4 ms·

Apparently 10% (I just made this number) of people working in tech industry are working to collect, store, and process personal data. It is shocking to see how

by stunt 8y ago

Apparently 10% (I just made this number) of people working in tech industry are working to collect, store, and process personal data. It is shocking to see how few of these 10% speak up. We put Hackers into jail for stealing personal data. Not comparing them together, but from moral perspective they seem equal to me.

magduf 8y ago
They're not stealing personal data: users are willingly giving them this data. There is a solution to this, and that's to have stronger privacy laws like the EU does, but American voters have flatly rejected anything like that and don't want such laws.
- kevin_thibedeau 8y ago
  American politicians won't enact laws that impair the data broker industry which has been around for decades. Voters are kept largely in the dark by a press that doesn't want to expose how the sausage is made since they have a seat at the table.
  - magduf 8y ago
    I don't buy this stuff about "the press" at all. The press in America was firmly behind Hillary in the 2016 election, and look what happened. The voters do have a will of their own and they're not just doing what the press tells them. (This isn't to say the voters made the right choice: the way the voters have voted is why we don't have strong data-protection laws, along with a lot of other things the Europeans have such as a better-functioning healthcare system, better public transit, etc.)
tbrownaw 8y ago
It is shocking to see how few of these 10% speak up. So maybe it's actually not 10%, or maybe just working with "personal data" isn't as automatically objectionable as you seem to think. For example I know that whoever does IT for the local doctor's office, or dispatch for the plumbing company, is working with personal data. I don't think I'd consider either of those a problem. Not comparing them together, but from moral perspective they seem equal to me. Not sure how that's supposed to work exactly.
- mc32 8y ago
  That IT person presumably is working under something like an NDA (and HIPAA, etc., where applicable), so there is recourse we’re they to violate their duties and misuse data.
dragonwriter 8y ago
> Apparently 10% (I just made this number) of people working in tech industry are working to collect, store, and process personal data It's probably closer to 100% than 10%; at any rate it's a lot more than 10%. > It is shocking to see how few of these 10% speak up. About...what? I mean, I pretty much am the overseer of changes to some specialized public sector medical billing systems that handle on the order of single-digit billions of dollars in annual claim volume and on the order of a million annual individuals. So connecting, storing, and processing personal information is a central part of what those systems do. But what are you supposing I ought to be speaking up about just because I work on such a system?
soared 8y ago
I spend 100% of my time at a digital advertising agency working on and placing google/facebook/trade desk/etc pixels. I spent most my time trying to scrape and store information on what products you viewed, how much money you spent, etc. What do you want to know?
- Bartweiss 8y ago
  Hey, I'm interested to see someone who's actually in this specific line of programming comment! I'm pretty sympathetic to the general argument that interactions with websites aren't private because they're two-party interactions with the site, but there are a few things that trouble me that I'd be interested to ask. First, I guess: do you think that users are broadly aware of how much they're tracked and ok with it, or do you think the tracking is alright independent of that? (This question is more relevant if you're on the "tracking browser resizes" side of things than "recording products in a cart".) Second: do you have any worries about data that's tame in isolation or on average causing problems as it's gathered and shared - deanonymizing aggregate data, revealing pregnancies by shopping history, etc? Third: do you worry about keeping identifiable data in existence more generally? Assuming you trust yourself and your partners, there's still the concern that maintaining data troves like these increases the attack surface for everything from hacking to government demands.
  - soared 8y ago
    1) I don't do any browser fingerprinting or things like that, but we definitely pay vendors to do it for us (crosswise, owned by oracle does a lot). Users know as much about tracking as they do about how a website works - none. If you tried to get an average person to learn about http, html, javascript, cms, dns, cdn, caches, cookies, etc it would be impossible.. tracking is equally as complicated. 2) I only support data in aggregate. Anything personally identifiable should be illegal IMO. As long as target finds 10,000 people who are pregnant due to their shopping habits, I think thats fine. If the system is set up correctly with one company collecting and aggregating data, then another company buying access to that data it is safe. Its a misconception that facebook sells data, they just sell access to it. So most data you can't actually de-anonymize. 3) I definitely support legislation around data storage and yeah I think thats a huge problem right now. Its super easy to collect a ton of data, even when you have no idea how to store it or even use it. Its literally 2 minutes of effort for me to grab every single name of someone who purchased something on ~50 ecom sites, but I know nothing about how to securely store that. As far as the justification for where I work - Ads fuel the internet and create more benefit than they do harm. Millions of people run websites, create content, make free apps. That simply would not occur without ads to monetize them since people are unwillingly to pay for content. Microtransactions for content would be awesome but they haven't worked yet. We're also on year <30 of widespread internet use. Its the wild west right now but we will fix it.

by stunt 8y ago

magduf 8y ago

They're not stealing personal data: users are willingly giving them this data. There is a solution to this, and that's to have stronger privacy laws like the EU does, but American voters have flatly rejected anything like that and don't want such laws.

kevin_thibedeau 8y ago
American politicians won't enact laws that impair the data broker industry which has been around for decades. Voters are kept largely in the dark by a press that doesn't want to expose how the sausage is made since they have a seat at the table.
- magduf 8y ago
  I don't buy this stuff about "the press" at all. The press in America was firmly behind Hillary in the 2016 election, and look what happened. The voters do have a will of their own and they're not just doing what the press tells them. (This isn't to say the voters made the right choice: the way the voters have voted is why we don't have strong data-protection laws, along with a lot of other things the Europeans have such as a better-functioning healthcare system, better public transit, etc.)

tbrownaw 8y ago

It is shocking to see how few of these 10% speak up. So maybe it's actually not 10%, or maybe just working with "personal data" isn't as automatically objectionable as you seem to think. For example I know that whoever does IT for the local doctor's office, or dispatch for the plumbing company, is working with personal data. I don't think I'd consider either of those a problem. Not comparing them together, but from moral perspective they seem equal to me. Not sure how that's supposed to work exactly.

mc32 8y ago
That IT person presumably is working under something like an NDA (and HIPAA, etc., where applicable), so there is recourse we’re they to violate their duties and misuse data.

dragonwriter 8y ago

> Apparently 10% (I just made this number) of people working in tech industry are working to collect, store, and process personal data It's probably closer to 100% than 10%; at any rate it's a lot more than 10%. > It is shocking to see how few of these 10% speak up. About...what? I mean, I pretty much am the overseer of changes to some specialized public sector medical billing systems that handle on the order of single-digit billions of dollars in annual claim volume and on the order of a million annual individuals. So connecting, storing, and processing personal information is a central part of what those systems do. But what are you supposing I ought to be speaking up about just because I work on such a system?

soared 8y ago

I spend 100% of my time at a digital advertising agency working on and placing google/facebook/trade desk/etc pixels. I spent most my time trying to scrape and store information on what products you viewed, how much money you spent, etc. What do you want to know?

Bartweiss 8y ago
Hey, I'm interested to see someone who's actually in this specific line of programming comment! I'm pretty sympathetic to the general argument that interactions with websites aren't private because they're two-party interactions with the site, but there are a few things that trouble me that I'd be interested to ask. First, I guess: do you think that users are broadly aware of how much they're tracked and ok with it, or do you think the tracking is alright independent of that? (This question is more relevant if you're on the "tracking browser resizes" side of things than "recording products in a cart".) Second: do you have any worries about data that's tame in isolation or on average causing problems as it's gathered and shared - deanonymizing aggregate data, revealing pregnancies by shopping history, etc? Third: do you worry about keeping identifiable data in existence more generally? Assuming you trust yourself and your partners, there's still the concern that maintaining data troves like these increases the attack surface for everything from hacking to government demands.
- soared 8y ago
  1) I don't do any browser fingerprinting or things like that, but we definitely pay vendors to do it for us (crosswise, owned by oracle does a lot). Users know as much about tracking as they do about how a website works - none. If you tried to get an average person to learn about http, html, javascript, cms, dns, cdn, caches, cookies, etc it would be impossible.. tracking is equally as complicated. 2) I only support data in aggregate. Anything personally identifiable should be illegal IMO. As long as target finds 10,000 people who are pregnant due to their shopping habits, I think thats fine. If the system is set up correctly with one company collecting and aggregating data, then another company buying access to that data it is safe. Its a misconception that facebook sells data, they just sell access to it. So most data you can't actually de-anonymize. 3) I definitely support legislation around data storage and yeah I think thats a huge problem right now. Its super easy to collect a ton of data, even when you have no idea how to store it or even use it. Its literally 2 minutes of effort for me to grab every single name of someone who purchased something on ~50 ecom sites, but I know nothing about how to securely store that. As far as the justification for where I work - Ads fuel the internet and create more benefit than they do harm. Millions of people run websites, create content, make free apps. That simply would not occur without ads to monetize them since people are unwillingly to pay for content. Microtransactions for content would be awesome but they haven't worked yet. We're also on year <30 of widespread internet use. Its the wild west right now but we will fix it.