31–40 of 302 posts
Earlier quoted context omitted.
Isn't Google doing the same thing to people who email Gmail users?
One small difference is that the activity on GMail or large email providers is generally two-way and it becomes clear when you understand that clicking "Send" sends your mail away to be stored in GMail forever unlike where photos somebody would be taking with their friends are not aware if it is put in Facebook or similar social places.
The bigger problem for me is how facebook tracks and identifies even people who do not have a facebook account. They simply infer such a person exists from photograps, contacts and other one sided activity and can start to track that person, tie all this information together and then target them with ads even though they never signed up for Facebook. Such shadow profiles are a much larger problem to me than people wh…
Isn't Google doing the same thing to people who email Gmail users?
If I write "Leroy Jenkins likes rushing" in an email, does Google create a persona called Leroy Jenkins, assigns a quality "likes rushing" to it and tries to match it to other data?
I always heard that user data is firewalled by default inside Google (PII data from one user isn't used on other users, unless explicitly shared).
Even on Photos Google seems to only allow you to appear as a suggestion on your contact's photos after you explicitly opt-in and explicitly selecting "which one is your face":
https://9to5google.com/2017/05/25/google-photos-suggested-sh...
Earlier quoted context omitted.
You could simply enumerate all 32 bits and end up with each and every IP reversed so that trick doesn't really hold water. No need for rainbow tables, the search space is small enough to brute force.
Enumeration through 32 bits of bcrypt doesn't sound that feasible to me. Given a GPU farm however I'm sure it might be feasible. However at that point surely you just add a salt?
How would that work? You'd have to use the same salt for every IP (which completely negates any benefit of the salt), otherwise how do you know that bcrypt(salt_1, IP_1), which you stored in your database yesterday, refers to the same IP as bcrypt(salt_2, IP_1) that you stored a month ago?
TL;DR: There's no meat in this article, just fluff.
Earlier quoted context omitted.
One small difference is that the activity on GMail or large email providers is generally two-way and it becomes clear when you understand that clicking "Send" sends your mail away to be stored in GMail forever unlike where photos somebody would be taking with their friends are not aware if it is put in Facebook or similar social places.
That isn't true. Many domains are routed through Gmail where you have absolutely no way of knowing up front that you are going to be sending that mail through Google. It looks like any other email address on a private server. https://gsuite.google.com/signup/basic/welcome
https://support.google.com/googlecloud/answer/6056650
> Does Google use my organization’s data in G Suite services or Cloud Platform for advertising purposes?
> No. There are no ads in G Suite Services or Google Cloud Platform, and we have no plans to change this in the future. We do not scan for advertising purposes in Gmail or other G Suite services. Google does not collect or use data in G Suite services for advertising purposes.
Earlier quoted context omitted.
Mentioned shadow profiles and some other of their shady practices to an acquaintance recently, he uses fb and wanted to stay in touch using it. He chose not to listen to my critique of fb calling me a "tinfoil hat" (whatever that even means).
I have acquaintances like that as well. They are usually the "I have nothing to hide" kind of type. :(
Earlier quoted context omitted.
An easy disarm is "You are confusing privacy with secrecy. It is no secret what happens in the bathroom. It doesn't mean we are going to remove the doors because people still want privacy"
That's a great line, I'll be sure to pull it out on Thanksgiving this year and see how it goes.
The phone automatically connected the mail address to my Google account and now every time I call him the (anonymous) picture of my Google profile shows up on his phone. Which I guess means that Google now also connected that phone number to the mail address/Google account.
Tbh that's really offputting: You can be as careful as you want and it will still be all for naught because friends&family just end up leaking your details everywhere without even noticing it.
Earlier quoted context omitted.
That isn't true. Many domains are routed through Gmail where you have absolutely no way of knowing up front that you are going to be sending that mail through Google. It looks like any other email address on a private server. https://gsuite.google.com/signup/basic/welcome
G Suite has different privacy practices than GMail. https://support.google.com/googlecloud/answer/6056650 > Does Google use my organization’s data in G Suite services or Cloud Platform for advertising purposes? > No. There are no ads in G Suite Services or Google Cloud Platform, and we have no plans to change this in the future. We do not scan for advertising purposes in Gmail or other G Suite services. Google does n…
You could drive several trucks sideways through the holes in that statement.
Google does some pretty scary stuff too. I made a point of never giving them my mobile number or any "real information" about me. When a friend of mine added me to his contacts, on his Android phone, he also added one of email addresses to the contact, which is the same one I used to register my Google account. The phone automatically connected the mail address to my Google account and now every time I call him the (…