Live data from Hacker News

Privacy Behaviors After Snowden

cacm.acm.org

11–20 of 41 posts

Re: Privacy Behaviors After Snowden

#11
I think the methodology to show "how much people care about privacy post-Snowden" is flawed in that regard.

I'll just give the most powerful example for this. So this study shows that there's basically little difference between people searching for privacy tools now and before Snowden, right?

Okay, except pre-Snowden there's no way something like the Patriot Act wouldn't have been renewed again. Why has it failed to be renewed now then? Because many people do care about privacy and have called their Congressmen to act accordingly.

I'm also seeing much more interest in end-to-end encrypted apps. Pre-Snowden few knew about "end-to-end encryption" and what that means. I'm seeing many more comments online with people asking about it.

I think the biggest issue is that people feel "overpowered", so the solution usually becomes inaction. In other words it's not "I don't care about privacy" - it's "I don't care about privacy enough to learn to use complicated new tools or radically change my behavior online...but if you give me easy to use strong encryption, especially in the apps I'm already using, I'm happy to use it."

Let's assume sending (snail) mail wasn't secure, but pigeon messaging was. People wouldn't refuse to use pigeon messaging because "they don't care about privacy". They wouldn't do it because it's too complicated and too much of a hassle.

This is why convincing platforms and service providers to use strong encryption by default is so important.

Re: Privacy Behaviors After Snowden

#12
post #10

I have also sadly noted that there is little interest from my peers in such matters. It is also hard to change. I work with technology everyday. I planned to: - move away from Gmail to Fastmail - move away from Dropbox to Spideroak or Owncloud - move away from G+ Photos to ? - move away from SMS and WhatsApp to TextSecure The results? I'm still on Gmail. I still have a Dropbox account and I'm slowly moving stuff to S…

It's ok to admit you don't care enough to make the switch.

I've been on Fastmail for quite a while, don't use a Dropbox alternative, Smugmug for photos, and whatsapp mostly because my friends switched once long before Textsecure and don't see the benefit of switching again

It's really not that big of a hassle

Re: Privacy Behaviors After Snowden

#13
It's not the user's fault. Unless mainstream services make privacy strong, simple, and pervasive all they are doing is marking the people who seek privacy for greater surveillance.

Google, Yahoo, and Microsoft need to step up and make it so my mom can have secure email. They have all the tools, especially the ability to use social graphs as the basis for web-of-trust.

Re: Privacy Behaviors After Snowden

#16
> When the Web search engine DuckDuckGo, which advertises its superior privacy practices, attributed a rise in its daily queries to the PRISM revelation, it did not include user counts.

contrary to this article, duckduckgo showing a huge increase in the number of queries: implies an increase in number of users. it doesn't store user id's as a matter of policy, surprised the author doesn't mention that is why user count is not reported. the fact that it can't do so is the whole point.

would be interested in growth numbers for textsecure, redphone, firefox hello vs. skype, visits to glen greenwalds site and so on.

some background on the author:

Author

Sören Preibusch (http://preibusch.de/) is a user experience researcher at Google, Mountain View, CA, and was at Microsoft Research, Cambridge, U.K., when this article was written.

Re: Privacy Behaviors After Snowden

#17
post #10

I have also sadly noted that there is little interest from my peers in such matters. It is also hard to change. I work with technology everyday. I planned to: - move away from Gmail to Fastmail - move away from Dropbox to Spideroak or Owncloud - move away from G+ Photos to ? - move away from SMS and WhatsApp to TextSecure The results? I'm still on Gmail. I still have a Dropbox account and I'm slowly moving stuff to S…

There is also the "network effect" that is keeping users locked in these services. In other words:

"I leave only if my friends leave".

That's the problem https://www.iWouldDo.it can solve for you.

Re: Privacy Behaviors After Snowden

#18
post #10

I have also sadly noted that there is little interest from my peers in such matters. It is also hard to change. I work with technology everyday. I planned to: - move away from Gmail to Fastmail - move away from Dropbox to Spideroak or Owncloud - move away from G+ Photos to ? - move away from SMS and WhatsApp to TextSecure The results? I'm still on Gmail. I still have a Dropbox account and I'm slowly moving stuff to S…

What does one gain by moving from gmail to fastmail? Do you think the AU government has no leverage? Or that the NSA is incapable of infiltrating their servers?

Re: Privacy Behaviors After Snowden

#19
post #10

I have also sadly noted that there is little interest from my peers in such matters. It is also hard to change. I work with technology everyday. I planned to: - move away from Gmail to Fastmail - move away from Dropbox to Spideroak or Owncloud - move away from G+ Photos to ? - move away from SMS and WhatsApp to TextSecure The results? I'm still on Gmail. I still have a Dropbox account and I'm slowly moving stuff to S…

What does one gain by moving from gmail to fastmail? Do you think the AU government has no leverage? Or that the NSA is incapable of infiltrating their servers?

FastMail isn't scanning your emails to generate a profile of you in order to serve you highly targeted advertising all over the web.

https://support.google.com/mail/answer/6603?hl=en

Re: Privacy Behaviors After Snowden

#20
post #10

I have also sadly noted that there is little interest from my peers in such matters. It is also hard to change. I work with technology everyday. I planned to: - move away from Gmail to Fastmail - move away from Dropbox to Spideroak or Owncloud - move away from G+ Photos to ? - move away from SMS and WhatsApp to TextSecure The results? I'm still on Gmail. I still have a Dropbox account and I'm slowly moving stuff to S…

I don't think most of those that you list are really substantive moves.

Certainly moving from dropbox to spideroak or ... someone like spideroak ... would give you the ability to encrypt independent of the provider, perhaps with duplicity[1] or this other method I like[2].

But moving from gmail to fastmail doesn't seem like ti buys you much.

I think the two biggest, substantial moves you can make are providing your own email and providing your own dialtone. I do the former, and have for almost 20 years ... but I haven't gotten my act together yet to do the latter.

What you gain, provided you own the equipment and rent the rackspace, is you are the recipient of lawful orders and legal actions. you are contacted and you are required to respond. Not your ISP, not your provider, not some third party ...

That's a big, substantial difference. Sure, you still need to worry about your traffic out in the wild, but as far as the host itself, you have complete control.

Cost is a difficulty, but consider a 3-4 year old 1U server from ebay ... more than ample to handle this very light workload ... and then maybe $50/mo for 1U of rack and power, given that you won't use much bandwidth at all. Then there's some kind of VOIP peering/connection/whateveridontevengetit that you can get for $x per month. Basically, instead of getting a POTS line in your rack, you get some kind of voip peer from a bigger voip provider. Or something.

But consider what you're buying here: You are a peer on the network. You're not a consumer - you are actually taking part in the Internet. Legally you are a peer as well, as you are a property owner, not a rentier, and you are secure in certain physical rights to your rented space.

That's a substantial step.

[1] http://duplicity.nongnu.org/

[2] https://news.ycombinator.com/item?id=6554313

Post reply on HN