Full Disclosure mailing list archives
Re: user data collection
From: Valdis.Kletnieks () vt edu
Date: Wed, 27 Feb 2013 22:01:28 -0500
On Tue, 26 Feb 2013 13:28:26 +0100, "taxakis" said:
I have a simple question to this list: Do we have somewhere specified in detail who (Facebook, Apple, etc.) collects what exact (data) on users ? I do NOT mean 'in general terms' or whatever blurb these companies put on/in their web pages, privacy policies, terms and conditions; but the factual fields they collect (per company/field).
There's probably not an up to date accurate list, for several reasons: 1) It's a moving target - companies change what they collect. 2) Especially for large companies like Facebook or Google, the data collected by different business units may be different - that's part of why Google's privacy policy was so hairy for a while. 3) Some information may be gathered indirectly - for instance, geolocation information, your ISP/employer (as intuited from IP->ASN translations), and data collected by third parties (run NoScript sometime, and look at how many sites load Javascript from tons of other sites). 4) Similar to 3 - third-party cookies and other tracking. Get the Collusion plugin for Firefox, and be prepared to be amazed. 5) Keep in mind that many of these companies (and basically 100% of those who provide any "free" service) consider the data to be valuable business assets that they intend to monetize and not share - when your business model depends on being able to correlate the type of music you download with how often you visit Wikipedia, you're going to try *really* hard to avoid letting anybody find out that you're tracking music downloads and Wiki hits.
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- user data collection taxakis (Feb 27)
- Re: user data collection Valdis . Kletnieks (Feb 27)