Live data from Hacker News

FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

ftc.gov

101–110 of 359 posts

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#101
A little hypocritical when it comes from various government organizations all over the western world. Surveillance companies are essential for police to be able to easily gather data when needed fast. It is a happy accident that surveillance is so lucrative for advertising and also so effective for policing.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#103

I love the cognitive dissonance on display within the federal government. One arm: "everyone is a criminal; spy on everyone" Other arm: "hey you shouldn't really harvest all of that data"

The cognitive dissonance is in the voters and users. Even right here on HN, where most people understand the issue, you'll see conversations and arguments in favor of letting companies vacuum up as much data and user info as they want (without consent or opt-in), while also saying it should be illegal for the government to collect the same data without a warrant. In practice, the corporations and government have foun…

Anti-disclaimer: I'm not one of those folks.

However, that's not at all a cognitive dissonance. Fundamentally, there's a difference between governments and private companies, and it is fairly basic to have different rules for them. The government cannot impinge on free speech, but almost all companies do. The government cannot restrict religion, but to some extent, companies can. Etc.

Of course, in this case, it's understandable to argue that neither side should have that much data without consent. But it's also totally understandable to allow only the private company to do so.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#104
post #31

To me, what's missing from that set of recommendations is some method to increase the liability of companies who mishandle user data. It is insane to me that I can be notified via physical mail of months old data breaches, some of which contained my Social Security number, and that my only recourse is to set credit freezes from multiple credit bureaus.

I agree. Let me tell you about what just happened to me. After a very public burnout and spiral, a friend rescued me and I took a part time gig helping a credit card processing company. About 2 months ago, the owner needed something done while I was out, and got their uber driver to send an email. They emailed the entire customer database, including bank accounts, socials, names, addresses, finance data, to a single customer. When I found out, (was kept hidden from me for 11 days) I said "This is a big deal, here are all the remediations and besides PCI we have 45 days by law to notify affected customers." The owner said "we aren't going to do that", and thus I had to turn in my resignation and am now unemployed again.

So me trying to do the right thing, am now scrambling for work, while the offender pretends nothing happened while potentially violating the entire customer base, and will likely suffer no penalty unless I report it to PCI, which I would get no reward for.

Why is it everywhere I go management is always doing shady stuff. I just want to do linuxy/datacentery things for someone who's honest... /cry

My mega side project isn't close enough to do a premature launch yet. Despite my entire plan being to forgo VC/investors, I'm now considering compromising.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#105
post #31

To me, what's missing from that set of recommendations is some method to increase the liability of companies who mishandle user data. It is insane to me that I can be notified via physical mail of months old data breaches, some of which contained my Social Security number, and that my only recourse is to set credit freezes from multiple credit bureaus.

If you aren’t directly harmed yet what liability would they have? I imagine if your identity is stolen and it can be tied to a breach then they would already be liable.

The same way you can get ticketed for speeding in your car despite not actually hitting anyone or anything.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#106
post #63

Earlier quoted context omitted.

The fact that my data can be stolen in the first place is already outrageous, because I neither consented to allowing these companies to have my data, nor benefit from them having my data. It's like if you go to an AirBNB and the owner sneaks in at night and takes photos of you sleeping naked and keeps those photos in a folder on his bookshelf. Would you be okay with that? If you're not directly harmed, what liabilit…

I don't think thats a proper parallel. I think a better example would be You (AirBnB Host) rent a house to Person and Person loses the house key. Later on (perhaps many years later), You are robbed. Does Person have liability for the robbery? Of course it also gets really muddy because you'll have renting the house out for those years and during that time many people will have lost keys. So does liability get divided…

The particular problem comes in because the amount of data lost tends to be massive when these breaches occur.

It's kind of like the idea of robbing a minute from someone's life. It's not every much to an individual, but across large populations it's a massive theft.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#107
post #63

Earlier quoted context omitted.

If you aren’t directly harmed yet what liability would they have? I imagine if your identity is stolen and it can be tied to a breach then they would already be liable.

The fact that my data can be stolen in the first place is already outrageous, because I neither consented to allowing these companies to have my data, nor benefit from them having my data. It's like if you go to an AirBNB and the owner sneaks in at night and takes photos of you sleeping naked and keeps those photos in a folder on his bookshelf. Would you be okay with that? If you're not directly harmed, what liabilit…

> before anyone asks, "personalized advertisements" is not a good reason

The good reason is growth. Our AI sector is based on, in large part, the fruits of these data. Maybe it's all baloney, I don't know. But those are jobs, investment and taxes that e.g. Europe has skipped out on that America and China are capitalising on.

My point, by the way, isn't pro surveillance. I enjoy my privacy. But blanket labelling personal data as radioactive doesn't seem to have any benefit to it outside emotional comfort. Instead, we need to do a better job of specifying which data are harmful to accumulate and why. SSNs are obviously not an issue. Data that can be used to target e.g. election misinformation are.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#108

Earlier quoted context omitted.

If you aren’t directly harmed yet what liability would they have? I imagine if your identity is stolen and it can be tied to a breach then they would already be liable.

This is exactly why thinking of it in terms of individual cases of actual harm, as Americans have been conditioned to do by default, is precisely the wrong way to think about it. We're all familiar with the phrase "an ounce of prevention is worth a pound of cure", right? It's better to to think of it in terms of prevention. This fits into a category of things where we know they create a disproportionate risk of harm,…

Safety rules are written in blood. After a disaster there’s a push to regulate. After enough years we only see the costs of the rules and not the prevented injuries and damage. The safety regulations are then considered annoying and burdensome to businesses. Rules are repealed or left unenforced. There is another disaster…

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#109
post #69

Earlier quoted context omitted.

I mean it's pretty clear that you are directly harmed if someone takes naked photos of you without your knowledge or consent and then keeps them. It's not a good analogy so if we want to convince people like the GP of the points you're making, you need to make a good case because that is not how the law is currently structured. "I don't like ads" is not a good reason, and comments like this that are seething with rag…

> it's pretty clear that you are directly harmed if someone takes naked photos of you without your knowledge or consent and then keeps them Sure. In those cases, there are damages and that creates liability. I'm not sure what damages I've ever faced from any leak of e.g. my SSN.

I mean most people won't until that day they find out theirs a house in Idaho under their name (and yes I've seen just this happen).

The problem here is because of all these little data leaks you as an individual now bear a cost ensuring that others out there are not using your identity and if it happens you have to clean up the mess by pleading it wasn't you in the first place.

Re: FTC: Vast Surveillance of Users by Social Media and Video Streaming Companies

#110
post #31

To me, what's missing from that set of recommendations is some method to increase the liability of companies who mishandle user data. It is insane to me that I can be notified via physical mail of months old data breaches, some of which contained my Social Security number, and that my only recourse is to set credit freezes from multiple credit bureaus.

I agree. Let me tell you about what just happened to me. After a very public burnout and spiral, a friend rescued me and I took a part time gig helping a credit card processing company. About 2 months ago, the owner needed something done while I was out, and got their uber driver to send an email. They emailed the entire customer database, including bank accounts, socials, names, addresses, finance data, to a single…

As in.. his actual Uber driver? He just handed his laptop over?
Post reply on HN