61–70 of 168 posts
Earlier quoted context omitted.
It also doesn't sound like its encrypted at rest. Perhaps each in-transit is held to be a unique e2e IP exchange?
Encrypted at rest means something different. It means if you pull the hard drive out no one can decrypt it. Not that it is encrypted in the database.
Earlier quoted context omitted.
If you're concerned about that do not give internet to your tv and use any kind of tv box instead (shield tv, apple tv, etc).
How long until they have built in cellular or use a mesh?
Thinking more on this I think a business opportunity in the future will be companies that design hardware stacks that can go in random appliances that can gather usage information in the name of telemetry.
I give it +/- 5 years before an OTS coffee maker at walmart phones home.
> the once-responsive Oura has not yet replied to any of my inquiries, or committed to releasing the numbers Illinois has a tight biometric-privacy law [1]. I’d bet Oura isn’t particularly careful about prohibiting e.g. a Texas police department querying the protected information of Illinois residents. [1] https://en.wikipedia.org/wiki/Biometric_Information_Privacy_...
What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!
Bad health? Raise the insurance premiums? Or anything more evil I can't think of.
edit: grammar
Earlier quoted context omitted.
Encrypted at rest means something different. It means if you pull the hard drive out no one can decrypt it. Not that it is encrypted in the database.
Does encryption at rest actually do much? The percentage of attacks that were perpetrated by people getting physical access to a drive must approach zero.
Earlier quoted context omitted.
Does encryption at rest actually do much? The percentage of attacks that were perpetrated by people getting physical access to a drive must approach zero.
Depends on what kind of data is in question. Backups and old incremential data can stay encrypted while disks are otherwise in use.
What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!
Ordering a taxi after running outside of US? Probably missed some mass transport. Raise the price boys... like good old Uber back in the day based on iphone battery level. Really the possibilities are endless if you're evil. Bad health? Raise the insurance premiums? Or anything more evil I can't think of. edit: grammar
> the once-responsive Oura has not yet replied to any of my inquiries, or committed to releasing the numbers Illinois has a tight biometric-privacy law [1]. I’d bet Oura isn’t particularly careful about prohibiting e.g. a Texas police department querying the protected information of Illinois residents. [1] https://en.wikipedia.org/wiki/Biometric_Information_Privacy_...
Why would they be careful, given that the chances of any serious consequences for ignoring such provisions are effectively zero?
I’m assuming that Oura are assuming that this—the Illinois BIPA is toothless—is true. It is not [1].
[1] https://www.wilmerhale.com/en/insights/blogs/wilmerhale-priv...
Earlier quoted context omitted.
If you're concerned about that do not give internet to your tv and use any kind of tv box instead (shield tv, apple tv, etc).
So that TV box can phone home instead of your smart TV? What's the point?
Oura doesn't even have GPS does it? Government can already get ALL your celltower locations without a warrant AND read all your emails and text messages that are over 6 months old, without a warrant