Edward Snowden: Facebook is a surveillance company rebranded as 'social media'
washingtonexaminer.com
washingtonexaminer.com
I don't know about WhatsApp, but from what I recall about Telegram, its main criticism is the fact that it isn't using secret chats (i.e. private conversations) by default. However when using secret chats, the communication is end-to-end encrypted. Is there anything else wrong with it?
[1]: https://security.stackexchange.com/questions/49782/is-telegr... [2]: https://security.stackexchange.com/questions/49782/is-telegr...
That said, Matrix/Riot probably is the only messenger out there that has any chance of becoming not-shitty messenger. But nobody uses it.
But you do know the answer: Quit Facebook. We all have time, so we should vote with it.
Before deleting your account overwrite everything with garbage data. If you simply close or delete your account, FB saves everything (in case you might come back, they can offer you a better experience, don'tcha' know?). At least overwriting garbage may give you a slightly better chance.
You also need to use NoScript or the like and deny all FB scripts. FB tracks and maintains profiles on everyone, even whether or not you are members. They are being sued over this in the EU.
Also find and delete their hidden Super-cookies; 200kb of data, including all your other browsing habits, Amazon purchases, etc. Several tutorials are searchable online.
https://signal.org/blog/whatsapp-complete/
I'm not sure if it's good enough to foil the US government agencies and their boundless stockpile of zero days. It did, however, make some judges here feel very impotent and powerless. They really, really wanted the messages in order to investigate some crime and couldn't understand why WhatsApp was resisting their requests. They ended up ordering ISPs to block the messaging service for a while as punishment.
https://www.forbes.com/sites/parmyolson/2016/05/03/whatsapp-...
Sure, it's true that people won't be able to audit the thing... But I think it's significant that a huge number of people are using end-to-end encryption by default without even realizing it. That's gotta count for something. It's a lot better security-wise than whatever it is we used before, and most certainly objectively a lot better than facebook messenger or SMS.
Sure, I wouldn't argue with that. Doesn't make up for making me use Google Services (or a phone & a phone number, for that matter) and sharing all my contacts with FB though. It might be even making me angrier about whole situation: it's so close to being good that it makes it obvious, how much technologically possible it in fact is to have a sane messenger. We don't have it though. And no surprise, because who would pay for it, if money cannot be made out of our metadata?
I want to be clear that `conflating privacy and "secure"` is intentional — violating my privacy automatically harms my security in most direct way. If something quite literally puts me in danger it shouldn't be considered "secure" by definition, no matter how good its crypto is on paper.
So I was wondering, why you did not mention Signal or Diaspora then?
It is easy to bitch, but there are actual things you can do. Even it is only tell people of alternatives. And while I by myself don't even tried Diaspora yet, I like that it exists and getting more mature. And Signal I do use and see no downside compared to WhatsApp, except most people beeing too lazy to change or having, oh my god, 2 installed messengers.
And my main issue with signal, that it uses Google Servers, is something that could be changed in the future, as far as I know, but till then, it is still 100% open source and private
We roll through new generations of computer-using society every year, and every 4 - 5 years, after some intensive studying, new waves of developers and "computer people" evolve from being clueless teenagers, to clued-in members of society.
This is of course, of benefit to society at large - but there is a deleterious effect at play here, as well. While cramming hard to graduate, people keep their heads down - and/or in the sand - and tend to ignore the wider, broader aspects of society in the meanwhile.
And this is why we must continually rehash themes that we - living in the static world - consider to be 'old news'.
Always remember - ALWAYS - that there is a generation of kids on the cusp of making their way into society, and no matter what we adults do, no matter how hard we try and cry and pound our fists on the table, these kids were NOT paying attention to the important issues in the last few years.
So this is why we must consistently push key social issues to the forefront, no matter how tiresome it becomes. Its the kids who are coming to this scene who can do something about it, before its too late - before they too, become jaded adults who just want to pay the mortgage.
Between these two worlds is a no-mans land of social issues, and a war being waged by all the special interests to obfuscate and confuse and devolve the issues, such that the powerful young new adult elite don't put them in their spotlights.
"Since when its even a question?" - every day, there are people learning the extent to which our society has devolved. It is ALWAYS a question.
Yet Google seems to get only a fraction of the negative coverage, both in the press and in the tech community. Why is that?
sorry.
In my opinion the reach of Google, and therefore their ability to cause harm, is even greater than Facebook's, and beyond the veneer of perceived benevolence they are just as unethical.
It's also quite possible that people aren't aware of critisism against Google simply because Google chooses to hide it. They're that powerful right now.
But Youtube's MUA is, IIRC, above Facebook's. That's Google's real social app.
Facebook is more on the populist side of things, their core audience are common people focused on maximizing their reputation.
It also reflects their core businesses, Googles ad business centeres more about search and information, and Facebook more about persuation, and call to action.
Why do you think so? Google having ~80% of search traffic seems to suggest otherwise. I mean, everyone I know is using Google, including my grandfather who is not a "techy".
EDIT: forgot a word
That's a weird definition IMHO. I would say that Google's core audience is regular people using the search engine.
Maybe you meant "power users" instead?
I was thinking about reasonable ways to protect personal information. People always say that they delete FB outright, but I don't think everyone has that luxury. It's also a pretty good way of staying in touch with others. I came up with a couple ways of at least making it harder for them to track you.
1. Whatever email you use for FB, stop using it for other things. My understanding is that a lot of how they can put your purchase history together with your facebook profile is that companies that collect purchase data joins it on e-mail.
2. Stop using the FB apps. I think the "FB is listening to me" thing is mostly BS, but apps in general give away a lot more information than websites.
3. Log out of facebook when not using it. A huge reason that Facebook was allowed to reach "beyond" they're own website is the Facebook pixel, which allows FB to know where you're browsing when you're not on the site.
Of course, these won't work 100% (I have no idea if they'll work at all, this is all stuff that I gathered from working as a data scientist at a much much smaller social media company), but I think they're reasonable measures to take to protect your data if you can't just stop using FB outright.
Namely, a course of conduct in self protection needs to have an understanding of what the potential harm is from a given threat.
As I see it, the big danger is not from these corporate data vacuums like Facebook, directly.
The biggest threat is the use of this aggregated data by bad actors.
I have yet to hear of a major tech company undertaking actions to directly harm the users of their products. In fact, they are highly incentivized to minimize harms to users.
I don’t see targeted advertising as a bad thing. If I’m going to see adds, I prefer they reflect my interests. I actually find out interesting things from such adds.
Because the overall system has become so complex and monolithic, I think taking steps to thoughtfully minimize personal information leakage is prudent.
But inconveniencing oneself to no discernible benefit is counter productive, and can easily backfire.
For example, if you move your email service to one provided by your shared website host, you open yourself to many potential woes.
Emails from private domains are more likely to get lost in spam filters. I’ve had unfortunately breakdowns in relationships because people who needed to reach me thought I was blowing them off.
Last time I had an email address a private domain, the spam filtering was so bad, it rendered it almost useless.
You’re also hosting your mail on god knows what server, controlled by a company with a lot less security resources than Google.
So there is a substantial cost in avoiding the free email services like Gmail, for nebulous benefit.
I am very concerned about the issue of personal information security. But everything comes at a cost.
The question of whether allowing law enforcement back door access to private communications is worth it is not so straightforward as many commenters seem to imply.
You may be right. But it really depends who the users are and the kind of Don Corleone proposal the management of the social media company might get. (hint : some group of very powerful people can be the most important users of FB and can make it a proposal that they can't refuse; people like a shady government bureau)
>>> You’re also hosting your mail on god knows what server, controlled by a company with a lot less security resources than Google.
The question is not security. The question is who manages the server and who he abides to. Security doesn't mean nothing as as long as the server is cracked/owned, all your data will be open.
Only if you define the alternative as picking a random shared hosting provider. Just pick a better one than gmail.
Also, for the most part, FB is not getting your data without your permission(like a surveillance company), rather, it asks you to give it(eg: upload contacts so we could find your friends), or people voluntarily give data to it(eg: uploading selfies, with location and time metadata as bonus).
There are only two things of concern here, 1. How to make more people aware about the privacy implications of their online actions. 2. How to make these firms more responsible for properly protecting the data they have.
Regarding #1, when I told people about myactivity.google.com, at least one person switched to DuckDuckGo(although I don't know if he sticked with it). Attempts to make people switch to Signal have miserably failed, forcing me to use WhatsApp as well. No one ever quit FB though, rather they got deeper into the rabbit hole by using Instagram as well.
Regarding #2, countries should learn from EU and make stronger privacy laws.
Snowden's premise is also historically a vague, unsupported claim at best. Ford knew incredible details about its customers and workers, as did Standard Oil. Neither were routinely described as being primarily surveillence companies.
The only thing that has actually changed, is that Facebook can do it easily today, as their users willingly provide the information in a convenient technological manner even after the Snowden revelations.
Me uploading pictures of you and a large part of your social graph, and Facebook correlating that with a shadow profile built with tracking pixels etc isn't exactly passive? Or with your explicit permission?
Addiction is the power of Facebook and nothing more.
To fight with Facebook you have to set up another social media addiction that will dominate the market and expect that after a few years it will not be the same again...
Facebook doesn't sell information, it sells ads. It's in Facebook's best interest to share as little of this information as possible with third parties so they continue buying ads.
I figure we must promote your calming beliefs. We must allow the the socials' privacy violation pressure cooker to build up its internal pressure to WMD levels. When it finally blows, the socials will be destroyed by the combination of regulatory over-reaction and lawsuits.
2. In the past, Facebook has sold info to advertisers and tracking companies:
https://www.wsj.com/articles/SB10001424052702304772804575558...
That article is a little old, and Facebook may have changed their policy. But the recent story about Cambridge Analytics shows that, at least in some cases, Facebook still shares your information with third parties.
What I worry about is that even if (through a miracle) Facebook gets slain, someone else will quickly step up to take their place. In the world of adtech, surveillance is a free market.
Facebook was a social media company that has pivoted to become a surveillance company because they can make more money that way.
I chose the present perfect because I think Facebook still derives utility from being a social network and is not solely a data-mining machine. It's a process that I think is probably inevitable but is not completed yet.
This is when they must have decided to turn into a surveillance company, to become a data-crunching behemoth it is today.
Of course, Facebook differs from most companies in the amount of data it manages to collect about its users. A cable company isn't going to know nearly as much about its typical customer as Facebook knows, but they can still probably infer a surprising amount from your viewing habits -- including political views based on which news programs you watch, for instance.
Web forums could know even more than cable companies, as many people are quite candid in discussing what they think and care about on them. Then there are communications companies like Skype, which have access to all sorts of confidential and sensitive communications.
The list goes on and on, and I'm really not sure how this runaway freight train of voluntary participation in surveillance can be stopped at this point, as for most people all these services are too damn convenient, and virtually none of them were built with strong privacy, much less anonymity in mind.
> how this runaway freight train ... can be stopped at this point
Once people realize what they will lose, then the only way to win is not to play.
There has been some discussion here about China’s plan to increase use of social media as a means of societal control.
Is the problem that people are sharing to much information, or is the problem that China has an authoritarian government with little respect for the rights of its citizens?
That said, I somewhat agree with you here; I feel there's way too much focus on data handling, and way too little focus on who's doing what with it. The problem isn't information. The problem in China is an authoritarian government. The problem in the West is that we've managed to somehow convince ourselves that lying to people, and maliciously manipulating them, is a legitimate and respected profession (that now happens to finance the Internet).
Sure, you don't want to have information lying around for bad actors to make use of. But I think we should also start dealing with the fact that there already are so many bad actors doing bad things with information, and maybe we should have less bad actors in the first place.
These are platforms for speech. People crave and seek such platforms, and frankly I think they provide a valuable service in disseminating ideas that corporate entities have no incentives to.
It verges on absurd to criticize platforms designed to transmit public speech on the grounds that they might leak that information.
There seems to be a quaint archetype floating in the collective consciousness with an image of privacy that has never existed, outside of recluses living in exile from their community.
Historically, anyone living in a small community had such a lack of privacy, that it would be intolerable to many modern city dwellers.
There needs to be a more nuanced and realistic concept of how personal information is managed, by all entities who touch it.
We're talking about information age though, where the information can be gathered in massive quantities and processed and used in ways such past communities would not even dream about.
These days someone can be harrased by some idiot/criminal from other side of the globe.
So the issue is not really comaprable, and risks are different.
And it's crazy that we're allowing them to do that in the "data breach era". Companies should should be incentivized/penalized to keep the absolute minimum information it needs for its services. The less data, the better, and the less it would be penalized in case of a data breach. The more data it stores and the more data it exposes in a data breach, the bigger the penalties should be for it.
Companies would ignore that at their own peril, as the penalties should be a big percentage of the global annual revenues. So a company like Equifax would have to come out either crippled or bankrupt out of a data breach where it exposed all of the US adults' information.
Build the right system, and companies will be "incentivized" to do the right thing. This is why the EU is doing the right thing with the GDPR, and if the US Congress wasn't completely captured by corporations by now, it would probably do something like that, too.
But even GDPR doesn't go as far as I'd like, to the point where companies would be incentivized to use minimum amounts of information and switch to end-to-end encrypted systems (which by default would bring minimum to zero penalties in case of server data breach).
Combined with the fact that it actually requires effort NOT to be tracked by facebook - much of the tracking is involuntary - facebook is clearly a surveillance company. I wish more people would realize this.
What Facebook does is not the same as a “surveillance company”.
To throw out the term, with the obvious negative connotations, might attract attention, but muddies clear understanding of the dynamic flows of networked information that we are part of, and the incentive structures of the entities involved.
I’m saying, just getting a clear understanding of what is happening is hard enough, never mind determining the possible consequences of various paths of action.
There are a lot of unexpected, emergent properties of such a complicated system as the global internet, which has billions of autonomous agents as fundamental components.
A prime example is the current examination of the influence of the “Russian Trolls” in the 2016 election. I doubt many people foresaw the current controversy around this subject. I cant think of any parallels to the phenomenon.
Knee jerk reactions about such complicated systems, which from people influenced by the “hacker” ethos tend to the anti-corporate, anti-government point of view, severely misrepresent the threat environment that a common citizen confronts.
From my point of view, the biggest threat to an individual is from criminal activity. People like to rag on Equifax for the security breach, but I don’t come across similar screeds against the actual perpetrators of the breach.
The phenomenon of these large scale hacks of personal information is an unintended property of the current business, consumer, and governmental conduct.
A “surveillance company” is a whole different category of threat.
> https://en.wikiquote.org/wiki/Mark_Zuckerberg
Zuck: I have over 4,000 emails, pictures, addresses, SNS [Redacted Friend's Name]: What? How'd you manage that one?
Zuck: People just submitted it.
Zuck: I don't know why.
Zuck: They "trust me"
Zuck: Dumb fucks
However i guess the analogy is more fitting for Baidu. The Chinese state has some very restrictive laws that are applied in practice.
And in Russia you can get sentenced for a wrong repost, so yandex.ru or ok.ru/vk.ru is in the same league.
* the allowed range of expression used to depend on the political climate (in better times/under liberal rulers you were allowed to say more)
* the rules are often not clear as they are not stated explicitly. (however the subjects were expected to know them)
* Also some people had more liberties (different degree of toleration, depending on the position in society)
* decision to go after someone used to depend on the arbitrariness of some official.
Disclaimer: my knowledge is based on historical events, i don't know that much regarding the realities of the present day.
Bullet point comparisons of a historic authoritarian state to a contemporary capitalist society is rarely a helpful exercise but we should remain humble either way.
America maintains the largest prison population per capita of any nation on Earth.
America experiences more than 39,000 gun deaths per year.
At least 750,000 Americans are homeless.
How would you know that?
In any case, the UK does. [1]
[1] http://www.vocativ.com/325190/arrests-for-social-media-posts...
There is some truth to what you’re saying though, but that’s in the data Facebook collects about you, without your knowledge.
I think the facial recognition program is a good example. Even if you don’t have a Facebook account, or even if you do but didn’t share any pictures of your vacation, Facebook might still know you went. They know by recognizing you in pictures of other people. If you get caught in someone’s Instagram selfie in an airport or at a popular tourist spot, then Facebook knows you where there.
Stasi would have loved that, but that’s not information people share willingly.
* It follows you around the internet via the Share/Like plug-ins so your entire internet browsing patterns become exposed
* Via the psychological analytics they’ve been applying, you think you’ve just liked (eg) a sports personality page and a TV show, but that’s actually confirmed a whole host of implied personality traits that are then ‘known’ about you.
I am not on Facebook though I once had a profile a decade ago.
I don't believe that profile has been deleted, I do believe that facial recognition on the photos has included me, I do believe that they've applied said facial recognition to the historical data, and so I believe that I do have a profile that is alive and well within Facebook, and that even receives fresh content... it is just not public.
I am so looking forward to the GDPR coming into effect.
A contemporary Stasi would control Facebook and use all algorithms and all available data sources to figure out who the persons of interest are. Even assuming that the StasiBook app wouldn't auto-upload all pictures and microphone data (why would an upstanding citizen turn off their mic?), they could still correlate many invisible patterns.
So all in all, I think they'd be the biggest fans.
But I've been developing programs since I was 15, and created my first startup (hardware) at 18 with an engineer 10-years older than me.
Never once did I ever refer to any of our customers or clients as "dumb fucks". Why? What did they do to Zuck?
Although, I did refer to AOL executives, FBI agents, Secret Service agents, federal prosecutors and lame wannabe hackers as dumb fucks. Both then and now. And I work with the federal government, with an agency that's often unfairly demonized by a variety of people.
Which makes me think of a new phrase: dumb zucks.
Quasi wannabe devs who build products and services not to advance the hacker ethos or crypto-anarchy but to get rich being essentially technical marketing partners for the FBI and corporate America.
EDIT- Facebook's address is 1 Hacker Way. Zuck is not a hacker. He is the opposite of one.
His attitude and all-around conduct is pretty much that of a boy scout, and to be honest, I find it boring. Linus Torvalds curses like a sailor, and he doesn't spare anyone's feelings with his criticism, whether it's an individual or a broad generalization. Would you mistrust Linux based on the principal developer's language, or is it more about the project's overall opacity?
Mark Zuckerberg's general demeanor can be read from many obvious tells across all the things he touches. He's not dating super models, he's not buying people Audis, his flagship website has one theme for everyone, two colors (blue & white), five uninteresting emojis, and all the personality of AOL and Yahoo! combined. Yet this reveals nothing about what goes on across Facebook's backplane.
If you're going to criticize his character, you have to criticize the depth and breadth of whatever the faustian bargain is, according to the Snowden leaks. You can compare Zuckerberg to Snowden in terms of choices made, but you really can't fault Zuckerberg for using harsh language in casual conversation. It comes across as whiny and pathetic, like some petulant child. Actions speak louder than words, as they say.
You're focusing too much on the swear word and too little on the meaning of the sentence.
One thing is true: Those at the top rarely mean what they say. They are masters of dissembling, because they understand how dangerous it is to reveal one's true feelings.
This was a rare glimpse into raw, unfiltered Zuck. And what we find is that he's just like the rest of those in power. No wonder they love him so much.
We're the dumb fucks to them. And that should be at least a little worrying.
If the worst quote attributed to him shows him calling people dumb for throwing their personal info at someone they have no reason to trust...that's not a very strong indictment of his character. And even though it's reasonably bad, there's no way fourteen years of responsibility won't change people.
The idiot who said "dumb fucks" is an entirely alien person to the person now. And the quote calling people dumb for giving some online rando their personal data doesn't exactly demonstrate a conclusive disregard for the value of that data. If anything, it's an insult to people's intelligence because they should care more.
It doesn't make him a hero, but doesn't make him a villain, either.
And make you disregard the moment when he showed his true self as a thing of the past.
Point is, as much as it might color his character, so does his observable conduct in all the years since. Reiterating: with context (would appreciate if you don't forget I'm not disregarding it and talk past me) - it really doesn't give much context, though it's an amazingly compelling soundbite.
And indeed, with enough algorithm magic, free stuff and lobbying, it turns out that the majority of us are dumb fucks.
But other than that, I'm sure he's a great guy to have a beer with... most evil people are quite nice when you get to know them.
> Although, I did refer to AOL executives, FBI agents, Secret Service agents, federal prosecutors and lame wannabe hackers as dumb fucks. Both then and now. And I work with the federal government, with an agency that's often unfairly demonized by a variety of people.
Your argument against the possibility someone has undergone personal growth is that you yourself have not experienced personal growth?
Some of us can imagine having conversations like that, jokingly or seriously, in our teens while having better taste/a better worldview now as adults.
And now he finds the value in religion as he grooms his political career. The dude is a complete snake.
If that's your definition of 'personal growth' its probably better not to have experienced it.
Did they ever send you their SSNs? I mean, I’m not going to whitewash what he said, but you gotta agree, sending your SSN to some random dude in a college dorm is pretty darn dumb.
Of course you could say that Zuckerberg is getting a taste of his own medicine, but I dunno, it still seems a bit hypocritical to me.
Maybe someone can come up with a good argument of whose private data we're allowed to post publicly, and whose we aren't?
There's much to say by way of critiquing Facebook, but obviously the "dumb fucks" bit is not it. That's merely an excuse to feel superior, and the discussions it spawns are predictable, therefore uninteresting, therefore off topic for Hacker News.
All: if you can't think of something stupid or bad you said as a teenager, dig deeper.
Well, good point. It was pretty provocative.
> All: if you can't think of something stupid or bad you said as a teenager, dig deeper.
But I am not the CEO of a company that has all the intimate details of hundreds of millions of users private life. Those in power can handle a bit criticism, it's different than saying it about a random person on the street. Also 26 is not quite a teenager. While people report wild personality changes after that age, it usually doesn't happen.
> There's much to say by way of critiquing Facebook, but obviously the "dumb fucks" bit is not it.
It goes with the paragraph above on how people volunteer the information and even the designer of the service things is pretty ridiculous.
> and the discussions it spawns are predictable, therefore uninteresting, therefore off topic for Hacker News.
Hmm, fair point. Agree with flagging.
(I appreciate the polite reply. It's surprisingly rare when there are that many volatiles in the air.)
He was 19.
A normal person's prefrontal cortex (rational brain) is underdeveloped at that age, and is only fully developed at about 25 or even 30 [1].
So your point may be valid if he actually had been 26, but misses badly given the fact that he was 19.
[1] https://mentalhealthdaily.com/2015/02/18/at-what-age-is-the-...
I assume they think it’s disingenuous to paint Facebook in such absolute terms, ignoring the context in which it was first launched:
It was competing with MySpace. Social media was a much newer phenomenon; it hadn’t yet taken its modern shape.
Perhaps Facebook has become a tool for surveillance, but it seems a bit of a stretch to suggest that surveillance is the primary reason it exists.
Even the fact that they allow it, by not doing enough to prevent it is enough reason for me to believe Snowden's statement.