What threat model includes "malicious actor can see my taste in music"?
this post was submitted on 16 Dec 2023
28 points (85.0% liked)
Privacy
31829 readers
162 users here now
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
- Don't promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
Chat rooms
-
[Matrix/Element]Dead
much thanks to @gary_host_laptop for the logo design :)
founded 5 years ago
MODERATORS
Social engineering. The more information they have about you, the easier you are to immitate.
The threat isn't in any one piece of information about you; it's in the corpus of knowledge, the profile they can build. Your tastes in music - at the granularity of not only what you listen to, but how much, and at what times - can help narrow down:
- how old you are
- where (in the world, and maybe to the time zone) you live
- your mother tongue
- probably your socio-economic status
These are just the things I can tyink of off the top of my head, and I'm not in infosec.
They're gonna datamine way more than that on the fediverse but yeah sure.
Depends on how much you let them link it back to you, but you're absolutely right: social media is a privacy nightmare. It can be mitigated; pick a Lemmy instance that doesn't require an email, and don't give out any identifying information, or just lurk. Many of us have multiple accounts on different servers, with carefully segregated personas. You do what you can; OP asked why (or why not) scrob. I see no reason to give out that information, only to give a company more information they can sell.
There are instances that doesn't require email?
All of that info is already available for anyone who has a government ID or census record
deleted
Because music charts are valuable because the music industry is valuable? They give me free access to their API and they get to scrape the data. It's not incriminating data, it's not GPS data. It is, at best, an unreliable indicator of when I am awake.
deleted
Those are pretty terrible examples.
They sell (sold?) the recommendation API. When you scrobble, last.fm got to build a corpus of data they could make recommendations from.
In totalitarian countries, those who listen to certain types of music are persecuted, because it links them with demografic that can be threatening to the regime. Even if your country is not totalitarian now, the existence of this data could be potentionally harmful to you in the future (just like any data, really).
The day my government arrests me for listening to furry speedcore is the day I'll eat my socks, man
Yeah, it's great to be safe in your country. I enjoy it too, fortunately. But it's not the same everywhere.
In quite a few countries some genres of music are actually illegal. Nazi music in France, most of western music in Iran, ...
The fuck is a scrobble
That page doesn't mention scrobbling
I do, with Last.fm even. Not everything in life has to be made as private as possible.
I do. While I could've self-hosted it easily, I'm just consciously OK with it being public.
I scrobble to a self-hosted maloja instance. No fear of your data ever disappearing if a service goes down!
You could scrobble to listenbrainz as well. Why not supporting it?
My data stays with me. I support Musicbrainz itself plenty
Why would I care what other people are listening to?
I've discovered many good artists this way
If you listen to X and there is another guy listening to X and Y, one could recommend Y to you. Not only that, you actually have an influence which artist is at the top. You get a database of your listens and anyone, including you, can have a look at mass audio scrobble data.
Because nobody cared about what I was listening to when I did. It didn't get me anything useful.
I just started scrobbling with Listenbrainz. I do it through an anonymous account, and the scrobbling comes through my self hosted music server.
I’m trying it out to see if I like the recommendations. If I do I’ll consider it a fair trade off in privacy for now.
Why should I?
Recently found out about
But when I log in via my Musicbrainz account it just loads indefinitely. Seems to be a bug with some server cache on their side at least someone said so in the forum. Maybe it works with another account.
That sucks. Maybe try another acc. Maybe browser config problem