Slashdot Mirror
Researchers Can ID Anonymous Twitterers
narramissic writes "In a paper set to be delivered at an upcoming security conference, University of Texas at Austin researchers showed how they were able to identify people who were on public social networks such as Twitter and Flickr by mapping out the connections surrounding their network of friends. From the ITworld article: 'Web site operators often share data about users with partners and advertisers after stripping it of any personally identifiable information such as names, addresses or birth dates. Arvind Narayanan and fellow researcher Vitaly Shmatikov found that by analyzing these 'anonymized' data sets, they could identify Flickr users who were also on Twitter about two-thirds of the time, depending on how much information they have to work with.'"
Who ever promised this data would be anonymous? Do you really expect privacy when posting personal stuff on line, even if you don't sign your name in advance?
John
Well. Slashdot lies.
I used to get moderator points until I got $rtbl-ed. (RTBL = real time black list).
I have a high karma account in which I post "things that are likely to get moderated up." That way, when I have something insightful to say, and its compatible with the raging groupthinking censorship, I can get a spotlight.
However, I used to post anonymous things that may not be compatible with Slashbotting group-think.
Long story short: If you don't clear your cookies AND use a proxy, and you post anonymously in a bitch-slapped thread or get individually bitch-slapped by a moderator or your logged in username is associated with a bitch slapped or habitual troll IP you will never moderate again and be on $rtbl.
Now my high-karma account no longer can moderate, it can meta moderate but no longer moderate. This $rtbl is hardly real time. Its a permanent ban.
So here we are at slashdot. Where posting AC is flypaper: your real / logged in account WILL get $rtbl-ed if you start voicing things that piss off that crowd (which may in fact be true or genuinely insightful). You lose. You have no anonymous here, make sure you never use the browser you use to talk AC as you do to post logged in. Make sure you use some sort of a bounce or proxy if you think there is a good chance you will be a part of a bitch-slapped thread or make an AC post which the slashbotting public will moderate you down on.
Now someone knows who I am...
Must... cover... everything...
The musings of just another geek and his junk.
Slashdotters care about privacy. People on these social networking sites want their lives to be on show for everyone. I don't think people who twit every 5 minutes where they are and what they are doing are really to concerned about their privacy.
Support a great indie game: http://www.abaddon360.com
Willyhill managed to ID fourteen Twitter accounts. Or is this something completely different?
David who? Smarty pants....
Are there really any surprises here? Social networks behave a lot like the Internet, with many routes pointing to your front door.
For example, use whatever falese names you want. Your email address makes a dandy primary key squirreled away in all your friends mailboxes, just waiting for Facebook to Hoover it up and join the dots.
Your privacy and anonymity is defined by the aggregate social stupidity of your friends.
Xix.
"Everything is adjustable, provided you have the right tools"
I understand networks and how you can get somebody's IP and translate it to a location or identify them with algorithms that analyze sentence structure or even use some TCP packet tricks.
The thing that confuses me is the acronym "FRIEND", I have looked in all my technical references and I can't find that tool.
We have an FAQ about this paper. It answers many of the misconceptions expressed in the comments here. In particular, our algorithm applies to much more than public social networks like twitter and flickr. A variety of networks including the phone call network are being shared behind your back in anonymous form, and our de-anonymization techniques apply just as much. You'll probably agree that people expect more privacy there. See my blog for a variety of demonstrations and thought-experiments of de-anonymization.
as someone whose every thought I have no interest in reading.
http://twitter.com/OLDTELEGRAM
you could not post anonymously!
http://www.guardian.co.uk/technology/2009/mar/26/seth-finkelstein-google-advertising
"Google recently took another step along the path of surveillance as a service, launching what it called "interest-based advertising", and which everyone else calls "behavioural targeting". These are systems that collect extensive personal data, for marketing purposes. To best understand the issues,"
http://sethf.com/infothought/blog/archives/001422.html
I once upon a time worked for a statistics agency and even without names and addresses it is surprisingly easy to identify people in anonymous data, even anonymised unit record data can be deconstructed to some degree. Depending on what you want to achieve don't even need to identify them.
Marrying up these datasets and ideas would be gruesome.
The Singularity is closer than you think
Quant
The application to twitter anonymous accounts is creative, but otherwise it's a standard timing attack. If user A is active while anonymous data B is passed, user A has a higher chance of having generated data B than the rest of the population.
Looks like there's some number-crunching using timing of past tweets and whatnot to see if the user is likely to be on, too. I like that.
Or it could be I'm completely misreading it.
There's an old saying that says pretty much whatever you want it to.
You'll never ID me! You buggers'll never guess my name by just reading my anonymous Slashdot posts!
Go on, just try: am I The Queen? Wrong. Prince Phillip? Wrong. Barack Obama? Wrong. Diana, Princess of Wales (deceased)? Of course not! Kim John-Il's hamster? Nope.
Here's another clue, in the form of some of my recent tweets:
Who's having a dump?
Just did a really big poo, will put picture up on Photobucket.
Anyone followed those Yoda doll instructions on Slashdot yet? Wow!
Maybe it was a tar baby.
My ism, it's full of beliefs.
This & other tricks are possible, yes, but *harder*. I really don't have the creds to pull the tech side of your Point 2, but I have quietly worked to keep the other side down to a whisper, earning strange looks from friends who can't imagine why I Just Don't Wanna Share.
The Mayans got lucky. Their 2012 date is just accidentally shaping up to be the Data Implosion.
~tag: "Let's give everyone what used to be studio grade cameras in their phones, 12 types of mechanisms and reasons to aggregate and pummel cyberspace with pictures of everyone doing everything, while also creating a whole second group of users posting (presumed) anonymously, followed by 35 governments becoming Big Brothers, then losing control of the data!"
As you folks have said, when that tsunami hits the shore, Social Ethics as we know it goes to pieces.
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
Obviously, you know almost nothing about anonymizing yourself. The admin (and oftentimes, moderators) of ANY site/board can go into his admin tools, and find out A: all the IP's from which you have logged into his site and B: all the posters who have logged in from each and every IP that poster has ever used With nothing more than those two sets of data, the admin/mod can make some pretty good guesses just who the heck you REALLY are. More, your browser sends information in ADDITION TO your IP - as well as Java, Flash, and other plugins. Google "TOR Bundle" Look it over, learn it's features, and you will BEGIN TO understand anonymous browsing. But, be aware - the features are ALL USELESS unless you understand them, and use them properly. IF, and/or WHEN you understand the features of that full bundle, THEN you MIGHT know how to trick /. and other sites into believing that you ain't you. But, only if you also acquire the discipline needed to use the tools properly. Meanwhile, stop your whining. No one appreciates you drooling on the floor, and the admins here know exactly who you are. They are laughing at yet another idiot post by a known idiot.
"Windows is like the faint smell of piss in a subway: it's there, and there's nothing you can do about it." - Charlie Br
I wonder what the accuracy would be if you just scanned for posts referencing new pictures at flickr?
Funny, We can get FPs and make the political statements We need to at will and can post at a far faster rate using HA proxies than even logged in users. And We suspect that if they could stop us from posting, they would.
Judging from your Johnny come lately Slashdot ID, you don't know what the fuck you are talking about. We've gamed moderation on /. and k5 and other places to the point where We can hit the karma caps with ease. We know how to engineer people like you. For example, you just fed the "troll." Another is you just put a higher moderated post inline with mine. Another is that you don't understand Slashcode in the least, and if you don't know what RTBL is, you are just a fucking L-user.
We can post shit and get a +5 moderation anytime. We can post on k5 (back when it mattered) and get a front page story. Its all how you present the information in such a way to get fucking morons like you to go along with it. Kind of like idiot Americans taking Obama seriously (or Bush for that matter). Just feed the babies with pureed baby food and you can sell any shit. The hardest part of thinking how to spoon feed the masses of idiots is to get way the fuck down on their mental plane. Its hard for those with real messaging or knowledge to do, but mastery of it pays of in spades (or with a spade as president, lol).
YHBT YHL HAND
If you put your real info on the internets you are stupid.
Learn About Outsourcing. http://www.pioutsource.com
good post
must....... tell...... everyone...... using....... twitter!
"she took her action as a private citizen "tired of giving in". Although widely honored in later years for her action, she also suffered for it, losing her job as a seamstress in a local department store..." - From Wikipedia
It was not a mass protest event. She just had enough that day, and wasn't bowing to an unjust law regardless of the consequence.