Live data from Hacker News

This MIT Website Tracks Your Digital Footprint Through Gmail

newsfeed.time.com

11–18 of 18 posts

Re: This MIT Website Tracks Your Digital Footprint Through Gmail

#12
post #9

Interesting, but not very useful to somebody who's an avid deleter of old e-mails. Kind of paints an odd picture. Also, anyone else get a stuck logout&delete button after getting the data? Ended up having to revoke access via Gmail Accounts.

Same here... both logout buttons did not work.

Re: This MIT Website Tracks Your Digital Footprint Through Gmail

#13

very interesting, analyzed 40k+ emails and I didn't find that much I didn't already know. More surprised about what can be seen with just an oauth token.

It's not just any OAuth token it's a token that asks for permissions to "view all your mail" among other things.

Most Oauth tokens won't ask for this highly elevated permission.

OAuth is not designed around Authentication, the Auth in OAuth is actually about Authorisation. It was designed for this purpose, to authorise others to have access to your mail, or contacts, etc. That it has been co-opted for Authentication purposes (particularly in Oauth2) has just been a side effect.

Re: This MIT Website Tracks Your Digital Footprint Through Gmail

#15
post #9

Interesting, but not very useful to somebody who's an avid deleter of old e-mails. Kind of paints an odd picture. Also, anyone else get a stuck logout&delete button after getting the data? Ended up having to revoke access via Gmail Accounts.

That's the first we've heard of that error. When the user logs out, they are also presented with the link to revoke access via Gmail. Sorry you weren't able to get to that page. If you want to make sure that your data is deleted, we can do a manual delete of your metadata (if it exists on our server) for you. Just write to us at the address on the website.

Re: This MIT Website Tracks Your Digital Footprint Through Gmail

#17
post #5
post #4

What the ...? Never ever share your login credentials with a third-party. This could have been done as local open-source tool. Why is this a web app? You can do this yourself with tools like Gephi.

It's not asking for your login credentials, it uses an oauth system and asks for permissions.

And plus, you know the NSA is looking at your mail anyway, so what further harm could a bunch of MIT grad students do?

Re: This MIT Website Tracks Your Digital Footprint Through Gmail

#18
post #17
post #5

Earlier quoted context omitted.

It's not asking for your login credentials, it uses an oauth system and asks for permissions.

And plus, you know the NSA is looking at your mail anyway, so what further harm could a bunch of MIT grad students do?

I have more trust in the grad students.
Post reply on HN