Hacker News new | past | comments | ask | show | jobs | submit login

I got out of academic fingerprinting research when I realized I was on the wrong side of the discussion. I’ve just never seen or heard of privacy violations that particularly bothered me.



I too have never experienced a violation of privacy which had a significant observable impact on my life. You and I have been fortunate in this respect.

Some people are literally targeted for harassment and murder because of some aspect of their identity, journalism, or activism. This isn't a hypothetical.

Here's one example from the top of my head:

https://www.independent.co.uk/news/world/middle-east/khashog...

Tl;Dr the dissident Khashoggi was infected with NSO malware before he was murdered by the Saudi government. That's a pretty clear violation of privacy in service of something I would guess you disagree with.

This story isn't an anomaly, I think if you looked into this further you would find innumerable privacy violations which bother you.


Would you all stop talking about this journalist without mentioning his (US) government connections?

Leaves the context of the story incomplete, otherwise.


If you would like to elaborate, or if there's an article you think I should read (or podcast, video, etc), then I'm listening. I'm open to feedback but this is too vague for me to do much with.


The dude was intelligence.


Alright. I'm not gunnuh buy that without a citation. You have no obligation to provide me with one, but finding one on my own is going to be at the bottom of my priorities.


Tough nut to crack.

"Not long after the Saudi journalist was killed at the Saudi consulate in Istanbul, the CIA assessed with high confidence that MBS had personally ordered the killing, but intelligence officials never spoke publicly or presented evidence."

How many journalists get their deaths investigated at all, let alone laid at the door of a...whatever you want to call their government, and what it is to the US'.


To be fair, it is entirely possible that GP doesn't care about anyone but himself.


Please don't cross into personal attack, no matter how wrong someone is or you feel they are.

https://news.ycombinator.com/newsguidelines.html


Sure, I considered similar notions, but I edited them out because they didn't seem compatible with assuming good faith (and made it a lot easier to not include swipes).


[flagged]


No one is obliged to change your mind (indeed, you are the only person who can possibly do that [the comment was later edited from 'change' to 'open', which I think is more reasonable]), and seeing as you more or less did argue for this position, I don't think you should complain.


I do not consider my comment snarky. I thought that maxbond disregarded a perfectly plausible explanation for the claim you made.

EDIT: Just saw your other reply. I think its fair to say I called it.


[flagged]


> Fuck around and find out.

That's your view of human rights...? Well okay, I guess you and I will never see eye to eye.

> You suggest I “look into it further” as if I didn’t just say I was a privacy researcher.

I was responding to your statement, not your credentials. I don't say this to insult you, only to explain because you seem to want an explanation, but your statement was ignorant and lacking nuance. (Your statement, not you personally.)


Would be nice if I could respond to all of you in one place, because y’all are more or less saying the same thing.

In don’t appreciate the personal attacks on my character. It’s really a testament to my point, though. The internet is private enough that you feel comfortable commenting fighting words from behind a keyboard. Hypocrites the lot of you.

It’s perfectly reasonable to say that I have no moral commitment to improving the online privacy situation in light of your given example. State actors in Saudi Arabia are so far removed from a typical citizen that they’re completely irrelevant to the discussion.


Can you please not post in the flamewar style to HN? It sounds like you have a lot of experience in this area and have substantive points to make, but you've been making them in an inflammatory way that is guaranteed to worsen the discussion. We're trying to go in the opposite direction here.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.


> The internet is private enough that you feel comfortable commenting fighting words from behind a keyboard.

With respect, nothing said by maxbond in this thread is what I would consider to be fighting words. If someone was talking face-to-face to me and dismissed human rights violations in Saudi Arabia by saying "f** around and find out", I'd feel extremely comfortable saying to them, "if that's your view of human rights we might not be able to see eye to eye."

Privacy violations in the US itself leading to human rights violations and attacks from the government are common. Since you are a privacy researcher, you should be aware of this stuff already. I don't want to insult you by suggesting you're not. However, if I assume you are aware of how online tracking has been used in the US proper to target marginalized groups, prosecute cross-state abortions, and dox and harass activists -- then the only conclusion I can draw is that you're aware of it and don't think it changes anything about your position.

In which case, if that's your view of human rights we might not ever be able to see eye to eye on this.


If you peruse down the flagged comment nearby you’ll see maxbond backhandedly agree that I only care about myself. I’m not one to punch people in the face, but that’s grounds to be punched in the face in any bar.

That being said, it’s perfectly reasonable not to see eye to eye regarding privacy, which is effectively what I said that started this entire thread. I personally don’t think that online privacy is the front on which discussions about abortion legislation should take place. Even Google, manufacturing Chromium, takes privacy into account to a reasonable extent [0], and I personally feel that it is enough.

[0] For example, if your machine has more than 16Gb of RAM, Chromium only reports 16 because there’s no browser application that needs to know you have more than 16, and it would instantly make your device fingerprint unique.


If your first instinct upon hearing that you're self-centered is to maim the other person, you might be proving their point.

Kashoggi was a US citizen lured to his death by a foreign regime -- not seeing eye to eye on privacy is one thing but imo it's strange to hand wave the incident away because the average person is unlikely to end up in the exact same situation. People are stalked by their employers, exes, strangers, etc every day -- deep privacy absolutely can be valuable to the average person.


Insults in person start fights. It’s only the privacy of the internet that lets you do it here.

Kashoggi was a journalist investigating government corruption. The context of reasonable internet privacy is completely irrelevant.

What does Tor have to do with stalking? Since when has someone’s internet browsing been affected by a stalker?


> Since when has someone’s internet browsing been affected by a stalker?

I'm sorry, but you are (were) a privacy researcher though. You should know already that internet browsing can be influenced by and can contribute to stalking/doxing attempts.


An unrelated third party can’t surveil your browsing without malicious software or hardware intervening.


Yeah, this is just straight up incorrect.

You seem to react negatively when directed towards research topics above, so I'm not sure how to respond to this in a way that you won't find insulting. I have to again assume that you were a privacy researcher. If so, you should already understand that browser surveillance is absolutely possible without malware or hardware access -- at the government level, and at the corporate level, and even sometimes at the individual level.

So I'm at a loss about how you would (I assume mistakenly) make such an obviously false claim.


All done through the ISP, a related party, having absolutely nothing to do with stalking. Poor argumentation.


Once again straight up incorrect, I am not talking about ISPs. You can track browsing and use browsing to help with stalking/doxing without ever getting an ISP involved. Quite frankly, I'm not sure what to conclude from this other than that you may not know as much about how modern Internet tracking works as you think you do.


> I’m not one to punch people in the face, but that’s grounds to be punched in the face in any bar.

This conversation is getting a little weird, but I feel like I should just kind of generally say, that would not be in any way an appropriate or reasonable reaction to being called self-centered. In general assault is not a reasonable reaction to insults period, but it's even less of a reasonable reaction to a passing insult that's as mild as "you only care about yourself."


Well, your discomfort makes it clear you’re not American poor. Verbal confrontations, even disagreements led along insults, are enough to get shot where I’m from. Obviously nothing about that is a good thing.

My point is that the internet is already an extremely private place. I started this in reply to someone proposing privacy evangelism in the wake of ignorant sheeple, and that’s stupid and insulting.


> Well, your discomfort makes it clear you’re not American poor. Verbal confrontations, even disagreements led along insults, are enough to get shot where I’m from.

Okay that is a very weird response.

I feel like I need to state that shooting someone over a verbal disagreement is obviously wrong and obviously would be inappropriate and would obviously reflect negatively on the moral standards and character of the person doing the shooting, and it would obviously be appropriate to view someone who was willing to shoot someone over a passing insult negatively or at the very least to say they may have some issues.

And I don't like the vague insinuation here that lower-income Americans are inherently violent or that crime/violence within lower-income communities is culturally motivated.

> My point is that the internet is already an extremely private place.

Saying that you don't see a set of privacy violations as relevant or worth caring about is a lot different than saying that the Internet is private. The Internet is not private and you're not denying in any of these threads that the privacy violations people are bringing up exist -- you're saying they don't matter and that the Internet is private enough. Be careful not to confuse your personal standards about how private the Internet should be with more neutral descriptions about what risks do or don't exist online.

> and that’s stupid and insulting.

Be careful, I've been told that's apparently fighting words ;)


Your comments about violence in America are generally naive. I assume you’re a young person.

As I stated in another comment, yes, it’s ideological differences on which we differ.


> I assume you're a young person

You do seem to make a lot of casual assumptions for someone who gets offended by even just the implication that they might not be completely up-to-date on examples of privacy violations in the US, don't you? ;)

> Your comments about violence in America are generally naive.

I think I might be wasting my time at this point, but I feel the need to point out once again that older and elderly Americans don't just shoot each other over casual insults, and that would still be super-illegal and super-immoral and it would still be appropriate to morally condemn someone who felt like that was a normal thing even if they were 80.

There is not a way of phrasing this where "you think that I'm self-centered, well people have been killed for less" is a normal thing to say. That is not a normal thing for anybody to say even if they're in their 60s.


I'm sorry you feel I've attacked your character. That wasn't my intention. If I've misread or misjudged you, please do correct me, and I'll add a correction to each of the comments I've made in this thread. This offer does not expire, if you correct me tomorrow or next week or something I'll still get the comments fixed (at least, as long as I see it).

I'm genuinely sorry that you feel frustrated and insulted. Hope you have a good rest of your day.


I have a question for you. I notice that you've chosen to use a pseudonym. I think that's an entirely valid choice.

But would you please explain to us why it is you choose to use a pseudonym?

Were I to ask (which I won't) that you share your name and address, would that make you uncomfortable?


> There’s no reason to care about online privacy

> [I just said] I was a privacy researcher.

Is "privacy researcher" some kind of euphemism here?

> There’s no money in being a creep about it, so people mind their own business.

> The data collection is all about money.

I'm not sure I understand what you're trying to say.


I started getting a PhD in device fingerprinting and quit when it became apparent that my views were relatively far removed from most people in the field.

I’m trying to say that the current privacy situation is good enough. The status quo can’t be abused such that money can be made.


Does it cause you to feel any doubt that the vast majority of the professionals in that field disagree with that conclusion? I mean, you're saying that the majority of privacy researchers who are studying this topic view the current state of Internet privacy as a problem, and it's such a large majority that you felt like sticking around in the field would not be worth your time. Are all of those researchers wrong?


It was on completely ideological grounds that we differed. (Which is also against the HN rules to argue about.)

I was attracted to the industry effectively to verify authentication through device fingerprinting. Others, en masse, are drawn because they don’t like the current privacy situation. Can you imagine someone being attracted to marine biology that didn’t like fish?

It’s perfectly reasonable to say that, yes, I disagree with the majority of the field. In this instance, “I don’t like fish.”


You're also claiming that fish aren't at risk from the fisheries, which is super unusual for someone claiming to speak from within the industry!


Well, that’s how the other side feels, yes.

The closest thing this entire thread has given as evidence of overfishing is that a journalist was killed for meddling in government affairs, which has nothing to do with overfishing.


I'm sure that's why segments of world governments are (attempting?) dismantling Google Ads for their unethical behavior.

Cambridge Analytica didn't bring anyone money?

You missed some reading, dude.


Segments of the world with different ideological views represented by their governments.

If the behavior was blatantly unethical, which I don’t think it is, it would be illegal everywhere. Just because my opinion is different than the popular opinion doesn’t make it anti-vax. Grow up and open your mind.

The Cambridge Analytica scandal was prosecuted under the current privacy situation. My ire with the level-0 comment was in it stating that the current situation doesn’t work. Also downloading random apps off Facebook is hardly behavior that a privacy conscious person would take. Not to mention that the use of the data, unless I’m missing something, did no more than make people uncomfortable.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: