Live data from Hacker News

Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

nytimes.com

431–440 of 441 posts

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#431

Earlier quoted context omitted.

That's never going to happen. The reason they make so much money is because they're the only ones who have that amount of interconnected user data. Sharing it would be the stupidest thing they could possibly do.

Looks like this is already happening: https://news.ycombinator.com/item?id=12601471

It's a collaborated effort to develop an AI. Where did they announce that they'll share their user data?

So many clueless people are freaking out over this, completely ignoring the fact that sharing user data between companies like that would be highly illegal in many countries and get them fined to hell and back if they were seriously stupid enough to consider it, which they aren't.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#432

Earlier quoted context omitted.

> allusions to fascist governments are made, which would be fine, if these companies were governments. But they aren't: they have no power. It only takes one affected person to know what it's like to be spied on and abused with the information at hand. We don't need an entire country to come to shambles to know what such vast information collection could result in. You also seem to be making assumptions that governme…

>But they aren't: they have no power. Sorry, what? Even if that were true, nothing prevents them in principle from serving as the eyes and ears of a fascist regime. Nothing prevents a government, in principle , from compelling them to reveal sensitive information. At the risk of being conspirational, need I remind you that Facebook was funded by DARPA? Need I remind you that the NSA is installing backdoors in ISPs an…

It looks like you hit reply on my comment by mistake instead of on the parent comment (which was the one that said "But they aren't: they have no power", and I quoted that to add some counterarguments). :)

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#433

Earlier quoted context omitted.

>But they aren't: they have no power. Sorry, what? Even if that were true, nothing prevents them in principle from serving as the eyes and ears of a fascist regime. Nothing prevents a government, in principle , from compelling them to reveal sensitive information. At the risk of being conspirational, need I remind you that Facebook was funded by DARPA? Need I remind you that the NSA is installing backdoors in ISPs an…

It looks like you hit reply on my comment by mistake instead of on the parent comment (which was the one that said "But they aren't: they have no power", and I quoted that to add some counterarguments). :)

whoops! Indeed! :)

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#434

Earlier quoted context omitted.

> I think we can agree at least on one thing. Lack of privacy makes undemocratic regimes more effective (at oppressing people) and possibly longer lasting provided they can actually access any data that people give up to advertisers. Well, yes, but I think it's a mistake to divide the world into "undemocratic regimes" and "democratic paradise". It's a sliding scale and not a binary distinction, and every democracy on…

>> Any negative effect the lack of privacy has on stable democracies seems small and rather speculative in the first place. >How do you know that? I don't claim to know anything with any certainty. That's why I used the word "seems". You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy…

> I don't claim to know anything with any certainty. That's why I used the word "seems".

Sure, I don't expect certainty, just some justification. Are you saying it's just wild speculation on your part?

> You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy fall apart,

First of all, I don't actually make that claim. I can see how you maybe can get the impression from the short version (as I mentioned, it's kinda hard to condense a complex topic into an HN comment), but really, it's a matter of the severity of the possible consequences combined with non-trivial probability. Which is one reason why the comparison to laws regulating how you cannot prove to other people how you voted in an election is an insightful one: Those restrictions don't exist because the probability is particularly high that any given election would be corrupted, they exist because the downside is massive if it happens even once under the wrong circumstances. We make every single election more complicated than usually necessary, in order to help protect against the few cases where the consequences would be catastrophic, even though there is not even remotely a guarantee that that would ever actually happen.

An important question to ask is: Does a stable democracy protect against those risks, or is preventing those risk by other means what keeps the democracy stable?

> and yet you are unable to point to a single stable democracy that has fallen apart for that reason. Your sample size is zero.

May I suggest that your categorization is counterproductive?

Suppose I build a bridge from papier-mâché made from cardboard that was used to package the iphone 7. You might argue that that's not a reliable bridge and it shouldn't be opened to traffic because of the risk that it might collapse, given the track record of papier-mâché and our knowledge of physics. Now, I would reject all your arguments by pointing out that no bridge built from cardboard that was used to package the iphone 7 had ever collapsed and that your sample size is zero, and that we therefore have no clue whether that bridge is a risk to public safety. Would you agree?

It's hardly surprising that that specifically hasn't happened yet, given that the technical developments are relatively new, and some of it is yet to happen. That doesn't mean that we can't draw any conclusions from similarities to other power structures in history, or that we have no clue how current or expected future technology could be abused.

> This is a very common way in which predictions of doom tend to go wrong. Take one aspect, follow it to extreme conclusions as if there were no other variables or counter forces or reactions to what is happening. This isn't logic or consistency.

It seems like you are just filling in the holes in what I wrote with the most idiotic ideas that I could possibly have, and then you pretend that strawman is what I actually wrote.

BTW, as far as I can tell you are making that exact mistake in the opposite direction: You find some aspect that isn't necessarily quite as bad as my simplified model desribes it, as there is some other influencing factor or some counteracting force that could decrease the impact, and from that you conclude that therefore a catastrophe is completely unrealistic.

> And this lack of a good model starts where we haven't even discussed what privacy or private data is in the first place. It's definitely not one thing that you can switch either on or off. We always have to trust someone with some of our data. Much of our "private" data isn't ours exclusively as it may be about interactions with others.

As you say, we haven't discussed it. From that it doesn't follow that my concepts are idiotic.

And yes, I agree that privacy is not a binary distinction, nor is privacy an end in itself, nor is some sort of "total privacy" a sensible goal, let alone achievable.

The root problem is that personally identifiable information confers power. Power is not inherently bad either, nor something that could realistically be avoided completely. But if there is one lesson we as humanity should have learned from history, very much the hard way, it is that concentrations of power are dangerous. There is no clear line between how much concentration of power is harmless and where the danger begins, but it still is quite clear that too much of it in one place/in one person's hands is a terrible idea.

If you think about it, the whole point of democracy (and the rule of law and checks and balances) is to prevent concentrations of power. And we accept a lot of inefficiency in the government, compared to dictatorships, in order to maintain that distribution of power. The laws governing the election process are only a small part of how we build democratic societies with lots and lots of expensive safeguards to prevent the concentration of power.

> The data we give up to advertisers isn't used exclusivly for advertising either. It's also used to provide some of the services we want (like search or spam filtering).

I think most of the data shouldn't really be necessary to achieve a sufficiently similar result.

> "Ban it all!" is neither proportionate nor even possible.

Depends on what exactly you mean by "it all".

> And even if I did follow your argument that giving up any privacy at all makes democracy fall apart, I see no alternatives to advertising that are better for privacy.

Is it intentional that you are equating advertisement and surveillance?

> Just look at the numbers involved and you will quickly find that funding everything like Tor or a few IRC channels is impossible. Donations, self-funding and sponsorship involve payment and are subject to extremely detailed surveillance. There is nothing more heavily regulated and traced than payment and you can be absolutely sure that governments will never allow large anonymous money flows because everything that could fund something like a Google data center could also fund organized crime and terrorism.

Why is it necessarily a big problem that payment is subject to surveillance in this context? How is surveillance of the fact that the average human in the industrialized world pays a certain amount of money per month for telecommunication and data storage services equivalent to surveillance of the contents of their interactions with each other?

Also, who says that we need something like a Google data center?

> That said, I also see a lot of negatives in the excessive and brazen behavior of the ad industry, and I also think there is a need for regulation. A better regulated ad model is our best shot at more privacy and fewer negative externalities.

And I don't think there is one that's going to improve much other than to forbid the collection of personally identifiable information, possibly unless it's completely optional (not in exchange for anything) with requirement for informed consent before any data is collected and with the option to revoke consent at any point, in which case all collected data about a person would have to be deleted immediately.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#435

Earlier quoted context omitted.

>> Any negative effect the lack of privacy has on stable democracies seems small and rather speculative in the first place. >How do you know that? I don't claim to know anything with any certainty. That's why I used the word "seems". You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy…

> I don't claim to know anything with any certainty. That's why I used the word "seems". Sure, I don't expect certainty, just some justification. Are you saying it's just wild speculation on your part? > You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy fall apart, First of all, I do…

Just one last thing from my end on the dangers to democracy. I never said or thought that your bringing this up was idiotic. It is a valid concern that is worth thinking about. I'm just not reaching the same conclusions as you at this point in time.

>Why is it necessarily a big problem that payment is subject to surveillance in this context? How is surveillance of the fact that the average human in the industrialized world pays a certain amount of money per month for telecommunication and data storage services equivalent to surveillance of the contents of their interactions with each other?

If payment wasn't for specific websites or content then it wouldn't be a privacy problem at all. But how does that money get allocated fairly to individual websites without putting governments (or someone else?) in a position to say yay or nay to funding pornhub.com or alt.com?

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#436

Earlier quoted context omitted.

> I don't claim to know anything with any certainty. That's why I used the word "seems". Sure, I don't expect certainty, just some justification. Are you saying it's just wild speculation on your part? > You are the one who is making extraordinary claims based on extremely thin evidence. You are claiming with great certainty that giving up any private data to advertisers makes democracy fall apart, First of all, I do…

Just one last thing from my end on the dangers to democracy. I never said or thought that your bringing this up was idiotic. It is a valid concern that is worth thinking about. I'm just not reaching the same conclusions as you at this point in time. >Why is it necessarily a big problem that payment is subject to surveillance in this context? How is surveillance of the fact that the average human in the industrialized…

> If payment wasn't for specific websites or content then it wouldn't be a privacy problem at all. But how does that money get allocated fairly to individual websites without putting governments (or someone else?) in a position to say yay or nay to funding pornhub.com or alt.com?

... which is a completely different problem than funding services such as those provided by facebook and the benefits in terms of communication possibilities those services provide.

One problem is the funding of infrastructure, another problem is the funding of the production of "content". Those happen to be intertwined a lot at the moment, but that's not a technical necessity, but rather a result of the current business models that build on surveillance (and the creation of de-facto monopolies and the subsequent potential for vendor lock-in).

It would be relatively unproblematic to fund development of infrastructure with donations or even tax money--think development of open standards/protocols and possibly reference implementations of those protocols. Then, it's unproblematic for most people to pay directly for the operational costs of processing and storing their own data (that is, computers running implementations of those protocols, storage devices, bandwidth). None of that requires anyone to have any access to or control over the actual content that people communicate. For that aspect, there is no need to have "websites". The central entity is completely unnecessary, you simply pay directly for the actual costs of the technology without the need to reveal anything about what you communicate or process or store.

As for the funding of content production: I think we have to have some possibility to pay for that anonymously if we want to keep democracy stable. We can buy newspapers with cash without leaving much of a trace in anyone's database as to which paragraphs of which articles we read. Letting terrorism paranoia destroy that would be a terrible idea. Also, as I have repeatedly said, I don't understand why you seem to be constantly equating advertisement and surveillance. Just because you can use surveillance to make advertisement more efficient, doesn't mean that advertisement without surveillance is useless.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#437

Earlier quoted context omitted.

I misunderstood what you were uncomfortable with, I thought you were uncomfortable on your friend's behalf that FB was showing his other friends that he liked an article. But I'd like to better understand where you're coming from, because personally, I wouldn't be bothered by the relationship between the site and FB while I was logged into FB. If FB's algorithm knows I visited a specific site and uses that to improve…

I'm curious how you find it not creepy. Imagine every company you every interacted with spawned a flea sized drone to spy on you at all times. Are you saying you would not find that creepy? Sure, they could potentially provide you with better service by spying on you 100% of the time. Would you accept that trade off? I'm curious why is FB knowing every site I visit (or every site that has FB related analytics/ads/com…

I don't find it creepy because no person in FB doesn't actually know it is me, to them I'm a number in an algorithm. The only way it could become creepy is if they publicly associate my name with the actions and start displaying this information publicly, but I trust them not to complete suicide by taking that action, just like I trust that my ISP won't post all my info somewhere with a history of all the sites that I visit.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#438

Earlier quoted context omitted.

Just one last thing from my end on the dangers to democracy. I never said or thought that your bringing this up was idiotic. It is a valid concern that is worth thinking about. I'm just not reaching the same conclusions as you at this point in time. >Why is it necessarily a big problem that payment is subject to surveillance in this context? How is surveillance of the fact that the average human in the industrialized…

> If payment wasn't for specific websites or content then it wouldn't be a privacy problem at all. But how does that money get allocated fairly to individual websites without putting governments (or someone else?) in a position to say yay or nay to funding pornhub.com or alt.com? ... which is a completely different problem than funding services such as those provided by facebook and the benefits in terms of communica…

>which is a completely different problem than funding services such as those provided by facebook

It's not a different problem at all. Facebook is not infrastructure. They provide content and communication services that many find useful but not everyone does. It's exactly the same with porn.

> As for the funding of content production: I think we have to have some possibility to pay for that anonymously if we want to keep democracy stable.

Good luck with that. So far it hasn't worked on digital platforms and I fear it never will. There is very little governments pursue as vigorously as cracking down on unexplained money flows. They will stamp out anything that reaches mass appeal with an iron fist.

Also, making people pay for everything puts poor people at a great disadvantage.

>Also, as I have repeatedly said, I don't understand why you seem to be constantly equating advertisement and surveillance.

That's right, I have been doing that. Mainly because the link between advertising and wanting to know as much as possible about potential buyers is very strong indeed. Advertisers will always be highly motivated to find ways around any ban. It's unenforceable.

You may ask why I am so confident that governments are able to enforce a ban on anonymous payments and so pessimistic about them enforcing a ban on ad targeting. It's because there aren't that many payment networks and they are highly regulated in the first place.

Financial sector regulation is extremely deep. You can't regulate millions of service/content providers worldwide in the same way. It would take enormous resources and international treaties that take decades to negotiate. In the end you would have something that doesn't just enforce an ad targeting ban but also provides ideal opportunities for censorship.

If you enforce a ban only for the big US based internet companies, then others will will quickly take over their ad business. If Baidu and Yandex can show us personalized ads but Google and Facebook can't, then ad money is going to Baidu and Yandex and they are going to subsidise mobile phones and other free offerings. It's not going to be long until we're back to square one in terms of privacy.

But I do think it is possible to force the biggest internet companies to not use some particularly privacy hostile practices like real name policies, browser fingerprinting and a couple of others. The goal should be to let them target ads all they want, but allow people to unlink their real identity from that ad targeting profile.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#439

Earlier quoted context omitted.

But do they need to warn you? I always assume that the information I send to a server is being stored forever by its owner, unless he tells me otherwise. If Whatsapp said it wouldn't share user info and dit it without informing users then yes it should be punished for it and prevented from doing so. But as far as I understand what happened was a TOS upgrade. Don't like it, go to Telegram.

Think about it this way: You get a product, its free to use. The Company running the service is telling you, they wont share your data ever. You get reliant to the product, everyone uses it. Then they start sharing your data.

Then their breaking a contract and should be prosecuted for it. But I don't remember that.

Re: Facebook Ordered to Stop Collecting Data on WhatsApp Users in Germany

#440
post #419

Earlier quoted context omitted.

> Without a license, copyright law forbids you from downloading and running an application That is an idiotic interpretation of copyright that has only been upheld in some court cases. The only copy being made by the user is the transient "copy" in memory. Selling someone a download to use as software while later claiming the necessary and transient copy in memory is a violation of copyright is simply fraud at the po…

> The only copy being made by the user is the transient "copy" in memory. I'm not talking about that. The user is making a permanent copy on disk when downloading. IIUC this has been ruled by various courts to require a copyright holder's permission. Some courts and countries disagree and say that only uploading is illegal. Some countries say that downloading is illegal but not criminal, and do not prosecute people f…

> I'm not talking about that. The user is making a permanent copy on disk when downloading.

The copy was made by the party that distributed it to the user, which was implicitly authorized by the fact that they sold it to the user.

> IIUC this has been ruled by various courts to require a copyright holder's permission.

This is wrong on several levels. First, no copy is being made by the user. Second, copyright only applies when copies are made and distributed. Third, no court has ruled that copyright even applies to the user when a copy sold by the copyright holder.

Please read about basic copyright law if you want to argue on this topic.

> Some countries

I can only speak about US law.

> the apparent illegality of downloading

Downloading is never a violation of copyright. Clearly you have never read anything about copyright and it's history.

> ordinary users often do create copies

That would be a violation of copyright, but recent rulings have ruled that transient copies that are a temporary and part of the normal technical process of using the software (such as RAM copies) are not a "copy" as far as copyright is concerned.

> Wikipedia logs edits, including IPs for anonymous ones.

Are you being obtuse on purpose? There is an obvious difference between voluntary edits made by the user, who is necessarily aware that Wikipedia will record when and what you edit as part of the editing process, and unknown "telemetry" or "analytics" that happen invisible to the user and may apply to data that was not directed at Facebook/etc. Obviously Wikipedia will log your edit; that's the intended result. Facebook reading messages you sent to your friend is spying that requires informed consent.

> We don't have good estimates of the future risk of sharing data now

We know they can be incredibly damaging right now, and I don't see this risk getting any smaller in the future. It will only get easier to de-anonymize data.

> the correct action wasn't necessarily not to sell or buy any electrical products

Of course. The moral action would have been to sell products that err on the side of caution, even if that makes them more expensive or less usable. To do otherwise is to willingly risk your customer's safety.

How about this: if you are so sure the risk is acceptable, you should indemnify your users against any future problems that result from data collection and sharing. If you think this is unreasonable, then you're admitting the risk is too large and you simply want the user to bear that risk. On the the other hand, if you think this risk is fine, then you shouldn't have any problem accepting liability.

Post reply on HN