3 ms·

GDS’s GA Premium account contractually prevents Google from investigating the data Does it prevent US government from getting this data with a court order?

by dchest 9y ago

TheHeasman 9y ago
>Google self-anonymises with a flag in their API Even if they could, they wouldn't be able to find it.
- Matt3o12_ 9y ago
  At what point is it, though? From the Client or when it hits the server. If it is the later, we can’t know if three letter agencies intercept the traffic before it gets anonymized. Furthermore, it is often possible to de-anonymize data especially if you have an extensive knowledge of users and their data such as google. But even then, you can also de-anonymize data https://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf https://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf https://www.wired.com/2007/12/why-anonymous-data-sometimes-isnt/ https://www.wired.com/2007/12/why-anonymous-data-sometimes-i...
  - robin_reala 9y ago
    The client can’t anonymise the IP as it connects to the Google server which then will implicitly know it. What the flag does is tell the server to anonymise it from that point onwards. From my original link: When a customer of Analytics requests IP address anonymization, Analytics anonymizes the address as soon as technically feasible at the earliest possible stage of the collection network. The IP anonymization feature in Analytics sets the last octet of IPv4 user IP addresses and the last 80 bits of IPv6 addresses to zeros in memory shortly after being sent to the Analytics Collection Network. The full IP address is never written to disk in this case.
sametmax 9y ago
This guy is asking the right thing. It's not about you trusting somebody to handle the data. It's just that the data should not exist at all outside of you and the gov. As soon as the data exists somewhere else, there is a way to misuse it and a chance it will happen. In todays word, those don't even require a lot of imagination to find because it already happened and is currently happening.
eeZah7Ux 9y ago
> Does it prevent US government from getting this data with a court order? Of course not. Also it does not prevent governments and other organizations from illegally extracting that data from Google, as it happened.

GDS’s GA Premium account contractually prevents Google from investigating the data Does it prevent US government from getting this data with a court order?

by dchest 9y ago

GDS’s GA Premium account contractually prevents Google from investigating the data Does it prevent US government from getting this data with a court order?

TheHeasman 9y ago

>Google self-anonymises with a flag in their API Even if they could, they wouldn't be able to find it.

Matt3o12_ 9y ago
At what point is it, though? From the Client or when it hits the server. If it is the later, we can’t know if three letter agencies intercept the traffic before it gets anonymized. Furthermore, it is often possible to de-anonymize data especially if you have an extensive knowledge of users and their data such as google. But even then, you can also de-anonymize data https://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf https://www.cs.utexas.edu/~shmat/shmat_oak08netflix.pdf https://www.wired.com/2007/12/why-anonymous-data-sometimes-isnt/ https://www.wired.com/2007/12/why-anonymous-data-sometimes-i...
- robin_reala 9y ago
  The client can’t anonymise the IP as it connects to the Google server which then will implicitly know it. What the flag does is tell the server to anonymise it from that point onwards. From my original link: When a customer of Analytics requests IP address anonymization, Analytics anonymizes the address as soon as technically feasible at the earliest possible stage of the collection network. The IP anonymization feature in Analytics sets the last octet of IPv4 user IP addresses and the last 80 bits of IPv6 addresses to zeros in memory shortly after being sent to the Analytics Collection Network. The full IP address is never written to disk in this case.

sametmax 9y ago

This guy is asking the right thing. It's not about you trusting somebody to handle the data. It's just that the data should not exist at all outside of you and the gov. As soon as the data exists somewhere else, there is a way to misuse it and a chance it will happen. In todays word, those don't even require a lot of imagination to find because it already happened and is currently happening.

eeZah7Ux 9y ago

> Does it prevent US government from getting this data with a court order? Of course not. Also it does not prevent governments and other organizations from illegally extracting that data from Google, as it happened.