Flickr

Jan. 30th, 2006 01:04 pm
green_amber: (Default)
[personal profile] green_amber
Extract from Real Blawg as no one ever comments there and I'd actually really like some help/comments on this one:

Finally, deep into the further reaches of conspiracy theories re privacy and web-bugging we have this interesting comment from the resposnses to the IP article above.

"I don’t have any ads on the site, I do have embedded Flickr pictures. So, here’s a question - is Flickr just a cover for a huge web bug operation used to track visits to sites that have embedded Flickr pictures, or is that being overly paranoid? "

Flickr is a site where users can post photos they've taken and embed them in their web pages - they can then be viewed, uploaded etc by the public (or not as you choose).

In theory it seems plausible that every Flickr image could inded be a web beacon, meaning Flickr could correlate sign up IDs with IP addresses and web sites, as well as patterns of known associates (people who look at your pictures tend to be people who know you).

Anyone like to comment? I must go have a look at the Flickr privacy policy :-)

Date: 2006-01-30 01:30 pm (UTC)
From: [identity profile] ophelia-complex.livejournal.com
How was Friday night?

Date: 2006-01-30 02:28 pm (UTC)
From: [identity profile] surliminal.livejournal.com
It was good, tho I faded early! I had a lovely crispy sea bream on risotto and a fabulous sticky toffee pud !

Date: 2006-01-30 01:58 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
It certainly _could_ be used like that. But thankfully it can't individually identify you unless you're also a Flickr user, because cross-site cookies won't be possible...

So they can get general stats about your usage, but they can't connect them to _you_.

Date: 2006-01-30 02:29 pm (UTC)
From: [identity profile] surliminal.livejournal.com
They can't just stick some bit of code in the image which reads the browser's IP address - so Flickr at least has that? (which they could then correlate with some OTHER db even ifyou'e not a Flickr user?)

Date: 2006-01-30 02:54 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
What other DB? I'm not aware of any _public_ databases correlating IP addresses to identities. And for people (for instance) on AOL, this will jut pick up an AOL proxy address, not the address of the actual user...

Date: 2006-01-30 02:36 pm (UTC)
drplokta: (Default)
From: [personal profile] drplokta
They can drop a flickr.com cookie on you the first time you see a Flickr image, and then track every other image you view and what pages you've viewed them on. I don't think they are doing this, but it would be possible (except to users like me who disable third-party cookies).

Date: 2006-01-30 02:53 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
I meant "third party" when I wrote "cross-site" - brain obviously not in today.

And IE has blocked third-party cookies by default since version 6 came out - I assumed that Firefox did likewise, I'll have to play around when I get home.

Date: 2006-01-30 06:45 pm (UTC)
drplokta: (Default)
From: [personal profile] drplokta
Actually, IE6 by default only blocks third-party cookies from sites that don't have a compact privacy policy, or have one that the default IE settings deem to be unsatisfactory. But there's very little to stop companies from posting an inaccurate compact privacy policy.

Date: 2006-01-30 09:37 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
Went and did some digging about - and found one thing that said that it was worse than that - 3rd parties can't _set_ cookies, but cookies are still sent to them. Which means that if you've visited Flickr and had a cookie sent, then you're trackable from that moment on.

Haven't had a chance to test this tho.

Date: 2006-01-30 05:12 pm (UTC)
From: [identity profile] fieldsnyc.livejournal.com
That was my comment (and my original article).

I couldn't find anything in the flickr privacy policy about whether they make use of this information. They have a few million registered users already, and some percentage of those people have pro accounts, which means there's a correlation to actual personal data.

But that's kind of irrelevant.

I've put up a followup post you might find interesting, exploring some more of this:

http://www.aquick.org/blog/2006/01/30/flickr-pictures-web-beacons-and-a-modest-proposal/

Date: 2006-01-30 05:18 pm (UTC)
From: [identity profile] surliminal.livejournal.com
Gosh. How did you find me???

I looked at Flickr and was interested to se that yahoo! use web beacons
and that new post yahoo! takeover Flickr users automatically sign up for Yahoo! web beacon data gathering unless they opt out. I THEENK.

Date: 2006-01-30 05:19 pm (UTC)
From: [identity profile] surliminal.livejournal.com
Ahh (2 mins later) , you found that too..

Have you looked at LJ-Toys? It seems to do a lot what you're talking about. It;s utterly fascinating.

Date: 2006-01-30 05:44 pm (UTC)
From: [identity profile] fieldsnyc.livejournal.com
Nope - have you got a link to that?

Date: 2006-01-30 06:22 pm (UTC)
andrewducker: (Default)
From: [personal profile] andrewducker
I did that.

Was fascinating to see who reads me, how they do so, and how often they check their friends page...

Date: 2006-01-30 06:24 pm (UTC)
From: [identity profile] surliminal.livejournal.com
yeh I got it from you. It is very sneaky. I have just put it in FLA talk in fact :-)

Profile

green_amber: (Default)
green_amber

May 2009

S M T W T F S
     12
3 456789
10111213141516
17181920212223
24252627282930
31      

Most Popular Tags

Style Credit

Expand Cut Tags

No cut tags
Page generated Jul. 20th, 2025 07:33 pm
Powered by Dreamwidth Studios