I worked at an ad agency and we'd literally have every user's email, name, phone etc in random spreadsheets that everyone had access to.

As an intern I had root access to just about everything on the company server because I was one of the people who "knew computers" who wasn't a dev.

There was constant debate about how to trick people into giving over their data etc (e.g. email sign-up for some free crap that you never actually got). Or getting people to allow apps permission to access their contacts, as then you've got 100 new people, and enough info about them to get them to open a spam email.

Also, if the user fell for a trick, their details are suddenly high value, as they are dumb enough to be a "mark" (or maybe their English isn't very good), so their stuff can be sold to scam companies or just scummy people.

Privacy is a layer of defence, and shitty people feel entitled to take it away from you.

Some things that my company does:

• Has someone watching you browse our site live. We can see everything you do in real time. All your searches, missclicks, mouse movements, etc. Only thing it cant see is credit card info.

• Uses these live views to create a profile on you. Are you in the deep south and searched for something that could be "conservative"? Your now on our Conservative mailing list. Vise-versa as well, We have email marketing campaigns that are written to cater to demographics. For each email sales campaign we put out, there are about 8 varieties of those emails that are tailored to what we think you want.

• Keep databases of all our customers and people who visit the site, with as much info as possible. IP, location, estimated salary, spending potential, whether or not you are more likely to click on our links. All kinds of info that isnt really protected in any meaningful way. Most of it is just on a Google Drive.

• For our big spenders and repeat customers, we have a separate database that has even more personal info. The marketing manager has even gone so far as to look up Facebook and Linkden and whatnot on you and take whatever they can find. Family, friends, hobbies, jobs, anything that they think can be useful to sell more stuff. Again, none of this is really secured to well.

Im not in the marketing department of my job so theres probably a lot more that im not aware of. These are just a few things we do and im sure this is mild in comparison to bigger companies. My job is a small family business with like 10 people working there.

I think you’re the only person who I have ever seen say this aloud in a public forum—I totally agree. This doesn’t just apply to advertising. “I used to work for a plastics company—YOU DONT EVEN KNOW HOW BAD MICROPLASTICS ARE” No further elaboration

Like, how bad are they?! Tell me! You can’t just say that and leave!

Attribution (how do I prove the ad I bought actually influenced a person’s decision to do something) is still not a solved problem. If a company’s furniture business increased revenue 10% in a quarter, what percent of that was due to marketing. Also which campaign attributed the most to that increase? Because companies often run multiple campaigns through different channels and vendors.

If I can prove spending 50M on TV ads resulted in 150M in additional sales, that company would probably spend 150M on the next campaign to try and generate 450M.

The problem is what kind of data it takes to prove attribution. If I could say ID 123 saw an impression on Jan 31, made an Internet search in that vertical on Feb 1, and traveled to a location with that product on Feb 2. That would be pretty fucking convincing, but it also involves knowing ID 123 person’s activities in extreme granularity.

That’s a use case for selling furniture, but what else could you accomplish? Honey pot people seeking abortions in places where it use illegal? Identify people who maybe politically subversive. Scams on scams.

Pretty much anyone with a budget and a goal can access a commercial surveillance network.

Glad to see someone say this. It's a total appeal to authority argument. With they would've explained why they think it's bad and let us come to our own conclusion.

I work for a major data aggregator of public records, which uses a lot of the same techniques the these ad places use to profile people.

You would be astounded by the sheer amount of information we have on individual people from addresses, hard pii such as criminal and finance records and your ssn if in the USA, who your neighbors and family are, your assets such as housing/vehicles etc, and even your individual devices like your phone.

Ad companies like Google run on your digital exhaust. They make it easy to embed their analytics, login, payment, crash reporting, and other tools into websites and applications.

This data is collected and combined with their other data sources. They know your physical location via GPS or approximate based on your internet provider. If you use Google DNS they know all the websites you are going to and when. Not using Google DNS?, That's cool, most websites have some component that integrates with Google. Use android apps? Almost all of those use play services, so Google gets that info too.

Hanging out with your friends tonight? Ad companies can use location data to figure out who you hang with and build a social graph of people who are around you all the time. It's almost Valentine's Day.. better buy a gift for that person you live with. Here are some suggestions based on what they have been looking at.

They own most people's email accounts, they know what you watch on YouTube, they know about your preferences, they know what you might buy and when. They are a search company so they will ingest any and all data about you on the web. If you bought it with Google pay or see an email receipt they know if their advertising is effective.

On top of that, now this data is all fed into machine learning algorithms to further mine the dataset.

They know more about you than you do.

Exactly, this is just a baseless statement of something we all know to be true and already agree with. It's like those posts that basically just say "rich people don't pay much tax, this is bad!", I'd love to read some details but just stating the obvious isn't informing the interested or convincing the uninterested.

Can't find it rn but there was a mastodon post a while back about a surveillance program using data sold for advertising purposes. Maybe someone remembers what it's called. The degree of information that program advertised as being able to find was insane.

The key word here is 'security.'

Ad networks have been used to spread malware before, for example.

The data aspect does allow for much more nuanced pictures of people's lives than you might think - Google the story about the teenage girl who Target knew was pregnant before she'd told her family as a sample (and that was only from purchase data).

But realistically advertisers know a lot less than you think they do. They have the data, but don't know what to do with it outside of aggregate approaches that move the needle for a subset of their audience (who tend to just be very suggestible in general).

They may have an NDA.

Ok I'll elaborate:

8 years ago Facebook released a study about manipulating the psychology of teenagers with depression, and no one seemed to care that they were actively sending content to those kids designed to make them feel even more depressed, and were happy with their results.

The way they could target people is due to their online footprint, providing age and gender demographics, plus all of the content scraping from every post they had ever made on facebook to identify vulnerable people.

This was eight years ago.

Imagine how much better their mood detection and content curation has gotten.

The bigger your information presence online, the easier it is for unethical organizations to use that information against you.

Most of you think 'Oh that just means I'll be advertised at more'.

No, that's not just it.

Brexit was pushed through using a massive user info campaign from Cambridge Analityca that custom crafted public messages specifically shaped by the guidance of their MASSIVE online user behavior database analysis.

And look what happened.

So even the greatest danger is not that YOU will be advertised at.

The greatest danger is that with aggregated data, they can trigger the most vulnerable and reactionary to to basically whatever they want.

Hardly anyone understand how dangerous this is.