Surveillance on UK council websites [pdf]
1–10 of 150 posts
Re: Surveillance on UK council websites [pdf]
#2Sorry for the editorialized title but it was too long...
Re: Surveillance on UK council websites [pdf]
#3Well that's just depressing. Having the fact that you accessed a government addiction help website packaged and commoditized then sold to the highest bidder just screams moral bankruptcy.
Re: Surveillance on UK council websites [pdf]
#4It's hardly news that most of the UK government websites, either at the local or national level, report all your activity to foreign corporations, particularly google analytics.
I've raised this with the website creators through their helpdesk system, and on here when they've posted, but been either told that it's fine (they anonymise the data! We trust them!) or just ignored. It doesn't seem to sink in that giving such a company complete and unfettered access to details on how the UK public interacts with its own government might be a problem.
Re: Surveillance on UK council websites [pdf]
#5So I have read this report, but it would be good if there were some example URLs of where this is happening. Take for instance Lambeth's website (https://www.lambeth.gov.uk). I've browsed through a few public facing pages and the council tax payment pages.
The report says Lambeth shows 1 real time bidding, 1 social and 5 Google "trackers".
From my network requests I see:
-> Google Translate and its resources (CSS etc.)
-> Google Font
-> jQuery and a bunch of various modules
-> leafletjs (OSS Map library)
-> Google tag manager
-> The social links at the bottom are just links, no requests or trackers.
Note: None are blocked by PB, only cookies are denied)
Nothing out of the ordinary here (although you could argue against GTM on a council website). I'm not seeing what's at risk here? And according to the report, the above requests should be ignored in the results?
Caveat 1:
> This is not a complete study. Third party tools commonly used by websites for chat bots, designing the page, soliciting email subscription, profiling visitors for the Council’s own user data base, text to speech, CDN, fonts, non-Google analytics, etc. are not counted in this study. (See “table notes” on page 20 for a list of what is counted).
> While these do expose a user’s behaviour to the companies concerned, we exclude them here in order for simplicity.This study highlights what we view as the most dangerous third party data collection and profiling.
To compare, the landing page that this report is hosted on has the following "trackers"/requests:
-> Brave.com Analytics request that is blocked
-> Google Fonts
-> Google Tag Manager
-> Google Analytics (blocked by PB)
-> Mapbox
-> Scorecard research (blocked by PB)
-> Newrelic
-> Slideshare (blocked by PB)
-> Leaderapps
-> Tableau
-> Vimeo (cookies blocked by PB)
Edit: Sorry - PB is Privacy Badger.
As for my personal feelings, "widespread surveillance" makes it appear as though there is some sort of malicious intent here. I have a few friends (and mother) who have previously or currently work for local councils, there is no money for this sort of thing. At worst I believe any actual issues are due to ignorance (which isn't an excuse) but could be easily remedied. This is way too dramatic for what should be a "Hey ICO, these councils are potentially not doing things properly, could you have a look?". Instead you'd think Brave have uncovered a PRISM level conspiracy on the local government level.
Poor taste IMO.
Re: Surveillance on UK council websites [pdf]
#6Invisible trackers aside, it's simply gross that local government sites have banner ads on them. Have some pride and/or taste!
Re: Surveillance on UK council websites [pdf]
#7It's hardly news that most of the UK government websites, either at the local or national level, report all your activity to foreign corporations, particularly google analytics. I've raised this with the website creators through their helpdesk system, and on here when they've posted, but been either told that it's fine (they anonymise the data! We trust them!) or just ignored. It doesn't seem to sink in that giving s…
It may be hardly news to you; but it is to me.
---
I've just taken a look around my local councils site. I've gone onto the benefits pages, the disability pages, and a few random pages.
There are literally zero trackers here. I have a first party cookie set to the value "1". All images and JS are served first party, with the exception of typekit (adobe) fonts. All images and JS are, without a deep dive, benign.
Re: Surveillance on UK council websites [pdf]
#8So I have read this report, but it would be good if there were some example URLs of where this is happening. Take for instance Lambeth's website ( https://www.lambeth.gov.uk ). I've browsed through a few public facing pages and the council tax payment pages. The report says Lambeth shows 1 real time bidding, 1 social and 5 Google "trackers". From my network requests I see: -> Google Translate and its resources (CSS e…
What’s PB?
Re: Surveillance on UK council websites [pdf]
#9It's hardly news that most of the UK government websites, either at the local or national level, report all your activity to foreign corporations, particularly google analytics. I've raised this with the website creators through their helpdesk system, and on here when they've posted, but been either told that it's fine (they anonymise the data! We trust them!) or just ignored. It doesn't seem to sink in that giving s…
It may be hardly news to you; but it is to me. --- I've just taken a look around my local councils site. I've gone onto the benefits pages, the disability pages, and a few random pages. There are literally zero trackers here. I have a first party cookie set to the value "1". All images and JS are served first party, with the exception of typekit (adobe) fonts. All images and JS are, without a deep dive, benign. https…
Perhaps my turn of phrase was less than ideal there.... but yeah, I've been pissed off about this for a while but got nowhere.
Some of the stuff in this report is worse, of course, than just including GA.
(edit - Just looked at test valley site there, it brings in google analytics, though seems clean otherwise. Also Hey neighbour! I'm based in Southampton at the moment)
Re: Surveillance on UK council websites [pdf]
#10So I have read this report, but it would be good if there were some example URLs of where this is happening. Take for instance Lambeth's website ( https://www.lambeth.gov.uk ). I've browsed through a few public facing pages and the council tax payment pages. The report says Lambeth shows 1 real time bidding, 1 social and 5 Google "trackers". From my network requests I see: -> Google Translate and its resources (CSS e…
What’s PB?
Privacy Badger (probably!)