Live data from Hacker News

Your mobile data sold, without your knowledge

translate.googleusercontent.com

101–110 of 162 posts

Re: Your mobile data sold, without your knowledge

#101
post #98

Earlier quoted context omitted.

The country that still allows it is Czechia. So it's probably not an EU law that requires it.

Thanks! That figures. They are also pretty liberal on their citizens owning guns.

Indeed we are, and the gun ownership is not minor as well (every twelfth adult normally carries a weapon).

Re: Your mobile data sold, without your knowledge

#102

Earlier quoted context omitted.

It is illegal to not track and save this data in the EU. > If you are using a cellphone, your location is being tracked. Period. You can’t avoid it. Even TOR isn’t gonna help you. It is still possible to buy an anonymous SIM in a few countries.

Even if the SIM's anonymous, as the article demonstrated, it would be easy to de-anonymize it.

There are ways to try to stay hidden, like having one stationary and VPN to it from the second one; using a burner second/third/fourth/...-hand phone for the second, etc.

Re: Your mobile data sold, without your knowledge

#103

The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. Cell service providers can and do track your cellphone location. All they have to do is measure the signal strength of your cellphone at different towers, and they can triangulate its position. https://www.vice.com/en_us…

> The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. I worked on this story (and the others, we're still publishing [1] [2]). The dataset we bought from Tamoco didn't contain an app name for most of the data. So instead of guessing, we're open about the fact that we don'…

It could be an app - we've had startups approach us to sell location data collected from apps so I wouldn't rule anything out at this point.

Re: Your mobile data sold, without your knowledge

#105
post #91

Earlier quoted context omitted.

You used to be able to be an anonymous SIM in the UK. (No clue whether that's still the case.) The SIM would still be tracked. Don't think whatever EU laws allowed the UK to keep some SIMS anonymous have changed since they left?

The country that still allows it is Czechia. So it's probably not an EU law that requires it.

Also Sweden

Re: Your mobile data sold, without your knowledge

#106

The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. Cell service providers can and do track your cellphone location. All they have to do is measure the signal strength of your cellphone at different towers, and they can triangulate its position. https://www.vice.com/en_us…

It is illegal to not track and save this data in the EU. > If you are using a cellphone, your location is being tracked. Period. You can’t avoid it. Even TOR isn’t gonna help you. It is still possible to buy an anonymous SIM in a few countries.

Tracking it and disclosing it only upon a valid court order is one thing. Selling it to anyone who asks (or even leaking it for free) is another thing.

Re: Your mobile data sold, without your knowledge

#107

The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. Cell service providers can and do track your cellphone location. All they have to do is measure the signal strength of your cellphone at different towers, and they can triangulate its position. https://www.vice.com/en_us…

That kind of triangulation is nowhere near precise enough to reveal the data shown in the article. This is GPS data which the provider does not get. Remember that many people ‘have nothing to hide’ so they turn on services like Google Latitude. Then later they’re al surprised when their data is sold to the highest bidder.

> Remember that many people ‘have nothing to hide’ so they turn on services like Google Latitude. Then later they’re al surprised when their data is sold to the highest bidder.

Do you have any proof that Google does exactly this?

I don't like Google at all (anymore) but I thought Google was somewhat ok in that they never sold my raw data points even if they would sell accesss to place an ad to "visitors who have been at this geographic location recently".

Re: Your mobile data sold, without your knowledge

#108

Earlier quoted context omitted.

That kind of triangulation is nowhere near precise enough to reveal the data shown in the article. This is GPS data which the provider does not get. Remember that many people ‘have nothing to hide’ so they turn on services like Google Latitude. Then later they’re al surprised when their data is sold to the highest bidder.

> Remember that many people ‘have nothing to hide’ so they turn on services like Google Latitude. Then later they’re al surprised when their data is sold to the highest bidder. Do you have any proof that Google does exactly this? I don't like Google at all (anymore) but I thought Google was somewhat ok in that they never sold my raw data points even if they would sell accesss to place an ad to "visitors who have been…

> even if they would sell accesss to place an ad to "visitors who have been at this geographic location recently

So if I click on the ad, the company behind it knows I was on that geographic location recently. This is how Google leaks data.

Re: Your mobile data sold, without your knowledge

#109

The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. Cell service providers can and do track your cellphone location. All they have to do is measure the signal strength of your cellphone at different towers, and they can triangulate its position. https://www.vice.com/en_us…

> The article assumes that the location data must have been collected because he gave an app permission to access his location. I bet they couldn’t figure out which app it was because it wasn’t an app. I worked on this story (and the others, we're still publishing [1] [2]). The dataset we bought from Tamoco didn't contain an app name for most of the data. So instead of guessing, we're open about the fact that we don'…

> I worked on this story

Having access to original NRK data, is it possible to deanonymize more people (try to check your home address, NRK HQ, etc), and ask them for a list of installed apps to check if all have one in common? Although it's questionable from privacy point of view, so probably better to pursue it in legal ways.

Re: Your mobile data sold, without your knowledge

#110

Earlier quoted context omitted.

I’m aware of what the central limit theorem is, but I’m confused as to what you mean here. Do you mind clarifying? It sounds like you’re saying the CLT leads to deanonymization. I don’t see how the two are related.

Take several measurements and average them. The variance scales like 1/n_samples, which can take you from city-block resolution to building resolution quite rapidly.

There are conditions for the central limit theorem to hold though. One can generate random noise which violates them. It's certainly hard to guarantee privacy, but it's not trivially easy to hack if they're halfway smart about it.
Post reply on HN