Slashdot Mirror
Stop Saying, 'We Take Your Privacy and Security Seriously' (techcrunch.com)
Security reporter Zack Whittaker writes: In my years covering cybersecurity, there's one variation of the same lie that floats above the rest. "We take your privacy and security seriously." You might have heard the phrase here and there. It's a common trope used by companies in the wake of a data breach -- either in a "mea culpa" email to their customers or a statement on their website to tell you that they care about your data, even though in the next sentence they all too often admit to misusing or losing it. The truth is, most companies don't care about the privacy or security of your data. They care about having to explain to their customers that their data was stolen.
I've never understood exactly what it means when a company says it values my privacy. If that were the case, data hungry companies like Google and Facebook, which sell data about you to advertisers, wouldn't even exist. I was curious how often this go-to one liner was used. I scraped every reported notification to the California attorney general, a requirement under state law in the event of a breach or security lapse, stitched them together, and converted it into machine-readable text. About one-third of all 285 data breach notifications had some variation of the line. It doesn't show that companies care about your data. It shows that they don't know what to do next.
I've never understood exactly what it means when a company says it values my privacy. If that were the case, data hungry companies like Google and Facebook, which sell data about you to advertisers, wouldn't even exist. I was curious how often this go-to one liner was used. I scraped every reported notification to the California attorney general, a requirement under state law in the event of a breach or security lapse, stitched them together, and converted it into machine-readable text. About one-third of all 285 data breach notifications had some variation of the line. It doesn't show that companies care about your data. It shows that they don't know what to do next.
And politicians don't really care about their constituents or the country. And SJWs really don't care about equality. The list is endless.
I have a real easy way for companies to care about privacy when they say they "care about privacy":
Penalties:
-- $2 for each name + password
-- $5 for credit card number
-- $10 for social security number
etc.
And multiply for combinations of the above. You'll see companies start fixing their processes (or simply refusing to store unnecessary data, right quick.
They all pay lip service to security. That's all. They don't do what they should, because it is simpler, and most cost-effective, for them to do damage control when the inevitable security breach happens than really trying to prevent it. We have heard about huge security breaches in Equifax, Target, Visa etc. Those companies are still there, business as usual. They sure took a hit, but it probably impacted on their bottom line less than having to invest on minimizing the probability of such breaches in the first place.
About one-third of all 285 data breach notifications had some variation of the line. It doesn't show that companies care about your data. It shows that they don't know what to do next.
"We take your privacy and security seriously" is the data tech equivalent of saying "We send out thoughts and prayers". It means nothing concrete, and is meant to end inquiry/discussion into what actions should in fact be taken (or should have been taken).
- First they ignore you, then they laugh at you, then ???, then profit.
I ask you to take $5 from my bank account, and in under 10 seconds you have successfully resolved a transaction in a thorough, secure, and traceable away, even if my bank isn't on the same continent as your bank. Which of these do I think you "take seriously"?
Interestingly enough, a credit to your bank account can take up to an order of magnitude more time to post than an instantaneous purchase.
Perhaps the banking powers that be are tipping their collective hand here... when it is in their financial interest to do so, they've developed the uncanny ability to be as fast as they need to be or as slow as necessary to maximize daily balance computations.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
Coincidentally, we value it exactly the same amount that the highest bidder does.
Let's break this down:
- Demand to buy Android Devices with unlockable Bootloaders that can run Lineage OS.
You just lose most consumers with this line.
- Maps provided by Osmand on Android
This is one of the few things you said that's doable.
- Self Host a Federated NextCloud/OwnCloud Service for Roaming Storage on a PC they own with a Dynamic DNS Provider.
You now lost a good chunk of the remaining technical crowd and narrowed your solution to only the top tier of nerds.
- Handle Contacts, Calendaring,and Task related services on a Groupware service.
What's a groupware service? Asking for a consumer.
- Instant Messaging/Social Media done Via Libpurple based Spectrum2 Servers. (again, hosted on the same set of Devices as the NextCloud/Groupware Solution.
That's good and all but I just checked and my friend's aren't on it. Regards, a consumer.
These are the only things that will really change the privacy game.
Consider your game lost before the users even got through the instructions for it.