Stories
Slash Boxes
Comments

SoylentNews is people

posted by cmn32480 on Tuesday March 21 2017, @12:04PM   Printer-friendly
from the I'll-determine-what's-sensitive dept.

ISPs that want the federal government to eliminate broadband privacy rules say that your Web browsing and app usage data should not be classified as "sensitive" information.

"Web browsing and app usage history are not 'sensitive information,'" CTIA said in a filing with the Federal Communications Commission yesterday. CTIA is the main lobbyist group representing mobile broadband providers such as AT&T, Verizon Wireless, T-Mobile USA, and Sprint.

The FCC rules passed during the Obama administration require ISPs to get opt-in consent from consumers before sharing sensitive customer information with advertisers and other third parties. The FCC defined Web browsing history and app usage history as sensitive information, along with other categories such as geo-location data, financial and health information, and the content of communications. If the rules are overturned, ISPs would be able to sell this kind of customer information to advertisers.

The opt-in rules are scheduled to take effect on or after December 4, 2017, but ISPs have petitioned the FCC to eliminate the rules before that happens. The latest CTIA filing was a reply to groups that opposed the petition to overturn the rules.

In making its argument that Web browsing and app usage history are not sensitive information, CTIA said that the Federal Trade Commission has taken a different stance than the FCC.

"To justify diverging from the FTC's framework and defining Web browsing history as 'sensitive,' the commission and the [privacy rule supporters] both cherry-picked evidence in an attempt to show that ISPs have unique and comprehensive access to consumers' online information," CTIA wrote. "As the full record shows, however, this is simply not true. Indeed, even a prominent privacy advocacy organization asserted that it is 'obvious that the more substantial threats for consumers are not ISPs,' but rather other large edge providers."

Source: ArsTechnica


Original Submission

This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
(1)
  • (Score: 3, Insightful) by Anonymous Coward on Tuesday March 21 2017, @12:25PM (5 children)

    by Anonymous Coward on Tuesday March 21 2017, @12:25PM (#482065)

    In related news, mafia cartels say homicide is environmental control of population, so, not a crime at all.

    • (Score: 3, Insightful) by DannyB on Tuesday March 21 2017, @01:37PM (4 children)

      by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @01:37PM (#482106) Journal

      Murder is a crime. Period.

      Letting seniors starve is not a crime. Letting people die from lack of health care is simply effective population control. Letting children starve either at school or at home is simply the government offering greater choice. Letting the clean air of LA go back to the smog of the 70's (remember that?) is simply removing burdensome regulations. Global warming isn't real. Lead in your drinking water is an important mineral that the FDA will now include an RDA guideline for.

      --
      What doesn't kill me makes me weaker for next time.
      • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:21PM

        by Anonymous Coward on Tuesday March 21 2017, @03:21PM (#482178)
      • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:30PM (1 child)

        by Anonymous Coward on Tuesday March 21 2017, @03:30PM (#482186)

        And this is all just Great to the grand emperor of Orange.

        • (Score: 2) by Gaaark on Tuesday March 21 2017, @07:17PM

          by Gaaark (41) on Tuesday March 21 2017, @07:17PM (#482324) Journal

          WAIT, WHOA!!!

          "What difference at this point DOES IT MAKE!!"

          Someone old and frail said this. Can't remember who. Name starts with one of the letters in the word 'sH*tHead'. https://www.youtube.com/watch?v=BuW_7sktdBc [youtube.com]

          --
          --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
      • (Score: 3, Insightful) by maxwell demon on Tuesday March 21 2017, @07:15PM

        by maxwell demon (1608) on Tuesday March 21 2017, @07:15PM (#482321) Journal

        Murder is a crime. Period.

        Yes, because if the killing is legal, it's not called murder.

        --
        The Tao of math: The numbers you can count are not the real numbers.
  • (Score: 2, Insightful) by Anonymous Coward on Tuesday March 21 2017, @12:39PM (2 children)

    by Anonymous Coward on Tuesday March 21 2017, @12:39PM (#482070)

    the data is probably very sensitive to the harddisk it is stored on.
    you know ... if WEREN'T sensitive data then nobody would (want) to store it.

    put in other words ... the HDDs with this non-sensitive data could go belly up (or even better, not exist)
    and nobody would be .. errr ... the wiser.

    "in the commotion of making out internet service cheaper for all customer we have gone thru the trouble of buying tons of HDD (and power-electricity too)
    to store ALL their actually non-sensitive data. the EXTRA COST of buying and running the HDDs will be offloaded to selling the non-sensitive data .. errr..."

    • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @06:04PM

      by Anonymous Coward on Tuesday March 21 2017, @06:04PM (#482281)

      touché, or more likely, checkmate.

    • (Score: 2) by Gaaark on Tuesday March 21 2017, @07:19PM

      by Gaaark (41) on Tuesday March 21 2017, @07:19PM (#482327) Journal

      Some data IS sensitive, but then it get's wiped when it gets too hot to hold. Yeah, i mean.... like with a cloth.

      --
      --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
  • (Score: 5, Funny) by The Mighty Buzzard on Tuesday March 21 2017, @12:43PM

    They obviously haven't looked at mine then.

    --
    My rights don't end where your fear begins.
  • (Score: 4, Informative) by Anonymous Coward on Tuesday March 21 2017, @12:58PM

    by Anonymous Coward on Tuesday March 21 2017, @12:58PM (#482083)

    Bad news:
    Watching the URL's go by gives the watcher a pretty good idea of who you are talking to, what you are looking at, where you go, and when you did it.
    What's left and if this isn't sensitive, what is?

    Good news:
    At the inauguration, there at least some question as to who the new President was taking back the government for.
    This certainly removes some of the suspense.

  • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @01:23PM (10 children)

    by Anonymous Coward on Tuesday March 21 2017, @01:23PM (#482093)

    www.privateinternetaccess.com - the URL says it all.

    Well, until we discover it's all a giant honeypot. Until then, at least you're not low hanging fruit.

    • (Score: 2) by Grishnakh on Tuesday March 21 2017, @02:14PM (1 child)

      by Grishnakh (2831) on Tuesday March 21 2017, @02:14PM (#482136)

      The only problem with that is, in my experience, it's really, really slow (esp. for establishing new connections, in browsing to new sites). Maybe I'm just picking the wrong endpoint.

      • (Score: 0) by Anonymous Coward on Wednesday March 22 2017, @12:48AM

        by Anonymous Coward on Wednesday March 22 2017, @12:48AM (#482482)

        Try Singapore. PIA works great for us. No timeouts, good speeds. YMMV, as always..

    • (Score: 2) by TheGratefulNet on Tuesday March 21 2017, @02:22PM (3 children)

      by TheGratefulNet (659) on Tuesday March 21 2017, @02:22PM (#482145)

      had them - worked for a while and them had to dump them.

      they time-out after exactly 1 hour. you have to 'redial' every hour to keep the connection up.

      they are in the UK. nuff said! ... ;(

      comcast seems to mess with their connection. could not get it to work after I moved to a new location.

      I have another vpn that works fine. the 'london trust' is anything but trust. sorry, but if its uk-based, its nanny-state based and cannot be trusted.

      --
      "It is now safe to switch off your computer."
      • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:48PM

        by Anonymous Coward on Tuesday March 21 2017, @03:48PM (#482202)

        No problems here. Several years now. Also on comcast.

      • (Score: 2) by Gaaark on Tuesday March 21 2017, @07:30PM

        by Gaaark (41) on Tuesday March 21 2017, @07:30PM (#482333) Journal

        Have never had a problem in the 2-3 years i've used them (and am renewing soon).

        I've had it run all day and night without a problem.

        --
        --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
      • (Score: 1) by purple_cobra on Thursday March 23 2017, @12:13PM

        by purple_cobra (1435) on Thursday March 23 2017, @12:13PM (#483182)

        Funny you should mention that...
        I use a different VPN provider and had exactly the same issue. They were as bemused as I was and had no idea of a potential cause, telling me repeatedly it wasn't anything they'd set at their end. While poking through the router settings - an Asus AC66U running Merlin's firmware - I see a warning that it hadn't synchronised its time via NTP. There's some weirdness going on in the code that hasn't been conclusively fixed IIRC, but a helpful soul on the support forum had posted a cron script to sync NTP every so often, something I tried if only to make sure the logs were accurate.
        The point of this rambling explanation is that after the time was fixed, the VPN disconnects stopped happening too!
        This could be a coincidence, of course, but I wonder if a persistent timestamp mismatch was causing the server end to drop the connection after a default period? Worth checking your router, at least.

    • (Score: 2) by Refugee from beyond on Tuesday March 21 2017, @03:57PM (2 children)

      by Refugee from beyond (2699) on Tuesday March 21 2017, @03:57PM (#482210)

      Isn’t it US-based?

      --
      Instantly better soylentnews: replace background on article and comment titles with #973131.
      • (Score: 2) by Refugee from beyond on Tuesday March 21 2017, @04:01PM (1 child)

        by Refugee from beyond (2699) on Tuesday March 21 2017, @04:01PM (#482214)

        Oh, the other comment says UK. Must have remembered that wront then. Still, that’s not really any better.

        --
        Instantly better soylentnews: replace background on article and comment titles with #973131.
        • (Score: 3, Interesting) by MadTinfoilHatter on Wednesday March 22 2017, @03:58AM

          by MadTinfoilHatter (4635) on Wednesday March 22 2017, @03:58AM (#482535)

          Oh, the other comment says UK. Must have remembered that wront then.

          PIA is US based. The name of the company running it is "London Trust Media", though which could explain the confusion. This [torrentfreak.com] is a pretty good place to start if you want a quick survey of VPN providers.

          Still, that’s not really any better.

          Actually it is. Companies in the US aren't subject to any mandatory data retention policy (yet). The downside of the US are the national "security" letters which they're not allowed to talk about, so it's really impossible to know if they've been served or not. The best place for a VPN provider to be based is probably an EU country that (IMPORTANT!!!) exempts VPN providers from the EU data retention law. This includes countries like Sweden, Italy, France, Bulgaria, Luxemburg, Netherlands, Romania, Cyprus, Serbia and some others. See this [bestvpn.com] for details.

    • (Score: 3, Interesting) by JoeMerchant on Tuesday March 21 2017, @05:18PM

      by JoeMerchant (3937) on Tuesday March 21 2017, @05:18PM (#482248)

      Using a service like that actually makes you self-selected low hanging fruit.

      Most people don't care. With billions of people using the internet, you can't practically search them all (well, actually, for some less common key words, you can, but that's another story.) If you act normal and move with the crowd, you won't get profiled and pulled aside for questioning and deeper scrutiny.

      --
      🌻🌻 [google.com]
  • (Score: 3, Interesting) by DannyB on Tuesday March 21 2017, @01:29PM (18 children)

    by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @01:29PM (#482096) Journal

    Why are we worried about these things . . .

    1. Your browser history.

    After all, your web browser keeps the history on your local drive. Your ISP and intermediate routers are able to see that you send packets to and from there.

    2. Your FaceTwit history.

    After all, the whole world can see what you write on FaceTwit. And who your friends are.

    3. Your Grindr history.

    After all, anyone and everyone knows who you pick up at the bar each visit. And it is the major topic of conversation among your friends.

    Furthermore, everyone can see your house on Google Street view. Amazon knows whether you violate Arizona's legal limit of two dildos per household. (Unless your last order was to give out as party favors.) Your TV manufacturer knows what pr0n you watch. Your mobile phone company knows which cell towers you are closest to at any moment of the day. The manufacturer of your smart toaster knows extremely intimate and personal details such as whether you like it dark or light.

    So should we really be worried about what our ISP can learn? If most web browser interactions are increasingly encrypted, the most the ISP can learn is that you send packets to and from certain ISP addresses. You can use alternate DNS servers, such as 8.8.8.8. It seems like the problems go a lot deeper and are a lot wider than just what the ISP can learn.

    --
    What doesn't kill me makes me weaker for next time.
    • (Score: 1) by ACE209 on Tuesday March 21 2017, @02:25PM (3 children)

      by ACE209 (4762) on Tuesday March 21 2017, @02:25PM (#482146)

      Wait?! There is a legal limit on the amount of dildos in a household?

      Seems like the EU is not the only one overregulating.

      Does a double dildo count as one or two?

      • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @02:30PM (1 child)

        by Anonymous Coward on Tuesday March 21 2017, @02:30PM (#482152)

        You need to file a form CY-83R for a double dildo. Of course, it's regulation never to imply ownership in the event of a double dildo... always use the indefinite article "a" double dildo, never "your" double dildo.

        • (Score: 2) by Gaaark on Tuesday March 21 2017, @07:33PM

          by Gaaark (41) on Tuesday March 21 2017, @07:33PM (#482337) Journal

          And don't forget to file the TPS reports.

          yeah.

          --
          --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
      • (Score: 2) by DannyB on Tuesday March 21 2017, @03:29PM

        by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @03:29PM (#482185) Journal

        49 of the states are under regulating. A more serious problem is that some people are too poor to afford them and should receive a tax credit upon showing a receipt of purchase. :-)

        --
        What doesn't kill me makes me weaker for next time.
    • (Score: 1, Insightful) by Anonymous Coward on Tuesday March 21 2017, @02:27PM (2 children)

      by Anonymous Coward on Tuesday March 21 2017, @02:27PM (#482149)

      8.8.8.8 and 8.8.4.4 are easy to remember in a pinch when you need to sanity check a DNS problem, but using those for day-to-day internet use due to ISP data aggregation seems like jumping from the frying pan into the fire.

      • (Score: 2) by Nerdfest on Tuesday March 21 2017, @04:37PM (1 child)

        by Nerdfest (80) on Tuesday March 21 2017, @04:37PM (#482228)

        Also, I'm guessing that your ISP is going to grab the data in those packets if it's valuable to them anyway.

        • (Score: 2) by bob_super on Tuesday March 21 2017, @09:10PM

          by bob_super (1357) on Tuesday March 21 2017, @09:10PM (#482396)

          Can we get an encrypted connection to SoylentDNS and soylentVPN?

    • (Score: 5, Insightful) by AthanasiusKircher on Tuesday March 21 2017, @02:33PM (3 children)

      by AthanasiusKircher (5291) on Tuesday March 21 2017, @02:33PM (#482154) Journal

      So should we really be worried about what our ISP can learn?

      I'm not sure I understand you correctly, but from your post, it seems like you missed the entire point here. We all know that ISPs have access to such personal data.

      The issue here is whether the ISP is just allowed to share this data freely with other companies, effectively selling your browsing habits to the highest bidder. Yes, lots of companies have various data on you, but if it isn't shared, they only have info on the limited interactions you have with them directly. If you open up this data for sharing among companies, then they can "connect the dots" and get a much more complete set of data, amounting to total surveillance of your activities.

      It seems like the problems go a lot deeper and are a lot wider than just what the ISP can learn.

      If I understand your argument right, I think you're arguing that we already give away a lot of potentially sensitive information. That's true, and I completely agree we should talking about ways to add even more protections or avoid data collection in the first place. But I don't get how the fact that we're already compromised (mostly through ignorance) is an argument to allow complete freedom for companies to give up all of our private data to the highest bidder!?

      • (Score: 2) by tangomargarine on Tuesday March 21 2017, @02:46PM (1 child)

        by tangomargarine (667) on Tuesday March 21 2017, @02:46PM (#482162)

        But I don't get how the fact that we're already compromised (mostly through ignorance) is an argument to allow complete freedom for companies to give up all of our private data to the highest bidder!?

        Call it the Argument From Fatalism. If they've already got us bent over, we might as well lube up to make it less unpleasant :P

        --
        "Is that really true?" "I just spent the last hour telling you to think for yourself! Didn't you hear anything I said?"
      • (Score: 2) by DannyB on Tuesday March 21 2017, @03:26PM

        by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @03:26PM (#482182) Journal

        The ISPs are a small part of a bigger more generalized problem.

        --
        What doesn't kill me makes me weaker for next time.
    • (Score: 2) by tangomargarine on Tuesday March 21 2017, @02:35PM (2 children)

      by tangomargarine (667) on Tuesday March 21 2017, @02:35PM (#482156)

      If you've got nothing to hide, you've got nothing to fear. /s

      The 'net already bends us over five ways from Sunday and you say you're okay with removing one more obstacle. Thanks, man.

      --
      "Is that really true?" "I just spent the last hour telling you to think for yourself! Didn't you hear anything I said?"
      • (Score: 2) by DannyB on Tuesday March 21 2017, @03:22PM (1 child)

        by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @03:22PM (#482179) Journal

        The five ways from Sunday is the bigger problem than that the ISP may collect and sell your habits. Focusing on the ISP problem is missing the forest because of all the signs "only you can prevent forest fires". (Which signs are made from dead trees.)

        --
        What doesn't kill me makes me weaker for next time.
        • (Score: 3, Informative) by tangomargarine on Tuesday March 21 2017, @03:32PM

          by tangomargarine (667) on Tuesday March 21 2017, @03:32PM (#482189)

          Try to solve both problems at once. If you don't oppose this ISP thing then you just get 6 problems instead of 5.

          --
          "Is that really true?" "I just spent the last hour telling you to think for yourself! Didn't you hear anything I said?"
    • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:02PM (1 child)

      by Anonymous Coward on Tuesday March 21 2017, @03:02PM (#482167)

      Your sarcasm is broken, or are you really trying to say that ISPs should be allowed to track everything?

      • (Score: 2) by DannyB on Tuesday March 21 2017, @03:19PM

        by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @03:19PM (#482177) Journal

        ISPs should not be allowed to track everything. Which, in theory, makes moot the issue of sharing or re-selling that non-tracked data that the ISP didn't keep.

        But there are other big problems to solve if you're worried about privacy.

        --
        What doesn't kill me makes me weaker for next time.
    • (Score: 5, Insightful) by JoeMerchant on Tuesday March 21 2017, @05:29PM

      by JoeMerchant (3937) on Tuesday March 21 2017, @05:29PM (#482258)

      The difference is in the cost involved to obtain this information.

      In 1972, if the FBI wanted to know about what magazines you read, what kind of house you have, and who you go home from the bar with, they would have to assign a field agent to sift your trash, research at the county records office, and tail you. Not only is this extremely costly, but it also likely tips you and a whole bunch of other people off that they're up to something.

      In 2012, when the FBI wanted to know all those things, they could assign a desk jockey in South Dakota a 30 minute research project and he could compile a report, but even that wasn't good enough for them - they've also put together data trawling programs where they can aggregate millions of these types of profiles and then sort them for common associations, characteristics, and red flags, without even bothering a desk jockey on a per-investigated subject basis.

      When it cost the government a man-month of effort to even begin to collect information on a suspect, they usually didn't invest the resources without taking the time to get a warrant and having a very good reason for the investment. Now, it costs less than a man-second of effort to include you in the info-trawl, and they can mistakenly associate you with illegal activities - initiate lines of questioning with your employer that can lead to your termination without cause, and generally make your life hell through no fault of your own. That's not even starting to scratch the surface of building Hooverish portfolios of dirty secrets on people, things the Feds have no right to know - but once they know them, they can use them to their advantage..

      --
      🌻🌻 [google.com]
    • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @06:07PM

      by Anonymous Coward on Tuesday March 21 2017, @06:07PM (#482283)

      Non sequitur along the line of: why do you lock your door? thieves can easily crack into the car you parked outside.

  • (Score: 4, Funny) by Rich on Tuesday March 21 2017, @01:29PM

    by Rich (945) on Tuesday March 21 2017, @01:29PM (#482097) Journal

    ... with regular visits on the pages for sales of books like:

    N. R. Armorer, Gunning For Spammers: Proven Legal Strategies To Get Away With It.

    Frank N. Stein, Selling Telemarketer Organs for Profit: Tracking Them Down, Gutting Them Out, And Covering Your Tracks

    and finally:

    Russ M. Smithee, Help! I Succumb To Busty Saleswomen Showing Up At My Door. Volume 2: I Still Do It: Severe Cases.

    Maybe that will at least guide their annoying efforts into a slightly more positive direction.

  • (Score: 2) by VLM on Tuesday March 21 2017, @01:42PM (30 children)

    by VLM (445) on Tuesday March 21 2017, @01:42PM (#482109)

    Its semi-important to frame the situation truthfully.

    Its fake news to imply there's secret or private data that will remain private if only the ISPs are prevented from making a profit off it. The reality is everyone except the ISPs are already trading this stuff in a wide open marketplace. So everyone is selling your health and financial information but the ISPs, and ISPs alone, aren't making a profit off it, because, well, it was a good photo op to lie to people during the obummer administration.

    That kinda changes the argument from "The evil ISPs want to wikileaks your privates" to a somewhat more realistic "The ISPs are frozen out of a wide open data market for no real obvious reason other than grandstanding politics and fake news"

    I guess what I'm saying is if the ISPs start selling your financial data, for example, whats "NEW" is not that your financial data is being sold; thats fake news to imply it. Whats "NEW" is your ISP gets a cut of the profit and maybe the credit union or whatever makes one penny less off its sales due to competition.

    So its kinda a referendum on your ISP (most people admittedly hate their monopoly ISP) mixed with a referendum on your politics WRT free markets (most people are kinda iffy on this). The fake news is pretty much against it with some inflammatory, ridiculous language. So the net result, either based on reality or not, is pretty predictable opposition.

    There are secondary effects in that due to ad injection we're all going to need "https everywhere" and "adblocking to hell and back" to avoid getting powned by advertising inserted by our ISPs into our downloads. I'm sure the ISPs will find a way to F up stuff like apt-get upgrades by trying to insert jpg advertisements into the middle of the /bin/ls executable downloads as a distant secondary effect also. Or they'll just ban traffic they can't monetize, perhaps.

    • (Score: 5, Insightful) by Arik on Tuesday March 21 2017, @02:00PM (15 children)

      by Arik (4543) on Tuesday March 21 2017, @02:00PM (#482123) Journal
      'That kinda changes the argument from "The evil ISPs want to wikileaks your privates" to a somewhat more realistic "The ISPs are frozen out of a wide open data market for no real obvious reason other than grandstanding politics and fake news"'

      I don't think that's completely accurate. It's one thing for a credit agency to use freely available information to compile a credit report and sell it - it's quite another for an ISP to spy on their customers in order to generate saleable information. Not that I'm against stronger privacy laws that affect all these companies and not just ISPs.

      'Or they'll just ban traffic they can't monetize, perhaps.'

      All my traffic has already been monetized, that's called I paid the bill.

      An honest politician is said to be one that stays bought. Why should we not demand honest ISPs?

      --
      If laughter is the best medicine, who are the best doctors?
      • (Score: 1, Funny) by Anonymous Coward on Tuesday March 21 2017, @03:08PM (9 children)

        by Anonymous Coward on Tuesday March 21 2017, @03:08PM (#482170)

        Today we find out who the shills are!! Hooray! DannyB and VLM!!! Go fuck yourselves for trying to nomaluze this shitstorm. Privacy violations are wrong, and just because quite a few companies deal in user data doesn't make it alright for anyone anywhere to do. We need more laws to protect privacy, then there will be incentive to protect user's connections.

        • (Score: 2) by DannyB on Tuesday March 21 2017, @03:36PM (4 children)

          by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @03:36PM (#482191) Journal

          You got it! The privacy problem is much bigger than ISPs collecting, let alone "sharing" your data. ("Sharing" is so wrong of a word to use for that.)

          --
          What doesn't kill me makes me weaker for next time.
          • (Score: 2) by bzipitidoo on Tuesday March 21 2017, @07:23PM (3 children)

            by bzipitidoo (4388) on Tuesday March 21 2017, @07:23PM (#482329) Journal

            Well, definitions are a key facet of this story. They're trying to define the meaning of "sensitive data" in a way they find more convenient for themselves.

            When they spread your info around, that's called "sharing". When you spread art around, that's called "piracy".

            We call neighbors who try to pry into others' private business "nosy Parkers", and the ones who spread rumors around (often the same people) are "neighborhood gossips". At least they don't do it for the money.

            Seems most of capitalism is driven by marketing tactics of which redefinition is one of their chief weapons. Redefine something that isn't a problem to make it sound like it is, then sell expensive solutions. Bonus points if you can get lawmakers to outlaw the "problem". I figure that's the major issue with getting copyright and patent law repealed and replaced. If redefinition isn't enough, they can always fall back on the old double standard, you know, laws are only for little people.

            • (Score: 2) by DannyB on Tuesday March 21 2017, @08:30PM (2 children)

              by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @08:30PM (#482375) Journal

              Getting lawmakers to outlaw a problem costs money, and removes the market for the expensive solution to the problem. Seems more profitable to get lawmakers to mandate problems rather than outlaw them.

              --
              What doesn't kill me makes me weaker for next time.
              • (Score: 2) by bzipitidoo on Tuesday March 21 2017, @08:39PM (1 child)

                by bzipitidoo (4388) on Tuesday March 21 2017, @08:39PM (#482382) Journal

                I was thinking of the law being used to force people to buy "solutions", not get rid of the problem. Not buying a solution is not only unAmerican and a drag on the economy, it's illegal.

                • (Score: 2) by DannyB on Tuesday March 21 2017, @09:05PM

                  by DannyB (5839) Subscriber Badge on Tuesday March 21 2017, @09:05PM (#482393) Journal

                  It really sounds like we're thinking the same way. The problem must exist. An expensive solution must exist. The problem must not be outlawed. Rather the problem must be mandated. Even the solution must be mandated -- for a price.

                  --
                  What doesn't kill me makes me weaker for next time.
        • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:47PM (1 child)

          by Anonymous Coward on Tuesday March 21 2017, @03:47PM (#482201)

          I wouldn't call VLM a shill. That makes us actual shills look bad. ;)

          He's just had his head increasingly up the alt-right's ass since last summer. I'll at least give him a nod for popularizing alt-right viewpoints here before "alt-right" was a lamestream buzzword (before it was detached from any actual positions within the movement and just simply another insult to hurl). So I guess he would be an alt-hipster, then.

          You can pinpoint when the alt-right started really gaining traction as an insult instead of a semi-cohesive movement when alt-righters began replying to comments mentioning the alt-right with, "There is no such thing as the alt-right!"

          Maybe there is no such thing, and it's just the Republican Party gone full retard. I could accept that. 20 years ago I liked the Republican Party. :(

          • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @04:38PM

            by Anonymous Coward on Tuesday March 21 2017, @04:38PM (#482231)

            Normalizing the normalizers by normalizing against the normalizer. My head is spinning!

        • (Score: 2) by VLM on Tuesday March 21 2017, @05:06PM

          by VLM (445) on Tuesday March 21 2017, @05:06PM (#482243)

          trying to nomaluze this shitstorm. Privacy violations are wrong

          I think the best analogy to trying to discuss privacy issues on SN is its like reading "Lost Cause of the Confederacy" literature.

          https://en.wikipedia.org/wiki/Lost_Cause_of_the_Confederacy [wikipedia.org]

          Realist: "So in light of Atlanta having been burned, I suggest we upgrade the buried infrastructure and realign the new street grid with "

          Drunken Col Saunders interjects: "Damn those Yankees damn them all to hell the South will Rise Again!"

          Realist: "OK nice I agree, but as I was saying WRT the rebuilding plan, realign the street grid with the main east-west travel corridor and"

          Drunken Col Saunders drunkenly bellows: "The yankees was wrong to tell us how to live our lives on our land!"

          Realist: "Goddamnit Col Saunders go home and sleep it off, like it or not the fights over and we lost and Atlanta was burned and the ashes are cold and its time to talk about what is, and what we should do, the time for saying burning Atlanta would be immoral is over and frankly my dear I don't give a damn"

          Drunken Col Saunders: "grumble heard what you said grumble damn yankees grumble"

          Drunken Col Saunders gets his footing again and blasts out one last roar: "Damn those yankees to hell the South will Rise Again!"

          Realist throws his hands up in the air: "I give up, what do we do with these dinosaurs other than wait for extinction? Free mint juleps until they pass out?"

          There's just no point in discussing how to move forward in 2017 if the only discussion we'll get is "gosh I hope when 2001 arrives we don't do anything dumb" especially when we know we did in fact do something dumb 16 years ago and the whole point is it would be nice to move on. So from a position of 2017 the logical next step is ...

        • (Score: 2) by DeathMonkey on Tuesday March 21 2017, @06:04PM

          by DeathMonkey (1380) on Tuesday March 21 2017, @06:04PM (#482280) Journal

          It's the magic R.

          If this was happening under Obama you'd actually be able to hear the shrieking through the screen.

      • (Score: 3, Insightful) by shipofgold on Tuesday March 21 2017, @03:41PM (2 children)

        by shipofgold (4696) on Tuesday March 21 2017, @03:41PM (#482195)

        It's one thing for a credit agency to use freely available information to compile a credit report and sell it

        What kind of information in my credit report is freely available????

        The only thing that might be public is the amount of my mortgage, but even my payment history should be private.

        If anything my banks are selling all my private information to the credit agencies in the same fashion that the ISPs want to sell information to others.

        Are my banks spying on me by monitoring my credit card usage?

        • (Score: 2) by Kromagv0 on Tuesday March 21 2017, @07:46PM

          by Kromagv0 (1825) on Tuesday March 21 2017, @07:46PM (#482348) Homepage

          If I as an individual compiled as much information on you as a credit reporting agency had I would likely be behind bars for stalking. Those reporting agencies glean as much info as they can from as many public data sets as they can get their hands on. Property tax records, DMV records, court records, shit they buy from other database operators, shit that banks, businesses and other give them, etc. Personally I have wondered if it is possible to get a restraining order against them like one could for a regular stalker and force them to remove any and all records they have on me. I believe we have cyber stalking laws.

          --
          T-Shirts and bumper stickers [zazzle.com] to offend someone
        • (Score: 2) by NewNic on Tuesday March 21 2017, @08:14PM

          by NewNic (6420) on Tuesday March 21 2017, @08:14PM (#482365) Journal

          I think that you are confusing "free as in beer" with something else.

          --
          lib·er·tar·i·an·ism ˌlibərˈterēənizəm/ noun: Magical thinking that useful idiots mistake for serious political theory
      • (Score: 2) by Gaaark on Tuesday March 21 2017, @07:39PM (1 child)

        by Gaaark (41) on Tuesday March 21 2017, @07:39PM (#482343) Journal

        I want to read what you have to say, but "I GETS HEADACHE!!!"

        I'll have the font, font, eggs and font, and there's not too much font in it.

        --
        --- Please remind me if I haven't been civil to you: I'm channeling MDC. ---Gaaark 2.0 ---
        • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @07:49PM

          by Anonymous Coward on Tuesday March 21 2017, @07:49PM (#482350)

          Sounds like an issue with your browser settings.

    • (Score: 2) by EvilSS on Tuesday March 21 2017, @02:58PM (4 children)

      by EvilSS (1456) Subscriber Badge on Tuesday March 21 2017, @02:58PM (#482164)
      So you would be cool with your ISP selling your browsing history to a company that compiles it and makes it available to employers HR departments, for example? Or your spouse's divorce lawyer? The police? All of these would be completely within the realm of possibility if the rule is changed.
      • (Score: 2) by VLM on Tuesday March 21 2017, @04:47PM (3 children)

        by VLM (445) on Tuesday March 21 2017, @04:47PM (#482235)

        So you would be cool with

        You're confusing the question. I'm talking about whats already been done and now we (well, big brother) decides who profits off the decision already made. You're talking about if the original action was right or wrong which is too little too late. I don't even disagree with you, I just find it pointless or distracting to be stuck in the past.

        selling your browsing history to a company that compiles it and makes it available to employers HR departments

        Already done called LinkedIN and Facebook and twitter. Normies call those three sites "the internet" comically. Nobody cares about SN traffic.

        Or your spouse's divorce lawyer?

        You almost seem to be implying that discovery of electronic records in a divorce is not possible or unheard of? It comes up in corporate e-discovery too, not just divorce. Also criminal not just civil law.

        The police?

        Dude, seriously... they already have all that. Look up this guy named "Snowden" and "National Security Letters" and things like that. Are you trying to argue they don't LOL or they shouldn't which I kinda agree with but doesn't matter because they do have it today. You can split some hairs about definition of Police such that the parking ticket officer doesn't know which posts I read on 4chan /DIY/ last night, as if they would under the new ISP regs anyway, but some FBI/NSA guy certainly can if he wants.

        • (Score: 3, Insightful) by JoeMerchant on Tuesday March 21 2017, @05:46PM (1 child)

          by JoeMerchant (3937) on Tuesday March 21 2017, @05:46PM (#482266)

          So, when I go to interview a potential new hire, I do a quick search on Google and LinkedIn to see what they intend to share with the world. I've found stuff like a guy who submitted a resume with certain skills on it, basically bragging on his LinkedIn feed that "he's got a guy who does that stuff for him." We weren't looking to hire for sub-contracting. So, no hire.

          What I don't do is ask candidates to unlock their cellphones and share their browsing history, social streams marked "private," or other things that are not readily findable by anyone with access to a search engine. Some people do "overshare," but many do not, and that's O.K. - having an extensive public internet profile isn't a requirement for employment with me - but, if you do have one, it will be reviewed.

          Oh, funnier story still, candidate included link to his personal website on his resume, I pull it up and right on the front page is a link to his MkUltra experiences blog - where he tells how the secret government program has been tormenting him and anyone he has been associated with for the last 20 years. Nothing in the quite extensive blog in any way indicates that the information is fictional, satire, or anything but his personal account of events. So, we are left with 2 paths forward from this point: A) candidate is a delusional kook, not a good fit for rational daily interactions, or B) he's perfectly lucid and accurate in his accounts, in which case you would be an idiot to get anywhere close to him. Why do you put a link like this on a resume attached to a job application?

          The proposal by the ISPs is to expose information that people consider private, stuff that you don't find through ordinary channels (e.g. I don't think I've ever used the "Wayback Machine" for candidate research) - I consider this over the line. The ISPs are in a somewhat sensitive spot, like the phone company who we would wish is requiring warrants before allowing law enforcement to tap our lines, I don't recall ever proposing that AT&T could run Eschelon style voice recognition on our private phone calls so they might share our interests with advertisers? Why would we start now?

          --
          🌻🌻 [google.com]
          • (Score: 2) by VLM on Tuesday March 21 2017, @06:02PM

            by VLM (445) on Tuesday March 21 2017, @06:02PM (#482279)

            Nothing in the quite extensive blog in any way indicates that the information is fictional, satire, or anything but his personal account of events.

            LOL note to self, make sure my DnD/Pathfinder logs and "my great plot ideas for a hard sci fi or alt-hist novel" are very carefully marked as such.

        • (Score: 2) by EvilSS on Tuesday March 21 2017, @11:07PM

          by EvilSS (1456) Subscriber Badge on Tuesday March 21 2017, @11:07PM (#482451)
          OK you're either trolling or oblivious. Either way this is a waste of time.
    • (Score: 4, Interesting) by AthanasiusKircher on Tuesday March 21 2017, @03:14PM (4 children)

      by AthanasiusKircher (5291) on Tuesday March 21 2017, @03:14PM (#482172) Journal

      So everyone is selling your health and financial information but the ISPs, and ISPs alone, aren't making a profit off it, because, well, it was a good photo op to lie to people during the obummer administration.

      Sorry, but THIS is fake news.

      The Health Insurance Portability and Accountability Act of 1996 [wikipedia.org] (HIPAA) sets regulations on exchange of health records. Protected Health Information (PHI) cannot be disclosed to third parties unless it falls under certain exemptions (mostly law enforcement or conducting of normal medical business).

      As for financial information, the Gramm-Leach-Bliley Act of 1999 [wikipedia.org] set up requirements for all financial institutions to disclose precisely how they manage your privacy. (Have you never received all those "privacy policy" notices in the mail from your bank?) Under the Act, you have the ability to opt-out of most sharing of financial information again with a few exceptions. (Law enforcement with appropriate warrant, normal banking business, etc. There's also an exception for "joint marketing agreements" with 3rd parties -- that's NOT just selling your info to anyone: the bank has to explicitly agree to endorse and market the 3rd party's products, etc., like a bank teaming up with an insurance company to jointly offer products or whatever.) The Fair Credit Reporting Act broadened those exemptions a bit, but (1) you still have the option to opt-out of a lot of sharing of your info, and (2) the bank is required to disclose how it is sharing your financial information.

      So, no, it's not at all accurate to say that ISPs are the only ones prevented from selling your private data to the highest bidder -- in fact, you names two specific types of data that are highly regulated. Sure, we can debate whether those protections are strong enough (and I'd argue they aren't -- financial info sharing should be "opt-out" by default, for example), and a lot of businesses find ways to skirt the regulations.

      But just because the regulations aren't as effective as they might be isn't an argument in favor of just deregulating everything. Are you seriously feeling sorry for ISPs being left out of "free market" sharing of private information?

      The fake news is pretty much against it with some inflammatory, ridiculous language.

      It's not inflammatory or ridiculous. Most consumers may not realize how much private information is "leaking" out of their normal internet use in cookies, other trackers, etc., but informed people can at least try to put some safeguards in place to disable a lot of that tracking by 3rd parties. But it's a lot harder to prevent your ISP from knowing where you go on the internet. So allowing them to directly market your information is indeed a significant escalation and further invasion of privacy.

      Privacy may be a losing battle these days. And ignorant consumer choices often unwittingly facilitate their own loss of privacy. But (1) it's disingenuous to imply that lots of sensitive personal data isn't already covered by federal privacy laws (it can't arbitrarily be sold to the highest bidder), and (2) even if it were true that other info can be sold, that's NOT an argument for further invasion of privacy.

      • (Score: 2) by VLM on Tuesday March 21 2017, @04:37PM (2 children)

        by VLM (445) on Tuesday March 21 2017, @04:37PM (#482229)

        Under the Act, you have the ability to opt-out of most sharing of financial information again with a few exceptions.

        Hmm if I were a betting man I'd put the over under for that percentage at 0.1% I figure about 50/50 odds its higher or lower than 0.1%.

        Its a very small rounding error that doesn't matter.

        but informed people can at least try to put some safeguards in place

        Again, roughly nobody. We need a solution or discussion for the other 99% of the population.

        HIPPA is a good example of hair splitting. Yes my dental xrays are not in my credit record, but my payment information is, for example. So if my wife pays (or doesn't pay) an OBGYN enough money to birth a baby, technically all thats released in the credit report is pure financial data, but everyone in the system knows exactly what it means, as a simplified example.

        What an individual can or should do is a different discussion from what happens to entire cultures or what a government regulator should do that applies to all.

        I don't disagree with any of your facts about what individuals can or should do, but seeing as that fraction of the population rounds down to zero I just figure its more important to talk about "almost everyone" even if the outcome is diametrically opposed to the individual advice.

        (2) even if it were true that other info can be sold, that's NOT an argument for further invasion of privacy.

        Yeah OK fine good point. However again, its not really a discussion about privacy or secrecy but a discussion about the government picking the winners and losers.

        • (Score: 2) by JoeMerchant on Tuesday March 21 2017, @05:51PM (1 child)

          by JoeMerchant (3937) on Tuesday March 21 2017, @05:51PM (#482269)

          Let's not forget Target ratting out the pregnant teen to her Father based on her CC activity.

          The data is there, whether or not we should allow commercial or other interests to use it is a question for how we want to shape the future of society. Transparency of personal affairs can be taken too far.

          --
          🌻🌻 [google.com]
          • (Score: 2) by Kromagv0 on Tuesday March 21 2017, @08:09PM

            by Kromagv0 (1825) on Tuesday March 21 2017, @08:09PM (#482361) Homepage

            Here it wasn't target deliberately ratting her out [businessinsider.com] it was target doing some pretty good market basket analysis [wikipedia.org] at an ideal time to target an existing customer with things they are likely to need. From my AI class close to 20 years ago there was an anecdote about using market basket analysis where there was a strong correlation between buying beer on Thursdays at a grocery store and in the same purchase buying diapers. What target did here is just an extension of that where you have an individual who is buying things a pregnant woman will typically buy so you cross promote. I believe it was purchasing something like unscented lotion and a few other items which then caused coupons for things like car seats, diapers, cribs and such to be sent. It may have been based off of a single purchase or a series of purchases tied together by a data read off of a credit card and the coupons were the ones printed off at the register.

            --
            T-Shirts and bumper stickers [zazzle.com] to offend someone
      • (Score: 2) by DeathMonkey on Tuesday March 21 2017, @06:07PM

        by DeathMonkey (1380) on Tuesday March 21 2017, @06:07PM (#482284) Journal

        HIPPAA protects your MEDICAL records.

        The records that you visit the Blue Cross Blue Shield website once a month. That you access Dr. Smith's website once a month. And your online Pharmacy is PharmCo are not medical records. They are health information, though.

    • (Score: 0) by Anonymous Coward on Tuesday March 21 2017, @03:16PM

      by Anonymous Coward on Tuesday March 21 2017, @03:16PM (#482173)

      Actually it is secret and private. Each site may track your IP but they aren't all tied together. Technically your backyard isn't private, a plane could spy on you. However that doesn't mean you should have zero expectation of privacy and let your neighbor takes pictures if your wife to sell online.

      This article is framed very correctly so stop with your alternative facts / interpretation.

    • (Score: 2) by Scruffy Beard 2 on Tuesday March 21 2017, @03:50PM

      by Scruffy Beard 2 (6030) on Tuesday March 21 2017, @03:50PM (#482204)

      Ad injection by my ISP is why I suddenly became interested in cryptographically authenticating everything about 10 years ago. I never actually caught them doing it, but they had changed their Terms of Service to allow it. That told me that they had probably installed equipment capable of doing it.

      Yes, I am one of those rare unicorns that try to read "agreements". I often get push-back when I have questions about them. It is not uncommon to see ones made by copy&pasting similar "agreements" (those are easy to spot by terms inconsistent with the nature of the service).

    • (Score: 2) by JoeMerchant on Tuesday March 21 2017, @05:32PM

      by JoeMerchant (3937) on Tuesday March 21 2017, @05:32PM (#482261)

      HIPPA and other privacy laws are in-place to specifically prevent the profiting from the trading of protected (health, and other) information.

      Not saying it's not done, but it's much less prevalent than it would be without these laws.

      I don't know if I would characterize German information privacy laws as "over the top" or not, but it is a more conservative approach that should preserve some of the traditions of society a little longer until we end up in Black Mirror season 3, episode 1.

      --
      🌻🌻 [google.com]
    • (Score: 2) by bob_super on Tuesday March 21 2017, @09:25PM

      by bob_super (1357) on Tuesday March 21 2017, @09:25PM (#482408)

      Yup, you framed it incorrectly.
      I'll go for the real-life analogy: The current data markets are people who saw you waling around a store, and may have recorded what you put in your bag, or which shelves you stopped in front of. Some people check that you went to see the doctor. Others will sit at the street corner and log your trips there.
      It's fragments, which you can keep disconnected with careful browsing.

      Meanwhile, your ISP is more like your watch or your car is recording every single place you, your spouse, your kids ever go to, everyone anyone ever talks to and what they talk about, anything they look at (legal, commercial, embarrasing, or not) and anything they ever buy. When, where, how ...

      If the current markets are like selling CCTV tapes and GPS logs, the ISP (or cell company) version is the camera/microphone-equipped tracking collar version. That is way more coherent and comprehensive personal information than anyone wants to see traded around.
      People will get hurt.

  • (Score: 4, Insightful) by SomeGuy on Tuesday March 21 2017, @03:44PM (1 child)

    by SomeGuy (5632) on Tuesday March 21 2017, @03:44PM (#482198)

    Well, if this information is so non-sensitive, let's find whatever CEO or higherups are behind this and post their web browsing and app usage history publicly for people to pick over. Then see what happens.

    • (Score: 2) by Leebert on Tuesday March 21 2017, @06:50PM

      by Leebert (3511) on Tuesday March 21 2017, @06:50PM (#482312)

      I'm fully expecting a Snowden-esque employee of Comcast/Verizon/AT&T/etc. to demonstrate exactly this in a very pointed fashion.

  • (Score: 3, Interesting) by driven on Tuesday March 21 2017, @07:00PM

    by driven (6295) on Tuesday March 21 2017, @07:00PM (#482316)

    To the people who are lobbying that ISP information isn't sensitive:

    Start by making all your data, your friends data, and your spouse, kid's, and relative's ISP data public.
    Then we'll see how many of these people want to continue to be associated with you.

(1)