Wednesday, 26 June 2019

Privacy concerns about Big Data well-founded

Since I wrote about escaping from Google's walled garden on my Android phone, I have made some effort to further implement this on my desktops as well. Geoffrey A Fowler is a columnist in the Washington Post and he has written a number of articles about these privacy concerns about Google's vast data mining efforts that they are making across a range of platforms. These columns have been carried on Stuff's website and the most recent one, just last week, took a hard look at the Chrome browser.

From my perspective, it's simple: I ditched the Chrome browser after I switched to Linux. It wasn't something I thought about immediately; Chrome is produced for the most common Linux platforms (Debian-based distros in particular) and I actually did use it for a time, but eventually I switched to Firefox, mostly at that time because of Mozilla's reputation for openness and privacy. The Mozilla platform has inspired a much larger community effort in the development of extensions, which offer much more customisation of the browser, and I've long been a fan of Firefox and Thunderbird in particular, although the latter is now developed by an independent community. Generally I have chosen to use Firefox Developer Edition and on each computer that I run it on, it is installed into my user profile (as is Thunderbird), which saves another step when reinstalling Linux.  It took a while before I felt that Firefox was good enough for me to replace Chrome completely but after a couple of false starts, I have stayed with Firefox and haven't looked back. It's only on the R-Pi that I have Chromium because they don't build Firefox for their platform. I hadn't actually thought much about privacy until quite recently, or that the Chrome browser itself could be spying on me, but it makes sense that this is probably what Google is using Chrome for.

Since then, more recently having become aware of Google's practices and having switched my phone off standard Android (especially since it's a Google phone), I have switched to a different search engine in my browser (not Google). DuckDuckGo is an example that I have tested which is nearly as good as Google. I don't know if their reputation is any good. There are others, so I am not sure which is the best choice at the moment, but the issue is that most of them are commercial operations that have to have some interest in what you are putting through their sites and possibly still collecting data in some shape or form. It's interesting that some people claim Apple iOS is a better more private phone / handheld platform. Whilst Apple does take privacy more seriously than Google, they are still a business and there is still plenty of data mining happening on Apple devices. The key issue is that people should be able to completely opt out of having their data mined on any platform, and whilst Apple does give people more options, it's still hard for anyone to really have a free choice and full knowledge to be able to stop this happening on iOS.

The next step after a better browser is to start limiting web site tracking that a lot of sites do. For example Facebook and Google and a lot of other companies have web site trackers that tell them when you access certain sites. Firefox now comes with tracking protection built in, and I recently have set it to the strongest settings, and have noticed almost no impact on what I can do in Firefox. Secondly you may want to look at an ad blocker; I chose to use Adblock Plus. The issue is not that ads are annoying or intrusive, but that they are another way to gather tracking data about the sites you are visiting. There are a small number of sites I've experienced that block you from accessing content because you are using an ad blocker; with a scripting extension that I haven't yet tested, it is possible to block sites from detecting the ad blocker, but the number of sites that work this way is actually quite small (IIRC the Washington Post is one of the few).

Another useful idea is deleting cookies from a site when you close the site. Some news sites use cookies to limit the number of free articles you can view before they start blocking you. The technically astute can always configure the browser (perhaps with an extension) to delete the cookies when you close the site, and stop this particular level of tracking.

Firefox also has Facebook Containers and Multi Account Containers, which are extensions that you can use to manage the ability of different tabs in a browser session to access data from other tabs. Essentially these extensions group together either all Facebook tabs, or other tabs that you choose, into containers that don't have access to the data in other containers. Mostly I have found it useful to be able to log into multiple different Google sessions in the same browser. However for most of the time it is more useful to use separate Firefox user profiles and have a desktop menu shortcut that starts Firefox with each particular user profile in order to access the multiple accounts each in its own browser window. The main point of Facebook containers is to limit Facebook's ability to access the data outside the container (i.e. all the other websites you use) which is another privacy management technique.

It's also very important that you don't use your Facebook or Google (or Wordpress or any other site) credentials to log in to another site, because that gives that site access to your Facebook or Google profile and some of the data in it. Likewise, some apps that you install in Facebook can create this problem. In both types of situations, sites or apps can gather data from Facebook/Google and can even post spam on your Facebook or Google profile.

To finish off here's a few articles from the Stuff site addressing some of these issues.