SoylentNews

"exec" writes:

http://phys.org/news/2016-05-scientists-metadata-reveal-surprisingly-sensitive.html

... a new analysis by Stanford computer scientists shows that it is possible to identify a person's private information – such as health details – from metadata alone. Additionally, following metadata "hops" from one person's communications can involve thousands of other people.

The researchers set out to fill knowledge gaps within the National Security Agency's current phone metadata program, which has drawn conflicting assertions about its privacy impacts. The law currently treats call content and metadata separately and makes it easier for government agencies to obtain metadata, in part because it assumes that it shouldn't be possible to infer specific sensitive details about people based on metadata alone.

The findings, reported today in the Proceedings of the National Academy of Sciences, provide the first empirical data on the privacy properties of telephone metadata. Preliminary versions of the work, previously made available online, have already played a role in federal surveillance policy and have been cited in litigation filings and letters to legislators in both the United States and abroad. The final work could be used to help make more informed policy decisions about government surveillance and consumer data privacy.

The computer scientists built a smartphone application that retrieved the previous call and text message metadata – the numbers, times and lengths of communications – from more than 800 volunteers' smartphone logs. In total, participants provided records of more than 250,000 calls and 1.2 million texts. The researchers then used a combination of inexpensive automated and manual processes to illustrate both the extent of the reach – how many people would be involved in a scan of a single person – and the level of sensitive information that can be gleaned about each user.

Original Study

-- submitted from IRC

Original Submission