4 ms·

Jesus. Really? Downvotes? Pretend this person worked for facebook and made some statement regarding what the company does. (a) he would be fired on the spot by

Jesus. Really? Downvotes? Pretend this person worked for facebook and made some statement regarding what the company does. (a) he would be fired on the spot by the company itself ( as he is not authorized to speak on behalf of the company ) (b) he would be laughed out the room because he does not control company decisions The same applies to every single company. Every single one.

downbloated 9y ago
The clue here is that even though you’ve been downvoted by multiple people, they’re all too chickenshit to voice their “legitimate” opinion backing the downvote. The only real interpretation here is that, while ethically, you may be correct, you’ve expressed an opinion that “stealing is wrong” among members of the thieves guild.
- Dylan16807 9y ago
  notyourday is insulting the guy based on a supposed lack of "authorization" to speak. That has absolutely zero to do with ethics of the company or the contents of their post.
  - notyourday 9y ago
    When pointing out that the king is naked is considered an insult to and by the people clapping about those amazing invisible clothes, one needs to seriously examine if he or she wants to be the person clapping
    - Dylan16807 9y ago
      Naked vs. amazing clothes. Note that those are the same topic, and conflict with each other. But what you did was the equivalent of shouting someone down for not being the king. You weren't calling codezero wrong, you were saying they weren't in charge. When they're merely reporting the policy, who cares if they're the one in charge? Hell, the logic of "mock the guy for not being in charge" would apply even if they were also calling the king naked! That should show how flawed it is when compared to your actual goal of... being anti-tracking or something?
- codezero 9y ago
  I get what you're saying, but I also want to assert: we're not in the thieves' guild. I mentioned that analytics as a broad category, gets bunched up with a bunch of very nefarious folks – it's like conflating Tor to The Silk Road and their ilk (of which I have no strong objection, but I am using as an example, since many might see selling drugs as "bad", but Tor as "good"). With that said, the comments above this thread, which point out that I have little control over our "Tor" becoming "The Silk Road" are valid and are often on my mind, and I can only say that I will not go gentle into that good night, if it does come to pass.
  - quickben 9y ago
    Unfortunately for the field , analytics is equated with advertising and user profiling lately. We'll see how this one pans out, but it may be somewhat career limiting.
    - codezero 9y ago
      In fairness, much of the modern data analytics field was born out of the need to quantify advertising effectiveness, so I'm not surprised the two have become conflated. Google Analytics is (mostly) free in part because it supports and validates users of Adwords, and this has contributed heavily to the ubiquity of GA.
frik 9y ago
You are right. But speaking out the truth isn't compatible with HN users as of late. So see downvoting and getting flagged as a sign you are right, just the other try to hide your post and keep you from posting. Unfortunately the atmosphere got really toxic, with many things got hidden from users, the down-voting/flagging does no good.
mquander 9y ago
I have no idea what you're talking about. People from big tech companies say their opinion about what their company does all the time. Your comment was super rude.
- notyourday 9y ago
  Really? People at Google say that they know what Google does with data?!
codezero 9y ago
Agreed, they make a good point, however, I think the terms of service are binding, and if what we're doing changes, we _must_ update them. This, of course, does not change the fact that we've collected a lot of data and it would suddenly fall under the new terms of service. With that said, I actively delete customer data on request, and a terms of service change like this _might_ (very reasonably) prompt someone to request their data to be deleted, and since terms of service are not typically immediately effective without consent, I feel strongly that I would make sure I could remove data for people who do not agree with the new terms of service. What I'm saying, is that I would fight very hard for my customers, like, ridiculously hard. As said above – I am not the CEO – I don't have controlling interest, and there is absolutely some future where the things I said above are impossible to execute. I have not felt that way yet, and I am very conscious of the possibility if that in the future, and will stay vigilant both for my customers and for my own peace of mind to make sure we're always doing the right thing.
- arkh 9y ago
  I'll have a wild guess there: all devs and most managers have access to the full data set. Any disgruntled one could ex-filtrate it anywhere with not trace. That's the kind of things which make me for the vision of data as liability.
  - walshemj 9y ago
    They should have internal security teams that monitor this
    - notyourday 9y ago
      Damn it. You owe me a new keyboard.
  - codezero 9y ago
    Absolutely not. We have strict control over our data and access to infrastructure. Every person with access can only get it via a bastion VPN with their own key. Access is logged to an external host which they do not have access to. We are SOC2 compliant (just waiting on final certification) and we have regular pen tests both against our code as well as our employees with mock phishing. As a total aside: it would cost a serious amount of money to exfiltrate the data in bulk, and would cause an obvious strain on our infrastructure. Assuming they get by all the above protections, and are really clever, sure, never say never, but I think we can not assume the worst but prepare for it none the less.

downbloated 9y ago

The clue here is that even though you’ve been downvoted by multiple people, they’re all too chickenshit to voice their “legitimate” opinion backing the downvote. The only real interpretation here is that, while ethically, you may be correct, you’ve expressed an opinion that “stealing is wrong” among members of the thieves guild.

Dylan16807 9y ago
notyourday is insulting the guy based on a supposed lack of "authorization" to speak. That has absolutely zero to do with ethics of the company or the contents of their post.
- notyourday 9y ago
  When pointing out that the king is naked is considered an insult to and by the people clapping about those amazing invisible clothes, one needs to seriously examine if he or she wants to be the person clapping
  - Dylan16807 9y ago
    Naked vs. amazing clothes. Note that those are the same topic, and conflict with each other. But what you did was the equivalent of shouting someone down for not being the king. You weren't calling codezero wrong, you were saying they weren't in charge. When they're merely reporting the policy, who cares if they're the one in charge? Hell, the logic of "mock the guy for not being in charge" would apply even if they were also calling the king naked! That should show how flawed it is when compared to your actual goal of... being anti-tracking or something?
codezero 9y ago
I get what you're saying, but I also want to assert: we're not in the thieves' guild. I mentioned that analytics as a broad category, gets bunched up with a bunch of very nefarious folks – it's like conflating Tor to The Silk Road and their ilk (of which I have no strong objection, but I am using as an example, since many might see selling drugs as "bad", but Tor as "good"). With that said, the comments above this thread, which point out that I have little control over our "Tor" becoming "The Silk Road" are valid and are often on my mind, and I can only say that I will not go gentle into that good night, if it does come to pass.
- quickben 9y ago
  Unfortunately for the field , analytics is equated with advertising and user profiling lately. We'll see how this one pans out, but it may be somewhat career limiting.
  - codezero 9y ago
    In fairness, much of the modern data analytics field was born out of the need to quantify advertising effectiveness, so I'm not surprised the two have become conflated. Google Analytics is (mostly) free in part because it supports and validates users of Adwords, and this has contributed heavily to the ubiquity of GA.

frik 9y ago

You are right. But speaking out the truth isn't compatible with HN users as of late. So see downvoting and getting flagged as a sign you are right, just the other try to hide your post and keep you from posting. Unfortunately the atmosphere got really toxic, with many things got hidden from users, the down-voting/flagging does no good.

mquander 9y ago

I have no idea what you're talking about. People from big tech companies say their opinion about what their company does all the time. Your comment was super rude.

notyourday 9y ago
Really? People at Google say that they know what Google does with data?!

codezero 9y ago

Agreed, they make a good point, however, I think the terms of service are binding, and if what we're doing changes, we _must_ update them. This, of course, does not change the fact that we've collected a lot of data and it would suddenly fall under the new terms of service. With that said, I actively delete customer data on request, and a terms of service change like this _might_ (very reasonably) prompt someone to request their data to be deleted, and since terms of service are not typically immediately effective without consent, I feel strongly that I would make sure I could remove data for people who do not agree with the new terms of service. What I'm saying, is that I would fight very hard for my customers, like, ridiculously hard. As said above – I am not the CEO – I don't have controlling interest, and there is absolutely some future where the things I said above are impossible to execute. I have not felt that way yet, and I am very conscious of the possibility if that in the future, and will stay vigilant both for my customers and for my own peace of mind to make sure we're always doing the right thing.

arkh 9y ago
I'll have a wild guess there: all devs and most managers have access to the full data set. Any disgruntled one could ex-filtrate it anywhere with not trace. That's the kind of things which make me for the vision of data as liability.
- walshemj 9y ago
  They should have internal security teams that monitor this
  - notyourday 9y ago
    Damn it. You owe me a new keyboard.
- codezero 9y ago
  Absolutely not. We have strict control over our data and access to infrastructure. Every person with access can only get it via a bastion VPN with their own key. Access is logged to an external host which they do not have access to. We are SOC2 compliant (just waiting on final certification) and we have regular pen tests both against our code as well as our employees with mock phishing. As a total aside: it would cost a serious amount of money to exfiltrate the data in bulk, and would cause an obvious strain on our infrastructure. Assuming they get by all the above protections, and are really clever, sure, never say never, but I think we can not assume the worst but prepare for it none the less.