Live data from Hacker News

Facebook was in talks with hospitals about a proposal to share data

cnbc.com

31–40 of 120 posts

Re: Facebook was in talks with hospitals about a proposal to share data

#31
after facebook now exposed truth off After a broadened activity of more than 10 months, these programmers have gotten to the private data of the apparent ISIS sympathizers that incorporates the photograph, name, email ID,MAC address etc. Kislay Chaudhary, cyber security expert and chairman of Indian Cyber Army said Despite having concrete information about the ISIS sympathizers or other terror supporters, the government or the intelligence agencies do not pay a heed to it. Instead of conducting a primary investigation, the motive and patriotism of the hackers are questioned, Full news :- Kislay Chaudhary Ft. in India today on Exposed Nasty Truth About ISIS Supporters. https://www.ica.in/newsroom/indian-cyber-army-in-india-today...

Re: Facebook was in talks with hospitals about a proposal to share data

#32
post #21
post #6

The pile on continues... (1) This is probably a project by a small "research" group at Facebook. The goal of that group is probably to publish papers in a Psych journal or something like that about how they were able to correlate anonymized medical data with Facebook feed updates. Tech companies have these research groups for prestige, they are not central to the company mission. (2) According to the article, the pro…

It sounds to me like the researcher wanted to use this data to identify at-risk groups and get them preventive care. I don't mean "identify" as in, de-anonymize them, but to use data to figure who may need help (or advertised to -- same difference really). This actually sounds like a good idea if that's the purpose. It's not any different than retailers identifying cohorts they can sell to. It also sounds very simila…

Although I agree that it’s a non issue, it is a big deal to identify patients against their permission. It’s also illegal.

Re: Facebook was in talks with hospitals about a proposal to share data

#33
post #21
post #6

The pile on continues... (1) This is probably a project by a small "research" group at Facebook. The goal of that group is probably to publish papers in a Psych journal or something like that about how they were able to correlate anonymized medical data with Facebook feed updates. Tech companies have these research groups for prestige, they are not central to the company mission. (2) According to the article, the pro…

It sounds to me like the researcher wanted to use this data to identify at-risk groups and get them preventive care. I don't mean "identify" as in, de-anonymize them, but to use data to figure who may need help (or advertised to -- same difference really). This actually sounds like a good idea if that's the purpose. It's not any different than retailers identifying cohorts they can sell to. It also sounds very simila…

Sure, all I see is that insurance companies will be the ones with the most to gain (economically) from this information, and thus the ones that will pay the most for it.

Re: Facebook was in talks with hospitals about a proposal to share data

#34
post #6

The pile on continues... (1) This is probably a project by a small "research" group at Facebook. The goal of that group is probably to publish papers in a Psych journal or something like that about how they were able to correlate anonymized medical data with Facebook feed updates. Tech companies have these research groups for prestige, they are not central to the company mission. (2) According to the article, the pro…

> (2) According to the article, the project was never actually started. So it sounds like a bit of a non-story.

According to the article the reason for why it was never actually started was because of the "Cambridge Analytica data leak scandal". Very important distinction.

Re: Facebook was in talks with hospitals about a proposal to share data

#35
post #6

The pile on continues... (1) This is probably a project by a small "research" group at Facebook. The goal of that group is probably to publish papers in a Psych journal or something like that about how they were able to correlate anonymized medical data with Facebook feed updates. Tech companies have these research groups for prestige, they are not central to the company mission. (2) According to the article, the pro…

> (2) According to the article, the project was never actually started. So it sounds like a bit of a non-story.

I don't think it's a non-story.

At least for me it reinforces my reading of this company's attitude and hangling of their user's (and the population's) privacy.

It's a datapoint. It's not everything, but it's not nothing either.

Re: Facebook was in talks with hospitals about a proposal to share data

#37
post #30

> Facebook proposed using a common computer science technique called "hashing" to match individuals who existed in both sets But Facebook has the source data from which hashes were generated so they can alway reverse them. Furthermore, if you take a hash from name and surname, it can be easily reversed because the set of names and surnames is relatively small.

Not if you use salt.

Even if you salt the hashes.

The problem is that the number of inputs is limited and it's trivial to enumerate over the input values. Let's take a contrived example: We have the data of a small, entirely made-up island where only two families live, so we have two surnames. Let's name them Foo and Bar. Now, they have an entirely funny tradition, they all get first names based on the order in which they were born (1). So we have Firstborn, Secondborn. Let's also, for simplicity assume that each couple gets exactly two children. That gives us the following 4 possible combinations of names:

    Firstborn Foo
    Firstborn Bar
    Secondborn Foo
    Secondborn Bar
Let's assume that there are 10 million of those people and we hash their names with a salt, that gives us 10 million unique hashes. But to break each hash, we only need to try at most 4 times, that's 40 million tries. Hashing speed varies from hash to hash and the hardware, but good old md5 easily achieved a few million hashes per second on a stock CPU in 2012. GPUs are usually around two orders of magnitude faster (2). So in the worst case, your desktop PC could break all those 40 million hashes in a few seconds without breaking a sweat. Better hashes are slower, but with such a limited input space, even the best hashes are breakable.

So no, salt's won't save you here.

(1) This is not entirely fictitious: https://nowiknow.com/wayan-balik/

(2) See for example the hashcat benchmarks http://thepasswordproject.com/oclhashcat_benchmarking and https://blog.codinghorror.com/speed-hashing/

Re: Facebook was in talks with hospitals about a proposal to share data

#38
post #36

Can we just put a pause on all the Facebook stories for a while? Lots of fluff pieces with no real content making it to the homepage from outlets that are banking off the current outrage.

I actually like it, it's been brewing for a while and for once news are keeping a story for more than 3 days. I get tired constantly changing topics and shifting focus. And of course, media has a huge revenge to get to facebook from facebook algos deciding which ones to promote and which not and to whom.

Re: Facebook was in talks with hospitals about a proposal to share data

#39

Earlier quoted context omitted.

I dislike/disagree with facebook more than most folks, but even I can smell a dead horse being beaten.

For years privacy-minded people have complained about the lack of recognition of privacy issues among the masses. Suddenly, story after story about aspects of Facebook's anti-privacy practices are being read by the public. This will lead to more stories about other data mining entities as well. The more this keeps up, the more concrete privacy issues will be in the minds of many. And yet, HN is full of dismissals. I'…

> Given that you are not the target audience of these stories

Isn't that an argument for not having HN filled with these articles?

Post reply on HN