Hacker News new | ask | show | jobs
by n4r9 1019 days ago
I guess there's two things going on here. Firstly, whether the company takes the data with your full knowledge and consent. Secondly, whether they use it in a transparent (or at least ethical) manner.

For the first of these, I quite like how on Android now the user has great control over what data is made available to which apps. The app needs to explicitly request access to camera, location, files etc... . You can toggle this on or off at will, and specify that it can only read the data while the app is active. I can imagine having regulation which enforces this type of privacy control for all tech service providers.

The second is much harder, because it's difficult to know what the company is doing behind closed doors. However we can at least check telemetry and demand that it is minimal and anonymised where appropriate. We can also apply much harsher penalties to companies that flout the rules.

Of course, all of this relies on government that acts in the genuine interest of its people and without hands in industry back pockets. We can but hope.

1 comments

> For the first of these, I quite like how on Android now the user has great control over what data is made available to which apps. The app needs to explicitly request access to camera, location, files etc... . You can toggle this on or off at will, and specify that it can only read the data while the app is active. I can imagine having regulation which enforces this type of privacy control for all tech service providers.

And the Android stock permissions are laughable and a pure joke.

Go look at Xposed Framework, and you'll find ways to unwind every permission, either direct deny, or "make fake data" plugins. There's even fake contact plugins, GPS faker plugins, you name it.

Google only implemented the worst-of-worse deny permissions, because doing a good job would be against their interests.

I'm sure there are plenty of ways to improve how Android does it, I was just using it as an example that I've had personal experience with. I'm not sure if the ability to make fake data is an essential part of owning one's data, but would be interested to hear arguments for it.