Once Again With Feeling: 'Anonymized' Data Isn't Really Anonymous

Furnished content.


For years, the companies that hoover up your internet browsing and other data have proclaimed that you don't really have anything to worry about, because the data collected on you is "anonymized." In other words, because the data collected about you is assigned a random number and not your name, you should be entirely comfortable with everything from your car to your smart toaster hoovering up your daily habits and selling them to the highest bidder. But studies have repeatedly shown that it only takes a few additional contextual clues to flesh out individual identities. So in an era of cellular location, GPS, and even smart electricity data collection, it doesn't take much work to build a pretty reliable profile on who you are and what you've been up to.The latest case in point: German journalist Svea Eckert and data scientist Andreas Dewes recently descended upon Defcon to once again make this point, releasing a new report highlighting how "anonymous" browsing data is anything but. The duo found it relatively trivial to obtain clickstream browsing data from numerous companies simply by posing as a fake marketing company, replete with a website filled with many nice pictures and some marketing buzzwords." Ironically, some of this data was gleaned from companies that profess to offer you additional layers of privacy, including safe surfing tool Web of Trust.It didn't take long before the pair was able to obtain a database containing more than 3 billion URLs from roughly three million German internet users, spread across roughly 9 million different websites. However easy obtaining the "private" and "anonymous" browsing data was, using this data to quickly and easily identify individual users was even easier:

"Dewes described some methods by which a canny broker can find an individual in the noise, just from a long list of URLs and timestamps. Some make things very easy: for instance, anyone who visits their own analytics page on Twitter ends up with a URL in their browsing record which contains their Twitter username, and is only visible to them. Find that URL, and you've linked the anonymous data to an actual person. A similar trick works for German social networking site Xing."

"For other users, a more probabilistic approach can deanonymise them. For instance, a mere 10 URLs can be enough to uniquely identify someone - just think, for instance, of how few people there are at your company, with your bank, your hobby, your preferred newspaper and your mobile phone provider. By creating fingerprints from the data, it's possible to compare it to other, more public, sources of what URLs people have visited, such as social media accounts, or public YouTube playlists."

0 comments, click here to add the first

Jeff Sessions Suggests He's Steering The DOJ Towards Prosecuting More Journalists

Furnished content.


Jeff Sessions and the DOJ are back to threatening leakers again. It seems counterproductive, considering each new threat of leak investigations does little to stem the steady flow of leaks. But the new DOJ boss seems ready to go further than his predecessors.Having already expressed an interest in taking care of Obama's unfinished business by going after Wikileaks, Sessions now appears to be headed towards threatening journalism and the First Amendment itself. This would be a new direction for the Justice Department. A 2013 report by the DOJ stated it was unwilling to consider the punishment of journalists during leak investigations, except as a last resort.

As an initial matter, it bears emphasis that it has been and remains the Department's policy that members of the news media will not be subject to prosecution based solely on newsgathering activities. Furthermore, in light of the importance of the constitutionally protected newsgathering process, the Department views the use of tools to seek evidence from or involving the news media as an extraordinary measure.

I have listened to career investigators and prosecutors about how to most successfully investigate and prosecute these matters. At their suggestion, one of the things we are doing is reviewing policies affecting media subpoenas. We respect the important role that the press plays and will give them respect, but it is not unlimited. They cannot place lives at risk with impunity. We must balance their role with protecting our national security and the lives of those who serve in our intelligence community, the armed forces, and all law abiding Americans.

0 comments, click here to add the first