Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Oura says it gets government demands for user data

this.weekinsecurity.com

Post reply on HN
Print view View original

31–40 of 168 posts

Re: Oura says it gets government demands for user data

#31

Post by munchler »

sz4kerto wrote: post #3

"In my previous blog, I revealed that Oura data is not end-to-end encrypted. That means that an Oura user's health data can be unscrambled at certain points as it travels from a person's ring, through their phone app, over the internet, and as it lands on Oura's servers." Very strange -- it seems to be conflating end-to-end encryption with encryption-in-transit.

My understanding is that E2E encryption implies encryption in transit. The message is encrypted at the source and only decrypted at the destination, so it is encrypted everywhere in between.

Re: Oura says it gets government demands for user data

#32

Post by guilamu »

kator wrote: post #28

All this said I'm more concerned about Automatic Content Recognition (ACR) on smartTV you buy in the store and never even realize it's phoning home with everything you watch...

If you're concerned about that do not give internet to your tv and use any kind of tv box instead (shield tv, apple tv, etc).

Re: Oura says it gets government demands for user data

#33

Post by samatman »

echelon wrote: post #16
haritha-j wrote: post #14

Earlier quoted context omitted.

Yeah there's no one I'd trust with my personal data except Apple. Their track record of refusing to bow down to the feds has been golden. 24 carat infact.

In the US. Apple's policies are flexible when it comes to other nation states. All it takes is a political sea change for E2EE to go away. Apple already has to hand over a wealth of information when asked by the feds.

"Things might change in the future" is a perfectly general statement which applies to any state of affairs which is not restricted by natural law.

That makes it very nearly meaningless.

Re: Oura says it gets government demands for user data

#34

Post by speff »

ck2 wrote: post #10

Oura doesn't even have GPS does it? Government can already get ALL your celltower locations without a warrant AND read all your emails and text messages that are over 6 months old, without a warrant

From what I understand, they can get call records and subscription info w/ administrative subpoenas, but this is the first I've heard of them being able to get location data without a warrant.

Assuming you meant directly from the telcos and not from the data broker loopholes - in which case pretty much anyone should be able to do that. Emails and texts they still need a warrant for.

Re: Oura says it gets government demands for user data

#36

Post by AmblingAvocado »

amarant wrote: post #29

What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!

They used iPhone pick up and orientation data to build a narrative in the trial of Alex Murdaugh, so I imagine something similar.

Re: Oura says it gets government demands for user data

#37

Post by RunningDroid »

mystraline wrote: post #2

I was definitely interested in some sort of comprehensive sensor bundle for my healthcare. But every one of these devices demands some Android/Apple app, and shipping all my health data to basically non-HIPAA data brokers. Id be all over a local-only no-data-exfiltration health tracker. But the companies do NOT want to provide that. I, uh, guess, "go surveillance capitalism", for more choices?

Many times GadgetBridge* can be used instead of the official app

*https://codeberg.org/Freeyourgadget/Gadgetbridge

Re: Oura says it gets government demands for user data

#38

Post by jubilanti »

amarant wrote: post #29

What will the government even do with my heart rate and blood oxygen data? "Mr Smith has been running again, we better bring him in for questioning!" Edit: to be clear, the government is requesting the data, so clearly they're doing something with it... But what? I don't see it!

Target infamously was inferring when teenage girls were pregnant before their parents knew based on reward card data records of single merchant retail purchases.... in 2002.

Tech companies when they speak to VCs: look at all the creepy things we can infer with ooodles of aggregated data and AI to maximize targeted ad revenue, we're worth 50x what an equivalent non-tech company in our sector is valued, because of all the things we can do with all that data from all those people together

Tech companies when they speak to their customers: oh you're so silly to even ask about privacy, what possible utility could there be in that single isolated variable?

Re: Oura says it gets government demands for user data

#40

Post by add-sub-mul-div »

mmh0000 wrote: post #24
basisword wrote: post #5

This is why although I don't love my Apple Watch, I'm not using anything else. It's very sensitive data and Apple is the only company worth trusting with it. They're not perfect but compared to others there's no competition.

You may want to reevaluate. Apple has a great PR (propaganda) department that has convinced many people they respect your privacy. In truth, they do not. They're "better" than Google, but only slightly. And only so slightly that realistically it doesn't matter. "Apple is taking the unprecedented step of removing its highest level data security tool from customers in the UK, after the government demanded access to use…

It's brilliant how they've laundered their "privacy" reputation through Google etc. and people believe it so fully.
Post reply on HN