3 ms·
Anonymization in the data reselling industry is often some form of md5(lower($email)). It's a joke. They even do that for extremely small search spaces like pho
by meritt 6y ago
Anonymization in the data reselling industry is often some form of md5(lower($email)). It's a joke. They even do that for extremely small search spaces like phone numbers. It's still provided at the individual user-level and even if the anonymization is done in a way that's irreversible, you only need to know a single event for a given person and you now have their entire history.
For example, there's a popular email client that scrapes people's inboxes and sells their purchase history to anyone willing to pay. That purchase history is provided on an individual email level and is "anonymized". But if you know your target has this email client installed and you know a single purchase (e.g. a coworker saying "Oh, I bought this awesome coffee maker on Amazon last night!") you can now access their entire individual purchase history backward and forward.
- martimarkov 6y agoWait... WHAT?!?! I mean if I think about it, yeah that makes sense to have been built but WTF?!? Care to share which email client it is? It should be killed with fire!!!
- etrabroline 6y agoAssuming you're asking a genuine question, it's Gmail. https://mail.google.com/ https://mail.google.com/
- laegooose 6y agoDo you have a source for claims that (a) google parses emails for purchase histories and (b) sells it? https://myaccount.google.com/purchases https://myaccount.google.com/purchases is empty for me, and I sure do have a lot of email receipts on my gmail. It also says "Purchases made using Search, Maps, and the Assistant are organized to help you get things done, like tracking a package or reordering food". https://www.cnbc.com/2019/05/17/google-gmail-tracks-purchase-history-how-to-delete-it.html https://www.cnbc.com/2019/05/17/google-gmail-tracks-purchase... "Google says it doesn’t use this information to sell you ads." Google used emails for ad targeting which was mentioned in Microsoft "Scroogled" ad campaign in the US. But Google says it stopped doing so years ago. Do I miss something?
- wizzwizz4 6y agoNo, no, Google doesn't read your emails (any more); they just give access to them to certain "developers" (read: arbitrary paying third-parties).
- inapis 6y agoI believe that GP is talking about the unroll.me service which was caught selling purchase receipts to companies like Uber a few months ago.
- meritt 6y agoI was referring to https://mail.edison.tech/ https://mail.edison.tech/, but they compete with unroll.me (rakuten intelligence) in selling people's emails.
- rmrfstar 6y ago> coworker saying "Oh, I bought this awesome coffee maker on Amazon last night!" This x1000. I have seen people invite others to eat lunch at restaurants that only accepted credit cards in order to elicit such a data sample.
- chopin 6y agoThat's pseudonomization, not anonymization. The former is generally not GDPR compliant.