The wakeup really is not whether it is the NSA or anyone else buying the data, it’s about the companies providing the data to the data brokers, who on-sell it. I, just this week, reported a company who state don Google Play Store that they don’t send data to 3rd parties, and where in their Privacy Policy on their website state in numerous places where and how they send data to 3rd parties (they actually use the words 3rd parties). I also sent them an e-mail highlighting the contradiction.
The fact is they rely on us not digging any deeper than the superficial statement. Whatsapp and Facebook do really deep level metadata analysis, yet they focus only on actual message content not being harvested. It is smoke and mirrors…
Now the real question is: Is it maybe actually even cheaper to buy them from these tech giants instead paying the people to do the paperwork and get a warrent?
It 100% is more tax efficient and effective than going through the judicial system for every single warrant they want to execute. Can’t blame them for that.
This is close to the real problem. If the NSA is able to buy it without a warrant, that means it’s effectively public information about you that is collected and published without your consent (regardless of what it says deep inside a privacy policy that you are forced to accept to continue). If that information is useful to the NSA, then it shouldn’t be legal for that information to be collected without benefit to the user or sold at all, aggregated or not.
From experience, GDPR and CCPA requests are taken very seriously at large tech companies at least, since they’re the most likely ones to be audited or monitored for compliance.
The smaller ones might not care as much, especially if they don’t have a major presence in jurisdictions that have such laws.
However, this article is about data brokers (companies like Acxiom). I’m not sure if those companies properly handle CCPA requests at they’re kinda sketchy.
Nah, it should be the default state of affairs. Data mining is stalking and theft. It centers around very poor logic and decisions.
Things like browser cookies are criminal garbage. Storing anything on a user’s computer is stalking. Draw the parallel here; if you want to shop in any local store, I want you to first tell me everything you are wearing and carrying in a way that I can tell every possible detail about it, tell where you came from before you visited this store, where you are going next. They also want to know everything you looked at, how you react to changes in items presented to you and changes in prices. They want enough information to connect you across stores based on your mode of transportation, and have enough data to connect your habits over the last two decades.
Your digital existence should not be subject to slavery either. Ownership over ourselves is a vital aspect of freedom. Privacy is about ownership and dominion. If you dislike all the digital rights management and subscription services nonsense, these exist now as a direct result of people neglecting ownership. In the big picture, this path leads all of humanity back into another age of feudalism. The only difference between a serf and a citizen is ownership over property and tools. Everything happening right now is a battle over a new age of slavery. “You will own nothing and you will be happy about it.” Eventually this turns into 'Your grandchildren will own nothing and say nothing or they will be dead about it." What you do about your privacy now will be a very big deal from the perspective of future generations.
Cookies are an important part of the internet. The misconception that cookies were added to browsers to track people is why websites that operate in Europe are always bothering you about necessary cookies. You’re talking about third-party cookies and analytics tools, which don’t even need cookies at all to track exactly what you’re doing on a single site. Without cookies (or cookies reimplemented using client-side storage APIs instead of regular cookies), websites cannot keep you logged in or remember what you have in your shopping cart or any sort of preferences you have set.
At least in the US, don’t assume that local stores aren’t collecting the same information using cameras and credit card numbers and device trackers (eg if the store has free wifi, which sections of the store are wifi client devices in?).
Cookies are not needed. They are shifting the security onto the user. Secure the information on the server just like any other business. Offloading onto the client is wrong. It leads to ambiguity and abuses. Visiting a store and a business on the internet are no different. My presence gives no right to my person, searches, or tracking in the location or outside of it. Intentions are worthless. The only thing that matters is what is possible and practiced. Every loophole is exploited and should be mitigated. The data storage and coding practices must change.
Note that they’re buying data from data brokers - companies like Acxiom, Epsilon Data Management, CoreLogic, Equifax Information Services, etc. These companies are primarily in the business of collecting data and selling it.
They’re not buying data from companies like Google and Facebook. Those companies don’t actually sell your data; they sell ads that are targeted using the data.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
That was a good reminder to request my old Pokémon Go account and data to be deleted. Cheers.
The NSA benefits greatly from knowing how many Pidgeys you’ve got, you’re right
As well as the the important number of Pidgeys, they also get the locations on where exactly to find said Pidgeys/me.
I feel like I shouldn’t be shocked by this. I feel this is kind of obvious that if there’s data for sale then intelligence agencies which just buy it.
The wakeup really is not whether it is the NSA or anyone else buying the data, it’s about the companies providing the data to the data brokers, who on-sell it. I, just this week, reported a company who state don Google Play Store that they don’t send data to 3rd parties, and where in their Privacy Policy on their website state in numerous places where and how they send data to 3rd parties (they actually use the words 3rd parties). I also sent them an e-mail highlighting the contradiction.
The fact is they rely on us not digging any deeper than the superficial statement. Whatsapp and Facebook do really deep level metadata analysis, yet they focus only on actual message content not being harvested. It is smoke and mirrors…
I feel like Ars left out the end of the title: “…with your tax dollars.”
I guess it was implied though.
Now the real question is: Is it maybe actually even cheaper to buy them from these tech giants instead paying the people to do the paperwork and get a warrent?
Because that would be sad af
It 100% is more tax efficient and effective than going through the judicial system for every single warrant they want to execute. Can’t blame them for that.
Sure I can. This isn’t Oceania. We have a process for a reason.
Need to make selling aggregated personal information illegal.
This is close to the real problem. If the NSA is able to buy it without a warrant, that means it’s effectively public information about you that is collected and published without your consent (regardless of what it says deep inside a privacy policy that you are forced to accept to continue). If that information is useful to the NSA, then it shouldn’t be legal for that information to be collected without benefit to the user or sold at all, aggregated or not.
Sure, just do what California did via the CCPA and CPRA.
You can opt out of that party selling your data.
How do we opt out?
We’re still trying to figure out if that actually does anything.
From experience, GDPR and CCPA requests are taken very seriously at large tech companies at least, since they’re the most likely ones to be audited or monitored for compliance.
The smaller ones might not care as much, especially if they don’t have a major presence in jurisdictions that have such laws.
However, this article is about data brokers (companies like Acxiom). I’m not sure if those companies properly handle CCPA requests at they’re kinda sketchy.
Nah, it should be the default state of affairs. Data mining is stalking and theft. It centers around very poor logic and decisions.
Things like browser cookies are criminal garbage. Storing anything on a user’s computer is stalking. Draw the parallel here; if you want to shop in any local store, I want you to first tell me everything you are wearing and carrying in a way that I can tell every possible detail about it, tell where you came from before you visited this store, where you are going next. They also want to know everything you looked at, how you react to changes in items presented to you and changes in prices. They want enough information to connect you across stores based on your mode of transportation, and have enough data to connect your habits over the last two decades.
Your digital existence should not be subject to slavery either. Ownership over ourselves is a vital aspect of freedom. Privacy is about ownership and dominion. If you dislike all the digital rights management and subscription services nonsense, these exist now as a direct result of people neglecting ownership. In the big picture, this path leads all of humanity back into another age of feudalism. The only difference between a serf and a citizen is ownership over property and tools. Everything happening right now is a battle over a new age of slavery. “You will own nothing and you will be happy about it.” Eventually this turns into 'Your grandchildren will own nothing and say nothing or they will be dead about it." What you do about your privacy now will be a very big deal from the perspective of future generations.
Cookies are an important part of the internet. The misconception that cookies were added to browsers to track people is why websites that operate in Europe are always bothering you about necessary cookies. You’re talking about third-party cookies and analytics tools, which don’t even need cookies at all to track exactly what you’re doing on a single site. Without cookies (or cookies reimplemented using client-side storage APIs instead of regular cookies), websites cannot keep you logged in or remember what you have in your shopping cart or any sort of preferences you have set.
At least in the US, don’t assume that local stores aren’t collecting the same information using cameras and credit card numbers and device trackers (eg if the store has free wifi, which sections of the store are wifi client devices in?).
You don’t need to get consent for necessary cookies.
Cookies are not needed. They are shifting the security onto the user. Secure the information on the server just like any other business. Offloading onto the client is wrong. It leads to ambiguity and abuses. Visiting a store and a business on the internet are no different. My presence gives no right to my person, searches, or tracking in the location or outside of it. Intentions are worthless. The only thing that matters is what is possible and practiced. Every loophole is exploited and should be mitigated. The data storage and coding practices must change.
Great take!
Note that they’re buying data from data brokers - companies like Acxiom, Epsilon Data Management, CoreLogic, Equifax Information Services, etc. These companies are primarily in the business of collecting data and selling it.
They’re not buying data from companies like Google and Facebook. Those companies don’t actually sell your data; they sell ads that are targeted using the data.
Another reason to move away from companies that harvest and sell your data as much as possible.