4 ms·

Remember when global surveillance used to be a meme among conspiracy theorists ? Pepperidge Farm remembers What can we say about a corporation doing a trust s

Remember when global surveillance used to be a meme among conspiracy theorists ? Pepperidge Farm remembers What can we say about a corporation doing a trust score for half of the connected population in the world ? I wonder about their ego, or what went wrong in their management.

KoolKat23 3y ago
Would this be a breach of GDPR for us EU residents? I'm getting seriously disillusioned with all this surveillance stuff. At first I thought, you know, these were isolated incidents falling through the cracks, but in truth it's become pervasive and global. The scariest aspect is how individual actors have the ability these days to gather, interpret and isolate individuals from massive datasets, anonymising the data seems pie in the sky. I don't see much stopping it either, in society it seems to be the extremes, some wrongly think GDPR applies to everything and others are so sophisticated they can bypass it completely. Have we gotten too advanced, whereby only experts understand the impacts of our actions? Sorry I'm getting all philosophical.
- tourmalinetaco 3y ago
  One of the most sobering experiences I’ve had was reading a writeup on how someone was doxxed using ad telemetry. If that can be done by a lone individual, imagine what can be done en masse.
  - youngtaff 3y ago
    Do you have a link to that article that you could share?
    - tourmalinetaco 3y ago
      Unfortunately it appears the site this had been on is not available anymore. However I found an equally interesting article talking about similar things. Rather than buying aggregate data and attempting to de-aggregate it, this is about targeting an individual using previously obtained information (say email, cellphone, or physical address) and “ad sniping” them. https://onezero.medium.com/google-ads-targeted-at-literally-one-person-could-be-the-future-of-doxxing-8c5b0a9117b9 https://onezero.medium.com/google-ads-targeted-at-literally-... https://archive.is/RFtK5 https://archive.is/RFtK5
      - youngtaff 3y ago
        Thanks, I’ll take a read
- Nextgrid 3y ago
  It definitely would, but GDPR is not being enforced anywhere near enough to matter. Facebook and Google are still alive and you bet their tracking and profiles are much more accurate than these clowns.
  - theonlybutlet 3y ago
    A sad thought.
  - donkeyd 3y ago
    > Facebook and Google are still alive Well, literally billions of people accept their privacy agreements and actively provide them with data from their phones by using their software. That's quite different from an unknown party telling other companies whether you're reliable without your knowledge based on data neither you nor your provider ever agreed to give them.
    - Nextgrid 3y ago
      Nobody reads their privacy agreements. They accept them as a formality because these services became effectively mandatory to participate in modern society, but they do freak out when they see the consequences of all this non-consensual data collection: https://www.newstatesman.com/science-tech/2016/09/people-you-may-know-facebook-s-friend-finding-algorithm-putting-you https://www.newstatesman.com/science-tech/2016/09/people-you...
- 0xThiebaut 3y ago
  It is, and this article announced Noyb filed a complaint against BICS, TeleSign and Proximus with the Belgian DPA to request actions be taken (investigation, fines, removal of data, …). A translated complaint is available at https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%20COMPLAINT%20FINAL%20-%20redacted-%20EN%20AUTOTRANSLATION.pdf https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%...
  - ale42 3y ago
    Original in French for those who speak it: https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%20COMPLAINT%20FINAL%20-%20redacted.pdf https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%...
- yjftsjthsd-h 3y ago
  For that matter, doesn't California have similar privacy laws?
_ktx2 3y ago
> I wonder about their ego, or what went wrong in their management. The article didn't insinuate that data is being used to objectively harm users. It's being used to generate "trust scores" for anti-fraud systems. The specific example given in their piece is allowing a user to attach a certain number for SMS verification. Rather, the point here is that such data could be used to objectively harm users, so those users should have to provide consent. Second to that is that BICS doesn't appear to inform users requesting GDPR data that their data was shared. I'm not sure I'd label that failures in ego, it smells like failures in process and compliance, which also need to be dealt with in lawsuits.
- sologoub 3y ago
  It likely does cause users to be treated differently and that may not always be lawful or in users best interest. I was forced to go to a bank branch likely because my provider doesn’t share the data. Better yet, when I realized my mistake of dealing with the said bank, going to the branch was the only way to stop the application.

KoolKat23 3y ago

Would this be a breach of GDPR for us EU residents? I'm getting seriously disillusioned with all this surveillance stuff. At first I thought, you know, these were isolated incidents falling through the cracks, but in truth it's become pervasive and global. The scariest aspect is how individual actors have the ability these days to gather, interpret and isolate individuals from massive datasets, anonymising the data seems pie in the sky. I don't see much stopping it either, in society it seems to be the extremes, some wrongly think GDPR applies to everything and others are so sophisticated they can bypass it completely. Have we gotten too advanced, whereby only experts understand the impacts of our actions? Sorry I'm getting all philosophical.

tourmalinetaco 3y ago
One of the most sobering experiences I’ve had was reading a writeup on how someone was doxxed using ad telemetry. If that can be done by a lone individual, imagine what can be done en masse.
- youngtaff 3y ago
  Do you have a link to that article that you could share?
  - tourmalinetaco 3y ago
    Unfortunately it appears the site this had been on is not available anymore. However I found an equally interesting article talking about similar things. Rather than buying aggregate data and attempting to de-aggregate it, this is about targeting an individual using previously obtained information (say email, cellphone, or physical address) and “ad sniping” them. https://onezero.medium.com/google-ads-targeted-at-literally-one-person-could-be-the-future-of-doxxing-8c5b0a9117b9 https://onezero.medium.com/google-ads-targeted-at-literally-... https://archive.is/RFtK5 https://archive.is/RFtK5
    - youngtaff 3y ago
      Thanks, I’ll take a read
Nextgrid 3y ago
It definitely would, but GDPR is not being enforced anywhere near enough to matter. Facebook and Google are still alive and you bet their tracking and profiles are much more accurate than these clowns.
- theonlybutlet 3y ago
  A sad thought.
- donkeyd 3y ago
  > Facebook and Google are still alive Well, literally billions of people accept their privacy agreements and actively provide them with data from their phones by using their software. That's quite different from an unknown party telling other companies whether you're reliable without your knowledge based on data neither you nor your provider ever agreed to give them.
  - Nextgrid 3y ago
    Nobody reads their privacy agreements. They accept them as a formality because these services became effectively mandatory to participate in modern society, but they do freak out when they see the consequences of all this non-consensual data collection: https://www.newstatesman.com/science-tech/2016/09/people-you-may-know-facebook-s-friend-finding-algorithm-putting-you https://www.newstatesman.com/science-tech/2016/09/people-you...
0xThiebaut 3y ago
It is, and this article announced Noyb filed a complaint against BICS, TeleSign and Proximus with the Belgian DPA to request actions be taken (investigation, fines, removal of data, …). A translated complaint is available at https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%20COMPLAINT%20FINAL%20-%20redacted-%20EN%20AUTOTRANSLATION.pdf https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%...
- ale42 3y ago
  Original in French for those who speak it: https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%20COMPLAINT%20FINAL%20-%20redacted.pdf https://noyb.eu/sites/default/files/2023-06/DRAT%20TELESIGN%...
yjftsjthsd-h 3y ago
For that matter, doesn't California have similar privacy laws?

_ktx2 3y ago

> I wonder about their ego, or what went wrong in their management. The article didn't insinuate that data is being used to objectively harm users. It's being used to generate "trust scores" for anti-fraud systems. The specific example given in their piece is allowing a user to attach a certain number for SMS verification. Rather, the point here is that such data could be used to objectively harm users, so those users should have to provide consent. Second to that is that BICS doesn't appear to inform users requesting GDPR data that their data was shared. I'm not sure I'd label that failures in ego, it smells like failures in process and compliance, which also need to be dealt with in lawsuits.

sologoub 3y ago
It likely does cause users to be treated differently and that may not always be lawful or in users best interest. I was forced to go to a bank branch likely because my provider doesn’t share the data. Better yet, when I realized my mistake of dealing with the said bank, going to the branch was the only way to stop the application.