Threads collects so much sensitive information it’s a ’hacker’s dream,’ experts say

stopthatgirl7@kbin.social to Technology@kbin.social – 0 points – Threads collects so much sensitive information it’s a ’hacker’s dream,’ experts say
nationalpost.com

Meta captures everything from the information you give it when you sign up for accounts, to what you click on or like, who you befriend online and what kind of phone, computer or tablet you use to access its products

18

You are viewing a single comment
View all comments

Meta captures everything from the information you give it when you sign up for accounts, to what you click on or like, who you befriend online and what kind of phone, computer or tablet you use to access its products

I mean, yeah? None of that is unique to threads nor meta and half of that is information required to run the service

Threads Data linked to you
Third-party advertising:

  • Purchases (Purchase History)
  • Financial Info (Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content (Photos or Videos, Gameplay Content, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

Developer's advertising or marketing:

  • Purchases (Purchase History)
  • Financial Info (Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content ( Photos or Videos, Gameplay Content, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

Analytics:

  • Health & Fitness (Health, Fitness)
  • Purchases (Purchase History, Financial Info, Payment Info, Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content (Photos or Videos, Audio Data, Gameplay Content, Customer Support, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Sensitive Info
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

Product Personalization:

  • Purchases (Purchase History)
  • Financial Info (Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content (Photos or Videos, Gameplay Content, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Sensitive Info
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

App functionality:

  • Health & Fitness (Health, Fitness)
  • Purchases (Purchase History)
  • Financial Info (Payment Info, Credit Info, Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content (Emails or Text Messages, Photos or Videos, Audio Data, Gameplay Content, Customer Support, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Sensitive Info
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

Other purposes:

  • Purchases (Purchase History)
  • Financial Info (Other Financial Info)
  • Location (Precise Location, Coarse Location)
  • Contact Info (Physical Address, Email Address, Name, Phone Number, Other User Contact Info)
  • Contacts
  • User Content (Photos or Videos, Gameplay Content, Customer Support, Other User Content)
  • Search History
  • Browsing History
  • Identifiers (User ID, Device ID)
  • Usage Data (Product Interaction, Advertising Data, Other Usage Data)
  • Diagnostics (Crash Data, Performance Data, Other Diagnostic Data)
  • Other Data

As compared to Mastadon:

[Blank Space]

Source

I mean, yeah, but this is also true compared to writing your thoughts down in a paper journal or a self-hosted WordPress blog. Comparing it to Mastodon is only meaningful if you're specifically evangelizing for Mastodon. You're preaching to the choir here.

Your source touches on this, but a more meaningful comparison would be the social networks that are already being used by the same demographic. Is Threads use of data excessive or unusual compared the existing apps from Meta or its direct peers? How does it compare to Facebook, Instagram, Twitter, Tiktok, Snapchat, etc.? How does it compare to ubiquitous Google apps like YouTube, Gmail, Chrome, etc?

Yeah, excessive tracking is Not Good, but it's nowhere near unique to Threads.

The cybersecurity startup the parent article is built around, Protexxa, have their own Twitter, Instagram, LinkedIn, etc. as does its founder and CEO.

So what's the point of the article? Why Threads? Why now?

I kept a blog for ten years, I didn't write down my health info, my contact info, and my financial info on it.

And attention is being paid to Threads because yes, the access to health info is unusal. Other social media apps haven't asked for that unless they were specifically fitness apps.

It's bad that other ones track stuff, but it's not just stuff anyone puts on the internet just by being there, and they ARE taking an unprecedented step here.

I kept a blog for ten years, I didn't write down my health info, my contact info, and my financial info on it.

That was my point. It isn't that Mastodon is the alternative to Threads, it's just an alternative. The are plenty of systems of sharing short status updates with people that won't involve as many privacy threats.

And attention is being paid to Threads because yes, the access to health info is unusal. Other social media apps haven't asked for that unless they were specifically fitness apps.

Instagram also collects health info, which it has no intrinsic need for. This is important to note because, fundamentally, Threads is Instagram. That's why it collects the same data.

Personally, I think it says a lot that they can’t release it in the EU yet because it gathers so much data. Plus, we know Meta can’t be trusted with people’s data. It’s gathering more than other Meta apps and need to be aware of it.

As far as I know, they didn't want to rush it out in the EU because they didn't know if they'd fall foul of rules or not and they couldn't wait weeks or months just to find out. Not because they can't. Though, ironically, I think federation would cause the biggest problems. (How do you support the right to be forgotten when it's not technically possible?)

And yet the article decided to use 4 things that are inconsequential as their headline topics rather than that list