Elektrine lite

← Feed

@briankrebs@infosec.exchange

2023-02-17 13:20 UTC

I mean, think about this for just a sec: LinkedIn, Twitter, SnapChat, Instagram, the list goes on and on. The VERY first thing these platforms will do after you've installed the app and logged in is to ask you to share all of the information in your address book. Ever wonder how these social networks got so big so fast? It's remarkable how much of their growth is based on convincing everyone it's totally fine and normal to give away all of the contact information given to them by friends, family and acquaintances.

Replies (40)

  • @jurjen_heeck@mastodon.nl 2023-02-17 13:22

    @briankrebs@infosec.exchange The one & only reason I refuse to use or even install those apps on devices containing address information. I only have an Instagram app on a tablet with zero contacts.

    Open ##3227271

  • @js@mastodon.nl 2023-02-17 13:23

    @briankrebs@infosec.exchange This is exactly what turned my stomach immediately, and then strengthened my resolve. I’ve also made myself impopular by raising an eyebrow here and there when actual friends just started giving away my personal info without even as much as a single thought.

    Open ##3227282

  • @jgordon@appdot.net 2023-02-17 13:24

    @briankrebs@infosec.exchange There was a brief time that printed White Pages went digital and even national. That was mind blowing. I could see contact information for everyone in the US. It only lasted a few months I think. Then gradually all White Pages went away. So the process can reverse.

    Open ##3227283

  • @fsinn@mas.to 2023-02-17 13:30

    @briankrebs@infosec.exchange and how many people say “yes” to sharing that information without a thought.

    Open ##3227285

  • @joy@mastodon.social 2023-02-17 13:32

    @briankrebs@infosec.exchange One thing about this ever persistent social graph building... I'm just more (or less) shocked by the number of long-ago exes who apparently still have my number in their contact lists.

    Open ##3227287

  • @briankrebs@infosec.exchange and that’s something I’ve not given any app the rights to.

    Open ##3227289

  • @jimgon@mastodon.social 2023-02-17 13:37

    @briankrebs@infosec.exchange I generally avoid apps unless they provide me a utility that isn’t available through a browser. And then the utility needs to be significant. Social media data mining of devices is a big driver of that.

    Open ##3227290

  • @jernej__s@infosec.exchange 2023-02-17 13:50

    @briankrebs@infosec.exchange As Mikko said it two years ago:

    Open ##3227291

  • @jo@macaw.social 2023-02-17 14:02

    @briankrebs@infosec.exchange And that's the reason I don't use Signal. Doesn't matter how great the crypto is. The app part of it is shit. (Not to mention relying on phone numbers for identifiers...)

    Open ##3227295

  • @corq@infosec.exchange 2023-02-17 14:07

    @briankrebs@infosec.exchange @viss Cool, since we're all the last bastion of good examples, none of us use that tech at all, amirite?

    Open ##3227296

  • @RnDanger@infosec.exchange 2023-02-17 14:12

    @briankrebs@infosec.exchange I shared my contact details with LinkedIn once because I didn't realize they had scrapped that from me somehow and those people weren't already on the service. I felt pretty used when I realized it sent them invites on my behalf. I never allowed a service to do that again. I care about the privacy of my contacts as much as my own. (I mean, I guess it's still my privacy too.)

    Open ##3227297

  • @erraggy@mastodon.social 2023-02-17 14:28

    @briankrebs@infosec.exchange it's also the feature that I believe was responsible for Facebook's ability to take the lead from MySpace in late 2009.

    Open ##3227298

  • @syneryder@mastodon.sdf.org 2023-02-17 14:43

    @briankrebs@infosec.exchange You can add Viber to that list! I blocked it from accessing my Android contacts, and yet within seconds of providing my number (and no other details yet, not even name or photo, hadn't finished signup), I started getting Viber messages from old friends who have my number. Viber insists they don't upload numbers and that what I describe couldn't have happened. Never figured who to report that privacy breach to... but it wouldn't get anywhere anyway, right?

    Open ##3227299

  • @briankrebs@infosec.exchange Indeed. I'd never want to do that without explicit permission from every single person and I'm not likely to ever want to ask that. Feels like some apps are not helpful but tripwires to do something bad by accident. They shouldn't be and my operating system should help protect from such leaks by disabling the capability. I do want my contacts manager to let me try to contact someone via a service.

    Open ##3227300

  • @OldHound@masto.ai 2023-02-17 15:34

    @briankrebs@infosec.exchange I don’t think I’ve ever shared my contacts with any platform. It’s one thing for me to consent to give some of my personal information to these patrons, but completely another if I sell out family and friends without router consent. 🤷🏻‍♂️

    Open ##3227301

  • @SamTheGeek@mastodon.social 2023-02-17 15:45

    @briankrebs@infosec.exchange the big weird is that everyone acts like it’s *their* data to share when it really is *mine*

    Open ##3227302

  • @briankrebs@infosec.exchange Your post prompted me to delete my Instagram account, which I haven't used in several months. Then I was reminded Facebook makes it almost impossible to delete accounts. I deleted my LinkedIn a couple years ago.

    Open ##3227303

  • @mykl@infosec.exchange 2023-02-17 17:09

    @briankrebs@infosec.exchange Smells like a story that media outlets should be digging into. Society needs to understand the depravity.

    Open ##3227304

  • @alisonborealis@mstdn.ca 2023-02-17 18:00

    @briankrebs@infosec.exchange This was the point where I stopped using Facebook. When their mobile app made it mandatory to connect with my contact list and messages, I deleted it. Nobody gets my address book. I wish others were as careful.

    Open ##3227305

  • @Thad@brontosin.space 2023-02-17 18:06

    @briankrebs@infosec.exchange Back when Facebook was starting to get big, I got an e-mail trying to get me to sign up, and giving me a list of people who I might know. One of them was the father of the girl I'd dated in high school. I get how that happened -- people shared their address books, and several people I knew would have had the two of us in common -- but it creeped me the hell out. Felt invasive. A sign of things to come. I never did sign up for Facebook.

    Open ##5351922

  • @briankrebs@infosec.exchange I think these sites have done a lot of damage to peoples' understanding of privacy and security online with these kinds of tactics. Normalizing over-sharing while also normalizing secrecy. Recently there's been some fuss on here about Mastodon posts being indexed for search...and I've seen several people upset that the posts that they explicitly chose to make "public" are being made available to others. WTF do you think "public" means?? But if you look at traditional social network sites, public posts and public pages AREN'T public. At best they might let you see a short snippet before requiring a login so they can track you and regulate your access to "their" content. Mastodon is a social network that is actually social. On Mastodon, public posts are public. Amazing how foreign those two concepts have become...

    Open ##5351923

  • @tale@mastodns.net 2023-02-17 20:46

    @briankrebs@infosec.exchange For sadly large values of "everyone" but fortunately not actually "everyone". I bet the various platforms have metrics on how many people agree to it. I wonder whether it is a majority or not; even with a minority doing such sharing, they still suck in a LOT of people's information.

    Open ##5351924

  • @funranium@redwombat.social 2023-02-17 21:40

    @briankrebs@infosec.exchange told them no every damn time. The only one that didn’t ask…Signal.

    Open ##5351925

  • @MizzBassie@toot.cat 2023-02-17 22:10

    @briankrebs@infosec.exchange Everyone always asks for all the information in your address book and asks to track you (at least now they have to ask, before they just did it, permission or not). It’s time to pass some laws about that.

    Open ##5351928

  • @Mikal@sfba.social 2023-02-17 23:48

    @briankrebs@infosec.exchange I refer to it as "snitching out all your contacts to surveillance capitalists." Same with installing spyware like Google Analytics on your site. It's snitching and should be thought of and treated as such. And, fuck, you don't even get a lighter sentence for it!

    Open ##5351929

  • @At0micAndy@mastodon.world 2023-02-18 06:35

    @briankrebs@infosec.exchange yeah, and I don't do that. Never have, never will. I also do not use and Google products.

    Open ##5351936

  • @chucker@norden.social 2023-02-18 12:58

    @briankrebs@infosec.exchange wild that there hasn’t been a notable lawsuit on this

    Open ##5351937

  • @jana@masto.ai 2023-02-18 17:09

    @briankrebs@infosec.exchange What I absolutely hate is how I can't even install some applications with consenting to give up all information I have ever know, know, I will know, to allow all accesses and give up your left kidney.

    Open ##5351939

  • @lippyduck@mstdn.social 2023-02-18 05:10

    @briankrebs@infosec.exchange I've been saying the same thing. It's crazy. Surely there's a case for a privacy law to ban it.

    Open ##5426994

  • @scentedmeat@norcal.social 2023-02-18 20:38

    @briankrebs@infosec.exchange 🤬🤬🤬

    Open ##5426995

  • @briankrebs@infosec.exchange I was about to write that LinkedIn never asked me that, but it's because I've never installed any smartphone app for those services. And regarding Mastodon, what you notice is that Mastodon is not run by a company, so it does not has incentives to monetize everything it can.

    Open ##5426996

  • @mattrambles@t00t.cloud 2023-02-22 18:10

    @briankrebs@infosec.exchange I think because Mastodon is built for you to use as you please. The other examples are built for someone else to use you. I’m surprised we’re not collectively a bit more tired of being the product. 🤷‍♂️

    Open ##5426997

  • @Alexbbrown@hachyderm.io 2023-03-15 18:31

    @briankrebs@infosec.exchange I still recall with pain and shame agreeing to share the contacts of 5 people with LinkedIn to then find out that it shared every address in my address book. There was no undo.

    Open ##5426999

  • @briankrebs@infosec.exchange #xmpp too

    Open ##5427000

  • @justinbuist@c.im 2023-09-28 21:33

    @briankrebs@infosec.exchange Xitter cracks me up. I've had an account for 14 years and it is, now, asking me to add people from contacts. Elon seems to be desperate for users.

    Open ##5427002

  • @briankrebs@infosec.exchange mastodon doesn't want the contact information of the other people who believe in Jewish space lasers and Chinese moon bases

    Open ##5427005

  • @azonenberg@ioc.exchange 2025-02-21 06:56

    @briankrebs@infosec.exchange This is why Mastodon is the first social platform I've ever installed the app from. Rather than keeping it locked up in a browser in a virtual machine where it can't see anything I don't want it to.

    Open ##5427006

  • @mcgeoff@mastodon.social 2023-02-17 18:30

    @briankrebs@infosec.exchange and when I refuse to share contacts WhatsApp only shows my messages by their photo and phone number as a punishment. Fine!

    Open ##5439931

  • @phi1997@mastodon.social 2023-02-18 00:13

    @briankrebs@infosec.exchange That explains why I was confused by the toot that started the thread. I never bother with the official app for any website, and typically don't bother with an app at all.

    Open ##5439932

  • @briankrebs@infosec.exchange I still remember those Friendster emails...

    Open ##5439933