Re How the Spies Learned to Stop Worrying and Love Fitbit

["Dave Farber" <dave () farber net>]

---------- Forwarded message ---------
From: DV Henkel-Wallace <gumby () henkel-wallace org>
Date: Mon, Feb 5, 2018 at 6:46 PM
Subject: Re: [IP] Re How the Spies Learned to Stop Worrying and Love Fitbit
To: L Jean Camp <ljeanc () gmail com>
CC: David Farber <dave () farber net>


What fascinates me about this anti pattern is whether it would comply with
GDPR.  My reading of the English, French and German texts is that you have
to proactively give consent for the processing of your data.  And even if
the data are pseudonymised (as happens in one of Strava's modes), you still
have to consent.

If this passes the GDPR test then companies will trivially be able to
"satisfy" the rules through gobbledygook like this.  If not, then perhaps
the GDPR's hope for "privacy by design" may become common worldwide as EU
RoHS rules have.



*From:* L Jean Camp <ljeanc () gmail com>

*Date:* February 4, 2018 at 5:30:13 PM EST

I went through the settings to see how to make Strava use private. This is
what I read.

To prevent your data being shared by Strava, require seven options on at
least three screens, plus the initial "Choose Enhanced Privacy". But   "Choose
Enhanced Privacy is just a start.

Hide Activities From Leaderboards,
 Change your FlyBy Options

without those turned off, even with enhanced privacy on, you will still
sometimes post your photo, name & run publicly, and will do so based on the
activities of others. Particularly if there are only a few people running a
route (*small base cough cough*) so that there is an isolated local
Leaderboard.

Then there is another screen....
ON Privacy Zones
OFF Training Log Sharing
OFF Strava Metro & Heatmap Data Sharing

 after you have turned everything else *off* you need the following *on* or
your data will be shared with PII as part of the group.
 ON Enable Group Activity Enhanced Privacy,

ON Followers & Block Athletes
 "one you've blocked will be able to see your activity entry in public
areas like segment leaderboards, club feeds, and segment explore."

Blocking *only* means
"the blocked athlete will not be able to access your activity or profile
page if they click on your entry."

So a very pro-stalked feature design there. You choose enhanced privacy.
You block someone. Annnnd they can view your "leaderboards, club feeds, and
segment explore" which I believe means where you run often that others do
not, when you hang with your friends and when you do something new.

Of course no one uses these controls correctly. The controls are scattered
around, the words "blocked" and "privacy" are argle bargle.



-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
RSS Feed: https://www.listbox.com/member/archive/rss/247/18849915-ae8fa580
Modify Your Subscription: https://www.listbox.com/member/?member_id=18849915&id_secret=18849915-aa268125
Unsubscribe Now: 
https://www.listbox.com/unsubscribe/?member_id=18849915&id_secret=18849915-32545cb4&post_id=20180205192445:200354B0-0AD4-11E8-8353-A67FE5C7D459
Powered by Listbox: http://www.listbox.com