From 7466d90b4eb836e813e1ec031416d07b0f5f7b4e2c966a149cda9a65f6c64cd8 Mon Sep 17 00:00:00 2001 From: Nicholas Johnson Date: Wed, 15 Feb 2023 00:00:00 +0000 Subject: Convert refs: consumer-data-protection-is-a-distraction --- .../entry/consumer-data-protection-is-a-distraction.md | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) (limited to 'content/entry/consumer-data-protection-is-a-distraction.md') diff --git a/content/entry/consumer-data-protection-is-a-distraction.md b/content/entry/consumer-data-protection-is-a-distraction.md index aa62320..0b95b5a 100644 --- a/content/entry/consumer-data-protection-is-a-distraction.md +++ b/content/entry/consumer-data-protection-is-a-distraction.md @@ -2,15 +2,14 @@ title: "Consumer Data Protection is a Distraction" date: 2021-01-18T00:00:00 draft: false -makerefs: false --- This post is a public service announcement. # Why Businesses Collect Data -Businesses collect data from consumers for a variety of reasons. Data is collected to provide better customer service, provide a personalized customer experience, refine marketing strategy, derive other data, suggest new products, make predictions, recommendations and determine optimal business decisions. But as internationally renowned security technologist and author Bruce Schneier points out, data is a toxic asset[1]. +Businesses collect data from consumers for a variety of reasons. Data is collected to provide better customer service, provide a personalized customer experience, refine marketing strategy, derive other data, suggest new products, make predictions, recommendations and determine optimal business decisions. But as internationally renowned security technologist and author Bruce Schneier points out, [data is a toxic asset](https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html). # Why it's Dangerous -I recommend reading his full blog post[2]. But from just a consumer perspective, giving companies your data is dangerous for several reasons according to Schneier: +I recommend reading [his full blog post](https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html). But from just a consumer perspective, giving companies your data is dangerous for several reasons according to Schneier: > "Saving it is dangerous because many people want it. Of course companies want it; that’s why they collect it in the first place. But governments want it, too. In the United States, the National Security Agency and FBI use secret deals, coercion, threats and legal compulsion to get at the data. Foreign governments just come in and steal it. When a company with personal data goes bankrupt, it’s one of the assets that gets sold. > @@ -20,19 +19,11 @@ That last part is important. "...a sufficiently skilled, funded and motivated at The central reason you can't trust businesses to keep your data safe is you don't know how it's being handled once it's out of your hands. Even if the business claims to have reasonable data protection, how can you possibly know that for sure? All it takes is 1 incompetent or malicious employee for your data to be leaked. All it takes is 1 out of date software package or 1 software vulnerability. All it takes is 1 government to steal from or coerce the business for the data. And if there's ever a merger or acquisition then some other business acquires your data as an asset by default. -And let's not forget data is combined with other data by data brokers to derive things about you that you didn't explicitly share. You might think that 5 minute Youtube video of yourself doesn't reveal too much but disturbing uses of AI[3] can be applied to it to derive information that you didn't intend to include. And AI will only get better over time. You can't predict the capabilities future AI will have to derive new information from your data. Even if it's just metadata[4], remember the former CIA and NSA director Michael Hayden's statement concerning NSA bulk surveillance: "We kill people based on metadata". Put simply, consumer data protection is, has always been, and will be for the foreseeable future, a house of cards. +And let's not forget data is combined with other data by data brokers to derive things about you that you didn't explicitly share. You might think that 5 minute Youtube video of yourself doesn't reveal too much but [disturbing uses of AI](https://github.com/daviddao/awful-ai) can be applied to it to derive information that you didn't intend to include. And AI will only get better over time. You can't predict the capabilities future AI will have to derive new information from your data. Even if it's just [metadata](https://www.wikipedia.org/wiki/Metadata), remember the former CIA and NSA director Michael Hayden's statement concerning NSA bulk surveillance: "We kill people based on metadata". Put simply, consumer data protection is, has always been, and will be for the foreseeable future, a house of cards. # How to Protect Yourself The only foolproof way to protect yourself from data leaks is to never give data to businesses in the first place. "Consumer data protection" is a distraction campaign. You see, the more businesses talk about "consumer data protection" the less "bandwidth" there is in public discourse to talk about outright refusal to give up your data. Businesses can tout their data security practices all they want but it distracts from the truth which is you can just choose not to give your data to companies. We now live in a culture of "I agree" to the point that people forget they can say no to these things. Don't consent. Don't click "I agree" unless you've actually read the terms. Don't provide identifying information without serious consideration. -And for those of you who say "I have to give Goolag[5] my data! Rearranging my life to protect my data would be too hard! I need a Goolag account for my job or university or whatever the case may be." I leave you with a quote from the Roman stoic Seneca: +And for those of you who say "I have to give [Goolag](https://www.urbandictionary.com/define.php?term=Goolag) my data! Rearranging my life to protect my data would be too hard! I need a Goolag account for my job or university or whatever the case may be." I leave you with a quote from the Roman stoic Seneca: > "It's not that we don't dare do things because they are difficult; rather, they are difficult because we don't dare" -- Seneca - - -Link(s): -[1: https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html](https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html) -[2: https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html](https://www.schneier.com/blog/archives/2016/03/data_is_a_toxic.html) -[3: https://github.com/daviddao/awful-ai](https://github.com/daviddao/awful-ai) -[4: https://www.wikipedia.org/wiki/Metadata](https://www.wikipedia.org/wiki/Metadata) -[5: https://www.urbandictionary.com/define.php?term=Goolag](https://www.urbandictionary.com/define.php?term=Goolag) -- cgit v1.2.3