4 ms·

They mentioned "working closely" with Coinbase and Fold. I hadn't heard of Fold, so I checked it out and they're currently marketing a credit card that rewards

They mentioned "working closely" with Coinbase and Fold. I hadn't heard of Fold, so I checked it out and they're currently marketing a credit card that rewards you Bitcoin instead of "cash back", points, or airline miles. Not very relevant to this discussion, but Fold emphasizes "opt out [of] surveillance" and "opt in [to] privacy". I went to create an account and saw the "sign in with twitter" option, and here are the permissions they're requesting: - See Tweets from your timeline (including protected Tweets) as well as your Lists and collections. - See your Twitter profile information and account settings. - See accounts you follow, mute, and block. - See your email address. How can a company think this aligns with that sort of marketing at all?

sneak 6y ago
The privacy.com (private/disposable payment card numbers) app and website have tons of third party trackers and spyware embedded, too. Privacy is just a marketing bullet point, these days. Apple pushes it hard as a differentiator, yet most of iCloud isn’t end to end encrypted and almost all of the apps in their App Store have spyware embedded in them.
- rsa25519 6y ago
  > The privacy.com (private/disposable payment card numbers) app and website have tons of third party trackers and spyware embedded, too. Well, the relevance all depends on your threat model. Personally, I care about protecting my banking info from strangers but not about protecting my info from privacy.com and its third parties. I think "spyware" is a bit of an exaggeration considering that presumably many privacy.com users have a threat model similar to mine.
  - esrauch 6y ago
    I'm curious about this stance; are you worried specifically about people stealing money from you? Because outside of that, the privacy.com-third-parties (and then third parties they might sell data onward to from there) seem more strangers than the businesses you have actually have a direct financial transaction with; you can't even enumerate who they are.
    - rsa25519 6y ago
      I mean, if you look on the privacy.com website, the only 3rd-party request is Google Fonts. Personally, the privacy tradeoff is worth being able to pull a font from the cache, even though I understand that the same doesn't apply to everyone
gwicks56 6y ago
Can the person using the twitter OAuth API change those permissions? Ie if you are the business setting it up, do you get an option over what permissions are granted?

sneak 6y ago

The privacy.com (private/disposable payment card numbers) app and website have tons of third party trackers and spyware embedded, too. Privacy is just a marketing bullet point, these days. Apple pushes it hard as a differentiator, yet most of iCloud isn’t end to end encrypted and almost all of the apps in their App Store have spyware embedded in them.

rsa25519 6y ago
> The privacy.com (private/disposable payment card numbers) app and website have tons of third party trackers and spyware embedded, too. Well, the relevance all depends on your threat model. Personally, I care about protecting my banking info from strangers but not about protecting my info from privacy.com and its third parties. I think "spyware" is a bit of an exaggeration considering that presumably many privacy.com users have a threat model similar to mine.
- esrauch 6y ago
  I'm curious about this stance; are you worried specifically about people stealing money from you? Because outside of that, the privacy.com-third-parties (and then third parties they might sell data onward to from there) seem more strangers than the businesses you have actually have a direct financial transaction with; you can't even enumerate who they are.
  - rsa25519 6y ago
    I mean, if you look on the privacy.com website, the only 3rd-party request is Google Fonts. Personally, the privacy tradeoff is worth being able to pull a font from the cache, even though I understand that the same doesn't apply to everyone

gwicks56 6y ago

Can the person using the twitter OAuth API change those permissions? Ie if you are the business setting it up, do you get an option over what permissions are granted?