Does anybody saw a good technical research paper on how Google, Apple, Microsoft are spying on users? Those companies provide features like Google Takeout
to allow users to retrieve some (but not all) the data. The topic is not limited to data collection, but also includes how they share it with law enforcement, sell it to other companies, engage in aggressive fingerprinting, etc.
If you have some useful links (not just mass medias), please, throw them at me.
How exactly are big techs spying on users?
indigomadelin sell it to other companies, engage in aggressive fingerprinting, etc.
The 2020 Out of Control report has a lot of detailed information about how the adtech market works, mostly invisible to anyone outside of adtech.
https://www.schneier.com/blog/archives/2020/02/new_research_on.html
- Edited
indigomadelin I could write my own long paper on how Microsoft spy on people, I’ve been a long time windows user and I’ve written privacy guides for windows users how to minimise the spying bloatware and services from Microsoft.
Basically many many components and services in windows log everything a person does by default
There are logs that show everything from what websites you visit, when you visited them, when you powered on and off your system, where and when you last run a program, when you last opened a file what you opened, the list goes on and that’s without the telemetry calling back home to Microsoft to send copies of your personal data. With windows 10 and windows 11 it not forces the installation of copilot so by default and if you uninstall it, Microsoft reinstall it in the background without consent and that’s its own nightmare, the ai if enabled will log everything you say, do and type under the false pre-tense of being “helpful” you know in case you forget something, but really 🤔 I suspect it’s something law enforcement will be so happy about because forensically it will be a gold mine of data and for all you know that could be, being sent to Microsoft.
As a windows users I learned to disable each and every privacy risk and I blocked telemetry both at dns router level and at a firewall level and my operating system is set to log nothing, remember nothing. I expect if you used wireshark to monitor network packets to any Microsoft service you would be shocked at what data gets sent
One could go as far as to request a copy of all of your data from Microsoft and you’d probably be shocked what comes back. I know google is just as bad, a lot of these companies are but I poured years of research in to how Microsoft snoops on its users. Windows isn’t my daily driver it’s what I use to game and to encode my videos but with windows 11 privacy is getting a nightmare for Microsoft users since now they force you to login with a Microsoft account to even use a fresh install of windows 11 and each update they patch the ways in which user can bypass the online account requirements.
Forcing users to link a pc or laptop to an account forces everything you to do be linked to an online Microsoft identity and they probably log hardware identifiers, gps information. The best way to approach researching any company that spies is to look at their system in the eye of a forensic examiner even going as far as to analyse the network traffic with wireshark or similar open sourced software and if that’s not possible set up new accounts for research, keep them on a VMware or virtual system and do a request for a copy of the personal information they hold related to your test accounts after using them for a little while.
In relation to google I know that google assistant sends recordings back to google and they hold those recordings and if they do that I’m sure they do that if you use voice with lost google services from home nest to assistant to voice typing and voice calls again you could request such information.
I’m forced to have google nest in my home but I have it on a remote on off switch, controlled over an infrared remote control and it lives off 99% of the time and only powered on when it’s needed for voice controls but even then I’m weaning on to an open sourced offline assistant and encouraging the household to move over to that instead.
If you want to find out how Microsoft spy on you, I wrote a privacy search guide on my GitHub under the same username and it goes in to details of which windows services and feature logs information and how it’s disabled.
indigomadelin Its not a research paper but if you take the time to read googles terms and conditions Here that does pretty much detail things, its not like they are secret about what they do its just that most people dont take the time to read and understand the terms and conditions, focusing instead on the convienence i guess.
The guts of it is they record, monitor and analyse mostly everything they can from the services of theres that you interact with, and you licence your intellectual property to them to be analysed and shared with 3rd party contractors as they see fit.... Essentially.
indigomadelin here is nice read also https://mullvad.net/en/why-privacy-matters
Chipper https://tosdr.org/en A good collection of various Terms of Service
Stayjuice I've looked through your Github repository and would like to recommend https://privacy.sexy for inspiration
indigomadelin thank you ☺️
"I’m forced to have google nest in my home but I have it on a remote on off switch, controlled over an infrared remote control and it lives off 99% of the time and only powered on when it’s needed for voice controls but even then I’m weaning on to an open sourced offline assistant and encouraging the household to move over to that instead."
I take it you don't use Nest on your GrapheneOS phone? Seems like it won't work anyway.
indigomadelin Big tech and gov (pdf).
argante website fails HTTPS BTW
raccoondad It's true because it's http.
argante
Um, so...
- An unsecured link
- to a state-run news site in China
- to a PDF that we'd have to open on our devices
3 reasons why I wouldn't want to click on that.
AtavisticPuma
If you are afraid, then you can do this:
curl http://www.news.cn/world/20250325/02ba448744ac4b75a81df613a88b4d26/2025032522b55fd15b244a5fac54e424c62be9b7_1616350dfed1c44ba786a82d574c86c30f.pdf > f.pdf
and then use dangerzone to convert to safe pdf.