141–150 of 274 posts
Earlier quoted context omitted.
Yep. Equifax, Experian and Transunion come to mind.
Consider also every large adtech firm.
That’s not to say I disagree with you, but the data collected is (to me) orders of magnitude less sensitive.
*disclosure: I toil in the adtech mines.
Sounds like Facebook is having their NSA moment
Can someone explain to me why the Cambridge Analytica story is making people so much angrier than the later revelation that Facebook was scraping call+text info? That seems to be the larger problem to me. Somewhere at Facebook there is a team of people who wrote software to scrape, store and analyze the personal call+text data that users didn't explicitly mean to give to Facebook. The data that Cambridge Analytica at…
I think the the headline people are seeing is more like "Group doesn't follow website's terms of service from five years ago, and ends up helping Donald Trump win presidency."
A big part of the reason this has become so big a story is political.
Earlier quoted context omitted.
I respect Google and their engineering chops as much as the next person, they are truly world class programmers, but how the holy hell is everyone daydreaming that they don’t work for an advertising company? You sell and use people’s data to get money: this is the business plan. Are people working there really so nieve(sic) as to believe that this is surprising?
Former Googler here. I'm pretty sure the vast majority of Googlers understand they work for an advertising company with a gigantic and generally well-run software "engineering" department. I don't mean that in any derogatory sense. Well-regulated advertising is important in helping consumers make informed purchasing decisions.
They would be a list of superior features of, and only of, the product read in clear, plain terms.
Earlier quoted context omitted.
Yeah, still not the same as actually performing breaches themselves to see how long it takes to compromise, and if they get detected and how long it takes to remediate and evict the adversary. I should have been a bit clearer with what I meant initially.
How do you know there isn’t a team at Google doing this? It’s standard practice at companies of even middling size and Google is so large your friend might just be unaware of it.
I respect Facebook and their engineering chops as much as the next person, they are truly world class programmers, but how the holy hell is everyone daydreaming that they don’t work for an advertising company? You sell and use people’s data to get money: this is the business plan. Full stop. Connecting people can definitely be lucrative and useful in other ways but facebooks particular implementation is impression ba…
She is either wrong, or lying, or has her own ideas of what "selling your data" means.
Earlier quoted context omitted.
Who watches the watchers? #1 - There's always a back door. I did some medical records stuff for a while. I looked myself up, just to confirm for myself how trivial it was to do. Yup, there I was. Which is why I insist that all data at rest is encrypted. (I have yet to win this argument.) #2 - Our "portal" product had access logs for auditing. Plus permissions, consent trees, delegation. The usual features. Alas. We a…
HITRUST CSF is a framework for auditably proving HIPPA compliance. It prescribes controls such as encrypting data at rest. If you have a business relationship with a company which provides you PHI without explicit user consent you must have an agreement (a BAA) with the third party which puts them under the same requirements (backed up with third party audits). Everything you’re describing sounds like it’s either inc…
I hope anyone worth their weight in salt leaves Facebook as an employee and as a user. Employees should already feel shame since the election. They all know what Facebook is built on and what they've done and what they're doing.
I hope anyone worth their weight in salt leaves Facebook as an employee and as a user. Employees should already feel shame since the election. They all know what Facebook is built on and what they've done and what they're doing.
What could they possibly do to fix things that wouldn't destroy their business model?