privacy

This magazine is from a federated server and may be incomplete. Browse more on the original instance.

ReversalHatchery, in Is this even legal? Hiding data deletion behind login (after email request)

Password reset requires saying when the account was created (month and year) and “tech support” can’t help here either.

Did you try the date of their first email?

pacjo,

If only I had that. It’s not reasonable to assume someone would know that or will hold onto emails about account creation.

Thanks nevertheless.

ReversalHatchery,

I don’t think so. I never delete such emails. Why would I? Not like it’s in the way

beckerist, in Golang telemetry (again)

deleted_by_author

  • Loading...
  • RuikkaaPrus,
    @RuikkaaPrus@lemmy.ml avatar

    I searched A LOT about this information and got no information (but misinformation) about. Plus just look at this decision.

    What that means? I need to do a torsocks to every single command I type? (That last is just sarcasm. Please, I’m not so paranoid (by now))

    CookieManTheGreat, in Is this even legal? Hiding data deletion behind login (after email request)

    Yes because they need to verify that its your account and not someone wanting to get your account deleted

    pacjo,

    As mentioned in another reply:

    I’m writing from the email associated with the account, this is enough for most services I encountered

    CookieManTheGreat, (edited )

    Yes but having you to log in with a password is legit as well.

    The fact that the support can’t help etc is another issue, completely idiotic.

    echo64, in Is this even legal? Hiding data deletion behind login (after email request)

    it’s not illegal to put account deletion behind a login at all. Its also legal for them to request identification.

    However if you request data deletion and they have no valid exception to avoid doing that they must comply, it doesn’t matter if they have a mechanism for deletion that you can use, they have to still delete the data even if you don’t press the “delete account” button.

    you can file a complaint with your countries regulatory departments but if they refuse to press the delete account button for you, there’s not much else you can do outside of that.

    pacjo,

    Not the answer I was hoping for, but still a good one. I’ll try contacting someone who might be interested in this.

    In the mean time I sent them another email specifically mentioning this as a request and not me just asking for help.

    taladar, in Is this even legal? Hiding data deletion behind login (after email request)

    What would prevent someone else from requesting the deletion of your account if there was no proof that you are the person whose account it is?

    pacjo,

    I’m writing from the email associated with the account, this is enough for most services I encountered

    mp3,
    @mp3@lemmy.ca avatar

    Emails can be spoofed.

    lazynooblet,
    @lazynooblet@lazysoci.al avatar

    But spoofing doesn’t allow a 2 way conversation. Confirming the email should be enough

    pacjo,

    That’s just how it is. If you try hard enough everything can be spoofed. You can also try guessing someone’s password and creation date of an account. This is not the issue here.

    mp3,
    @mp3@lemmy.ca avatar

    The issue is with support not giving you an adequate account recovery method, they’re correct about validating ownership of the account tho.

    parpol, (edited )

    what they mean is emails can be extremely easily spoofed. It is pretty much like me changing my username to pacjo to gain access to your account.

    taladar,

    Email (on domains without DKIM and SPF at least) can be spoofed so easily, you could literally do it with on-board tools and a few lines of typing though. It is literally just sending an email that has your email address in the From header.

    lud,

    What are the odds that OP is emailing from an email that’s not configured correctly? Very low.

    taladar,

    If you mean from a domain without DKIM and SPF on the sending domain and DKIM and SPF validation on the receiving one? Pretty high.

    lud,

    Not really since Microsoft, Yahoo (I guess), and Google dominate the email space really hard.

    taladar, (edited )

    In terms of domains not really. Only the free-mailers use domains by one of those. The corporate users still need to set up their DNS properly for those technologies even if they use one of them as a mail hoster.

    lud,

    Why would OP contact OPPO using a corporate email?

    It’s extremely likely that they don’t have their own domain since it’s very uncommon for personal usage. Some absolutely do but they are in the minority.

    Of course custom emails need to be set up properly, otherwise all mails would just go to spam.

    Melody, (edited ) in How do I prevent others random device suggestions in Public Areas?

    Search through your settings for a “Quick Pair” or “Fast Pair” option. Turn it OFF. Do not leave it turned on except during times when you’re wanting to use a known device you’ve bought new that supports the feature.

    Turn the feature off when not setting up new devices to work with other devices.

    LunchEnjoyer,
    @LunchEnjoyer@lemmy.world avatar

    Thanks! Got it 😊👍

    lemann,

    For anyone running a ROM based very closely on AOSP, the ability to disable Fast Pair was sadly not built into the OS until Android 14

    Before Android 14, it is possible that Google has backported this setting to your device using Play Services. It can be found under Google Settings, Devices and sharing, Devices, and “Show Notifications”

    Moghul,

    That was it for me, thanks

    GlitzyArmrest,
    @GlitzyArmrest@lemmy.world avatar

    On Graphene with Sandboxed Google Play (even on Android 14), this was where the setting was.

    schizoidman, in I have an issue with how SIM cards are handled in most countries

    Use a phone with no Sim card and just connect to a WiFi hotspot when you need internet?

    tomkatt, in Medical devices and user privacy

    Just use OSCAR to get the data locally from the SD card.

    www.sleepfiles.com/OSCAR/

    Learn more about the machine and do your own management as well. It’s very easy to get into the machine settings to control your air flow, temperature settings, and so on. Take the time to learn what the data from the machine means.

    breeze,

    Just like the other commenter, thank you for the link. I should find one of the models available listed in there.

    tomkatt,

    I currently use a Resmed Airsense 10 and can’t recommend it enough; best sleep I’ve ever had.

    Just avoid anything by Philips Respironics. They’ve been messing around hard, class action suits and recalls and haven’t really made anyone whole from the debacle (myself included, I came out of pocket to replace my old Dreamstation).

    breeze,

    Yes, I read about the recalls. In fact the local distributor that used to deal with Phillips had stopped doing it for the same reason. Thanks for the warning.

    tomkatt, (edited )

    Hey, check out the resmed airsense 10 autoset card-to-cloud version. It’s a lot cheaper and has no cellular connectivity, no wireless module. I just found out about it tonight, thinking of buying one as a backup machine. Looks like it ticks all your boxes.

    CPAP.com has a starter bundle for it right now for $400.

    211,

    Years ago the predecessor to Oscar didn’t support BMC devices, and doesn’t look like it’s changed. Yuwell isn’t listed either. Otherwise would be great. Maybe just don’t connect one of the more established ones?

    www.apneaboard.com/…/OSCAR_supported_machines

    invertedspear, in Medical devices and user privacy

    I have and use a resimed that does the phone home option. Once my doctor got what he needed I put it in airplane mode.

    Distributor used the stats while I was reporting to call me and tell me I need new filters or other parts. I lol’d and bought them online for way cheaper. They stopped trying even before the doctor got all the data he needed.

    Also, AFAICT it’s only data out, so I’m not worried about some exploit being delivered to the machine.

    Final thought: I work in med tech. We have better security than credit agencies because we get fined more if we screw up. Personal data leaks are so common no one even cares anymore, but leaking someone’s medical info will shut a company down. You are likely safe, but ultimately never as safe as a “dumb” machine would be except they just don’t exist anymore.

    Actual final thought: you will be amazed at how much better you feel every morning after actually sleeping instead of the dirty pseudo sleep you’re currently getting.

    breeze,

    Thank you. I asked some acquaintances in health industry and received similar answers.

    211,

    I thought it was data out only too, but at my sleep apnea orientation was told (and I double checked that they really meant it) that they could also tweak settings remotely. ResMed. Always possible that they had misunderstood something too, of course.

    AtariDump, in Medical devices and user privacy

    What make/model?

    It’s usually connected with a cellular modem.

    You can put an SD card in the side and potentially use OSCAR to read the data with the ResMed Airsense 11.

    My insurance, if in a poor cell area, would let me ship the data to them on an SD card. I had to if I didn’t want to pay full sticker price for the machine.

    breeze,

    I was considering a BMC, but still asking providers. And thank you for the program’s name - I knew there were more people like us.

    AtariDump,

    PM me if you want more info

    Azal, in Medical devices and user privacy

    Here’s something tangentially related that makes it difficult to find older options, the support. In the US a piece of medical device has to be supported for 7 years. My hospital has these bladder scanners that are in quite a few departments, regular fixture in hospitals (ultrasounds). Jan 1 2024 was when our came up on the 7 year mark. To do preventative maintenance calibration required logging on their server, guess what’s no longer accessible? So to stay in compliance all of us in the biomed department has to figure out how to get new ones to replace the 10 $11k each paperweights we have now.

    breeze,

    I found some older models around my area, but are all used and not very clear on what functions are still supported. I wish companies were more open about those things.

    parpol, in Medical devices and user privacy

    Can you order a GDPR-compliant one from Europe instead, or an older brand?

    breeze,

    Too expensive. There’s an import tax I have to pay if I ordered anything abroad, and the devices price in general are high enough to hurt my wallets even more. Older brands can’t be acquired from stores, and “not supported” if I bought a used one, I was told.

    WarmSoda, in Medical devices and user privacy

    What would a hacker even do with it? They would… maybe know how often you stop breathing at night?

    Donjuanme,

    Sounds like he wants to air that he’s willing to not sleep well for the sake of… People not knowing he doesn’t sleep well… I’m not losing any sleep over this, I hope Mr. “People can’t know I don’t sleep well” doesn’t either.

    Also the idea of privacy while posting to a public forum. Er but by the grace of god go I.

    breeze,

    Also the idea of privacy while posting to a public forum. Er but by the grace of god go I.

    Sure, dude. I’m soooo sorry because I’m asking questions about privacy on a privacy community.

    WarmSoda, (edited )

    Yeah OPs concerns are overkill.

    They’ve already shared on a public forum that anyone can read far more information than anyone could get from “hacking” a CPAP.

    breeze,

    Don’t you have better things to do instead of jerking each other off in a post you sure don’t even care about?

    rar,

    The nature of his medical condition isn’t relevant here. It could be his blood pressure, heart beats, whatever that makes an insurance company charge a premium on that poor sucker.

    AtariDump,

    It doesn’t log that data.

    WarmSoda,

    CPAP machines only do one thing.

    rar,

    I get your message, but I was not referring to the machine. I was referring that the what kind of data logged by the machine didn’t matter in the context of privacy.

    WarmSoda, (edited )

    The kind of data logged by the machine is how often they stop breathing, and how long they sleep. That’s literally all it does.

    You can’t be concerned about the data it transmits and also say the data it transmits doesn’t matter in the context.

    breeze,

    It’s not the collected data itself that’s the problem you dipshit. Don’t you know that distributors often make customers sign contracts at lease or purchase for warranty and tie that customer data along with statistics? You must be fun at parties.

    WarmSoda,

    I am fun at parties. I actually go to them. And I don’t worry about things like how much my freaking CPAP machine is spying on me lmao

    breeze,

    No sense talking to a chatbot taking things literally at face value.

    WarmSoda,

    That’s true, I agree. Not sure what that has to do with anything here but ok.

    breeze,

    So what? I post concerns about user privacy on a privacy forum and this is what I get? A gatekeeping comment about how my concerns are overblown? Way to promote the platform.

    WarmSoda,

    Ok. What privacy exactly are you concerned with?

    ItsComplicated, in Medical devices and user privacy

    Is there no longer an option to use the machine without the report or connection to internet?

    breeze,

    Considering that, but the doctor needs the report so my condition can be treated in a proper way. I need to contact more distributors and see if there are any “customer privacy conscious” kind, but I’m not getting my hopes up.

    otter, (edited )

    I’m not familiar with the companies mentioned, but have you tried talking to the doctor or the clinic? They may be able to provide you with better guidance, or tell you about other machines that are compatible with your treatment plan. Even if they don’t know about the privacy aspect, that might give you a shorter list to follow up on.

    My guess (or hope) is that this is the option that the average person finds convenient, which is why the doctor recommended it. There should be other options that the doctor / clinic knows about, especially because an IOT CPAP machine is a fairly new thing.

    Doctors modify treatment plans fairly often, even for things like patient comfort, and bringing this concern to their attention could also change what they recommend to future patients.


    Personal thoughts unrelated to your case: This is a growing concern with healthcare technology and I think we need more attention on the harms. “Your insurance company will use it against you” is something that most people will understand.

    breeze,

    That’s right. I will email the doctor and ask if any other patients have expressed concerns about it.

    ejmin, in I have an issue with how SIM cards are handled in most countries

    If you buy an anonymous simcard, don’t put it into a phone where was your (e)sim. The carrier can see all IMEIs of the phone.

    Also carrying them together is sus when they connect to same towers at the same time

  • All
  • Subscribed
  • Moderated
  • Favorites
  • privacy@lemmy.ml
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #