I’ve worked at both Facebook and Google, and I’d second this sentiment. It is pretty disgusting that anyone with a passable knowledge of how to hide their tracks can basically get all of the information (messages, posts, photos, private information) they want about you. Sure, they might get fired if they’re caught, and maaaaaaaybe (read: probably not) face legal action, but they can do a lot of damage beforehand. And if they’re good enough, they won’t get caught.
I trust the people that I worked with there, but these are big organizations, and a lot more people than I would be comfortable with have essentially administrator access to private data.
Yeah. I work in IT as well. Not in a megacorp like Google or Facebook, but I’ve been in large private companies and government agencies that you would hope would have strict privacy and security policies. Guess what? They don’t.
Nobody in a position of power cares beyond the point of legal requirements, which are mostly shit. It’s kind of like “military grade”; it sounds impressive, but what it actually means is “this is as cheaply made as possible while still meeting the bare minimum legal standard”.
I’ve gotten in actual arguments about how “military grade” means easy to replace, not durable
It just meets a MIL spec. Could mean anything really.
it sounds impressive, but what it actually means is “this is as cheaply made as possible while still meeting the bare minimum legal standard”.
And for 5x the normal cost…
Seems to me that if one was running a spy agency like, say, the CIA or something, it’d be a very useful move to get one of your employees to get a job at one of those companies, so that in addition to ones own spying, one could also piggyback off the spy infrastructure of the ad companies. I imagine the government might get some of that information already, but if you were a foreign government, or trying to get info you weren’t technically supposed to have, I can imagine it might make a lot of sense
They don’t need to “get someone on the inside”, they have been using FISA and Section 702 for decades. Plus the Prism project that got leaked by Snowden.
Yeah that works if it’s a company in your jurisdiction, but for countries like Russia it’s probably an easy win to just have someone on the inside who can look up whatever you want. Probably costs a lot less to maintain as well, if you’re after individual targets and not casting a wide net.
Russia and China have their own versions of fb and similar services. And in any case, for domestic interception you do it via NSA, for foreign individuals you go through the CIA. Also, they bugged directly the under sea cables landing points.
I’d imagine many countries have spies working at all the big tech companies.
I’m glad I’m chronically uninteresting. If I had literally any information of value I’d be much more careful but now I’m just one of many in a massive crowd of more interesting people.
I’m still blocking advertisements though. Fuck that shit.
Uh oh, you just claimed to be uninteresting… I think that trigger language gets you flagged for further follow-up?! You are now on their radar buddy!!!
(/s btw)
Says me, who is totally a spy. Yup, absolutely they should read all of my data.
(but a spy would never say that so…)
Reminds me of the Bill Hicks bit about marketing and advertising. “Oh he’s going for that anti-marketing dollar, that’s a great market!”
IMO it’s less about insiders stealing info. I’ve seen leads lists stolen and sold on the open market, etc. What we should really be concerned about is the above board, legal and absolutely promoted evil of advertising. I’ve worked in social Media and gaming(gambling) and let men tell you: the legal things these advertisers do are diabolical. The whiteboard conversations about how to structure a user journey are exploitation and immoral, unethical and downright evil and they are so by design. You’re doing a poor job if you’re not devising ways to skirt the law and use loopholes to manipulate people.
Doesn’t most people also manupulate each other as well? Like gaslighting and etc.
Sure. Do they do that with the might of Googles advertising platform behind them? Do they do it to millions of people m at a time using automated processes supported but machine learning?
yay! you worked at facebook and google well knowing they exploit people’s emotions and tech illiteracy. Do you want a cookie?
I hope you’re working at Tiktok now. I can’t wait to praise you about how you tell everyone they’re exploiting teenagers and spying on them that we totally don’t know. 🕵️ 🕵️ 🕵️
It was 12 years ago man, calm down.
Not a fans of these people saying how bad thing are but refuse to elaborate. Like sure, i know ads and socmed company will collect my data piece by piece and put it together to know who i am and target me with stupid ads, but i also love to know if there’s more to it. It’s not to convince me but it’s to convince others.
I worked at an ad agency and we’d literally have every user’s email, name, phone etc in random spreadsheets that everyone had access to.
As an intern I had root access to just about everything on the company server because I was one of the people who “knew computers” who wasn’t a dev.
There was constant debate about how to trick people into giving over their data etc (e.g. email sign-up for some free crap that you never actually got). Or getting people to allow apps permission to access their contacts, as then you’ve got 100 new people, and enough info about them to get them to open a spam email.
Also, if the user fell for a trick, their details are suddenly high value, as they are dumb enough to be a “mark” (or maybe their English isn’t very good), so their stuff can be sold to scam companies or just scummy people.
Privacy is a layer of defence, and shitty people feel entitled to take it away from you.
That last sentence is a beautiful summary. I’m totally going to steal it. I promise to try and remember to give credit.
Some things that my company does:
-
Has someone watching you browse our site live. We can see everything you do in real time. All your searches, missclicks, mouse movements, etc. Only thing it cant see is credit card info.
-
Uses these live views to create a profile on you. Are you in the deep south and searched for something that could be “conservative”? Your now on our Conservative mailing list. Vise-versa as well, We have email marketing campaigns that are written to cater to demographics. For each email sales campaign we put out, there are about 8 varieties of those emails that are tailored to what we think you want.
-
Keep databases of all our customers and people who visit the site, with as much info as possible. IP, location, estimated salary, spending potential, whether or not you are more likely to click on our links. All kinds of info that isnt really protected in any meaningful way. Most of it is just on a Google Drive.
-
For our big spenders and repeat customers, we have a separate database that has even more personal info. The marketing manager has even gone so far as to look up Facebook and Linkden and whatnot on you and take whatever they can find. Family, friends, hobbies, jobs, anything that they think can be useful to sell more stuff. Again, none of this is really secured to well.
Im not in the marketing department of my job so theres probably a lot more that im not aware of. These are just a few things we do and im sure this is mild in comparison to bigger companies. My job is a small family business with like 10 people working there.
Yeah, the first time I saw he granularity of what Analytics could collect on a site, I was mortified. Like yeah, they may not record your specific name, but if they know every page you visit and everything you buy, you’re still a unique and trackable entity.
But what does your company do with this data? You put me on an email list, but if you have my spam only email… Then what? What do I stand to lose by your company doing research on me?
Why don’t you give everyone here that kind of info then?
It sounds like everyone already has all that info, and all they seem to do with it is recommend gifts my mom would like based on her search history.
I get targeted political ads, but who cares about those? I don’t form my opinion based on ads.
You are so special thinking you are immune to propaganda.
It’s pretty easy for ads, they’re clearly labeled and anything in an advertisement is propaganda with little merit.
My job specifically? Probably nothing major except for some spam. We dont sell our customers info like a lot of places do. If we did then, the profile we have on you could be cross referenced with other companies and build a more complete profile on you. Allowing less scrupulous people to infer and fill in the blanks on the missing info for you and try to profit off that.
-
Attribution (how do I prove the ad I bought actually influenced a person’s decision to do something) is still not a solved problem. If a company’s furniture business increased revenue 10% in a quarter, what percent of that was due to marketing. Also which campaign attributed the most to that increase? Because companies often run multiple campaigns through different channels and vendors.
If I can prove spending 50M on TV ads resulted in 150M in additional sales, that company would probably spend 150M on the next campaign to try and generate 450M.
The problem is what kind of data it takes to prove attribution. If I could say ID 123 saw an impression on Jan 31, made an Internet search in that vertical on Feb 1, and traveled to a location with that product on Feb 2. That would be pretty fucking convincing, but it also involves knowing ID 123 person’s activities in extreme granularity.
That’s a use case for selling furniture, but what else could you accomplish? Honey pot people seeking abortions in places where it use illegal? Identify people who maybe politically subversive. Scams on scams.
Pretty much anyone with a budget and a goal can access a commercial surveillance network.
I used to work in ad-tech and this is exactly right. We had a lot of problems that caused a considerable amount of noise on the results:
- Cookie trackers getting added to the main blocklist for ad blockers basically rendered them useless
- IP tracking was basically done by matching IPv4 addresses which are not permanent. Apple launched a feature which made every person who had ever paid for an iCloud subscription resolve to the same IP in any given country.
- People generate so much data that it’s actually hard to try to tell a meaningful “story” out of it. Like GP is saying 90% of a marketing budget is wasted but it’s hard to tell which 90% that is.
I also think “attribution” is fundamentally flawed. Like the Coca Cola ads they show at Christmas are the most successful ad campaign ever but no one goes on their website after watching one of them.
I think you’re the only person who I have ever seen say this aloud in a public forum—I totally agree. This doesn’t just apply to advertising. “I used to work for a plastics company—YOU DONT EVEN KNOW HOW BAD MICROPLASTICS ARE” No further elaboration
Like, how bad are they?! Tell me! You can’t just say that and leave!
Can’t find it rn but there was a mastodon post a while back about a surveillance program using data sold for advertising purposes. Maybe someone remembers what it’s called. The degree of information that program advertised as being able to find was insane.
Exactly, this is just a baseless statement of something we all know to be true and already agree with. It’s like those posts that basically just say “rich people don’t pay much tax, this is bad!”, I’d love to read some details but just stating the obvious isn’t informing the interested or convincing the uninterested.
Glad to see someone say this. It’s a total appeal to authority argument. With they would’ve explained why they think it’s bad and let us come to our own conclusion.
I work in an advertising-adjacent field (we won’t do any skeevy data-harvesting stuff, but still, ads) and I barely use any of the main social media sites, have an adblocker enabled on my router, use uBlock, GrapheneOS for my phone, Linux with a bunch of hardening, a VPN that’s always on etc.
My work computer doesn’t have any of that 'cause I need to be able to see ads on it, but sometimes if I forget and just browse around on my work computer with no ad protection… holy fuck it always surprises me how awful the internet is.
I don’t understand why companies don’t have network-wide adblockers on their employee systems and intranets. Used to be in the Air Force, ads everywhere. Now work for a contractor, still ads everywhere.
Don’t they know that blocking ads can speed up their networks? That ads track activity and may be revealing sensitive information about employees?
I don’t get it.
More like because this: The NSA and CIA Use Ad Blockers Because Online Advertising Is So Dangerous
I block ads on my work network. Perimeter and endpoints.
I work in an advertising-adjacent field (we won’t do any skeevy data-harvesting stuff, but still, ads)
My pal too; he makes signs.
I feel like internet advertising is way overdue for a crash, its like the matrix I dont even see them anymore.
I just don’t understand how advertising still makes so much money. Who’s watching ads and clicking on them these days? Who sees an ad that isn’t annoying, pandering, or downright infuriating to them? The ad business is so profitable, it’s Google’s main revenue source and Netflix is getting rid of a paid tier just to focus on their ad-supported one.
How is the ad business so profitable?
We try to avoid ads, but there is vast majority who just watches ads and get influenced.
I click on product ads when I’m looking for generic product categories and don’t have a brand and model in mind.
Who’s watching ads and clicking on them…
My wife works in advertising. Online ads are about building brand recognition. It’s affecting it’s primary goal by having you see the advertisement. Clicking on the ad is another metric, but it’s not necessarily the goal, more of icing on the cake.
ad business so profitable?
The companies/govt agencies have huge budgets to get people to see their message. The big reason the house brand of whatever at the store is 10% cheaper is that brand doesn’t advertise. You the consumer are paying for advertising by buying products that are advertised.
The big reason the house brand of whatever at the store is 10% cheaper is that brand doesn’t advertise
That’s what someone in advertising would say. Co-branded (store brands) are cheaper because they are not as good as the brand name. The co-brand manufacturing company intentionally makes them with less quality, even if they are literally made in the same factory as brand names. If they didn’t, the brand name company would complain and pull their business.
Then there are brands like Nabisco that do everything in house. Oreos are way better than most copies because they have better ingredients and quality control.
No I don’t want to hear anyone’s spiel about how they think co-branded food is better than brand names. That’s your opinion. The facts are that co-manufacturing factories literally adjust their quality based on what the brands pay them.
I built software around 2010-2014 around harvesting visitor data.
Shit was scary back then with how much we could predict. We were already laser targeting customers and people. I can only imagine what they’re doing now.
This was before the whole “big data” push when companies were cross-referencing data sources from other harvesters.
deleted by creator
oh rly? then why, after i’ve used facebook daily for 15 years, does it thin my interests include “foot” and and actors ive never heard of? why does google, after about that same amount of usage plus me owning many androids and having an even deeper entanglement with it than with facebook, think i’m the opposite sex (!) and imagine countless interest for me that i don’t have, just like facebook?
iv yet to see any of these companies being very accurate about me.
Sounds like you’re not the only person using your devices, including network and router. And even if you are, if you live with others and not on a VPN you’re very likely sharing an open IP with people of different tastes as well as gender. I get my spouse’s YouTube recommendations all the time, even when not signed in and on a totally different machine, because to YouTube it’s all coming from the same IP.
It’s not a huge mystery.
Have you considered maybe you aren’t worth anything of value?
they arent super obvious about it.
why is this so normalized? every time some guy who knowingly does evil things and comes up and say that their work was evil like and now everyone should praise them… removed STFU, you aren’t revealing anything that’s not public knowledge.
“I spied on billions of people, I would avoid my ex company”
“I previously worked at amazon and made millions, now you should avoid it”
“I got rich by exploiting you, now that i’m out and doing other things, avoid my last company”
“I worked at <social media company> and oversaw pushing violent narratives in developing countries, I wouldn’t touch it with a 10 feet pole”
No Shit Sherlock!!
I worked in a non-decision making ITS adjacent capacity between banks and lawyers during the 2008 downturn. I knew full well our company was contracting with awful banks but I got the job while unemployed for several months when there wasn’t any jobs. People don’t always have a realistic choice in the matter, I was poor and it was entry level $35k cubicle gruntwork. Nothing I did couldn’t be replaced by any idiot with basic MS office skills in a 10 minute interview. Me taking the high road would have just fucked up my life for no reason. I left as soon as the job market recovered.
Anyway, I pulled all of my money out of Wells Fargo and tell anyone who will listen to do the same, out of the 30 big banks we worked with they were leaps and bounds more willfully incompetent then all of the others combined. I don’t claim to be a good person, I just do what I do like anyone else, I think you’re looking at this situation far to ideologically. In corrupt systems we are all complicit on all ends, there is no moral high ground other than starving to death and refusing the system entirely which is nonsense. Nearly all corporations are actively doing evil and a large portion of non-profits are only marginally better.
Just a friendly reminder to everyone that Wells Fargo is a criminal enterprise masquerading as a bank. You have been warned.
Well the OP isn’t saying they got rich off of it. Lots of people just need jobs.
“I used to work for the cartel, now I make covers for Lipps inc., avoid the cartel btw.”
Things like this just screams “I’m one of the good guys now” and probably “check my new book/course/patreon/podcast/tweets to read more about shitty things I did.”
money in, money out
Hmm maybe I’m just desensitized, but what are they going to do with that information? Going to try and sell me stupid shit?
Sell it to people who will manipulate you and your family. Even subtle changes could shape the direction of your life. Or, they could say people with your preferences are in a certain area and fund some other area instead. Could be anything. The less data they have, the better.
Edit: gave->have
Did you not see the documentary on how the private advertising company used Facebook to run ads to specific demographics of people to influence an election?
Also your comment about trying to sell you stupid shit, you may think the ads are stupid and that you’d never buy the stuff or pay much attention to whatever idea its pushing, but maybe the idea of the advertisement isn’t to instantly sell you on something but slowly change your thinking subconsciously?
I also like to think I’m impervious to a lot of marketing BS, but then again am I the same as the people who say, people are stupid for getting scammed, only to fall victim to a scammer because they thought they were smart enough not to?
The advertising company you mentioned is Cambridge Analytica, right? If so, and not something else, I’d like to add this shit has come to light and exploded in 2018. We have to wonder how many others went dark after that and what shit they have come up with since then, in these 5 years.
To be fair I do use the basic level of protection, ad blockers and what have you. So if they are trying to influence me with ads, well, I’m not seeing them.
But I don’t go the full 3 layers of ad block with a pihole and a VPN.
sell it to police. sell it to a stalker or vengeful ex. sell it to prospective employers, landlords, debt collectors, and scammers. this is just a taste, off the top of my head.
Have health insurance?
Big into drinking, lots of bars and going to liquor stores whilst your mobile phone is with you and some apps have location access permissions?
Don’t be surprised if your health insurance goes up on account of being in a higher risk group…
(It’s not exactly hard to cross your location with store locations and it’s probably already done generally to try and determine your consumer habits)
And this is just a mild, mild example. Stuff to do with people’s sex life can have far more entertaining effects, especially in a highly moralistic country (like the US) or if cheating on a spouse.
Think about it this way: if you don’t jump through hops to make it hard to track your location, there is a record, forever of every place you go to with your phone and how long you stay there (and repeat visits with long stays would signal a pattern) as well as of everything you’re interested in enough to look it up and/or visit it on the Internet and it’s all crossed. Further, if you have email via one of the big providers such as Google, every email you sent, received or even just drafted but never sent is tracked.
Why do you think Google started pretty much forcing people to give them their phone number for the Google account that, for example, goes with their Google Mail?! It allows them to link all that sweet information and match it to a single individual.
And this is before we go into crossing data with the kind of physical life data on you: the insurance company records, car onership and rental, financial information and transactions, even public transport use (for those which use modern touch-in touch-out cards).
Right now in the US? Not much outside of try to sell you stupid shit.
But the capability in the data is there for an authoritarian regime to do quite a lot to you as a result of the information.
So you know - if there was any pending threat of a narcissistic psychopath upending the government you might be concerned over what insights into individual mindsets can be accomplished with the data available…
I agree with this and yet this seems really contrived