News for hackers. Stuff that matters.
Re:All the red flags in the Threads privacy policy by e63f67dd-065b on Thursday July 06, 2023 @10:02PM (#36626056)
In my opinion, all the people complaining about privacy policies are barking up the wrong tree. As the saying goes in business, if you have to read the contract, you're already screwed.

The reality is that the privacy policy will almost never be a determining factor in whether somebody will use a service. The Facebook haters on HN were never gonna use a Facebook product anyways, regardless of what the policy said, and the same goes for the people that are happily using threads now. Does the privacy absolutist who refuses to do anything outside of a VM behind Tor exist? Of course, but not in any meaningful amount for it to matter.

The people closely reading terms of services and opting out of arbitration provisions or whatever are wasting their times with busywork. It's doing work that feels meaningful and feels like giving it to the man without actually accomplishing much of anything.

Re:All the red flags in the Threads privacy policy by timmytokyo on Thursday July 06, 2023 @10:51PM (#36626477)
Why should a social media app have access to the health data stored inside your phone? Why should we not be demanding laws to make this illegal?
Re:All the red flags in the Threads privacy policy by e63f67dd-065b on Thursday July 06, 2023 @11:36PM (#36626783)
The simple answer is that they don't -- all the health metrics like heart rate, exercise, etc. collected by iOS and Android are both locked behind pretty stringent privacy walls. To get access you'll see (on iOS, not sure about Android) a popup asking for the app to connect to your health info, which I haven't seen happening.
Re:All the red flags in the Threads privacy policy by epistasis on Thursday July 06, 2023 @10:55PM (#36626503)
Which social media app has access to your phone's storage of health data? Certainly not the one that's the subject of this post.

Strava, a social media app for exercise, has selective access to "health" data about exercise stored on the phone, but that's the closest I can think of.

Re:All the red flags in the Threads privacy policy by brxck on Thursday July 06, 2023 @11:19PM (#36626664)
The App Store page for Threads lists “Health & Fitness” under the Analytics and App Functionality sections of App Privacy.

I am completely unfamiliar with what that implies or what access would actually be allowed, but I can see how that would raise concern.

Re:All the red flags in the Threads privacy policy by serf on Thursday July 06, 2023 @11:23PM (#36626699)
I sort of wonder about that, too -- it's not well reflected in their privacy policy.[0]

An altruistic guess -- maybe another way for them to achieve geolocation if other methods are hindered?

[0]: https://terms.threads.com/privacy-policy

Re:All the red flags in the Threads privacy policy by dylan604 on Friday July 07, 2023 @12:27AM (#36627127)
That's a huge dose of benefit of the doubt you're giving to the Zuck. Do you for a second believe that granting the Zuck access to your Health & Fitness data that he will stop at just getting the information to geolocate you or would it be more like "let's just suck in all of the data we are given access to and then maybe at a later date we can use it beyond what we originally needed"?
Re:All the red flags in the Threads privacy policy by epistasis on Friday July 07, 2023 @01:21AM (#36627525)
I have an iPhone, I can see which apps access Health & Fitness data, and must in fact explicitly give apps access to that data. Threads does not have access to that data and I can not even find some way to get it to ask me to access that data.

So what are we really talking about here?

Re:All the red flags in the Threads privacy policy by dylan604 on Friday July 07, 2023 @01:50AM (#36627717)
> So what are we really talking about here?

The very first thing in the listing for the app in the AppStore. Why are you so obtuse to this?

https://apps.apple.com/us/app/threads-an-instagram-app/id644...

DATA LINKED TO YOU The following data may be collected and linked to your identity:

Health & Fitness Purchases Financial Info Location Contact Info Contacts User Content Search History Browsing History Identifiers Usage Data Sensitive Info Diagnostics Other Data

Re:All the red flags in the Threads privacy policy by epistasis on Friday July 07, 2023 @02:06AM (#36627830)
When you read "data linked to you" don't think about the store of health data that's *on your phone.£

Think instead of all the data that all huge number of advertising networks, like the one paying qz.com's bills, that have massive hoards of data about you, without your consent, that gets bought and sold every single day.

This is not a trivial distinction! The health data on an iPhone is secure, and Threads is not getting access to it. What this is talking about is Threads linking up with all the data that all the other advertisers are already doing!

I deleted my Facebook account circa 2012 when I heard what some of their ML engineers were up to at a casual meet up, like geolocation all photos and and doing facial recognition to place which bars everyone had been in over the weekend. Back then, before the deep learning revolution, this was a mind-blowing capability. These days, I have no idea what ad networks are up to but rest assured, by getting all of HN to load the ads that are served from qz.com the advertisers have now gained far more than they did when I installed Threads (because I already have an instagram account and that does all these same things. Five years after deleting my Facebook account I was ready to give in because the rest of the networks had the data anyway).

Re:All the red flags in the Threads privacy policy by dylan604 on Friday July 07, 2023 @10:30AM (#36632294)
> Five years after deleting my Facebook account I was ready to give in

Because you became weak and caved does not mean the rest of have to give in as well. I have never created an IG account, nor will I be using Threads. I abhor Meta, and will never allow their apps to be installed on my devices. Your cavalier attitude about your data is your business, and my attitude is polar opposite. You coming in and trying to white knight the Threads listing as "nothing to see here, move along" is just this side of being a Meta shill. Some of us still have principles.

Re:All the red flags in the Threads privacy policy by epistasis on Sunday July 09, 2023 @11:28AM (#36655263)
Your attacks against me are misplaced.

If you care about privacy, then you should care about the specifics of how it is being abused so that you can defend against it. So you should care that the health data is not coming fro, your phone, it's coming from the massive databases of information that Facebook/Meta and toooooooons of other companies have on you and sell trade and swap.

If you care only should maligning Threads, then continue to obscure the threat to privacy and how the massive network of advertisers is monetizing your health data against your will. Because bringing up laws about banning apps from taking your health data from your mobile phone, which is what spawned this thread, will only detract from efforts to improve privacy, because it would do nothing to 8pm rove privacy here.

So instead of insulting me and throwing around fake "white knight" allegations, at least try to keep up with the conversation.

Re:All the red flags in the Threads privacy policy by jay_kyburz on Friday July 07, 2023 @01:53AM (#36627739)
Perhaps a feature that has not yet been turned on in the app itself yet.
Re:All the red flags in the Threads privacy policy by wahnfrieden on Friday July 07, 2023 @02:01AM (#36627798)
lol no
Re:All the red flags in the Threads privacy policy by epistasis on Thursday July 06, 2023 @11:23PM (#36626702)
Stating that this somehow means it has access to your health information is just straight up misinformation.

I don't even see an option to give it access to health information, which is tightly controlled on iOS.

Re:All the red flags in the Threads privacy policy by blairbeckwith on Thursday July 06, 2023 @11:43PM (#36626826)
Apple should really communicate more clearly what they mean in these privacy reports, because I don’t think it’s insane to interpret “The following data may be collected and linked to you: … Health & Fitness” in this way.

An incorrect interpretation, sure, but not one you have to be dumb to make.

Re:All the red flags in the Threads privacy policy by JimDabell on Friday July 07, 2023 @12:34AM (#36627186)
> Apple should really communicate more clearly what they mean in these privacy reports

This information is provided by the app developer; in this case Meta are telling Apple they use your health data and Apple is merely showing that information in the App Store.

Re:All the red flags in the Threads privacy policy by blairbeckwith on Friday July 07, 2023 @07:27AM (#36630105)
Yes; my point is that 1% of the people who see this while browsing the App Store understand enough about the HealthKit data access requirements to interpret the language that Apple chooses correctly. And Apple does choose the language here, it’s selected by Meta from a list of Apple-created options.
Re:All the red flags in the Threads privacy policy by JimDabell on Saturday July 08, 2023 @04:31AM (#36642517)
> my point is that 1% of the people who see this while browsing the App Store understand enough about the HealthKit data access requirements to interpret the language that Apple chooses correctly.

How so? There is no hidden meaning here; Facebook are simply telling Apple that they will access your health information, and Apple is passing that information along. There’s no misinterpretation. The fact that the app doesn’t currently request this information is immaterial – Facebook are saying they will. The straightforward interpretation of the privacy card is the correct one.

Re:All the red flags in the Threads privacy policy by dylan604 on Friday July 07, 2023 @12:28AM (#36627134)
Until someone provides explanation for exactly what that does mean, how is anyone to know that it is an "incorrect" interpretation?
Re:All the red flags in the Threads privacy policy by darren_ on Friday July 07, 2023 @04:05AM (#36628674)
Here's exactly what it means: Someone at Facebook, when creating the listing for the Threads app on the appstore, told Apple that the app might possibly collect Health data (etc). These labels are entirely based on self reporting by the person doing the upload. That's it, that's the entirety of what these privacy label things mean: the company making the app has made these claims about what it collects.

In this case Facebook appear to have simply ticked every possible box for data collection regardless of whether the app actually does it or not. Note you can't just get health data on iOS without asking, so people would notice if they tried. My guess is that actually figuring out what they do/don't collect was too hard, so they just said yes to everything.

Re:All the red flags in the Threads privacy policy by epistasis on Friday July 07, 2023 @01:32AM (#36627600)
Why is Apple at fault for what an ad-ridden article claims without evidence?

Seriously I could barely even find the claim you speak of, when every other sentence is punctuated by a half-screen advertisement.

Why accept the claims of such obvious click-bait without evidence? There's no reason to believe anything said in the article, particularly when it's claims can easily be checked and shown to be false.

Re:All the red flags in the Threads privacy policy by jjaken on Friday July 07, 2023 @01:43AM (#36627666)
It’s not from the article. It’s clearly stated on the app store page for Threads: https://imgur.com/a/Lk8Olb6
Re:All the red flags in the Threads privacy policy by epistasis on Friday July 07, 2023 @01:48AM (#36627708)
And yet again, this is not data that is coming from your phone's store of health data.

This is data that is linked to you, and the spamminess of the ads on qz.com is likely doing far more invasion of people's privacy than Threads could even dream of.

This comment thread was about Threads taking health data "from your phone," Which is does not do, and which that sceeenshot does not say it does.

This sort of data linking is absolutely pervasive in the web advertising industry, and it is bad. But let's not falsely say it's coming from the store of data on your phone, it's coming from advertising networks like those that pay for qz.com's hosting bills and profits.

Re:All the red flags in the Threads privacy policy by jjaken on Friday July 07, 2023 @01:58AM (#36627784)
I think the ambiguous display of these things on the store, when few other apps show this, is cause for questions and concern. Everything you just said is equally speculative.
Re:All the red flags in the Threads privacy policy by wilg on Friday July 07, 2023 @01:48AM (#36627702)
I agree. It’s technically impossible for them to get this data without OS-brokered consent. Apple’s app store privacy card is extremely misleading here, it is based on a self-assessment not what APIs the app accesses. It looks to me like Meta simply checked every box in the self assessment form.
Re:All the red flags in the Threads privacy policy by SanjayMehta on Friday July 07, 2023 @12:27AM (#36627126)
Instagram is the same and probably has been that way since inception.
Re:All the red flags in the Threads privacy policy by g5revo on Saturday July 08, 2023 @10:50AM (#36644960)
I wish iOS would give us the capability to selectively toggle these app privacy permissions on an individual/granular level.

If I want to disable all the toggles and have a non-functioning app, I’d be ok with that. At least I could selectively enable the bare minimum and then have a more deliberate decision regarding how much of my privacy I want to give away, rather than what an app developer might be hungry for (and not actually need).

Re:All the red flags in the Threads privacy policy by Barrin92 on Thursday July 06, 2023 @11:10PM (#36626594)
> a determining factor in whether somebody will use a service

Threads is currently not available in Europe because its privacy policy isn't compliant with EU law, that's literally what the article is about. We're not talking about individual choice here, or absolutists behind Tor. I don't understand what your post has to do with the topic. Clearly we have with privacy legislation at least accomplished that Meta must follow the rules or not operate here.

You're right that individual users agreeing with TOS's is meaningless, but we've been beyond that for years.

Re:All the red flags in the Threads privacy policy by jonny_eh on Thursday July 06, 2023 @11:54PM (#36626893)
That doesn’t sound right. It surely can’t be any worse than Instagram which works fine in the EU. I believe it hasn’t launched there yet because the lawyers haven’t cleared it.
Re:All the red flags in the Threads privacy policy by laserbeam on Friday July 07, 2023 @12:31AM (#36627164)
The main difference is Threads is a new product. Unlike Instagram which was released before GDPR was a thing. Sadly, it's way simpler for business to juat avoid the stringent regulated market at launch if you don't want to comply with regulations, then to actually comply.

I don't think the severity of tracking is important when comparing insta vs threads, just the inertia of an old vs new product.

Re:All the red flags in the Threads privacy policy by spaceman_2020 on Thursday July 06, 2023 @11:26PM (#36626716)
I still appreciate these pieces because they help educate people. If it dissuades even a few people from signing up for these apps, or forces another app to adopt a more private approach, all the power to them.
Re:All the red flags in the Threads privacy policy by thelock85 on Friday July 07, 2023 @01:09AM (#36627433)
This is true now, but over the long arc a paper trail of complaints lay groundwork for legal and political challenges. Historically that has been the meaningfulness of such busywork —no one cares today, but what if someone does in the future?

Now if you are saying there is no willpower to follow through over the long arc aka this fight is over and lost, then I disagree but could be wrong.

Re:All the red flags in the Threads privacy policy by renegat0x0 on Friday July 07, 2023 @01:19AM (#36627502)
Does that mean we should not anylyze programs if are user friendly, or hostile? Should we not check what hostile activities is company X doing? I read such articles and it gives me the idea what goes in mind of CEOs. This is the reason I have left Facebook. Such stories and comments have real world impact.