Online Privacy does not exist

Published by patrick on 03 May 2009 00:08 -0700. 21 Comments. Tags:

Everyone that thinks that online privacy exists, raise your hand.

Regardless of whether or not you raised your hand, you are partially right and partially wrong.

Online privacy does exist in the sense that websites can promise that they will not share your information with the general public. But think about this. They are promising that they will not share your information, but just because they won’t share it doesn’t mean they don’t have it. In fact, there is a book that talks about how much Google knows about you.

On many forums, they have what they call Private Messages. This is a misnomer. Your Private Messages are about as private as a conversation to your friend in a coffee shop. Those within earshot can hear everything you are talking about in the coffee shop. Likewise, the administrator (probably) can, and so does anyone with access to the database.

What happens with most forums is that they store everything, including posts, threads, and private messages in plain text. This means that anyone that opens the database can read your so-called private message in whole. The people running the forum might be honest people and decide not to read your message. But what happens when the site gets hacked? What happens if the people running the site are not honest?

Think about your email. If you are using GMail or Yahoo! or (god forbid) Hotmail, your email is in a database so huge nobody will bother reading it. But what if it is on a corporate mail server? Corporate mail servers should get few enough emails daily to make looking through them a feasible task.

No matter how private you think something online is, it is not. It is stored somewhere, and the chances of it being stored in plain text are very high. You might want to watch what you say, eh?

21 Responses to “Online Privacy does not exist”

  1. Daniel Kao 2009-05-03 17:56:05

    That's a good point. Although I bet at least 95% of the general public does not know how to access the database in that way. Or else there would be no point even trying to give passwords and user accounts. Also it gets much worse than that. Every connection over the internet and phone is logged for government use. Have fun with that.

  2. Chipbuster[FUBAR] 2009-05-03 22:55:59

    HI BIG BROTHER!

    I don't have anywhere near the mental capacity to think about the whole internet security thing at the moment. I'll probably leave a slightly more intelligent comment tomorrow

  3. badfish303(Akshay) 2009-05-06 23:06:15

    LOL, dude btw nice blog.
    how much are you paying for the domain?

    And also, most of the big forums encrypt pm's (md5 or TripleDES) in their databases, but a lot of the small ones aka Lynbrooksd do store them in plain text i think. Hopefully we dont send out too much info on small sites.

  4. Patrick Lin 2009-05-07 23:56:47

    Akshay, you can’t md5 Private Messages. md5 is a one way process, meaning that you can’t get it back.

    While there exists hacking tools like rainbow tables for hacking md5-encrypted texts, they are only useful when the hash is in the table.

  5. Russ 2009-05-08 14:22:39

    What forums are you talking about where your private messages are so important that a public exposure would cause problems?

  6. Steven Byers 2009-05-17 16:21:39

    I think Daniel's estimate is way too low. I would say at least 99.5%. Of all the hundreds or even thousands of people I personally know I'm sure only 20 or so have ever even heard of "how to access the database in that way." Obviously for you who flock with birds of your feather the percentage of people with that knowledge would be high, but you are not normal.

    Quelque chose qui ne veut rien dire...

  7. KrisBelucci 2009-06-02 18:30:12

    Hi, good post. I have been wondering about this issue,so thanks for posting.

  8. http://www.netpokerstars.com/ 2009-11-27 23:09:06

    I think you made a good point on this site is that database security is first thing.Many companies,organist ion, have their store their data in databases.So database security will be must.Most of peoples done database security by providing "user name and password".Bit now in modern world daily new technology is coming due to which some peoples trying to crash those user name and password.So I think database will be more secure to save the data.

  9. health insurance 2009-12-30 08:27:05

    Wow! i agree! i’ve been searching for so long for a site where i could find everything that i want, and i’ve just found it!! really, i’ve visited your blog, and it’s amazing, i will keep visiting

  10. leather sandals 2010-04-03 16:04:54

    "Ultimately, we'll have to face wrenching tradeoffs," said Lior Jacob Strahilevitz, deputy dean and professor at The University of Chicago Law School. "We can learn a lot by looking to the law of trade secrecy. Firms that stamp secret on everything don't get protection, as judges say they're overusing the label. The FTC should figure out what the hierarchy looks like so that people do treat 'crown jewels' as seriously as they need to be taken."

  11. bible experience 2010-04-03 16:05:44

    If we don't have this framework, we're not going to realize all the benefits we might from consumer engagement, research. We do have a privacy and security framework at HHS," said Jodi G. Daniel, director of the Office of Policy and Research for the Department of Health and Human Services' (HHS) Office of the National Coordinator for Health Information Technology

  12. bad credit car loan 2010-06-07 18:31:39

    You should go ahead and download some software. That is the easiest way as opposed to renaming files and doing all that. It will take you forever if you have a large volume of things you need to secure. Free softwares will work, BUT they are relatively cheap anyway and you get added protection by spending like 20 or 30 bucks. I use PrivacyView. It protects all my files and has a crap load of features. I have tried quite a few and I found that as far as Internet privacy software goes.....I will be only using PrivacyView

  13. wedding 2010-06-11 20:47:09

    Wow! i agree! i’ve been searching for so long for a site where i could find everything that i want, and i’ve just found it!! really, i’ve visited your blog, and it’s amazing, i will keep visiting

  14. coach purses 2010-06-23 20:04:41

    I think you made a good point on this site is that database security is first thing.Many companies,organist ion, have their store their data in databases.So database security will be must.Most of peoples done database security by providing "user name and password".Bit now in modern world daily new technology is coming due to which some peoples trying to crash those user name and password.So I think database will be more secure to save the data.

  15. Matthew 2010-06-30 04:13:30

    I was estonished to find the information that I'm interested in at this site, I'll use it in my resume writing, it can be helpful for you if you don't want to order resume

  16. DeborahSnyder26 2010-08-08 12:18:51

    I guess that to get the business loans from creditors you ought to present a firm motivation. However, one time I've received a short term loan, because I was willing to buy a car.

  17. essays online 2010-08-18 04:12:35

    I am pretty sure that students will make better their writing skills purchasing term paper from custom essay writing service. Because a famous essays writing service will be able to create custom research papers on every field of science.

  18. purchase term papers online 2010-08-19 03:06:24

    Inexperienced students always select the first term papers writing corporation they detect in the internet. That is absolutely wrong! You will have to buy affordable research paper utilizing expert hints.

  19. personal statement writing 2010-08-21 14:21:21

    Placing your order at writing essays company, you ought to await personal approach and the best care. Furthermore, you will get different free issues.

  20. buying term paper 2010-08-24 12:43:53

    To reach academic success, different students should state if they are willing to write the creative writing essay or just buy custom essay of the best quality.

  21. buy research paper 2010-08-28 04:26:55

    Superb topic around school! Very good to be honest! If you're worry, feel free to meet our buy research paper writing service that can assist you with excellent custom term papers. Best of luck!

Leave a Reply
Comment Guidelines ↓
  • Please provide your name, you may use an alias if you wish to remain anonymous.
  • Comments with obviously fake emails will be deleted.
  • If you do not have a website, please leave that field blank.
  • Please keep comments related to topic. No spam please!
  • Please use proper grammar and spelling or your post may be edited or deleted.
  • If possible, please comment in English.
  • Un-related and spam comments will be deleted.

You may fill in this CAPTCHA to by-pass comment moderation.

Top ↑