only good outcome for privacy but it seems unlikely. Privacy has a monetary value and the simple fact is that most people are willing to trade it for very little.

The move for decentralization seems dwindling but I have hope. If companies become the target of sophisticated cyber attacks, there will emerge an economic opportunity for decentralization.

Re:Ring Doorbell App Packed with Third-Party Trackers by ryanmarsh on Tuesday January 28, 2020 @05:20PM (#22174728)
the tide is turning on all this “tracking” nonsense

It absolutely is not. There is no evidence of this. Also, why do I keep seeing privacy stories about only one of the video doorbell vendors?

Re:Ring Doorbell App Packed with Third-Party Trackers by jmccorm on Tuesday January 28, 2020 @08:33PM (#22176268)
It’s easy to say that nothing has changed. I know that I felt that something was changing when Verizon (of all companies) created and publicized a new privacy-focused search engine.

You can argue how successful their privacy-first search engine is or isn’t going to be. But I think this is yet more evidence that the pendulum of privacy is starting to swing back in the opposite direction.

This is the beginning of change.

Re:Ring Doorbell App Packed with Third-Party Trackers by SlowRobotAhead on Tuesday January 28, 2020 @09:31PM (#22176651)
> Privacy is the new black.

My internet connected device (not factory IoT) goes through extensive lengths to not ask for a password or ask the user to make an account or provide any data outside exactly what I need to do the job. It’s a lot more work.

Re:Ring Doorbell App Packed with Third-Party Trackers by onetimemanytime on Wednesday January 29, 2020 @04:27AM (#22178816)
Nah, worst case, they'll settle for half of tracking they have now...and then keep adding them one by one. Rinse, repeat. Too much money to be made.
Re:Ring Doorbell App Packed with Third-Party Trackers by brown9-2 on Tuesday January 28, 2020 @06:21PM (#22175280)
What data shows that this is influencing consumer decisions?
Re:Ring Doorbell App Packed with Third-Party Trackers by Sophistifunk on Tuesday January 28, 2020 @07:27PM (#22175795)
You're dreaming, mate. I'm dreaming too, that's a world I'd rather live in, but this will go away as soon as the media remembers that surveillance is how they pay the rent and replaces all these stories with more pro/anti Trump garbage.
Re:Ring Doorbell App Packed with Third-Party Trackers by MadWombat on Tuesday January 28, 2020 @04:38PM (#22174324)
How is the view from your ivory tower? Most consumers don't care and are not even aware of these issues.
Re:Ring Doorbell App Packed with Third-Party Trackers by novok on Tuesday January 28, 2020 @04:54PM (#22174482)
It's more of a 'too complex to understand' issue than a care issue. If you spelled out what these trackers really track, a lot of people wouldn't be comfortable with it. Since it's tracking is hidden, people are not worried about what they are not aware of.
Re:Ring Doorbell App Packed with Third-Party Trackers by smallgovt on Tuesday January 28, 2020 @05:15PM (#22174696)
I disagree. I think most people just want to view cat memes and connect with their friends online. If the cost of that is their privacy, so be it.

At the end of the day, I think privacy loss will have to have a materially negative impact on people's lives before they start to care enough to change their behavior. Right now, the only material negative impact requires what I would characterize as fear mongering.

Re:Ring Doorbell App Packed with Third-Party Trackers by AmericanChopper on Tuesday January 28, 2020 @05:50PM (#22174998)
Reminds me of that video where Jamie Oliver showed a group of kids the rather disgusting process for making chicken nuggets, and all the children were appropriately disgusted, but when he asked the kids afterwards who wanted to eat some of the chicken nuggets, they all wanted to eat the nuggets.
[dead]
Re:Ring Doorbell App Packed with Third-Party Trackers by flukus on Tuesday January 28, 2020 @07:50PM (#22175980)
It's not just about someone seeing your information, it's that it's being weaponized against you, usually to make you spend more money than you otherwise would have. Advertisers aren't charities, they expect a return on their investment.
Re:Ring Doorbell App Packed with Third-Party Trackers by time0ut on Tuesday January 28, 2020 @05:53PM (#22175027)
I think the average person cares a lot about privacy, but simply don't know about all the ways their privacy can be violated.

Anyone can be hurt by a data breach. Look at those exposed in the Ashley Madison breach.

Re:Ring Doorbell App Packed with Third-Party Trackers by qroshan on Tuesday January 28, 2020 @06:48PM (#22175498)
Actually not much happened to people who got exposed in the Ashley Madison breach, or Equifax or Facebook or Target..

This is just manufactured outrage and fear-mongering.

The biggest threat to humans are still social phishing and social scams, which has led to 1000x financial loses and other reputation loses.

Re:Ring Doorbell App Packed with Third-Party Trackers by clSTophEjUdRanu on Tuesday January 28, 2020 @05:00PM (#22174557)
This industry is poised to be regulated. Reap rewards while you can.