7 ms·

So I'm one of those who doesn't care if Google tracks me or sells me as a product. [ * ] Is there actually some real, tangible harm that can come to me from us

So I'm one of those who doesn't care if Google tracks me or sells me as a product. [ * ] Is there actually some real, tangible harm that can come to me from using Google products? Not theoretical stuff, not stuff that is less likely than dying in a plane crash. Something that is actually likely to happen, that will affect me in measurable, negative ways? I'm really trying to come up with something, and I'm really trying to care. * actually I don't agree with that last one: ads are a product of Google, and various things like Gmail are products of Google. The latter is paid for with ad viewings rather than currency. Really, there is no need to redefine "product" to include humans being advertised to and tracked. There was (and I guess is) a thing called "slavery," where humans were bought and sold....my voluntary use of Gmail is not comparable.

elminjo 8y ago
You are right, all US-Companys are able to harm you, due to US-Laws.
blub 8y ago
Has it become some sort of fashion statement to be ignorant about privacy? Whenever I discuss this topic people seem to almost take pride in giving their information to Google, Facebook and the thousands of other companies they have no clue about. I think it's cognitive dissonance rearing its ugly head again: those people have tied their identity at some level with the use of the products and an attack on e.g. Google becomes an attack on them. The concept of fairness also plays a role. Most people feel that Google should get something for providing their services and they also feel that it's ok if they are shown some ads. Fair deal. What they have no idea about is how much data is extracted from them, who it's shared with and for what purposes it's used. But we can be almost certain the answers to those questions is more and more data, more and more parties and more and more purposes, because data is forever. And yes, real harm can come to you if you are promiscuous with your information. Additional information should be accessible through your favourite search engine. Hint: home invasion.
- bobsoap 8y ago
  I find I'm having trouble arguing in a meaningful way with people who don't share the same concerns regarding the privacy of their data. I'm running out of arguments - no matter what I say, they'll respond with a shrug. "So what? I don't have anything to hide." "So what? They are a big company, surely they won't abuse my data." "So what? How has Cambridge Analytica affected me?" And for the ultimate capitulation: "So what? They already have so much data on everyone, you can't avoid it anyway." Brave new world. This is not only coming from folks with little understanding of tech, but also from "technologically literate" people who should know better. Sticking your head in the sand is just so damn convenient. Even a comparatively widely reported privacy scandal like FB's can't seem to sway these folks... apparently because they feel like it hasn't affected them personally. How do you deal with this kind of attitude?
  - robbrown451 8y ago
    You deal with that by giving an actual example of something bad that has happened to someone who has not worried about what Google tracking them. I haven't seen one. I mean, people who advise me not to text and drive can give real examples of people who died because they did that. That's tangible. All I hear is a lot of people telling me what I should care about but refuse to supply anything but intangibles and theoreticals. And I'm talking about Google here, not Facebook.
    - blub 8y ago
      Do you actually play an important role in society which gives you access to the information of many people or which would make others interested in blackmailing you? If yes, you'd hopefully already be aware of those risks and also educate your contacts on how to act in a provacy-conscious way. Otherwise use Google, use whatever you want, nobody cares.
  - DaveWalk 8y ago
    The best distillation I found was that this is all a version of the "Nothing to Hide" argument. https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Nothing_to_hide_argument There are some points to counter with in the article. Bruce Schneier quotes Cardinal Richelieu: give me 6 lines written by the most honest man and I'll find something in there to hang him by. Has the benefit of historical perspective!
bennofs 8y ago
Then you must assume one of: * No one can get access to Google's data * Those who can get access cannot harm you In addition to trusting google not to be evil. What are your assumptions that lead you to that conclusion? Or are you assuming that no matter who has access to your data, there is no one could ever do any harm to you with that data? (That's the 'I have nothing to hide' argument)
- jerrre 8y ago
  > * No one can get access to Google's data * Those who can get access cannot harm you Maybe it's more about will than can if you're a bit more pragmatic? Anyone on the street can harm you, but not many will....
- robbrown451 8y ago
  I think Google has a very strong incentive to protect my data from that sort of thing, and a lot of layers to ensure this. One rogue employee can't get access to my email. Why? Because if it happened and the press got wind of it, Google would see their market cap drop tens of millions of dollars overnight. Meanwhile, why should I trust that that guy living on the sidewalk won't jump up and bash my head with a hammer? Or that the person driving the car in the opposite lane won't swerve into my lane and kill me? I just try to keep risks in perspective.
therealmarv 8y ago
I like this comment. It's not beeing ignorant about privacy but I also value my free time a lot more than searching and dealing with all sorts of Google alternatives. I think that security and uptime at Google are outstanding and better than all sorts of alternatives which can shut down any time. And in comparison to Facebook Google is not selling your single soul or your direct private information to outside advertisement companies. It's not like Google never thought about privacy... they have deep thoughts about it and how they still can make money with you.
probably_wrong 8y ago
I think the average worst thing that could happen is that you end up going to court against someone (since we are thinking about averages, I'm thinking divorce), they obtain your data, and use that to build a case against you. If you were cheating, for instance, your location info could be used to show all your meetings in quite some detail. And even if you weren't, you can always bend your stats a little bit to make it look as if you did. Enjoy discussing p-hacking and statistical significance with a judge. If you live in the US this may not be a problem now, but you also have to think ahead: courts may not be allowed to obtain your information right now (although that's probably not true if you are in a murder trial), but they might in the future. And even then, someone close to you could provide that information to the other part: a (soon to be ex) friend of yours downloads all your information* thanks to the new GDPR tools and provides them to the other part. *: I think this evidence would be admissible in court, since it's not the police the one who obtained evidence with illegal means. But even if it were not directly admissible, parallel construction is also a thing.
- robbrown451 8y ago
  So how would this happen? Google gives them my data? I'm sorry but I don't get it. Google can't do that. Even if they work at Google they can't get it. I just represented myself in a week long custody trial (I won primary custody, and yes I went up against an attorney), and there were lots of risks involved, but this sort of thing seems to be about the smallest one I could imagine. I'd like to hear if this has actually happened to anyone anywhere.
  - probably_wrong 8y ago
    > Google can't do that. Even if they work at Google they can't get it. I'm not sure I understand this point, so let me make my point clearer. It's clear that Google(TM) can access your data. You probably mean "most google employees can't", which I agree with. But someone can access your data for sure, and in fact you can access your data: if you are a European citizen, you can request all of your data right now, thanks to the GDPR and Google has to comply. There are also other general tools to access the data[1]. So I'm not saying "a Google employee will go behind your back". I'm saying that either "Google(TM) could be compelled by a court order to give your data if laws change", or "someone could use your unlocked PC, click on 'Download my data', and give it to the other part" (again, more likely if the other part is tech savvy and planning on divorcing you). > I'd like to hear if this has actually happened to anyone anywhere. Someone getting in trouble because someone took their private information? It happens quite often in the Legal Advice subreddit. Here's one example[2]: > "My wife uploaded screenshots from my Ashley Madison account, hotel receipts and non-nude but sexual photos of me online before she moved out and filed for divorce. Do I have any legal recourse under Delaware law? (...) They were not public. The photos were from my phone and were not anywhere online and the credit card was in my name only. She had no right to access either one (nor my Ashley Madison account)." My specific case? No idea. But supposedly private information biting someone back is a regular event. Here's a page some lawyers in Orange County wrote on that [3] with some examples. * Edit: rethinking my point, I think you meant "how is this a Google problem, rather than an infosec problem". To that, my point would be: the fact that the information exists forever in one central place. [1] https://medium.com/productivity-in-the-cloud/6-links-that-will-show-you-what-google-knows-about-you-f39b8af9decc https://medium.com/productivity-in-the-cloud/6-links-that-wi... [2] https://www.reddit.com/r/legaladvice/comments/5b895c/my_wife_uploaded_screenshots_from_my_ashley/d9mixpr/ https://www.reddit.com/r/legaladvice/comments/5b895c/my_wife... [3] http://orangecountydivorce.com/divorce-technology/ http://orangecountydivorce.com/divorce-technology/
TheCabin 8y ago
Okay, let’s think about some side effects of having lots of potentially sensitive data nicely stored at one location: * Propaganda: Because you understand what people need to hear, it’s a perfect tool to influence opinion. Of course, this doesn’t happen in your country (it never does). A recent popular example is the Cambridge Analytica scandal. Thankfully this evil cooperation does not exist any more (by changing its name). * Reinforcement of monopolies: You need to hit a critical mass to use data effectively. Therefore, big players will have an advantage over competitors and can provide better products. Therefore big players … * Reinforcement of dictatorships: If things turn bad they turn really bad. User data is gold in the hand of dictators. One reason is that is helps with propaganda, but it also helps to identify resistance. If for some reason your country ends up in a regime, it is going to be hard to get out of it. * Self-censorship / freedom of speech: There is plenty of evidence, that we constrain ourselves because we know nothing online is anonymous. This also depends on which country you live in. There must be a plethora of side effects I didn’t think of right now. You have to decide how “theoretical” these issues are for you. Maybe it is more a thing of “believing” – such as vegetarianism (although we all know eating meat is bad for the environment).
- robbrown451 8y ago
  I don't see how any of this applies to Google. Are you saying that dictators can steal my data from Google? I'd think they'd have an easier time breaking into my house and stealing my computer. By a factor of maybe a thousand.
  - TheCabin 8y ago
    You don't see how "Reinforcement of monopolies" applies? You don't see how "Self-censorship" applies? The Cambridge Analytica scandal was involving facebook -- do you think they are really far apart from each other? The point "Reinforcement of dictatorships" would apply as soon as the government of the US would be in a less healthy state. The overall point is the following: Google might provide nice services for you as and individual, but there are larger-scale societal implications, which we should consider and weigh in as well.
Spearchucker 8y ago
In the 1930's (and before) people in Germany were asked (as they are today) to specify their religion in certian dealings with their government. Nobody thought anything of it. And then the Nazis came to power, and there was no ability to undelete anything.
- bozalosht 8y ago
  So basically if shit hits the fan then we're even more fucked than we would have been had we not used Googles and Facebooks?
Tepix 8y ago
If you don't know why you should care about privacy, there's no one who can explain it as eloquently as Edward Snowden. Read https://www.businessinsider.de/edward-snowden-privacy-argument-2016-9 https://www.businessinsider.de/edward-snowden-privacy-argume... or - preferably - whatch the video at http://hooktube.com/watch?v=WRzm7wrk_FA http://hooktube.com/watch?v=WRzm7wrk_FA

elminjo 8y ago

You are right, all US-Companys are able to harm you, due to US-Laws.

blub 8y ago

Has it become some sort of fashion statement to be ignorant about privacy? Whenever I discuss this topic people seem to almost take pride in giving their information to Google, Facebook and the thousands of other companies they have no clue about. I think it's cognitive dissonance rearing its ugly head again: those people have tied their identity at some level with the use of the products and an attack on e.g. Google becomes an attack on them. The concept of fairness also plays a role. Most people feel that Google should get something for providing their services and they also feel that it's ok if they are shown some ads. Fair deal. What they have no idea about is how much data is extracted from them, who it's shared with and for what purposes it's used. But we can be almost certain the answers to those questions is more and more data, more and more parties and more and more purposes, because data is forever. And yes, real harm can come to you if you are promiscuous with your information. Additional information should be accessible through your favourite search engine. Hint: home invasion.

bobsoap 8y ago
I find I'm having trouble arguing in a meaningful way with people who don't share the same concerns regarding the privacy of their data. I'm running out of arguments - no matter what I say, they'll respond with a shrug. "So what? I don't have anything to hide." "So what? They are a big company, surely they won't abuse my data." "So what? How has Cambridge Analytica affected me?" And for the ultimate capitulation: "So what? They already have so much data on everyone, you can't avoid it anyway." Brave new world. This is not only coming from folks with little understanding of tech, but also from "technologically literate" people who should know better. Sticking your head in the sand is just so damn convenient. Even a comparatively widely reported privacy scandal like FB's can't seem to sway these folks... apparently because they feel like it hasn't affected them personally. How do you deal with this kind of attitude?
- robbrown451 8y ago
  You deal with that by giving an actual example of something bad that has happened to someone who has not worried about what Google tracking them. I haven't seen one. I mean, people who advise me not to text and drive can give real examples of people who died because they did that. That's tangible. All I hear is a lot of people telling me what I should care about but refuse to supply anything but intangibles and theoreticals. And I'm talking about Google here, not Facebook.
  - blub 8y ago
    Do you actually play an important role in society which gives you access to the information of many people or which would make others interested in blackmailing you? If yes, you'd hopefully already be aware of those risks and also educate your contacts on how to act in a provacy-conscious way. Otherwise use Google, use whatever you want, nobody cares.
- DaveWalk 8y ago
  The best distillation I found was that this is all a version of the "Nothing to Hide" argument. https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Nothing_to_hide_argument There are some points to counter with in the article. Bruce Schneier quotes Cardinal Richelieu: give me 6 lines written by the most honest man and I'll find something in there to hang him by. Has the benefit of historical perspective!

bennofs 8y ago

Then you must assume one of: * No one can get access to Google's data * Those who can get access cannot harm you In addition to trusting google not to be evil. What are your assumptions that lead you to that conclusion? Or are you assuming that no matter who has access to your data, there is no one could ever do any harm to you with that data? (That's the 'I have nothing to hide' argument)

jerrre 8y ago
> * No one can get access to Google's data * Those who can get access cannot harm you Maybe it's more about will than can if you're a bit more pragmatic? Anyone on the street can harm you, but not many will....
robbrown451 8y ago
I think Google has a very strong incentive to protect my data from that sort of thing, and a lot of layers to ensure this. One rogue employee can't get access to my email. Why? Because if it happened and the press got wind of it, Google would see their market cap drop tens of millions of dollars overnight. Meanwhile, why should I trust that that guy living on the sidewalk won't jump up and bash my head with a hammer? Or that the person driving the car in the opposite lane won't swerve into my lane and kill me? I just try to keep risks in perspective.

therealmarv 8y ago

I like this comment. It's not beeing ignorant about privacy but I also value my free time a lot more than searching and dealing with all sorts of Google alternatives. I think that security and uptime at Google are outstanding and better than all sorts of alternatives which can shut down any time. And in comparison to Facebook Google is not selling your single soul or your direct private information to outside advertisement companies. It's not like Google never thought about privacy... they have deep thoughts about it and how they still can make money with you.

probably_wrong 8y ago

I think the average worst thing that could happen is that you end up going to court against someone (since we are thinking about averages, I'm thinking divorce), they obtain your data, and use that to build a case against you. If you were cheating, for instance, your location info could be used to show all your meetings in quite some detail. And even if you weren't, you can always bend your stats a little bit to make it look as if you did. Enjoy discussing p-hacking and statistical significance with a judge. If you live in the US this may not be a problem now, but you also have to think ahead: courts may not be allowed to obtain your information right now (although that's probably not true if you are in a murder trial), but they might in the future. And even then, someone close to you could provide that information to the other part: a (soon to be ex) friend of yours downloads all your information* thanks to the new GDPR tools and provides them to the other part. *: I think this evidence would be admissible in court, since it's not the police the one who obtained evidence with illegal means. But even if it were not directly admissible, parallel construction is also a thing.

robbrown451 8y ago
So how would this happen? Google gives them my data? I'm sorry but I don't get it. Google can't do that. Even if they work at Google they can't get it. I just represented myself in a week long custody trial (I won primary custody, and yes I went up against an attorney), and there were lots of risks involved, but this sort of thing seems to be about the smallest one I could imagine. I'd like to hear if this has actually happened to anyone anywhere.
- probably_wrong 8y ago
  > Google can't do that. Even if they work at Google they can't get it. I'm not sure I understand this point, so let me make my point clearer. It's clear that Google(TM) can access your data. You probably mean "most google employees can't", which I agree with. But someone can access your data for sure, and in fact you can access your data: if you are a European citizen, you can request all of your data right now, thanks to the GDPR and Google has to comply. There are also other general tools to access the data[1]. So I'm not saying "a Google employee will go behind your back". I'm saying that either "Google(TM) could be compelled by a court order to give your data if laws change", or "someone could use your unlocked PC, click on 'Download my data', and give it to the other part" (again, more likely if the other part is tech savvy and planning on divorcing you). > I'd like to hear if this has actually happened to anyone anywhere. Someone getting in trouble because someone took their private information? It happens quite often in the Legal Advice subreddit. Here's one example[2]: > "My wife uploaded screenshots from my Ashley Madison account, hotel receipts and non-nude but sexual photos of me online before she moved out and filed for divorce. Do I have any legal recourse under Delaware law? (...) They were not public. The photos were from my phone and were not anywhere online and the credit card was in my name only. She had no right to access either one (nor my Ashley Madison account)." My specific case? No idea. But supposedly private information biting someone back is a regular event. Here's a page some lawyers in Orange County wrote on that [3] with some examples. * Edit: rethinking my point, I think you meant "how is this a Google problem, rather than an infosec problem". To that, my point would be: the fact that the information exists forever in one central place. [1] https://medium.com/productivity-in-the-cloud/6-links-that-will-show-you-what-google-knows-about-you-f39b8af9decc https://medium.com/productivity-in-the-cloud/6-links-that-wi... [2] https://www.reddit.com/r/legaladvice/comments/5b895c/my_wife_uploaded_screenshots_from_my_ashley/d9mixpr/ https://www.reddit.com/r/legaladvice/comments/5b895c/my_wife... [3] http://orangecountydivorce.com/divorce-technology/ http://orangecountydivorce.com/divorce-technology/

TheCabin 8y ago

Okay, let’s think about some side effects of having lots of potentially sensitive data nicely stored at one location: * Propaganda: Because you understand what people need to hear, it’s a perfect tool to influence opinion. Of course, this doesn’t happen in your country (it never does). A recent popular example is the Cambridge Analytica scandal. Thankfully this evil cooperation does not exist any more (by changing its name). * Reinforcement of monopolies: You need to hit a critical mass to use data effectively. Therefore, big players will have an advantage over competitors and can provide better products. Therefore big players … * Reinforcement of dictatorships: If things turn bad they turn really bad. User data is gold in the hand of dictators. One reason is that is helps with propaganda, but it also helps to identify resistance. If for some reason your country ends up in a regime, it is going to be hard to get out of it. * Self-censorship / freedom of speech: There is plenty of evidence, that we constrain ourselves because we know nothing online is anonymous. This also depends on which country you live in. There must be a plethora of side effects I didn’t think of right now. You have to decide how “theoretical” these issues are for you. Maybe it is more a thing of “believing” – such as vegetarianism (although we all know eating meat is bad for the environment).

robbrown451 8y ago
I don't see how any of this applies to Google. Are you saying that dictators can steal my data from Google? I'd think they'd have an easier time breaking into my house and stealing my computer. By a factor of maybe a thousand.
- TheCabin 8y ago
  You don't see how "Reinforcement of monopolies" applies? You don't see how "Self-censorship" applies? The Cambridge Analytica scandal was involving facebook -- do you think they are really far apart from each other? The point "Reinforcement of dictatorships" would apply as soon as the government of the US would be in a less healthy state. The overall point is the following: Google might provide nice services for you as and individual, but there are larger-scale societal implications, which we should consider and weigh in as well.

Spearchucker 8y ago

In the 1930's (and before) people in Germany were asked (as they are today) to specify their religion in certian dealings with their government. Nobody thought anything of it. And then the Nazis came to power, and there was no ability to undelete anything.

bozalosht 8y ago
So basically if shit hits the fan then we're even more fucked than we would have been had we not used Googles and Facebooks?

Tepix 8y ago

If you don't know why you should care about privacy, there's no one who can explain it as eloquently as Edward Snowden. Read https://www.businessinsider.de/edward-snowden-privacy-argument-2016-9 https://www.businessinsider.de/edward-snowden-privacy-argume... or - preferably - whatch the video at http://hooktube.com/watch?v=WRzm7wrk_FA http://hooktube.com/watch?v=WRzm7wrk_FA