Ars tests Internet surveillance by spying on an NPR reporter
31–40 of 67 posts
Re: Ars tests Internet surveillance by spying on an NPR reporter
#32I really appreciated this story. It's so hard to make people care about "small" data leaks when they have no idea what many "small" data leaks can lead to. The bug the journalists discovered that revealed Skype's contact list is the perfect example -- the programmer just did something completely "reasonable" (grabbing avatars) that ended up leaking a vital set of information. Imagine if surveillance was your full tim…
> I'll again state that this is why I feel so strongly that Google Analytics should be updated to be HTTPS by default That's an incredible waste of bandwidth for no improvement in privacy whatsoever. If HTTPS pages were including GA over HTTP, then yes, this would be an issue, but you're already requesting the page over HTTP, if you're getting GA over HTTP. There's simply no advantage whatsoever -- for privacy, secur…
Of course, you may still be right in that it adds no privacy, but I wouldn't call it an "incredible waste" (particularly not of bandwidth), since the cost is really quite low.
Re: Ars tests Internet surveillance by spying on an NPR reporter
#33I really appreciated this story. It's so hard to make people care about "small" data leaks when they have no idea what many "small" data leaks can lead to. The bug the journalists discovered that revealed Skype's contact list is the perfect example -- the programmer just did something completely "reasonable" (grabbing avatars) that ended up leaking a vital set of information. Imagine if surveillance was your full tim…
This was a wake-up call for me. On my desktop browser, I can use SSL, NoScript, etc. to control what's exposed. But on my phone I'm powerless. How do I know what each app is capturing and transmitting in the clear? If even Google searches don't use SSL, what hope is there for other apps?
Re: Ars tests Internet surveillance by spying on an NPR reporter
#34None of this is shocking except for maybe how unavoidable sharing all this information online actually is. The default settings on most devices are not designed with privacy in mind. In order to avoid this type of data collection, you'd have to walk around with a dumbphone, avoid using any bank-connected services and basically only log on to the Internet via a VPN. Ironically, this usage pattern is so far out of the…
> This type of technology is so intertwined in our daily lives that avoiding it isn't a realistic option. That seems like somewhat of an apathetic attitude to have. Try living without internet for a week, or even a day. It isn't so bad.
I think in the same way that we who live in an exceptionally wealthy society often get little practice in giving things up, but that this practice might be beneficial. It's not a very original observation to notice how having so many resources and opportunities and conveniences available to us makes us feel more and more dependent and averse to every sort of inconvenience.
As a vegan, I always find it remarkable how emphatically people feel that it would be impossibly difficult for them to go without eating animal products, or that they can't imagine how someone could possibly manage without them. Maybe that's literally true in the Aleutian Islands or the Australian Outback or something, but not so much in New York City or Portland, where one could eat in a different restaurant every day for a year without running out of vegan entrées to order directly off the menu.
But there are plenty of resources and technologies that I have that my parents and aunts and uncles grew up and lived and worked without for decades and that even today most of the world's population doesn't use—but that it's hard for me to imagine life without. (When I visit friends in Brazil, they don't have a machine to dry their laundry, but use a clothesline, the way almost everybody in history has done it, and to my amazement the clothesline still works OK. It's not even much more labor, just more latency in the clothes-washing process.)
The habits we form from being well-off and having so much access to everything we want, worry some people because they consider how something could go wrong and there are skills we might need that we haven't developed. (We might also feel more acute suffering from losing what we're used to; psychologists have documented that losing what you had is consistently perceived as a much greater cost than failing to gain what you didn't have.) War or social unrest or natural disasters or ecological disruption could strike middle-class city dwellers pretty hard because we mostly don't know how to grow food, how to fix things, and so on.
But another consequence of our abundance of resources and choices, one that I think is more core to what the parent commenter is getting at, is that when we become dependent on technologies and products and resources, our demand curve for them shifts. The people who supply these things to us have more power over us in terms of extracting money or concessions, because we and then understand that we're unlikely to actually give up our habits. That has consequences in terms of the difficulty in resisting changes that harm us (a classic example is if an Internet service changes its privacy policy in a way that reduces existing users' protections; service operators know that very few people will stop using the service even if most users dislike the change). It also means that the prospect of boycotts over ethical issues that affect others is dimmer. Manufacturers think that there's not that much chance many people would actually stop buying something because of disagreements with how it was made.
I think it would be amazing to have a culture where people commonly had the experience of successfully giving up a habit or a product that they liked quite a bit, without being forced to, just as a result of a conscious choice. My Catholic friends often do this once a year during Lent (the religious tradition in many communities used to be to give up specific foods, but many people today interpret it more broadly and personally pick something to give up temporarily—normally, something that they enjoy and that it will be an effort for them to give up). From what I hear, many people find it satisfying and empowering when they succeed. And following Scott's idea, it might be good practice for when you decide that you do have an important reason to give something up.
Re: Ars tests Internet surveillance by spying on an NPR reporter
#35I really appreciated this story. It's so hard to make people care about "small" data leaks when they have no idea what many "small" data leaks can lead to. The bug the journalists discovered that revealed Skype's contact list is the perfect example -- the programmer just did something completely "reasonable" (grabbing avatars) that ended up leaking a vital set of information. Imagine if surveillance was your full tim…
This was a wake-up call for me. On my desktop browser, I can use SSL, NoScript, etc. to control what's exposed. But on my phone I'm powerless. How do I know what each app is capturing and transmitting in the clear? If even Google searches don't use SSL, what hope is there for other apps?
Re: Ars tests Internet surveillance by spying on an NPR reporter
#36Earlier quoted context omitted.
> This type of technology is so intertwined in our daily lives that avoiding it isn't a realistic option. That seems like somewhat of an apathetic attitude to have. Try living without internet for a week, or even a day. It isn't so bad.
I just read the book Two Cheers for Anarchism , where James Scott describes his experiences of "anarchist calisthenics". He suggests, slightly tongue-in-cheek, that practicing occasionally disobeying laws in minor ways like jaywalking could help develop a disobedience skill that he might need some day for an important moral reason. I think in the same way that we who live in an exceptionally wealthy society often get…
The darker later parts of the documentary make me think that we have a lot of practice celebrating people's power of choice and freedom from constraint (which I fully agree with). We have a lot of recent experience saying yes when there's no reason not to. What we perhaps haven't been practicing as much is saying no at those times when there is a reason to.
Re: Ars tests Internet surveillance by spying on an NPR reporter
#37Earlier quoted context omitted.
This was a wake-up call for me. On my desktop browser, I can use SSL, NoScript, etc. to control what's exposed. But on my phone I'm powerless. How do I know what each app is capturing and transmitting in the clear? If even Google searches don't use SSL, what hope is there for other apps?
I haven't done this personally but you can minimize the risk of interception without really changing anything by going through a VPN. This way all unencrypted traffic is strictly on wired networks.
That might help with the casual Wi-Fi snoop in the coffeeshop, but it's still hoovered up once it leaves the VPN.
Re: Ars tests Internet surveillance by spying on an NPR reporter
#38Earlier quoted context omitted.
I haven't done this personally but you can minimize the risk of interception without really changing anything by going through a VPN. This way all unencrypted traffic is strictly on wired networks.
The VPN secures my data up to the VPN, but it's unencrypted from the VPN to the host. That might help with the casual Wi-Fi snoop in the coffeeshop, but it's still hoovered up once it leaves the VPN.
Re: Ars tests Internet surveillance by spying on an NPR reporter
#39None of this is shocking except for maybe how unavoidable sharing all this information online actually is. The default settings on most devices are not designed with privacy in mind. In order to avoid this type of data collection, you'd have to walk around with a dumbphone, avoid using any bank-connected services and basically only log on to the Internet via a VPN. Ironically, this usage pattern is so far out of the…
> In order to avoid this type of data collection, you'd have to walk around with a dumbphone, avoid using any bank-connected services and basically only log on to the Internet via a VPN. Ironically, this usage pattern is so far out of the ordinary that it would make you stick out like a sore thumb. Have you considered trying this, or some implementation of it? I, for one, would like to see websites that didn't instal…
Re: Ars tests Internet surveillance by spying on an NPR reporter
#40I'm shocked.