191–200 of 205 posts
Earlier quoted context omitted.
As noted, the company can sell it however. Which is even easier than a search, which typically requires paperwork.
They can, yes. But this is a legal loophole that the government abuses to circumvent a warrant required by the 4th amendment.
Earlier quoted context omitted.
Apple and Google are facilitating the data sales Specifically, these big companies revenue share with app companies who in turn increase monetization via selling your private information, esp via free apps. In exchange for Apple etc super high app store rake percentage fees, they claim to run security vetting programs and ToS that vet who they do business with and tell users & courts that things are safe, even when t…
I'm game for throwing rocks at Apple and Google, but I don't get this one. > consumer apps embed ad SDKs → those SDKs feed location signals into RTB ad exchanges → surveillance-oriented firms sit in the RTB pipeline and harvest bid request data even without winning auctions Would you ban ad supported apps? Assuming the comment you're responding to is realistic, I'm not sure how the OS is to blame.
If I was simultaneously also the owner of the ad platform, I'd fix it & knock out the bad players, or get ready to be sued for a decade+ of knowing malpractice
And if I was a US citizen seeing the companies being involved be sued for being monopolies and abusing their position, and then seeing them cry security in court yet knowingly do this for a decade+, I'd feel frustrated by successive left + right US administrations & voters
Earlier quoted context omitted.
Apple and Google are facilitating the data sales Specifically, these big companies revenue share with app companies who in turn increase monetization via selling your private information, esp via free apps. In exchange for Apple etc super high app store rake percentage fees, they claim to run security vetting programs and ToS that vet who they do business with and tell users & courts that things are safe, even when t…
I'm game for throwing rocks at Apple and Google, but I don't get this one. > consumer apps embed ad SDKs → those SDKs feed location signals into RTB ad exchanges → surveillance-oriented firms sit in the RTB pipeline and harvest bid request data even without winning auctions Would you ban ad supported apps? Assuming the comment you're responding to is realistic, I'm not sure how the OS is to blame.
Earlier quoted context omitted.
What if an investigation is based on finding the same specific people near another specific person that they're tracking, but they only know about the one person, not the others. And by doing this they stop a terror attack? One more thought - if they buy just data for specific people related to an investigation, the seller of the data is tipped off. If they just buy all the data, then there is no potential tip-off to…
You get a "geofence warrant." They exist and are ubiquitous. You then go to Google or any other provider and you demand the data for a specific location in a specific time window. You then use the data to capture criminals. Any other data would not meet the standards of evidence and probably couldn't be used in court anyways. It's only function is for "parallel construction." Then again, what I _really_ want is for t…
I'd really like to just have legislation to treat location data like audio or video under wiretapping provisions. If you collect my location info and convey it to a third party without my consent or a reasonable good-faith belief that I would consent, that ought to be treated similarly to recording without consent. And consent needs to be granted explicitly for each party that might get access to my location, you can…
In one-party states the consenting party has to be the one who makes the recording. In all-party-consent states, the verbal declaration that a recording is happening has to be part of the recording. It has to be verbal, so there is no "fine print loophole" -- you have to waste 2-3 seconds of everybody's time saying it out loud.
I like your idea, but the wiretap laws work so smoothly because they bootstrap off of things like "conversation participant" and "verbally granted in the recording itself" that don't carry over to location data.
Earlier quoted context omitted.
Yes. But AFAIK, not an unconstitutional one. Wyden agrees with you: > Wyden said buying information on Americans without obtaining a warrant was an “outrageous end-run around the Fourth Amendment,” America needs privacy laws for this reason (or an amendment, but good luck ). Vote when November rolls around; the other piece is finding Democrats that will take an actual stance on privacy closer to Wyden's.
I think that the problem is that it absolutely does violate the constitution, we just have judges willing to defend it and say otherwise even when it clearly allows for exactly what the fourth amendment was intended to prevent.
Now, again, I don't necessarily agree with that position: many companies here are monopolies, or their market has so little competition that all their competitors do it as well. Also, with no downside to it, I don't see why a company isn't going to sell their customers' data, and if not them, then some company that might acquire them down the road. Futher, some companies even just outright lie to customers about this.
But again, the current government is unwilling to enforce any sort of extant consumer protection law, and much of the above boils down to "… because America has no privacy laws." So, we're back to "if you want it, vote for it". The GOP is fundamentally opposed to regulation of business, but even the Democrats have been really tepid around privacy laws and consumer protection.
Earlier quoted context omitted.
I'm game for throwing rocks at Apple and Google, but I don't get this one. > consumer apps embed ad SDKs → those SDKs feed location signals into RTB ad exchanges → surveillance-oriented firms sit in the RTB pipeline and harvest bid request data even without winning auctions Would you ban ad supported apps? Assuming the comment you're responding to is realistic, I'm not sure how the OS is to blame.
I would ban apps using unsafe ad platforms If I was simultaneously also the owner of the ad platform, I'd fix it & knock out the bad players, or get ready to be sued for a decade+ of knowing malpractice And if I was a US citizen seeing the companies being involved be sued for being monopolies and abusing their position, and then seeing them cry security in court yet knowingly do this for a decade+, I'd feel frustrate…
Earlier quoted context omitted.
This is really simple to explain: Apple does not let you restrict app network access[1] You have no ability to know who your app is connecting to, and you cannot select or prevent it. [1] except maybe the cellular data toggle
Settings > Privacy & Security > App Privacy Report will at least show domains contacted by each app.
Earlier quoted context omitted.
how about jailing CEO's of companies who do this?
I’m not sure that’s how corporate blame works. The ceo signed off on the CIOs proposal to streamline data analytics logs via WeTotallyWontSiphonOffYourDataAndSellIt incorporated for user improvement purposes, which happens to be owned by the CFO’s brother in law. How were the CIO and CEO to know that a third party was selling off the data, and how was that third party to know that the sale of the data to another part…
In regulated industries, like finance and taxation, regulators deliberately assign responsibility to individuals, so misconduct doesn’t get lost inside the company or within its corporate stakeholder network. That removes a lot of friction once you want to hold someone liable.
I've read our parents comment as an implicit proposal to establish similar structures in tech.
Earlier quoted context omitted.
Answering my own question, they need a way for users to grant location permission only to the primary app and not any of its dependencies, as once you grant it, it's available to all code in the app. It would be great if there was some way to separate those. They could also better enable network traffic inspection on device, so we could tell where data is going. LittleSnitch on iOS would be great.
IP is often enough to correlate things. LittleSnich or whatever is no help - oftentimes data is collected by the app/site directly, and then funneled to various systems via kafka-like brokers. In this case you always have only cobbections to something like cool-application-domain.au