Live data from Hacker News

Oura says it gets government demands for user data

this.weekinsecurity.com

101–110 of 168 posts

Re: Oura says it gets government demands for user data

#101
post #63

Earlier quoted context omitted.

Why would they be careful, given that the chances of any serious consequences for ignoring such provisions are effectively zero?

> given that the chances of any serious consequences for ignoring such provisions are effectively zero? I’m assuming that Oura are assuming that this—the Illinois BIPA is toothless—is true. It is not [1]. [1] https://www.wilmerhale.com/en/insights/blogs/wilmerhale-priv...

Yeah I’ve probably gotten $100 in class action money from that law so far.

Re: Oura says it gets government demands for user data

#102
post #63

> the once-responsive Oura has not yet replied to any of my inquiries, or committed to releasing the numbers Illinois has a tight biometric-privacy law [1]. I’d bet Oura isn’t particularly careful about prohibiting e.g. a Texas police department querying the protected information of Illinois residents. [1] https://en.wikipedia.org/wiki/Biometric_Information_Privacy_...

Why would they be careful, given that the chances of any serious consequences for ignoring such provisions are effectively zero?

Why would they be careful, given that the chances of any serious consequences for ignoring such provisions are effectively zero?

Your cynicism is at odds with reality.

I got a check for nearly $500 because when I was an Illinois resident, one of the SV tech companies violated that law.

All it takes is one or two people to get in the ear of the right class action lawyer, and ignoring the rules quickly becomes expensive.

Or you could just grouse on HN and accomplish effectively zero.

Re: Oura says it gets government demands for user data

#103

Earlier quoted context omitted.

> Apple literally removed encrypted file storage as a feature in the UK rather than comply with demands for access to encrypted customer data from the UK government. Does that mean that instead of UK government accessing the data (through a backdoor), UK government can now access to data (because it's not encrypted at all)?

Nope. After Apple's announcement that they would remove encryption from UK users rather than weaken it, the bad press and public pressure forced the UK government to back down.

Not exactly. Apple kept it for existing users but stopped offering it to new users. So new users are vulnerable.

Re: Oura says it gets government demands for user data

#104
post #73

Earlier quoted context omitted.

Garmin can be used completely offline? AFAIK, they even have some watches with no radio hardware so that they can be used in sensible environments.

Yup. It’s a bit of a pain, but you don’t have to use the connect app. Devices and data can be accessed with direct USB connection as standard storage. You will lose some features and I think firmware updates become difficult (or impossible?)

Go through the Garmin Express desktop app for firmware updates.

I’m probably missing something, but I can’t think of anything you lose if you don’t use the phone app.

Re: Oura says it gets government demands for user data

#106

Earlier quoted context omitted.

Judging by ads for cell phone service, most people pay more than that per month to be monitored by the Feds.

Cell phone services don't record your heart rate.

Cell phone services don't record your heart rate.

As has been noted on HN several times, there are cars that monitor when you have sex in them. You might be surprised what is known and by whom.

Re: Oura says it gets government demands for user data

#107
post #87

What in god's name possesses someone to buy (and pay a subscription for) a device that gathers and sells their health data in exchange for a placebo dashboard of numbers...

What in god's name possesses someone to buy (and pay a subscription for) a device that gathers and sells their health data in exchange for a placebo dashboard of numbers...

Social media, mostly.

Re: Oura says it gets government demands for user data

#108
post #32
post #28

All this said I'm more concerned about Automatic Content Recognition (ACR) on smartTV you buy in the store and never even realize it's phoning home with everything you watch...

If you're concerned about that do not give internet to your tv and use any kind of tv box instead (shield tv, apple tv, etc).

I wouldn't use Apple TV, Shield or other proprietary black boxes if you want a private setup. Linux on a mini-PC with Plasma Bigscreen, your own over-the-air antenna for local TV, VacuumTube for YT, and the high seas for other content.

Re: Oura says it gets government demands for user data

#109
post #29

What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!

What will the government even do with my heart rate and blood oxygen data?

It's not in isolation. It's in aggregation. So you end up with

"Mr. Smith's heart rate goes off the charts for six minutes every time his phone visits this apartment building in the middle of the night and is within radio range of Ms. Jones' phone."

Post reply on HN