News for hackers. Stuff that matters.
Re:Tim Hortons app violated laws in collection of ‘vast amou... by paulmd on Wednesday June 01, 2022 @06:21PM (#31588884)
Is there a simple way to buy this information for yourself? I've always been curious what information is out there on me.
Re:Tim Hortons app violated laws in collection of ‘vast amou... by soared on Wednesday June 01, 2022 @06:30PM (#31588972)
This info is anonymized and barring extreme measures you can’t be identified individually in a data set. It’s sold with very specific usage rights, and for advertising uses a cpm (cost per thousand) fee. You can’t ever buy the data set, but just the ability to target users who exist in it.

For example Visa has an exclusive deal with oracle. So only oracle can buy audiences with visa data, and visa has super strict requirements and only builds them in house. If you say “I want users who purchased x product” the size must be 5mm users minimum (I think) and visa models it up using lookalikes/etc to 20mm+ users (maybe slightly off on sizes). Then it’s like $4 cpm to use at a dsp. Brands/agencies etc have to go through oracle to get visa data.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by com2kid on Thursday June 02, 2022 @12:48AM (#31591442)
> This info is anonymized and barring extreme measures you can’t be identified individually in a data set. It’s sold with very specific usage rights, and for advertising uses a cpm (cost per thousand) fee. You can’t ever buy the data set, but just the ability to target users who exist in it.

I attended a presentation some years back from TMobiles marketing team.

According to the speaker, when you visit their homepage they pull up complete financial records on you, including how much your home mortgage is, if any, and use that to customize what products you see promoted first.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by soared on Thursday June 02, 2022 @09:55AM (#31594926)
As far as I’m aware (and I’d hope I’m up to date here) that’s only possible if you’ve logged in to your account, so they’d have your name/etc.

Matching a cookie to individual names is not instantaneous and would be very expensive for someone at t mobile’s scale to do every time a session started.

Some b2b companies do something similar where they can match your ip to a list of known corporate ips to find where you work in real-time, but that’s pretty expensive.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by chevman on Wednesday June 01, 2022 @10:25PM (#31590580)
Um, you can buy this data and get access to the raw, individual records no problem.

Here's one example - http://www.dev.kbmg.com/services-solutions/data/data-solutio...

I've seen this, and many other similar data sets. You can easily look up yourself, your friends, etc.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by soared on Thursday June 02, 2022 @09:52AM (#31594901)
You’re misunderstanding that page, you 100% cannot buy raw data and get individual records that contain personally identifiable information.
Re:Tim Hortons app violated laws in collection of ‘vast amou... by chevman on Thursday June 02, 2022 @09:27PM (#31603105)
Im not sure how much more clear I can be.

The example I linked, Amerilink data set, I have a copy of (via my company), sitting on our internal corp NAS drive, and it is 100% raw data with PII. Can query on name, mailing address, DOB, etc. We have an unrestricted license that we pay a good chunk for annually.

1,000+ attributes on every US consumer.

Re:Tim Hortons app violated laws in collection of ‘vast amou... by cmg on Wednesday June 01, 2022 @08:12PM (#31589771)
To buy the information that's been stored about you specifically? Probably not. But in general:

https://www.vice.com/en/article/m7vzjb/location-data-abortio...

> SafeGraph calls the location data product “Patterns.” In total, the data cost just over $160. Not all Planned Parenthood locations offer abortion services. But Motherboard verified that some facilities included in the purchased dataset do.

> SafeGraph’s data is aggregated, meaning it isn’t explicitly specifying where a certain device moved to. Instead, it focuses on the movements of groups of devices. But researchers have repeatedly warned about the possibilities of unmasking individuals[0] contained in allegedly anonymized datasets.

And related to [0]: https://www.nytimes.com/interactive/2018/12/10/business/loca...

[0] https://www.nature.com/articles/srep01376