Live data from Hacker News

Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

nytimes.com

421–430 of 441 posts

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#421

Earlier quoted context omitted.

> Your logic is flawed. You are reversing cause and effect. Where there is a lack of democracy, privacy is often taken away in order to make it easier to oppress political opponents. But giving up some privacy in exchange for services doesn't make that happen. Your logic is flawed. You are reversing cause and effect. There simply is no unidirectional causation between lack of privacy and lack of democracy. Obviously,…

I think we can agree at least on one thing. Lack of privacy makes undemocratic regimes more effective (at oppressing people) and possibly longer lasting provided they can actually access any data that people give up to advertisers. I'm not convinced that this is reason enough to ban advertising based business models in democratic countries. We can't live our lives preparing for the day democracy ceases to exist. Any…

> I think we can agree at least on one thing. Lack of privacy makes undemocratic regimes more effective (at oppressing people) and possibly longer lasting provided they can actually access any data that people give up to advertisers.

Well, yes, but I think it's a mistake to divide the world into "undemocratic regimes" and "democratic paradise". It's a sliding scale and not a binary distinction, and every democracy on earth has some rather undemocratic stuff going on.

> I'm not convinced that this is reason enough to ban advertising based business models in democratic countries.

Not advertising based business models, but surveillance based business models.

> We can't live our lives preparing for the day democracy ceases to exist.

The point isn't to prepare for the day democracy ceases to exist, but to prevent it from ceasing to exist. Why can't we do that?

> Any negative effect the lack of privacy has on stable democracies seems small and rather speculative in the first place.

How do you know that?

> I don't believe it's a real threat. You do believe that. So we're going to have to agree to disagree on that one.

Nope, we don't have to "agree to disagree". I don't just believe that because I believe that, I believe that for what I think are good reasons, which can be examined for their logical consistency and for consistency with reality/evidence. Now, possibly you aren't interested in doing that, which is your decision to make, but that's not some kind of unavoidable fate, it's simply your disinterest in the matter.

> Also, I'm not convinced that globally the effect of Facebook, Google or Twitter on democracy is a negative one. On the contrary. Free services provided by overseas companies are often the only way for people in undemocratic countries to get around their local police state. Pay services are even more at odds with privacy than ad based business models.

Possibly. Though it should be noted that free services do not necessarily have to be surveillance-based services. There are lots of free to use IRC networks, for example. Or Tor is also free to use. But those are not surveillance-based offerings. And not even advertisement has to be surveillance-based.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#422
post #391

Earlier quoted context omitted.

It's not about outright banning, it's about limiting to the minimum amount required to perform the service. Btw. nobody complains about WhatsApp holding metadata about connections between people. We complain about WhatsApp transmitting this data in a quite hidden fashion to Facebook.

>It's not about outright banning, it's about limiting to the minimum amount required to perform the service That's not how the German government is defining their ban. >We complain about WhatsApp transmitting this data in a quite hidden fashion to Facebook. FB announced last month [1] that they were sharing specific types of data between Whatsapp and FB. That's not "hidden". [1] http://www.nytimes.com/2016/08/26/tech…

An article in NY Times does not help to make it less hidden, particularly for German users. What is required is to inform every user individually and ask for his/her permission to transmit the data to another party. Explicit permission (= informed consent) is necessary because this data transfer is not required to perform the service (see above).

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#423
post #374

Earlier quoted context omitted.

And yet Germany operates a massively well-funded federal security service that is conducting exactly that sort of mass surveillance today -- only now far more sophisticated than even Facebook, since they can surveil the entire Internet, in exactly the same manner as the NSA does. Other European countries are doing the same. It's at best naive and at worst hypocritical to pretend that Europeans care so much more about…

What a "democratically elected" government does and what private people think is acceptable are not necessarily the same thing. There's often a surprisingly strong discrepancy between government action and the will of the people. Also, a lot of people feel that the government (in a Western/Northern European country) is mostly trying to protect its society even if some actions are misguided, while it's hard to make a…

The original thesis I was responding to was the theory that, due to historical experiences, Europeans are somehow much more concerned with personal privacy (in general) than others, which is is empirically false.

State versus corporate surveillance was not the topic. Europeans may indeed be more mistrustful of corporations than others, I don't know; but Europeans are clearly not so concerned about personal privacy in general as compared to others (though they seem to like to believe that they are.)

The BND, and its local equivalents in other European countries, are now openly conducting mass surveillance and citizen profiling on a scale that neither the Stasi nor Facebook could ever dream of achieving. Most of the citizens of Europe don't seem to care much at all about this. Therefore, the theory that Europeans are especially privacy-conscious as compared to others is false.

Incidentally, with corporate surveillance, you (at least in theory) have the option to simply not use that corporation's products. You can't opt out of state surveillance.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#424

Earlier quoted context omitted.

I didn't click "like". I didn't in any way directly interact with Facebook. I googled articles on loneliness, picked one, read it. When I got to the bottom without clicking anything I was effectively informed that Facebook knew and recorded I had just read the article.

I misunderstood what you were uncomfortable with, I thought you were uncomfortable on your friend's behalf that FB was showing his other friends that he liked an article. But I'd like to better understand where you're coming from, because personally, I wouldn't be bothered by the relationship between the site and FB while I was logged into FB. If FB's algorithm knows I visited a specific site and uses that to improve…

I'm curious how you find it not creepy. Imagine every company you every interacted with spawned a flea sized drone to spy on you at all times. Are you saying you would not find that creepy?

Sure, they could potentially provide you with better service by spying on you 100% of the time. Would you accept that trade off?

I'm curious why is FB knowing every site I visit (or every site that has FB related analytics/ads/comments/like buttons/etc) embedded not creepy to you?

I get that when I visit the GAP or Target or Walmart there are security cameras. I get that they could use that info to decide how to better arrange the store. I get that they could even do something like notice what I'm looking at, put displays on the aisles and beam useful help/ads at me (I see you're looking at diapers, maybe you'd like some wet tissue on aisle 3)

But I'd find it creepy if their surveillance extended outside their store. I'd find it creepy if they could partner with every security camera with every other store. I look at shoes at Ecco an get a message from Walmart "We noticed you looking at shoes. We have lots of shoes on sale!" or "We saw you looked at jackets at Nordstroms. Your friend liked that green one you looked at".

Why is that any less creepy when I visit non-FB websites?

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#425

Earlier quoted context omitted.

I think we can agree at least on one thing. Lack of privacy makes undemocratic regimes more effective (at oppressing people) and possibly longer lasting provided they can actually access any data that people give up to advertisers. I'm not convinced that this is reason enough to ban advertising based business models in democratic countries. We can't live our lives preparing for the day democracy ceases to exist. Any…

> I think we can agree at least on one thing. Lack of privacy makes undemocratic regimes more effective (at oppressing people) and possibly longer lasting provided they can actually access any data that people give up to advertisers. Well, yes, but I think it's a mistake to divide the world into "undemocratic regimes" and "democratic paradise". It's a sliding scale and not a binary distinction, and every democracy on…

>> Any negative effect the lack of privacy has on stable democracies seems small and rather speculative in the first place.

>How do you know that?

I don't claim to know anything with any certainty. That's why I used the word "seems". You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy fall apart, and yet you are unable to point to a single stable democracy that has fallen apart for that reason. Your sample size is zero.

>I believe that for what I think are good reasons, which can be examined for their logical consistency and for consistency with reality/evidence.

I have examined your reasons, and even though I can follow you on many individual details, I find your main conclusion contrived, exaggerated and inconsistent with the thin evidence we have. You are overstating your case.

This is a very common way in which predictions of doom tend to go wrong. Take one aspect, follow it to extreme conclusions as if there were no other variables or counter forces or reactions to what is happening. This isn't logic or consistency.

And this lack of a good model starts where we haven't even discussed what privacy or private data is in the first place. It's definitely not one thing that you can switch either on or off. We always have to trust someone with some of our data. Much of our "private" data isn't ours exclusively as it may be about interactions with others. The data we give up to advertisers isn't used exclusivly for advertising either. It's also used to provide some of the services we want (like search or spam filtering).

"Ban it all!" is neither proportionate nor even possible.

And even if I did follow your argument that giving up any privacy at all makes democracy fall apart, I see no alternatives to advertising that are better for privacy.

Just look at the numbers involved and you will quickly find that funding everything like Tor or a few IRC channels is impossible. Donations, self-funding and sponsorship involve payment and are subject to extremely detailed surveillance. There is nothing more heavily regulated and traced than payment and you can be absolutely sure that governments will never allow large anonymous money flows because everything that could fund something like a Google data center could also fund organized crime and terrorism.

That said, I also see a lot of negatives in the excessive and brazen behavior of the ad industry, and I also think there is a need for regulation. A better regulated ad model is our best shot at more privacy and fewer negative externalities.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#426

Earlier quoted context omitted.

The funniest part will begin when Google start sharing user data with Facebook and vice versa, for mutual benefit. Perhaps only then regular users will start thinking about privacy.

That's never going to happen. The reason they make so much money is because they're the only ones who have that amount of interconnected user data. Sharing it would be the stupidest thing they could possibly do.

Looks like this is already happening: https://news.ycombinator.com/item?id=12601471

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#427
post #269
post #168

Earlier quoted context omitted.

Telegram's weak points, as far as I can tell: * chats not end-to-end encrypted by default (only secure chats), so clear text is on their servers * group chats can't be secure chats * the crypto is somewhat unconventional. While the developers had their reasons (constraints of mobile platforms), and no exploit has been found so far, AFAIK, any self-rolled crypto is a bit of a red flag to cryptographers. * I have no re…

Wire does not use Signal Protocol. They use a protocol of their own devising that we do not recommend.

https://github.com/wireapp/wire#proteuscryptobox for info on Proteus/Cryptobox that Wire uses.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#428
post #374

Earlier quoted context omitted.

What a "democratically elected" government does and what private people think is acceptable are not necessarily the same thing. There's often a surprisingly strong discrepancy between government action and the will of the people. Also, a lot of people feel that the government (in a Western/Northern European country) is mostly trying to protect its society even if some actions are misguided, while it's hard to make a…

The original thesis I was responding to was the theory that, due to historical experiences, Europeans are somehow much more concerned with personal privacy (in general) than others, which is is empirically false. State versus corporate surveillance was not the topic. Europeans may indeed be more mistrustful of corporations than others, I don't know; but Europeans are clearly not so concerned about personal privacy in…

There's a difference between "concerned with personal privacy" and "privacy-conscious". Europeans, like people pretty much anybody in the world, are oblivious, ill-informed or simply don't care about what goes on above their heads or behind their backs. People just want to live their lives.

But when revelations and news reports bring up issues concerning privacy violations – by the state, other countries or companies – it does invoke memories and provoke visceral responses. A lot of Europeans are not totally apathetic to privacy concerns, especially when brought to their attention.

And Europeans are somewhat irritated with the freedom given to big corporations and (lack of) free market regulation in the US, lumped in with Wall Street and banking systems. In a sense, simplistically put, our current governments are (with) us, while some of those internet giants are billboards of unfettered capitalist excess, trying to exploit us.

In short, I do think a lot of Europeans are more concerned about privacy than Americans, once it gets on their radar; and it's always worse when it's done by somebody far away.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#429

Earlier quoted context omitted.

Absolutely true for older generations, but among those under, say, forty years of age, the 'I don't have anything to hide' fallacy is alive and well just as anywhere else. I'm German and it's been a huge ordeal to get my closest friends to migrate to Telegram at least. Signal was debated, but the lack of a good desktop client killed it. XMPP and IRC and all, not with these guys. Germany has some vocal proponents of p…

> it's been a huge ordeal to get my closest friends to migrate to Telegram at least. Signal was debated, but the lack of a good desktop client killed it. I realize it's difficult to get people to change messaging platforms, but if you have such a chance again after sometime , I would suggest trying out Wire [1] sometime. I have been recommending it over the last few months for people to try because it has superior UX…

They claim that they are "Open source", yet they don't distribute any binaries built only with code they made public.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#430
post #419

Earlier quoted context omitted.

> None of those licenses are for the user of the software Of course licenses are for the user! Without a license, copyright law forbids you from downloading and running an application, let alone copying it to your other PC or emailing a copy to your friend. Addressing copyright law doesn't makes licenses longer, it makes them exist in the first place. It's true that the GPL talks about some additional things like acc…

> Without a license, copyright law forbids you from downloading and running an application That is an idiotic interpretation of copyright that has only been upheld in some court cases. The only copy being made by the user is the transient "copy" in memory. Selling someone a download to use as software while later claiming the necessary and transient copy in memory is a violation of copyright is simply fraud at the po…

> The only copy being made by the user is the transient "copy" in memory.

I'm not talking about that. The user is making a permanent copy on disk when downloading. IIUC this has been ruled by various courts to require a copyright holder's permission.

Some courts and countries disagree and say that only uploading is illegal. Some countries say that downloading is illegal but not criminal, and do not prosecute people for it. But, IIUC, they are in the minority.

Naturally, the fact that this is so does not imply that I like it being so or that I want it to keep being so.

> Do not confuse use of software (or any other creative work) with copying. You seem to be intentionally conflating these terms,

I am not conflating them. In addition to the apparent illegality of downloading, ordinary users often do create extra copies, and that is another reason the copyright license affects them.

> As far as I know, there isn't any hidden safety risk associated with editing Wikipedia.

Wikipedia logs edits, including IPs for anonymous ones. (This includes inter-user discussion on talk pages and the like.) They probably expose this data in aggregate form in their periodical database dumps (though I haven't checked). A person's edit history can contribute to building a profile of their online activity and their life and beliefs, just like their Facebook posts or Whatsapp messages.

> The precautionary principle cautions that when you don't know the risk, you should take the safer path.

We don't have good estimates of the future risk of sharing data now (as you agree above). We don't want to blindly maximize security either - both of us are posting personal opinions here on Hacker News. Without good risk estimates, people will keep disagreeing greatly on how much risk to take, and many of them will prove wrong in their predictions or hopes for the outcome - but we don't know in which direction.

To go with your analogy, it's good that Underwriters Laboratories exists. But before it existed, the correct action wasn't necessarily not to sell or buy any electrical products. People had to make their own decisions somehow.

Post reply on HN