Dan Solove's Taxonomy from 2005 UPenn law review article
https://papers.ssrn.com/sol3/papers.cfm?abstract_id=667622

A slightly more digestible infographic of the
taxonomy. 
https://enterprivacy.com/wp-content/uploads/2018/09/A-Taxonomy-of-Privacy.pdf 

Jason 

P.S. I don't dispute there are other risk which may have greater
magnitude. I'm only suggesting you don't discount the potential risks
imposed by auto-playing audio and video content. 

        .....................................................................
R. Jason Cronk                  | Juris Doctor  
Privacy and Trust Consultant    | IAPP FIP, CIPT, CIPM, CIPP/US,
PbD Ambassador
ENTERPRIVACY CONSULTING GROUP [1]   | Author of Strategic Privacy by
Design [2]
Privacy notices made simple: https://simpleprivacynotice.com [3] 
....................................................................

        UPCOMING TRAINING

Privacy by Design Professional:  Cyprus (April [4]), Belarus -
English/Russian (July)

Online (coming soon): https://privacybydesign.training [5]

----- Original Message -----
From:
 "Jakob Bohm via dev-privacy" <[email protected]>

To:
 [email protected]
Cc:

Sent:
 Wed, 13 Feb 2019 02:22:25 +0100
Subject:
 Re: iframes, sessions within iframes, CORs & 3rd Party Cookies - Any
documentation, and interaction should allow cookies?
 On 13/02/2019 01:50, R. Jason Cronk wrote:
 > "The annoyance of videos and sounds is much smaller than the impact
of
 > a
 > privacy or security breach, so weaker methods can be acceptable."
 > 
 > Is it though? This is an INTRUSION under the Solove Taxonomy of
 > Privacy: a invasion in one's tranquility or solitude. Many people
have
 > been quietly surfing the web only to be rudely interrupted by a
loud
 > sound emanating from their speakers. What's more than annoying is
when
 > you open up several tabs and have to find which tab is playing the
 > video to shut it off. Depending on what sounds came from the
speakers
 > and who was in earshot, it could be a DISCLOSURE violation as well,
 > revealing truthful information about someone that adversely affects
 > their security or causes people to judge their character. False
 > information through an audio ad could by a DISTORTION violation.
("Do
 > you suffer from erectile dysfunction?")
 > 
 > Back in the days, my friends and I had Nextel Push to Talk radio
 > phones where the recipient didn't have to answer. If we knew our
 > friend was in a particularly sensitive place, we shout all sorts of
 > obnoxious things through their phone, until they turned them off.
 > 
 > Anyway, my point is the impact of autoplaying sound or video can be
 > pretty significant.
 > 
 > 

 Yet not as significant as having your every move recorded by and
 sold to large gangs of powerful people wanting to abuse your privacy
 in much more severe ways.

 I am not aware of that particular theoretical taxonomy you quote, but
 the danger of 3rd party code and cookies often reaches the higher
 level of having your private life recorded and seen against your
will,
 essentially the violation of a peeping tom.

 Classifying disturbance as a significant "privacy" violation is a
 theory most often used as a misdirection by those seeking to violate
 deeper privacy, using phrases such as "not used in a form that
 identifies you" or "not used to contact you", leaving much worse
 unrestricted. Those two phrases often translate to "we will not
 even bother with your name before harming you" and "we will not
 ask before stealing from you".

 Enjoy

 Jakob
 -- 
 Jakob Bohm, CIO, Partner, WiseMo A/S. https://www.wisemo.com
 Transformervej 29, 2860 Søborg, Denmark. Direct +45 31 13 16 10
 This public discussion message is non-binding and may contain errors.
 WiseMo - Remote Service Management for PCs, Phones and Embedded
 _______________________________________________
 dev-privacy mailing list
 [email protected]
 https://lists.mozilla.org/listinfo/dev-privacy



Links:
------
[1] http://webmail.dreamhost.com/HTTP://WWW.ENTERPRIVACY.COM/
[2] https://iapp.org/store/books/a191a00000345yDAAQ/
[3] https://simpleprivacynotice.com/
[4] https://enterprivacy.com/cyprus-training/
[5] https://privacybydesign.training/

_______________________________________________
dev-privacy mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-privacy

Reply via email to