Slashdot Mirror


DuckDuckGo CEO: 'Google and Facebook Are Watching Our Every Move Online. It's Time To Make Them Stop' (cnbc.com)

An anonymous reader shares a report from CNBC, written by Gabriel Weinberg, CEO and founder of DuckDuckGo: You may know that hidden trackers lurk on most websites you visit, soaking up your personal information. What you may not realize, though, is 76 percent of websites now contain hidden Google trackers, and 24 percent have hidden Facebook trackers, according to the Princeton Web Transparency & Accountability Project. The next highest is Twitter with 12 percent. It is likely that Google or Facebook are watching you on many sites you visit, in addition to tracking you when using their products. As a result, these two companies have amassed huge data profiles on each person, which can include your interests, purchases, search, browsing and location history, and much more. They then make your sensitive data profile available for invasive targeted advertising that can follow you around the Internet.
[...]
So how do we move forward from here? Don't be fooled by claims of self-regulation, as any useful long-term reforms of Google and Facebook's data privacy practices fundamentally oppose their core business models: hyper-targeted advertising based on more and more intrusive personal surveillance. Change must come from the outside. Unfortunately, we've seen relatively little from Washington. Congress and federal agencies need to take a fresh look at what can be done to curb these data monopolies. They first need to demand more algorithmic and privacy policy transparency, so people can truly understand the extent of how their personal information is being collected, processed and used by these companies. Only then can informed consent be possible. They also need to legislate that people own their own data, enabling real opt-outs. Finally, they need to restrict how data can be combined including being more aggressive at blocking acquisitions that further consolidate data power, which will pave the way for more competition in digital advertising. Until we see such meaningful changes, consumers should vote with their feet.

21 of 224 comments (clear)

  1. It won't change unless we resist. by TimothyHollins · · Score: 5, Informative

    A great way to confound these trackers everywhere is to use an addon like AdNauseam. It will click on everything for you, generating a massive, and false, report regarding your activities.

    The only way to make a difference is to hit these giants in the wallet, and once the companies paying for these these personal profiles conclude that they aren't helping their bottom line, the market will have to change in response or lose a lot of potential income.

    1. Re:It won't change unless we resist. by amiga3D · · Score: 4, Insightful

      While I like the sentiment I doubt it will be effective in the end. Google and FB have huge numbers of talented engineers. They will find ways to dig through any attempts you make to hide your data from them. The fact is, the very usefulness of online services seduces most people into freely sharing everything. Only the most paranoid will succeed in hiding and by doing so they will deny themselves a lot of services and useful benefits of the Internet.

    2. Re:It won't change unless we resist. by tsa · · Score: 3, Interesting

      The only way to get them to change is to force them to pay their users for the use of their data. Because the users' data is used for earning money, a large percentage of the profit should also go to the users.

      --

      -- Cheers!

    3. Re:It won't change unless we resist. by mohsel · · Score: 3, Interesting

      I like the idea, but i'm more into filtering and blocking:

      -Don't use social media: yes it's really possible within certain type of social circles
      -Don't use ANY of google's software: Chrome, Android (as only deactivating Android Google Services makes Android Devices unusable)
      -Use a real open browser with NoScript and AdBlock Ultimate. if something doesn't work then the hell with it. you'll get used to it.
      -Facebook isn't internet. there's forums, chats, usergroups, email, and video sharing websites they didn't invent anything.

    4. Re:It won't change unless we resist. by mohsel · · Score: 5, Insightful

      Conceptually, the user gets paid in services in exchange of personal data and digital tracking.

      We give you pictures of cats and idiotic filters of animal ears on top of your picture, you give us the ability to own your digital behavior history. most people who cared enough to find out what the deal was agreed to it and found it to be a great one.

    5. Re:It won't change unless we resist. by jellomizer · · Score: 4, Interesting

      It also creates false successes to companies who are using overly disruptive, abusive or misleading ads.

      I am sure many of you don't remember the Web in the late 1990's and early 2000's where Popup windows were common form of advertisements. Until the advent of the Popup blocker where the Ad companies realized they were no longer getting money from popups so they had to change their tactics to less obtrusive methods. Now every once in a while we get a re-insurgence of abusive ads, then ad blockers quickly are fixed to stop them.

      I am OK with advertising, even targeted advertising on sites, especially sites who offer information and services that I like for free, and do not have other options for a business model. However if the Ad failed to get my attention, then it is the fault of the Ad. And if the Ad got in my way, that made me hate the company that is their fault too.

      AdNauseam which tells the Ad Maker this ad worked. So lets do more of it.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    6. Re:It won't change unless we resist. by thomst · · Score: 4, Informative

      https://slashdot.org/~TimothyHollins enthused:

      A great way to confound these trackers everywhere is to use an addon like AdNauseam. It will click on everything for you, generating a massive, and false, report regarding your activities.

      A better way to defeat them is to use NoScript's Application Boundary Enforcer (ABE - located in the Advanced tab of the Options menu) to forbid their javascripts from running on anything other than their own domains. For instance, here's what I use to block Facebook from running the scripts associated with those ubiquitous "share" icons, as well as with their single-pixel trackers:

      Site .facebook.com .fbcdn.net
      Accept from .facebook.com .fbcdn.net
      Deny INCLUSION(SCRIPT, OBJ, SUBDOC)

      Then just block third-party cookies by default, and Presto!, you're only being tracked on Facebook's own site - which you kinda have to put up with, if you use FB at all.

      Similar strategies will keep Google, Twitter, Snapchat, and any other social media company from following you around the web, as long as you create ABE scripts to block them outside of their own respective domains.

      And, of course, it should go without saying that you'll want to block google-analytics.com, googleadservices.com, and other ad trackers altogether. Fortunately, despite all the Google-hating on /., you don't have to enable any of their ad trackers in order to actually use Google itself, or any of its applications, such as Gmail or Drive

      Would that the same were true of, say, Facebook ...

      --
      Check out my novel.
    7. Re:It won't change unless we resist. by Ol+Olsoc · · Score: 5, Insightful

      We give you pictures of cats and idiotic filters of animal ears on top of your picture, you give us the ability to own your digital behavior history. most people who cared enough to find out what the deal was agreed to it and found it to be a great one.

      The difference between internet pioneers and the paranoid, and the rest of the world. After we figured out how to monetize the toobz, it was all downhill in that respect.

      As for me, my major personal concern is not so much being tracked, it is that the internet is IMO unusable without ad and script blockers. Pages that take forever to load, jump around when they are loading, and go to a new page and do it all over again.

      I discover this anew when once a year or so, I have to disable my blockers for one reason or another, then forget to re-enable them. But I discover that error quickly.

      I didn't pay for a fast connection just so I can get modem speed loading due to ads and trackers.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
    8. Re:It won't change unless we resist. by Solandri · · Score: 5, Interesting

      When the Cold War ended, the was an apocryphal story that a bunch of spies from the CIA and the KGB got together at a bar for drinks and to swap war stories. The CIA members lamented that due to the Soviet Union's closed society, their job had been so difficult. It was a major production just to get a single operative into the U.S.S.R. And how easy it must have been for the KGB to send agents into the U.S. to take photos of U.S. military assets at will.

      The KGB members vehemently disagreed. They said that theirs had been the harder job. That while it was easy to get into the U.S., the free society produced so much information that it was difficult for them to pick out the signal from the noise. Every time the National Enquirer or some local newspaper printed a story about the U.S. government hiding a crashed UFO or someone with psychic powers or a plane invisible to radar, they had to use manpower to investigate if this was a real thing or just made-up BS.

      Hiding stuff is hard. Making noise is easy. Why try to tackle the herculean task of trying to make yourself invisible to people spying on you, when you can just create the illusion of dozens of images of yourself, and leave the spies with the herculean task of trying to figure out which one is the real you? I've long advocated that the best way to fight browser tracking isn't to try to hide yourself. It's to pollute the data they're collecting about you. Someone needs to come up with a program or browser extension which when turned on follows random links on each page every few seconds (the extension can learn how long based on your actual browsing patterns), sometimes in new tabs, occasionally closing tabs, and occasionally going to google.com and searching random dictionary words to start the process over again.

      Every time you step away from the computer, you can just turn that program on to pollute the data in the profile that Facebook, Google, et al have built up on you.

  2. So how do we move forward from here? by Anonymous Coward · · Score: 5, Interesting

    How do you move forward? Install a blocker and stop them from seeing your movements in the first place.

    Install something like HTTP Switchboard or uMatrix, and block the request in the first place. Throw in Ghostery and a script blocker. Make javascript and cookies whitelist only. In my opinion, this should be the default behaviour of web browsers, but since most of the companies who make them are getting ad revenue, that likely won't happen.

    In my estimation the average web set will have 5-10 3rd party sites which are nothing but trackers, ads, and analytics. It's none of their fucking business what sites I visit, so my browsers simply don't make requests to them.

    Your ad revenue isn't my problem. Your business of tracking people isn't my problem. I haven't consented to the privacy policy of a 3rd party I didn't invite to the party. Your cookie policy? Well, I have one too, and the answer is no.

    This won't work for the average web user because it takes time and effort and a willingness to break a website and decide it's not worth using. But until lawmakers clamp down on this, the only solution is to block it yourself and prevent these companies from seeing every site you visit.

    Ad companies can suck my balls, because I'm simply going to keep blocking them. And the odd site I find which can't be made to run without the 3rd party crap? Well, there's always the back button and another site.

    1. Re:So how do we move forward from here? by amiga3D · · Score: 3, Informative

      I doubt you'll see many people willing to go through the effort. Most are willing to be tracked. I have a laptop I use for paranoia's sake. It's got a secure Linux distro and I use it only for things like online banking, nothing else. Other than that, I don't really worry about it, to me it's not worth the trouble. I get targeted ads all the time but I am adult enough to ignore them only buying things I need. For the impulsive it's a problem though.

  3. Translation by Anonymous Coward · · Score: 3, Interesting

    Please somebody use DuckDuckGo!!! Please please please.

    Everybody knows their data is being slurped in exchange for free services, that's the deal, people are mostly ok with it. You're going to get ads, does it really matter if they're targeted or not?

    1. Re:Translation by Ol+Olsoc · · Score: 4, Insightful

      Targeted ads are better than random ads. At least they show you things you might like.

      More like things you already bought.

      --
      The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
  4. Tip of the iceberg by Anonymous Coward · · Score: 4, Interesting

    Think of all the WiFi and Bluetooth IDs that are ubiquitous in our modern world. Wherever you go, your phone sees all these IDs.
    Turn off your GPS location - it doesnt matter. Someone else's phone will detect your phone (by way of Bluetooth or WiFi IDs) and report it tagged with its own GPS location.
    Buy a smart TV - it will note the presence of devices as well and (because of the giant data bucket all this is being fed into) know who's home it is in, what the GPS location is. And your phone will note the presence of your TV. It's a big web of device detection.
    Correlate all this data, and you have a really, really detailed account of where you go, who you associate with, what you watch, and when. You can't really opt out unless you don't use any computerized gadgets because someone else's gadget will report your gadget for you.

    Web browser tracking is just one piece of this giant data collecting puzzle but the rabbit hole goes a lot further...

  5. The War is already over. You lost. by geekmux · · Score: 4, Insightful

    Consumers are both lazy and don't give a shit about security or privacy. This statement is validated by the fact that these mega-corps now have successfully amassed huge data stores on billions of humans. The only way change would ever happen is if security and privacy were the default setting in the default program. Anything else requires effort that only 0.01% of society will care to expend, and any change to the default will be fought by mega-corps who rake in hundreds of billions by preying on insecurity and a lack of privacy.

    Oh, you stopped carrying a smartphone because you didn't want to be tracked? What the hell difference does that make when 99.99% of society around you is still carrying one? It only makes you stand out apart from the rest now, and even more observable as an anomaly. Being secure now creates insecurity.

    Sorry, but the fight for privacy and security is done. The war is over, and privacy and security lost.

  6. Government Oversight Highly Unlikely by ytene · · Score: 3, Interesting

    Unfortunately, whilst I do agree with the sentiment that the largest web monopolies such as Google and Facebook need to have their all-pervasive monitoring addressed, I do not believe that any change will come via meaningful government legislation.

    The reason is simple. Today, governments around the world can turn up at the doorstep of Google, Facebook, Microsoft and others with a National Security Letter (NSL) and demand information in a way that the companies concerned are prohibited from discussing. In other words, it is in the interests of governments all around the world to allow these companies to become private extensions of the surveillance state. It's also much cheaper for the governments concerned - they can demand access by law - and at zero cost to them...

    Unfortunately, that "cost angle" adds another twist, another dimension to this picture. In the case of the very largest providers concerned, governments know that the costs incurred from answering NSLs can soon become very, very expensive. Now, governments are not going to want to upset these companies to the point where they start to resist such demands [witness the Microsoft defense against the servers located in the Irish Republic], so said governments need to find a way to "sweeten" the deal. I have no knowledge of what they might be willing to do in such scenarios, but I am inclined to look at, for example, the case of Microsoft's purchase of both Skype and Hotmail.

    When Microsoft made the purchases, these two companies were still in early growth stages and (IIRC) neither were operating at a profit. In the case of both acquisition, Microsoft then had to spend a very considerable sum of money to make changes. In the case of Skype, for instance, they changed the infrastructure model so that all calls, instead of being point-to-point, were re-routed via Microsoft's own internal servers, so Microsoft then had the potential [if required] to intercept and/or record Skype calls. So the question becomes: how do you make such a deal attractive to Microsoft?

    Perhaps - again, I don't have any evidence of this - as a government you might be willing to strike a deal with respect to Corporation Tax? Or to award contracts? Or both? The point being that, ultimately, the relationship between these internet giants and the governments who are supposed to regulate them is already far too cozy for us to consider the relationship as "formal and polite"...

    Add to this the truly massive amount of money and resource these companies can afford to spend on lobbying and you start to get an understanding of how unlikely meaningful government regulation can be. In fact, ironically, only the EU, which isn't a single government and which doesn't have the power to tax these corporations directly, seems to have been remotely successful in trying to curb their powers. And even their successes have been extremely limited.

    Bottom line: ain't going to happen.

    1. Re:Government Oversight Highly Unlikely by coofercat · · Score: 3, Insightful

      If you're waiting for the US Government to do something about this, you'll be waiting almost as long as you will for the tracking companies to do something themselves through some sort of 'voluntary code of practice'.

      For anything worth doing, you need a government not owned by the businesses at risk here. The Europeans look to be making quite some inroads into this sort of thing with GDPR and the like. They don't outlaw tracking by any means, but at least raise the cost of doing business a bit. That won't stop the big companies of course, but it's a start.

      In the meantime, adblock, noscript, ghostery, privacy badger etc are really your only defence - if they don't get it in the first place, then they can't misuse it. I predict there'll be some actual tracking limiting laws coming out of Europe in about 5 years time - it still won't stop tracking or profiling entirely, but it'll put further dents in those activities as a business model, and give the advertisers a less certain destination for their ads (which in turn will devalue the tracking/profiling activity somewhat).

  7. Re:It's also time to improve DuckDuckGo by SirGarlon · · Score: 5, Interesting

    Can you elaborate on what was wrong with DuckDuckGo's results? I have been using it for years. Certainly it's very different from Google's results but to me that is a benefit -- I am fundamentally offended by a company trying to control what information I find based on 1) what the unwashed masses seem to want and 2) what Google's predictive analytics have determined is the best approach for their customers to attempt to separate me from my money. If I wanted to consume whatever slop was put in front of me by the corporations, I'd watch TV.

    </rant> I know it's hard to characterize what counts as "better" search results, but I really would like to know what the usage model is where Google's results count as "good." Is it that you have a specific question in mind and you want to find an answer? Because my approach is totally different: I have a specific topic in mind and I want to see the range of what has been written about it so I can decide which source is the least stupid, biased, and evil.

    --
    [Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
  8. I'm just not that worried by rsilvergun · · Score: 5, Insightful

    about this kind of tracking. I've got bigger fish to fry. I'm in the US, so I'm not guaranteed access to health care. My jobs keep getting offshored and if they can't do that they try to bring in cheap labor to do them (e.g. H1-Bs or whatever your local equivalent is) and I'm staring down the barrel of a massive Automation push that, even if it doesn't take my job, is going to displace so many workers it's going to royally fsck the economy. Then there's climate change and water shortages coming, the absurd cost of college for my kids and not being able to retire when I can't work anymore. Oh yeah, and my country's involved in 8 wars and working on 9 and 10.

    When I read stories like this I think about that XKCD comic about the guy with megabit encryption getting hit with a $2 wrench until he gives up his password. There's just much, much easier ways to oppress me than taking away a bit of my privacy so they can sell me crap.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
  9. This page has 12 trackers on it. by Arkham · · Score: 3, Informative

    I run Ghostery, and this slashdot page has 12 trackers on it.

    The CNBC article linked in the summery has 21 trackers on it.

    It's completely out of control. I've switched to Duck Duck Go as my search (try it, it's just as good as Google). I run Ghostery on all my devices. Still, there's no way to avoid it unless you disable cookies and Javascript, and at that point the web stops functioning.

    I think a regulatory solution will ultimately be required.

    --
    - Vincit qui patitur.
  10. Re:Trackers? We don't need no trackers by ytene · · Score: 3, Interesting

    Yes - and we can set our technology to automate this for us.

    Unfortunately, it is no longer enough. Our local ISPs - who are utterly corrupt - are not only selling details that connect us as individual households to our IP address leases, but also are using our billing records to join the dots to our postal location and home address...

    If I try and access slashdot on my iPad, I notice that some of the served advertisements [those from Tamboola and others] are geographically specific to within 5 miles of my home address. I've discussed this with my ISP, who are presently trying to claim that they allocate IP blocks on a location-by-location basis. I'm presently trying to determine if this is the truth [which I doubt] and if not true this would go a long way to confirming my suspicions.

    However, if your identity can be ascertained from the moment you connect, even a daily purge of your network access technology simply won't be enough.

    Lastly, if you haven't already tried it, take a look at panopticlick, from the EFF, here:- https://panopticlick.eff.org/ It is a really effective way of determining whether or not your web browsing setup of choice can be used to track you based on nothing more than the configuration of the browser.