APIs, Leakages, Owned y
otros Web Scrappings
Los datos en tiempos de Cambridge Analytica
@chemaalonso
Disclaimer
Esta charla es una reflexión sobre
el mundo de los datos hoy en día y
la privacidad. No trata de
transmitir ningún juicio de valor.
Son solo ideas generales del autor.
Data is Good
Data can Enrich you life:
From Data to Insights
• Data:
• My name is John (27) go to London on Mondays at 7 A.M.
• Anonymous Data
• I am (27) and go to London on Mondays at 7 A.M
• Aggregated Data
• We are 100 people under 30 and go to London on Mondays at 7 AM
• Insights
• 27 % of people under 30 go to London on Mondays at 7 A.M.
https://bigdataforsocialgood.luca-d3.com/ CODE: WILDWORLD0518
Cuando estamos con gente que
sabe más de nosotros
Cuando estamos con extraños
Data could be used to be manipulated
Desinformación: Fake News
Data + Fake News = Alert!
Big Brain
http://www.elladodelmal.com/2017/01/la-educacion-con-el-big-brain-y-la.html
Data Business
Relevant Ads
Data Business Model
“Si el producto es gratis, tú eres el producto”
Data Business Model
“Si el producto es gratis, tú eres el producto”
Data Transparency Lab
http://www.elladodelmal.com/2016/09/cuanto-dinero-gana-facebook-cada-vez.html
Facebook Data Valuation Tool
http://www.elladodelmal.com/2016/09/cuanto-dinero-gana-facebook-cada-vez.html
DATA: Our vision
Data Collection
You are where you are:
Play Store Bug ”scared” people!!
You are where you are
Google Street car “scandal”
http://www.elladodelmal.com/2010/05/google-street-view-wardriving-sniffing.html
You are where you are
The iPhone Tracker “Story”
Location Speaks
Where you stay:
• Where you live
• Where you go on holidays
• Where you work
• Where you go shopping
How it changes?
• Walk?
• Car?
• Bike?
• Combination?
• Skate?
• Where you parked the car
At what time?
• Where you sleep
• Where you have lunch
• Where you have dinner
• What is your daily activity
• Shops -> all kind of
External sources: point of
interest
• Rent or bought house
• Rich or poor
• Target for cibercrime?
• What company you work
• Target for cyberattacks?
• Visits you make
•
Temporary Events
• What kind sports you like
• Stadiums
• Concerts
• Events you attend
• Conferences
• Cinema
Being Crappy
• Political party you vote
• Meetings, people you
meet,
• How many lovers you have
• “Secret” interest
• Weird shops or places??
• Business/pleasure travel
• Doing something ilegal
All together
• PROFILE people
• Circle of friends
• Social status
• Strange behaviors?
http://www.elladodelmal.com/2016/11/conferencia-you-are-where-you-are.html
You are who you chat
http://www.elladodelmal.com/2016/06/como-facebook-te-espia-tus.html
You are what/who you e-mail
(Not –ALMOST -anymore)
You are what you search
https://support.google.com/ads/answer/2662922?hl=en
You are where you move
(WebBrowsing/Device Fingerprintng)
http://www.elladodelmal.com/2014/12/como-te-vigilan-las-empresas-de.html
You are what you browse
http://www.seguridadapple.com/2012/02/google-vigilaba-la-navegacion-de-los.html
Every move you make
http://www.elladodelmal.com/2015/04/facebook-ya-sabe-que-te-gusta-no-hace.html
Ads Apps
Sospechoso…
Collecting Data
Data Use
Relevant ads
http://www.elladodelmal.com/2010/02/google-haciendo-negocio-con-el-phishing.html
Relevant ads
APIs & Data Brokers
(Ex: Twitter ads)
Relevant services
• App Purchases
• Online Sales
• In-App Purchases
• Pay per install
• Pay per use
• ….
Political Consulting Services
Privacy
Data Leakege & WebScrapping
(weapponizing leaks)
1.- Reset Password para este e-mail 2.- Error: el usuario no existe 3.- Error: el usuario sí existe
Data Ownage
https://haveibeenpwned.com/
Arqueología del Siglo XXI
“A ver, vamos a hacer algo de Arqueología del siglo
XXI, para ver a quién encontramos hoy en ese lejano
y minúsculo Internet de, por ejemplo, 2014. Es
curioso que en aquel entonces se preocupasen tanto
de la privacidad. O al menos eso decían, porque no
parece que hubieran conseguido en alguna forma esa
"privacidad". ¿De verdad pensarían que la humanidad
tiraría todos los datos que ellos generasen?”
http://www.elladodelmal.com/2014/06/arqueologia-del-siglo-xxi.html
Data Control
Derecho al Olvido
User Choice
User control: PIMS + GDPR
Transparency (not compliance)
in a clear way
https://privacy.uber.com/policy/
Questions?

Datos en tiempos de Cambridge Analytica