Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oura says it gets government demands for user data

this.weekinsecurity.com

Post reply on HN
Print view View original

141–150 of 168 posts

Re: Oura says it gets government demands for user data

#141

Post by [deleted] »

fc417fc802 wrote: post #116
blueg3 wrote: post #71

Earlier quoted context omitted.

The term has kind of degraded, because people started marketing that "end-to-end encryption" is the "right" answer. Encryption in transit means that network intermediates can't read the data. The two endpoints of the network communication can. E2E encryption is more context-sensitive, and its context mostly comes from messaging. It means that the data is encrypted and that operational intermediates cannot read it. So…

> The term has kind of degraded I have to disagree. It's the same thing that happened to terms such as open source. It's perfectly clear what it means but marketers intentionally attempt to mislead people for the sake of their own bottom line. > but the data is in the clear on your phone, then by this definition, it is not E2E encrypted. False. E2EE is centered on a given user. So long as the phone would be viewed as…

[deleted]

Re: Oura says it gets government demands for user data

#142

Post by blitzar »

sylos wrote: post #130
reaperducer wrote: post #102

Earlier quoted context omitted.

Why would they be careful, given that the chances of any serious consequences for ignoring such provisions are effectively zero? Your cynicism is at odds with reality. I got a check for nearly $500 because when I was an Illinois resident, one of the SV tech companies violated that law. All it takes is one or two people to get in the ear of the right class action lawyer, and ignoring the rules quickly becomes expensiv…

You got a check for $500, but now your info is who knows where and the company involved is still making more money than not. You lost out.

You didn't get a check for $500, and my info is who knows where and a bunch of companies, criminals and startups are making money off it.

Re: Oura says it gets government demands for user data

#143

Post by jeroenhd »

jjice wrote: post #22
jeroenhd wrote: post #7

Earlier quoted context omitted.

Google's Health Connect system doesn't share this data either (without a consent prompt for third party apps, off course). This is to the point where I wish it would just support some kind of sync, because two devices hooked up to the same accounts need a third party app to transfer the health info. Apple is subject to the same laws Oura is. The competition is too.

I believe the Apple one is E2E encrypted so they physically can't give useful data. Thats the core issue with Oura here.

Apple's iCloud default is still to link the encryption key to your account password, with a bunch of extra steps if you wish to use your own key instead, just like Google does.

It doesn't really matter that the data is encrypted end to end if Apple backs up the encryption key based on a factor they already know (your password).

Re: Oura says it gets government demands for user data

#144

Post by jeroenhd »

haritha-j wrote: post #14
basisword wrote: post #5

This is why although I don't love my Apple Watch, I'm not using anything else. It's very sensitive data and Apple is the only company worth trusting with it. They're not perfect but compared to others there's no competition.

Yeah there's no one I'd trust with my personal data except Apple. Their track record of refusing to bow down to the feds has been golden. 24 carat infact.

While Google has rejected China's terms and moved out of the mainland, China has set up a separate iMessage/iCloud system that complies with the wants and needs of the CCP.

They have also abided by the UK's demand to disable E2EE.

Apple's resolve is quickly overcome by any threat to their revenue. They're one law away from handing over all of your data to the feds.

Re: Oura says it gets government demands for user data

#145

Post by Obscurity4340 »

fn-mote wrote: post #128
mcmcmc wrote: post #48

Earlier quoted context omitted.

When you buy a medical data collection device and it collects medical data that’s not exactly a surprise

The problem isn’t the collecting, it’s who has access to the data.

Nah, yeah the problem is also collecting the data in that way for to begin with

Re: Oura says it gets government demands for user data

#146

Post by mcmcmc »

fn-mote wrote: post #128
mcmcmc wrote: post #48

Earlier quoted context omitted.

When you buy a medical data collection device and it collects medical data that’s not exactly a surprise

The problem isn’t the collecting, it’s who has access to the data.

Unless encryption is advertised as a feature, it’s a safe assumption that vendors that host your data will have access to it, the cloud being someone else’s computer and all that.

Re: Oura says it gets government demands for user data

#148

Post by cybercatgurrl »

jeroenhd wrote: post #144
haritha-j wrote: post #14

Earlier quoted context omitted.

Yeah there's no one I'd trust with my personal data except Apple. Their track record of refusing to bow down to the feds has been golden. 24 carat infact.

While Google has rejected China's terms and moved out of the mainland, China has set up a separate iMessage/iCloud system that complies with the wants and needs of the CCP. They have also abided by the UK's demand to disable E2EE. Apple's resolve is quickly overcome by any threat to their revenue. They're one law away from handing over all of your data to the feds.

apple just can’t pull out of america so you’re likely right. a law mandating a backdoor in america would be the end

Re: Oura says it gets government demands for user data

#149

Post by cybercatgurrl »

GeekyBear wrote: post #98
echelon wrote: post #58

Earlier quoted context omitted.

Maybe, weren't it for the fact that we're having age verification and IDV ("protect the kids"), hardware attestation, removal of 3rd party APKs, etc. heaved upon us. We've never had so many threats to our privacy and liberties heaved upon us, and the rate is accelerating.

Apple certainly lobbied against this stupidity. > Cook conveyed to lawmakers that device-level age assurance proposals should not require the collection of sensitive data like birth certificate or social security number, and that parents should be trusted to provide the age of a child when creating a child's account. Any data used for determining age should not be kept by app stores or developers, according to Apple.…

unfortunately the wisest voices in the room aren’t always the loudest voices

Re: Oura says it gets government demands for user data

#150

Post by kwar13 »

amarant wrote: post #29

What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!

the good old 'i have nothing to hide, therefore it doesn't matter'
Post reply on HN