It’s a good thing adtech collects and breaches everyone’s personal data at scale so that advertisers can pretend they are not wasting their advertising budgets. Oh wait… wsj.com/articles/marke…
So adtech fraud consultant is a booming career path because the industry is a dumpster fire and I do regret not developing an elective course on deep adtech forensics at this juncture.
The ad industry and its enablers in big tech argue to lawmakers that personal data extraction and exploitation is the engine of the economy. The problem is we do not know how much is fraudulent. Of that, we don’t know how much ad money is diverted into organized crime.
So when ad and tech industry lobbyists do their work and water down privacy laws to keep the status quo we need to remember they are defending a fraudulent system that they know fully enables fraud.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Senator Durbin will introduce for the Cleans Slate for Kids Online act - legal right to demand to delete all personal data collected under Age of 13. Every kid needs a reset button. But honestly, every human deserves this right. #datarights
Monica Bikert of FB touts newsfeed controls incl. disabling algorithmically ranked feed in favor of a reverse chronology of “eligible content” — but of course this begs the question as to why the latter is not the default and the ranked feed is the option. #PublicInterestInternet
What is a #darkpattern and why is @ftc looking into it? This thread illustrates an example of abusive unfairness that I’m sure you’ll find familiar. This disgraceful conduct is routinely celebrated by the growth hacker and digital marketing community as best practices.
#darkpatterns emerge in digital products when dashboards and split tests dominate the decisions at companies. Without incentives, privileges, and/or moral compass to question and challenge abusive design from within, #darkpatterns often expose the dark side of a business model.
If you’re a @criteo user (you probably are!) residing anywhere in the world you are entitled to exercise your personal data rights under the GDPR. criteo.com/privacy/your-r…
For the curious nerds, everyone gets data rights because Criteo is based in France. I had rights to my Cambridge Analytica data because it was processed in UK. But you have to reside in the EU to get extra territorial data rights for data that is not processed there.
Nick Clegg is very very worried about the splinternet (data localization) but he does a fine job of arguing it’s nearly arrived. Meanwhile, he’s not urging US and India to simply and urgently adopt GDPR adequacy in light of Schrems II. He’s slow rolling instead. Gotta ask why.
Feel like GPDR could have used an upper limit of open investigations before algorithmic disgorgement automatically kicks in. Lost count of the open probes into Facebook Ireland a while ago. A failsafe for this colossus scenario.
Why the Facebook contact uploader vulnerability and subsequent hackbreachleak matters. Phone numbers are the ideal attack surface to force multiply other vulnerabilities. Facebook exposed non-public information and needs to answer for it.
As I learned from today’s Spaces call:
—FB’s contact sync was vulnerable to a malicious attacker who could enumerate phone numbers to harvest FB IDs. This revealed non-public information
—attacker then scraped accounts by FB ID
—API limits woefully inadequate/trivial to cheat
—botnets would enable easy circumvention of throttling of lookups per user per session
—Facebook silently changing user prefs made it confounding to know how your phone number was used; default settings put risks on users
—expect probe of who knew what when as FB deflects & spins