undefined | Better HN

0 pointssnapcaster3mo ago0 comments

I think this is the wrong mental model (attempt to articulate threats from a specific information leakage). The problem I have with this approach is that it ignores "sensor fusion" by treating each leak as independent and defining threats as "things i can picture happening".

I think the correct mental model for this is "leaking bits". Leaking bits is bad, it doesn't take many bits to uniquely identify you and you're also not able to anticipate how those bits might be used in future or correlated with other bits.

Just stop leaking bits when you can avoid it. Then you don't have to mentally model every threat you come across

0 comments

tetha3mo ago

One of the more tractable examples here is the information what cell towers your cell phone is connected to. On it's own, it doesn't tell you that much.

But if you have this from 2-3 people, you can start inferring if they are meeting sporadically, meet a lot, possibly live together.

Or, if you add information about the services in the vicinity of cell towers, you can start deducing changes in a persons life. Suddenly the phone is moving more, to places with a doctor nearby, a gynecologist nearby, clothing stores, furniture stores, ... eventually a hospital. Start mixing in information about the websites they visit...

This incremental discovery of information about a person is surprisingly powerful depending on the data you have and hard to predict.

georgeecollins3mo ago

I agree with this completely. I feel like my phone is leaking so much sensitive information about me in so many ways. And it has access to my location, my communications, my finances. And it is hard to turn off. I can turn off my vacuum cleaner for months if I want. I can't turn off my phone or the computer in my car.

I guess that's why the vacuum doesn't worry me. The phone really does.

snapcasterOP3mo ago

Totally agree, but my point is that you shouldn't be modeling this by looking at various devices and calculating worry thresholds

Just stop leaking willingly leaking bits for little or no upside instead it's much simpler

j / k navigate · click thread line to collapse