News for hackers. Stuff that matters.
Re:Thoughts on Google+: I fucked up. So has Google by chestnut-tree on Saturday November 29, 2014 @08:06AM (#8673661)
This article fills me with horror. I completely disagree with the ideas about privacy. I don't want companies to track me. I don't want a single digital identity. I don't want a future where online tracking is an unquestioned norm.

We need to be more critical of companies that track us. We should be scrutinising their practices more closely, and yet the author asks us to drop our objections and consider the benefits of tracking. These companies aren't open about their data collection practices, so why should we be more open or trustworthy towards them? The information they collect about us gives them far, far more than just an advertising profile about our likes and interests, but they're not going to mention that are they?

Let's consider Google for example. If you have a Google account, Google has your name, date-of-birth, gender, and (possibly) mobile phone number. Couple that with the searches and sites you visit and that is some very personal and private information about you.

Yet, in their privacy policy [1], Google fails to mention:

- whether the data they collect about you is anonymised (and what they anonymise)

- how long they keep your data for

- whether the data they collect about you is disasscociated from your identity. This is important when you consider how personal and revealing your online activity can be when it's tied to your identity.

- who sees your data at Google. GMail automates scanning of your emails. Does this hold true for all the other data they hold about you? After all, your activity across the web is arguably just as personal and private.

Why does Google not provide this information in their privacy policy? Why are people ok with this? I challenge anyone to explain why, if you were collecting personal information from your users, you would purposely omit the information above from your privacy policy.

Google seems to view privacy in one dimension only: security. Yes, you can't have privacy without security, but security does not equal privacy.

Let's not forget that Google can track you across smartphones, tablets, and laptops. Their tracking reach now even extends to school kids with the introduction of Google Classroom. They are collecting an absolutely gargantuan volume of data.

WAKE UP! shouts Chris Messina in his article. Yes, let's wake up and stop giving these companies a free pass when it comes to matters of privacy and data collection.

[1] https://www.google.co.uk/intl/en/policies/privacy/

Re:Thoughts on Google+: I fucked up. So has Google by chrismessina on Saturday November 29, 2014 @04:13PM (#8675110)
Hmm, you clearly didn't catch my drift, which I'll accept blame for — my piece rambles on a bit uncontrollably.

My point was to rethink privacy from the perspective of what we as individuals stand to gain by gathering this data. I then asked: who would you trust to gather and store this information, on your behalf? For most people, they wouldn't be able to answer that question — for others, especially technologically privileged individuals / open source libertarians — the answer would be "myself".

Aside from logging in with your username and password, you have few if any opportunities when using apps today to stream your data exhaust into a data vault of your choosing. Rare is the app maker that allows you to export a dump of your data, rarer still is one that openly shares the data it has about you with you.

Curiously, Facebook actually a lot of functionality in this regard through its App Settings page (https://www.facebook.com/settings?tab=applications). Google Takeout (https://www.google.com/settings/takeout) provides a lot of your data for export, but no one seems to have really built any tools for the individual to take advantage of this trove of information for personal benefit.

What I hear you arguing for is the end of user tracking. Indeed, there are plenty of tools that you can outfit yourself with to that end (Tor, Ghostery, Adblock, Do-not-track, Incognito Mode, and many more). But ultimately you as representative of a class of internet consumer are an outlier. There are for more people on the internet and in the world who unknowingly consent to data collection and then have little upside in the collection of that data. It is those people that Google cares the most about as customers (perhaps in addition to advertisers), and those who are most in the dark about "the privacy boogey man" about which you know plenty, but about which they know nothing but confusion and fear.

My question is how we enfranchise those individuals with the choice — either to not be tracked, be tracked by a party of their choosing, or to somehow do it for themselves so that they reap some of the gains of the data capital they are producing.

Re:Thoughts on Google+: I fucked up. So has Google by chestnut-tree on Sunday November 30, 2014 @07:43AM (#8676699)
Thanks for responding.

I can see the value of interrogating your personal analytics. I guess how valuable that is depends on how much activity and content you have invested in these online services. And of course, some companies, as you say, would love for their online services to be your principal digital identity. (Which raises another question: do people want a single digital identity? Or do they prefer multiple, unconnected identities? Or even a single identity that isn't joined up with everthing they do online?)

"My question is how we enfranchise those individuals with the choice..."

A good question and I agree. For me, it's also about giving users the information to understand the implications of making that choice. This is particularly important (in my view) when your personal data is involved. That's one reason why I'm critical of Google. Privacy is important to me and they omit basic and (in my view) essential information about privacy in their privacy policy. This makes the privacy implications of using their services unclear. (And, yes, I realise this all comes down to levels of trust, the interpretation of privacy, the value of the service provided, and how much importance someone ascribes to privacy in the first place.)

Re:Thoughts on Google+: I fucked up. So has Google by aiiane on Sunday November 30, 2014 @01:08PM (#8677493)
> Why does Google not provide this information in their privacy policy?

Most likely because they prefer the policy to stay at a length that it's feasible to read. Unlike the questions which are answered there, which put upper limits on things, the questions you've listed are ones that would require significantly more detailed answers to have any value, since the answer will often vary across products and circumstances, and there are a lot of Google products (not to mention even more circumstances).

Re:Thoughts on Google+: I fucked up. So has Google by chestnut-tree on Sunday November 30, 2014 @05:06PM (#8678310)
"Most likely because they prefer the policy to stay at a length that it's feasible to read"

I don't see how telling users how long you retain their data (to take one example) is going to lengthen a privacy policy very much. But even if it does, it's poor practice to omit important privacy information just to keep a privacy policy a certain length. One could argue that the sheer length of a privacy policy is an indication of just how much data a company collects. (The less data they collect, the less they have to say in their privacy policy.)