Profile picture
Jean Yang @jeanqasaur
, 3 tweets, 2 min read Read on Twitter
Today I discovered an unfortunate consequence of GDPR: once someone hacks into your account, they can request--and potentially access--all of your data. Whoever hacked into my @spotify account got all of my streaming, song, etc. history simply by requesting it. 😱
@Spotify Companies should really put some multi-factor protections on how a folding containing all of one's personal data, ever could be accessed!! It would have been a lot better, for instance, if Spotify had made this file available only after authenticating via email.
@Spotify Also, if @Uber or @lyft is watching I hope your security/privacy engineering teams are being careful with your download-all-data feature!! Would be pretty bad to get hacked and kidnapped in the same day! cc @44
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Jean Yang
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @jeanqasaur see all

Profile picture
Been having many conversations with people in their 20s about the paralysis that can arise from having too many life choices. My advice: commit to something and commit hard. Doesn't matter if you switch later. It's easier to prove yourself if you've had to do it once before.
The quarter-life crisis can go on for quite a while--and you don't want to come out having little to show for your self-exploration. You learn just as much, if not more, about whether you like something by actually doing it, rather than thinking about if you might like it.
At one point in my mid-twenties, a friend observed that we were nearing the end of getting opportunities because of our potential and would soon be evaluated on what we've actually done. This was a real turning point in my thinking on how much space I should take to find myself.
Read 3 tweets
Profile picture
Great post on work/life balance by @lauraalbertphd. For me, the most educational thing about learning to prioritize was having a repetitive stress injury in 2008 that forced me to be obsessively strategic about my computer time. punkrockor.com/2018/12/12/how…
@lauraalbertphd I learned that if I disregard anything on a computer that is not work, I can do an incredible amount of work and have lots of time left over. When I was injured was one of my most productive periods because I would have never wasted precious screen time on Twitter!
@lauraalbertphd As a result I believe that a productive week for a non-manager cannot be that many hours. I once had a student tell me was working 80-100 hours a week. I asked him to count the number of actual productive hours and it was closer to 45-55 (which is already grueling).
Read 3 tweets

Related threads

Profile picture
So, @AerServ are trying to cover up that they've had a breach. I was notified that I was in it via @haveibeenpwned and when reaching out to them, they denied that they have any data on non-registered users or that they've even had any breaches! #infosec [1/12]
After receiving the notification from HIBP, and seeing the type of data involved in the breach - I instantly wanted to know how they could have got data of mine. My mobile usage is not much further on than it was when I was using a Nokia 5110, so no questionable apps. [2/12]
I reached out to them with a subject access request, to get a copy of the data they hold about me, despite not having registered for their services (see screenshot) [3/12]
Read 12 tweets
Profile picture
Today @Brave wrote to @IAB @IABTechLab to provide feedback on the OpenRTB 3.0 #adtech spec. It appears to severely infringe Article 5 of the #GDPR 1/ brave.com/iab-rtb-proble…
Our letter contains a summary of the various personal data that are broadcast in the OpenRTB system. Note that these data are very likely to include “special categories” of personal data, since they show what the person is watching and reading, can include brokers’ segment IDs 2/
Unless OpenRTB 3.0 is very radically altered, so that no personal data are contained in the bid request, it appears that it will severely infringe Article 5 of the #GDPR, and all that flows from Article 5’s principles. 3/
Read 6 tweets
Profile picture
I thought the spirit of #GDPR was supposed to be that it should be easy and simple to control how my data is used by websites. Yet this is what I had to go through in order to do that when I tried to read a @HuffPostUK tweet... (1)
First, I had to NOT press okay on this screen. Instead I had to press "here". (2)
Then I had to find the "Privacy Dashboard" option in this very very very very long page of links. (3)
Read 27 tweets
Profile picture
When it comes to #DataProtection ..
Indians must ask for all the rights mentioned in #GDPR from Article 12 to Article 22 ..
If govt don't want to give apply Article 23 .. I won't even press for it ..
Stop writing sham of laws Mr. @rsprasad ..
India demands Real GDPR
#GDPR Article 15 has "Right of access by the data subject" (Screenshot 1)
In Prasad babu's #Dataprotection it become "Right to Reconfirmation and Access"
Huge and Vast differences ..Means, It has no rights at all for the Indians
#GDPR Article 16 Gives CLEAR & UNAMBIGUOUS "Right to rectification"
Prasad Babu's #DataProtection Section 25 becomes "Right to correction etc"
A Wholesome Cocktail of Ambiguous Processes and obfuscations so User may have to wait "from Weeks to Forever" to rectify
Read 8 tweets
Profile picture
Here's someone who's highly engaged in politics, news and society but didn't know about #MyHROptOut until this morning.

If you're in media and wondering if this needs more coverage, here's your answer. #MyHealthRecord #Privacy
Opting out doesn't appear to be going well for people so far. I've seen multiple reports of long wait times on the phone and web server crashes.

I've you're planning to opt out, I'd suggest maybe not doing it today, but definitely not waiting too long.

#MyHealthRecord #Privacy
For the record, I've gone back and forward on opting out myself.

As a journalist with strong interests in tech and privacy, I really want to see the system for myself. Kick its tyres and experience its flaws and limitations personally. But ...

#MyHealthRecord #Privacy
Read 142 tweets
Profile picture
#Probablemente ([#EO]#probable🍀/[#EN]#Probably🏴󠁧󠁢󠁥󠁮󠁧󠁿)
Read 357 tweets

Trending hashtags

#THiSTHiS #Awareness #Vast #Privacy #HAVEto #blockchains #PAM #ethical #Can #DarkTake #GDPR #gdpr #extended #background #TrueDat #process #ACCESS #Probably #choped #PartTwo #Election #meanwhile #Vote #EUCopyrightDirective #man

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!