4 ms·

It's not just what they collect with a single service. It's the amount of clarity that comes from a linkage with their other collected data sets.

delroth 8y ago
On that same web page: > We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services. Of course, all of that is meaningless if you want to think that Google is lying in its privacy policies. (Disclaimer: I work at Google, but not on 8888).
- rhizome 8y ago
  We don't correlate or combine information from our temporary or permanent logs with any personal information I'd say that depends on what definition of "personal" they're using.
  - kyrra 8y ago
    https://policies.google.com/privacy/key-terms#toc-terms-personal-info https://policies.google.com/privacy/key-terms#toc-terms-pers... "Personal information This is information which you provide to us which personally identifies you, such as your name, email address or billing information, or other data which can be reasonably linked to such information by Google, such as information we associate with your Google account."
    - rhizome 8y ago
      OK, but that just brings up "other data."
- russdpale 8y ago
  Personally, if they cant prove it, it shouldn't be trusted. And in talking about proving it with the source code. The days of granting benefit of the doubt to these companies should be over. The onus of security should be on the providers proving it, not misplaced trust.
  - jkaplowitz 8y ago
    Do any providers you use meet this standard? A few bits of open source software have been subjected to credible public audits, but not most of those. For proprietary services, the detailed results of any audits are typically nonpublic. This is nice in theory but would prevent you from sharing your data with any third-party services in practice beyond your personal circle of trusted acquaintances.
  - delroth 8y ago
    How does providing the source code help with proving trust? You don't know that the service is actually running the source code that was published. If you're willing to believe that the service matches the published source code, why wouldn't you also be willing to believe that the service matches the published "specifications" (e.g. privacy policy)?
- JangoSteve 8y ago
  To be fair, that's also what they said for the other services before they changed their minds.

delroth 8y ago

On that same web page: > We don't correlate or combine information from our temporary or permanent logs with any personal information that you have provided Google for other services. Of course, all of that is meaningless if you want to think that Google is lying in its privacy policies. (Disclaimer: I work at Google, but not on 8888).

rhizome 8y ago
We don't correlate or combine information from our temporary or permanent logs with any personal information I'd say that depends on what definition of "personal" they're using.
- kyrra 8y ago
  https://policies.google.com/privacy/key-terms#toc-terms-personal-info https://policies.google.com/privacy/key-terms#toc-terms-pers... "Personal information This is information which you provide to us which personally identifies you, such as your name, email address or billing information, or other data which can be reasonably linked to such information by Google, such as information we associate with your Google account."
  - rhizome 8y ago
    OK, but that just brings up "other data."
russdpale 8y ago
Personally, if they cant prove it, it shouldn't be trusted. And in talking about proving it with the source code. The days of granting benefit of the doubt to these companies should be over. The onus of security should be on the providers proving it, not misplaced trust.
- jkaplowitz 8y ago
  Do any providers you use meet this standard? A few bits of open source software have been subjected to credible public audits, but not most of those. For proprietary services, the detailed results of any audits are typically nonpublic. This is nice in theory but would prevent you from sharing your data with any third-party services in practice beyond your personal circle of trusted acquaintances.
- delroth 8y ago
  How does providing the source code help with proving trust? You don't know that the service is actually running the source code that was published. If you're willing to believe that the service matches the published source code, why wouldn't you also be willing to believe that the service matches the published "specifications" (e.g. privacy policy)?
JangoSteve 8y ago
To be fair, that's also what they said for the other services before they changed their minds.