Remix.run Logo
Europeans' health data sold to US firm run by ex-Israeli spies(ftm.eu)
604 points by Fnoord 11 hours ago | 274 comments

https://archive.ph/1c0ED

sva_ 8 hours ago | parent | next [-]

> The CEO of the American tech company is a former cyber specialist from an elite unit of the Israeli army, as are several other members of its top management.

This is about Unit 8200? The 'cybersecurity' unit that Israelis can join instead of doing their mandatory military service on the gun? I think this acquisition could indeed be problematic, but this seems like a weird framing. The article could give more context than that.

dundarious 8 hours ago | parent | next [-]

They do more than cybersecurity, they collect and analyze signals intelligence. Tom Clancy's Jack Ryan in the CIA would be in Unit 8200 if he was Israeli -- the unit is not at all purely "techy" in nature. They are also significantly responsible for "analysis" such as target selection, as covered here https://www.972mag.com/lavender-ai-israeli-army-gaza/

everdrive 8 hours ago | parent | prev | next [-]

It's not an opt-out in the literal sense. Everyone is conscripted, and then based on ability people are placed into different units. If you were talented, wouldn't you try to avoid getting put on patrol in Gaza or the West Bank?

lostlogin 4 hours ago | parent | next [-]

> everyone

The details around that are a significant source of friction.

https://en.wikipedia.org/wiki/Conscription_in_Israel

barbazoo 8 hours ago | parent | prev | next [-]

“If you were a Russian soldier wouldn’t you rather work in administration in Moscow than invade and murder Ukrainians.”

Sure but the real answer is try what you can to get the fuck out of there so you don’t have to do harm to someone you don’t even know.

whimsicalism 8 hours ago | parent | next [-]

The notion that everyone conscripted into a war is guilty by default is absurd, but always inevitably comes out to play during the height of moral outrage.

barbazoo 7 hours ago | parent | next [-]

I can see how it would be controversial but how is it absurd?

Especially in a first world country like Israel where people aren’t shackled by their poverty.

whimsicalism 7 hours ago | parent | next [-]

Blameworthy in a similar way to how Vietnam vets are blameworthy.

beedeebeedee 7 hours ago | parent | next [-]

I don’t think your comparison works because Israel does not have a comparable anti-war movement that the US had during the Vietnam War. In fact, if the media is to be believed, there has been enthusiasm on the part of Israelis to take part in the fighting.

whimsicalism 7 hours ago | parent | next [-]

Wouldn’t that only make vietnam vets more blameworthy? There was a whole movement against it and they still chose to not give up their home/family and choose exile even when it was less stigmatized to do so.

beedeebeedee 6 hours ago | parent [-]

That’s an interesting point, and if we follow that logic, we move the blame from the Israeli soldiers and place it in totality on Israeli culture.

HappyPanacea 6 hours ago | parent | prev [-]

Your comparison doesn't work because Vietnam War didn't start with Vietnam attacking USA, holding many hostages, the group leading the charge having religious ideology viewing Americans as second class citizens as well as people to ethnically cleanse, all while bordering USA.

beedeebeedee 5 hours ago | parent [-]

I’m a little confused as to which country Vietnam is in your comparison.

HappyPanacea 27 minutes ago | parent [-]

I'm not making a comparison I'm explaining why equating USA anti-war movement in Vietnam to Israel was a faulty comparison.

barbazoo 7 hours ago | parent | prev | next [-]

Maybe we should be thinking differently about those too then. Or maybe the environment is different where one generation should “know better”, having lived through another 50 years of human development and ubiquitous access to information.

megous 4 hours ago | parent | prev [-]

10s of thousands of scum flew from all around the world from their comfy lives to Israel to enjoy participating in an attempt at total destruction of a nation composed in half from children, by starving them, bombing them, shooting them, and burying them alive.

These were not conscripted in any way whatsoever. These 10s of thousands deserve full blame, and fuck them all.

JumpCrisscross 4 hours ago | parent | prev [-]

> how is it absurd?

Humans build identities around their homes. It’s why any plan that involves relocation implicitly or explicitly requires violence.

It’s absurd to suggest Israelis should effectively “self deport” from their homes. It’s unrealistic to the point that it’s effectively dismissing the problem instead of honestly engaging it.

throwfaraway135 6 hours ago | parent | prev | next [-]

Most movies and games about WW II, do depict killing German soldiers as justified, even in horrendous ways.

derektank 6 hours ago | parent [-]

You can think killing someone is justified without thinking they are morally culpable. There’s a reason the laws of war don’t endorse summary execution of surrendering combatants, beyond the practical benefits of encouraging more humane conduct towards your own troops.

yieldcrv 7 hours ago | parent | prev [-]

right guys, it’s only like 80% of that population that has the ideology we don’t like

and in the other 20%, many of them don’t get conscripted due to a religious exemption that includes being in a totally different ideology that has always disagreed with the other

odds not looking good, speaking as a betting man, not one with any actual opinion just need my prediction market bet to hit

whimsicalism 7 hours ago | parent [-]

What is the ideology we don’t like? I think it is easy to throw stones when the reality is that if your nation suffered a similar attack, many many people would get swept up in anger and outrage and retaliatory madness.

What Israel is doing is wrong, but I don’t think it would be unique among developed states experiencing something similar.

barbazoo 7 hours ago | parent | next [-]

Zionism and violence against Palestineans predates the October attacks by a couple of decades.

ori_b 6 hours ago | parent | next [-]

Zionism, as in the belief that Jews deserve self-determination as a nation?

immibis 3 hours ago | parent [-]

Zionism is the belief that there should be a Jewish ethnostate, it should be called Israel, and it should go in the geographic location where Israel now is.

ori_b 3 hours ago | parent [-]

That definition would exclude half of the early Zionist conference attendees, who would have accepted any region where refugees could gather, and seriously considered multiple locations.

immibis 2 minutes ago | parent [-]

Guess what - political movements change over time. We don't define left and right depending on where a party sits in the French parliament either.

cess11 6 hours ago | parent | prev | next [-]

More like a century.

HappyPanacea 6 hours ago | parent | prev [-]

Palestinians violence predates Israeli violence (1929 attacks) and Modern Zionism (1834 progrom). The Zionist had a policy of non-violence ( Havlagah -https://en.wikipedia.org/wiki/Havlagah ) in respond to Arab attacks.

JumpCrisscross 4 hours ago | parent [-]

This game—who hurt whom first—doesn’t work outside the new world. It particularly fails in parts of the world that were prehistorically settled.

HappyPanacea 2 hours ago | parent [-]

I also dislike this game but I didn't start this game - barbazoo did and he happened to be wrong so I had to correct him.

Swizec 7 hours ago | parent | prev [-]

Yes most people would fight back against foreign occupation

IncreasePosts 6 hours ago | parent | prev | next [-]

Pretty sure military aged males aren't allowed to just leave Russia at this point without prior approval. And sometimes are forcibly conscripted on the street

tokai 8 hours ago | parent | prev | next [-]

Russian soldiers are volunteers. They sign a contract. When money are involved many many people don't care about inflicting harm to others.

barbazoo 8 hours ago | parent | next [-]

Volunteers? https://en.wikipedia.org/wiki/Conscription_in_Russia

vanviegen 7 hours ago | parent [-]

The ones at the Ukrainian front are volunteers.

konart 7 hours ago | parent [-]

Some of them. Some of them were mobilised.

codedokode 8 hours ago | parent | prev [-]

Also convicts who can get out of jail early.

codedokode 8 hours ago | parent | prev | next [-]

People in EU buy Russian natural gas and see no problem with it. What are you talking about.

127 8 hours ago | parent [-]

"People in EU" are Hungary and Slovakia for pipeline gas and crude oil. Belgium, France and Netherlands for LNG. Most see a huge problem with it and pledge to phase it out by 2027.

Source: https://energyandcleanair.org/june-2025-monthly-analysis-of-...

whimsicalism 8 hours ago | parent | next [-]

So EU nationals can’t even phase out their fully voluntary usage of gas for 5+ years because it would cost a bit more despite financing Ukrainian deaths, but conscripted soldiers are blameworthy because they didn’t abandon their home and everything they know to become a fugitive of their state rather than get conscripted?

vanviegen 7 hours ago | parent | next [-]

> cost a bit more

It's not (only) a matter of cost, but availability. People need fuel to heat their houses. In order to fully replace Russian gas, other facilities (like LNG container terminals) need to be built. That has been done and is being done, but is complex and not instant.

Should it have been done before February 2022? Yeah, probably.

codedokode 7 hours ago | parent | prev | next [-]

To be fair, conscripted people did not take part in a war. The ones who take part are those involuntarily mobilized in 2022, well paid volunteers and convicts who get a pardon after serving for a certain time.

immibis 7 hours ago | parent | prev [-]

This is whataboutism. They're both bad.

whimsicalism 7 hours ago | parent [-]

Good point, I’ll accept that conscripts are similarly blameworthy as gas consumers in Europe

mnky9800n 7 hours ago | parent | prev | next [-]

I see a huge problem that the annexation of crimea started in 2014, escalated in 2022 to a full war and invasion, and eu countries can’t be bothered to move off Russian gas before 2027.

codedokode 7 hours ago | parent | prev | next [-]

There are also countries which buy Russian resources indirectly, via Turkiye and other countries.

codedokode 7 hours ago | parent | prev [-]

> pledge to phase it out by 2027

When the war hopefully will be over, sanction lifted and there will be no problem with trading with Russia anyway.

immibis 7 hours ago | parent | prev | next [-]

There isn't a single country on earth that doesn't despise refugees with every fiber of its metaphorical being.

Ar-Curunir 7 hours ago | parent [-]

Calling a population that you forcibly displace from their homes “refugees” is certainly a choice. Not a correct one, but certainly a choice nonetheless.

Jensson 6 hours ago | parent [-]

In what way aren't they refugees? People forcibly displaced from their homes are refugees.

everdrive 8 hours ago | parent | prev [-]

A fair point but in that situation it should would be nice to be a desk job while I was waiting for my visa to come through.

myth_drannon 6 hours ago | parent | prev [-]

It's the opposite, the most talented in every sense volonteer to fight in combat units in Gaza. Everyone who ends up in 8200 or any other non combat unit has some sort of reason health or family. Later there is some selection, so smart but most importantly extremely valuable experience that acts as a spring board into the startup world later on(cybersec or anything else).

bigyabai 5 hours ago | parent [-]

Considering how violently the Knesset is fighting over conscription, I seriously question this narrative you're presenting.

xenospn 8 hours ago | parent | prev [-]

8200 is mandatory military service.

debarshri 8 hours ago | parent | prev | next [-]

I know a thing or two about zivver as i used to hangout with an early eng who was a scala dev.

Idea was end to end encryption. So technically, the new org should not have access to customer data. Company hit gold in the netherlands during covid whe reports had to sent out to users digitally and was always encrypted in EU due to regulations.

It could be different behind the scene. It does not look good for the netherlands where digital sovereignty is the key topic these days.

astrobe_ 5 hours ago | parent [-]

Do you know if the encryption scheme covers metadata? For instance, who sends something to who.

yupyupyups 3 hours ago | parent [-]

Doesn't matter. All of this stuff, servers included, need to be based on open source, maintained to a large part by European engineers, and hosted in the EU by people with security clearence. It makes NO sense whatsoever to risk this sensitive data getting stolen.

engineerhead 8 hours ago | parent | prev | next [-]

Pretty concerning. Even if a service is EU-based, a foreign acquisition can expose sensitive data to other jurisdictions.

storus 4 hours ago | parent | prev | next [-]

Is there any way to opt out? Or did European Comision just make a package deal without asking its populace for some reason?

ricardo81 8 hours ago | parent | prev | next [-]

American tech companies have been pushing the needle on privacy ever since Google. Then Facebook. They've gradually normalised that privacy does not exist, all for their own capital gain.

There are European alternatives but they need support.

IMHO it requires conscious choices by European citizens to choose more carefully which online services they dedicate their time and money to. Or expect unintended consequences.

GeoAtreides 5 hours ago | parent | next [-]

>American tech companies have been pushing the needle on privacy ever since Google. Then Facebook. They've gradually normalised that privacy does not exist, all for their own capital gain.

Great subthread to remind that your HN data (comments and maybe more) is shared and licensed with all Y Combinator startups. It's also impossible to delete your own data, either on HN or data shared with the Y Combinator startups (except by some 'beware of the leopard' email procedure).

This is not being made clear when registering a new account.

Aurornis 4 hours ago | parent | next [-]

> your HN data (comments and maybe more) is shared and licensed with all Y Combinator startups.

HN comments are public and are available through several archives and datasets.

Deleting old comments wouldn’t stop anyone from having access to them, but it would make old HN threads frustrating to read. Old Reddit threads are becoming painful to read on the Reddit website due to all of the people posting and then overwriting their old comments with scripts.

tobr 4 hours ago | parent [-]

Fitting HN, that seems to follow the Silicon Valley mindset perfectly - we’ll ignore laws and trample on people’s rights in the name of reducing some absolutely trivial ”pain”.

Aurornis 4 hours ago | parent [-]

I doubt any laws are being broken. When you contribute something to the public record on a website that is unquestionably public, even the GDPR has carveouts and exceptions for public interest, freedom of expression, and data necessary for continuation of the original purpose.

There is a growing misconception that the GDPR and similar laws give complete control over any user-contributed inputs to a website, but that’s not true.

fakedang 2 hours ago | parent [-]

European digital law explicitly allows for a "right to be forgotten". Something which HN vehemently opposes because it breaks the flow of threads or some other BS reason.

Aurornis 28 minutes ago | parent | next [-]

As I explained above, the GDPR law has a lot of exceptions and carveouts.

It has been widely misinterpreted as a tool to force website operators to remove anything you've contributed to the website or any information about you, but that is neither consistent with the language of the law nor consistent with what the courts have found.

You are free to remove your own e-mail address from an account (visit your account page) or to never provide any identifying information at all to the website. I've also seen the moderators change account names away from identifying information for those who request it.

However, there is no GDPR requirement that websites must universally delete any and all contributions you provide to a public website if you retroactively decide you don't want you public posts to be public.

Like I said, I doubt casual HN commenters have a better grasp on the law than Y Combinator's legal team.

the_other 2 hours ago | parent | prev [-]

If HN removed their record of the email address associated with a username, might that satisfy GDPR? The personally identifying data has been "forgotten". From that point on, the comments could have been entered by "anyone".

datahungrydang 5 hours ago | parent | prev | next [-]

seconded. even if you happen to figure out where to send your email they just refuse and say its unfair to them and others to ask for it to be deleted. its pretty shameless. if I ever hit it big one of my expenditures will be suing to force them to honor deletion requests.

sam_lowry_ 4 hours ago | parent [-]

I was the admin of a small social network for many years, and I understand the message @dang was trying to convey.

If you were actively commenting, you are basically asking to break the flow of discussion among many participants. And yes, this is unfair to others.

My rule of thumb was to honor the deletion requests for those who were little involved in the community.

For others I would disable their account, anonymize their login name and remove sensitive details in discussions.

This is how it worked until toxic behaviour, facebook and telegram made my little social network redundant.

realitysballs 5 hours ago | parent | prev | next [-]

I already assumed that. But maybe I’m the minority. Unless someone explicitly says they are privacy focused, I assume the worst and anonymize

dspillett 4 hours ago | parent | prev | next [-]

> your HN data […] is shared and licensed with all

TBH, if a service doesn't explicitly say what data I expose to it _won't_ be shared, I assume it will be immediately and repeatedly.

Though also if a service does explicitly say the data won't be shared, I still assume that it will eventually be given to the highest bidder, then the next highest, and the next, and so on. If not deliberately, it will at some point be hacked from without or unofficially exfiltrated from within.

And on a public site like HN all bets are off as the information is probably being scraped by everyone, their dogs, and their dogs' fleas, even more so now LLMs are such a big thing.

throwaway902984 3 hours ago | parent [-]

There is no way hn servers aren't facing a permanent ddos from scripts reading every post, imo.

ifdefdebug 5 hours ago | parent | prev | next [-]

well I AM aware that my comments here are shared with the whole world, which Y Combinator startups are a subset of...

epolanski 4 hours ago | parent | prev [-]

> it's also impossible to delete your own data, either on HN or data shared with the Y Combinator startups (except by some 'beware of the leopard' email procedure).

This violates EU's GDPR article 17 I believe, at the very least, thank you for raising the point.

Aurornis 4 hours ago | parent [-]

The GDPR “right to erasure” has been widely misinterpreted. It is not a universal right to force companies to delete anything about you. It has a lot of carve outs for things like freedom of expression and public interest. When someone posts publicly on a publicly website that’s archived across the internet, it’s hard to argue that it checks all the boxes for deletion without any of the carveouts and exceptions.

GeoAtreides 3 hours ago | parent [-]

Ok, let's ignore HN for now. How about HN user data processing by Y Combinator startups?

Workaccount2 6 hours ago | parent | prev | next [-]

>which online services they dedicate their time and money to.

Ain't nobody dedicating their money to anything.

That's exactly why these enormous tech giants are privacy nightmares. How many people complaining about Google have used their services extensively for decades now, and never have once given a cent to Google? Probably over 90%.

People were offended when Google launched YouTube Premium because it encroached on their right to "free" everything from Google. Even today people still chain themselves to the hill of "I will never give youtube a penny", despite them probably using a couple percentage points of their entire waking life on google products.

Europe is in a tough, if not impossible spot, of having (relatively) heavy privacy protections, while also having a population that is largely offended by the idea of having to pay for something that "has always been free!".

Maybe they can launch a taxpayer funded EuroTube and EuroGram.

Jaygles 6 hours ago | parent | next [-]

If services offered a paid version that guaranteed privacy, such that I stay anonymous and only data points that are strictly necessary to provide the service are persisted in the company's servers, I would happily pay.

And I mean guaranteed in a way that I would have legal recourse against the company if they go back on their word or screw up

amunozo 5 hours ago | parent | next [-]

You will, most people won't.

LtWorf 5 hours ago | parent [-]

Because they know that even if you pay it's very unlikely that they will respect the deal anyways.

iepathos 5 hours ago | parent | prev [-]

What specific legal recourse beyond what exists? You can already sue for breach of contract if a company violates their privacy policy. The real problems are: (1) detecting violations in the first place, and (2) proving/quantifying damages. A 'guarantee' doesn't solve either.

odyssey7 6 hours ago | parent | prev | next [-]

Have consumers ever been offered the ability to pay Google to opt out of advertisements and to opt into privacy?

Hnrobert42 6 hours ago | parent | next [-]

Meta was recently fined 200M€ for offering that choice. Seems unfortunate, but maybe I misunderstood.

https://www.theregister.com/2025/07/03/meta_ec_dma_sulk/

ruszki 5 minutes ago | parent | next [-]

No, the ruling said that the free version shouldn’t gather/use as much data as now. The problem is with the free part, not that you can pay for the ad free version. If the free part is not that invasive, it’s completely fine to keep the pay-or-use-your-data model.

buran77 5 hours ago | parent | prev [-]

The law defines what companies can or cannot do around privacy. So Meta can't go around telling users to pay to get the privacy the law affords them anyway or conversely, if users don't pay they don't get the privacy.

The root of the issue is probably the "freely given consent" that the law defines. If Meta charges users unless they consent to something, then the consent isn't freely given.

woobar 6 hours ago | parent | prev | next [-]

Facebook offered paid subscription for ad-free experience in Europe.[1] First, europeans complained it is too expensive. After a price cut, they EC still wanted a free version with less personalization.[2]

If google offers something similar, I am pretty sure Europeans will find something else to complain about.

[1] https://about.fb.com/news/2024/11/facebook-and-instagram-to-...

[2] https://www.engadget.com/social-media/meta-will-let-facebook...

LtWorf 4 hours ago | parent [-]

ad-free and "we won't sell your data" are two different things.

Workaccount2 6 hours ago | parent | prev | next [-]

About a decade ago google trialed a program where you could pay monthly to "buy out" ad spaces. So you wouldn't get served ads, or you would get served fewer ads, and the money would be deducted from what you allotted per month.

Of course

"What kind of dumbass would pay to not see ads when uBlock Origin is free? lololol"

It didn't ever get traction or last very long before being canned. This is the mentality that money-compensation-business-plan tech companies would have to face; "What kind of dumbass would pay for your product?"

cjbgkagh 5 hours ago | parent | next [-]

The more you’re willing to pay to opt out of ads the more valuable the ads are. Also the ads are auctioned and in opting out you’re all ways going to be the highest bidder. Additionally how would you know the other bidders were real, it’s a massive information asymmetry that’s open to abuse. And I’m pretty sure they have abused it in the past.

I use substack and patreon and I wish we had micro transactions that’ll enable more of this model for content.

Now much of the same info is recycled via AI, instead of reading blogs / stack overflow etc I just ask AI and so far I can use AI without ads. I do pay for a subscription to Gemini.

martin-t 5 hours ago | parent | prev [-]

Because it's extortion just like paying the mafia for "protection" from themselves.

See, ads are not a pro-social service. Their fundamental goal is not to inform and facilitate mutually beneficial exchange of goods/services. Their goal is to allow companies who spend ad-money to gain an advantage over competitors who don't, regardless of quality of the product.

Ads are a fundamentally anti-competitive practice.

tonyhart7 5 hours ago | parent [-]

while I agree that Ads is sucks as a whole but how can you generate revenue from free service ?????

I mean its not like paid service that dont have ads and giving privacy is non existent either, we have proton mail for example

martin-t 5 hours ago | parent [-]

You can't. So don't advertise it as free. It's just lying, simple as that. People either pay with their data, their attention or their money.

Companies should be required to be transparent about how much revenue each of these sources generates.

tensor 6 hours ago | parent | prev | next [-]

Somewhat. You can pay for workspace to keep your email private and ad free.

dizhn 6 hours ago | parent [-]

Guarded by a "privacy policy". This is Google. How come this "if you're not paying for it, you're the product" crowd doesn't get that it doesn't matter if you're paying or not, you're always the product?

beambot 5 hours ago | parent | next [-]

Id be shocked if the freemium privacy policy & obligations for, say, Gmail is the same as the corporate privacy policy under GSuite/Workspace...

With the latter, there's a direct contractual relationship since you're paying Google for services

tonyhart7 5 hours ago | parent | prev [-]

I don't like this argument since this is can be applied to everything and You expect people to roll out their own service for everything since everything is a product in some form or another

its okay to depends on some product because they are just good, for example people free to use Office alternative which is free btw but people literally dont choose that because MS Office is just better

all of this deep talk discussion is irrelevant since User want an working product that they expect them to

its just that

earthnail 6 hours ago | parent | prev [-]

It’s the same in all consumer marketplaces. Free or freemium has won. It‘s not Google specific.

SoftTalker 6 hours ago | parent [-]

The vast majority of peope put very little value on their time and attention and sense of aesthetics (even if they might say otherwise). It's the only explanation for why advertising is as pervasive as it is.

xandrius 6 hours ago | parent | prev | next [-]

I would be very happy to discuss the matter with you but there seems to be some hostility and edge in the way you argue your point which makes it hard to engage with.

Anyway, in short, everything you said applies to literally any human or even animal: if you give them something for free and then take it away unless they pay for it, they won't accept it (google maps). On the other hand, if you provide something for a price, and it's needed, people will pay even if there is an alternative (e.g. Netflix).

The difference is that many/most people are ok with ads as a form of payment for the free services, while others (including Europeans) are not ok with the additional hidden clauses regarding how their personal data is used. Is that wrong? I don't think so.

To make it more realistic, imagine getting a TV for free because it will insert ads every X minutes. The tradeoffs are pretty clear: Good TV for my time/attention.

But if someone then started also recording from said TV the inside of my room, my and my family's faces to be sold to unknown parties for unknown uses (and sometimes even to antagonists) then I don't think anyone would believe it is a fair implementation of the original and presented "agreement" (even if it is stated in their 1000 pages ToS).

Now, if Europeans start being vocal politically that such an invasion of privacy is not acceptable, does that make their claims invalid because there is no valid alternative to such services?

I'm pretty sure today's tech giants would be profitable even without the privacy invasion and the selling of the data; furthermore if their premium versions did not actually show you ads (some show you ads even if you pay), I'm sure people will slowly start gravitating there as they stop being ok trading their attention/time for money.

But if Facebook explicitly told you "pay us X/mo or we will sell your personal data to Russia", would people actually pay them or, perhaps, would they start considering other saner alternatives? I guess we'll never know.

jandrewrogers 4 hours ago | parent | next [-]

I've been party to exactly these types of policy discussions in Europe and elsewhere for a couple decades now.

The consistent political pushback against mandatory paid options that are ad-free is that it excludes people that can't afford them. It is unfair because it only advantages people with money. Therefore "free" is the only valid policy choice because there is always someone who can't pay. This limits what is possible as a practical matter.

The obvious alternative to an ad-funded model within these constraints is for the government to pay the companies for the service on condition that they remove ads from their country. Needless to say, the idea of paying "taxes" to Google et al to remove the ads is offensive to many of the same people.

So we are stuck with the status quo of "free" ad-funded services because people aren't willing to accept the necessary tradeoffs to change the situation.

xandrius 23 minutes ago | parent [-]

The topic here is not ads vs not-ads. It's "why are companies who are already paid via ads also want to make extra money selling personal data to third parties?".

Workaccount2 5 hours ago | parent | prev [-]

I think the ideal solution is forcing companies to offer privacy focused ad-free options as a subscription, with a cost calculated from the average revenue per fully tracked/ad-riddled user, maybe plus some small premium.

Of course, this would likely receive a lot of blow-back in the form of "Looks like now you have to be rich to not get your life sold to third parties" and "Google used to be equal for all and now they are just going to prey on the most vulnerable in society"

The only way to win in this situation is for people to understand that things cost money. They probably cost more than you expect, and you probably will want your ads and tracking back once you see the true cost. After all, at the end of the day, the downside to these decades of tracking to most people has been "Damn, how does google know I buy Tide detergent!".

xandrius 5 hours ago | parent [-]

This is a false dichotomy: it's not a given that companies must make money out of personal data.

There are things which shouldn't be for sale, and I believe personal information is one of those.

Even though we don't have another universe to compare ours to, I believe companies started selling personal data not because people didn't want to pay for their services (since they do that even if you DO pay for them) but mainly because it is profitable. End of the story.

I am always surprised why people here attach so much humanity and conventional logic to huge international for-profit VC-backed companies: they will do literally anything if at the end of the day they come out in the green (aka profitable). Even illegal things, if the expected payout is lower than profits created.

I also believe that if literally killing people made some company $X and their analysts predict having to pay $Y to governments (with $Y substantially lower than $X) once in a while, someone would eventually decide to do that. And such a company wouldn't have trouble finding shareholders and employees.

esbranson 6 hours ago | parent | prev | next [-]

> taxpayer funded EuroTube and EuroGram

I believe an EU member state could create any service that American companies already proved are desirable, make it free for nationals and residents and require payment for others, and use EUDI as the login and verification. Probably for quite cheap. They're just too incompetent.

robotnikman 5 hours ago | parent | prev | next [-]

This really is a major issue imho. Many of the people here and those who are more tech savvy would be willing to pay for such a thing, but we are a very small minority. 90% of people don't care, or are unable or unwilling to understand the consequences of having all their data vacuumed up by corporations like Google and Facebook. Its a Tyranny of the majority type of situation. I'm not sure what the solution to this would be other than maybe better educating the populace.

prewett 4 hours ago | parent | next [-]

Maybe accepting that they do not agree with you?

lazide 5 hours ago | parent | prev [-]

Most of these things are emotionally driven. Education won’t do shit unless it’s coupled with some kind of training action. People will just laugh it off or accept it. Most people have literally come to accept their phone is listening to them for ads!

Either regulation, or it needs to get so shitty and painful that people get a reflexive avoidance thing going on.

Workaccount2 4 hours ago | parent [-]

The real problem is that all the downsides of the "tracking and advertising" tech world are largely hypotheticals and/or so subtle and divorced from day to day life as to be almost imperceptible.

There hasn't really been a "reap what you sow" moment for people who threw privacy caution to the wind for free stuff.

lazide 4 hours ago | parent [-]

Yup, though the current US gov’t is working hard to make that happen, near as I can tell. We’ll see what happens!

allenrb 5 hours ago | parent | prev | next [-]

> Maybe they can launch a taxpayer funded EuroTube and EuroGram.

Ok, but only if one of them is called “EuroVision”.

ricardo81 6 hours ago | parent | prev | next [-]

>money

Android phone contracts seem strangely cheap.

LightBug1 6 hours ago | parent | prev | next [-]

Perhaps if the choice was "forced", it would encourage actual competition.

I'm pissing in the wind, but I'd prefer it if the use of personal data - sold for adverts - was banned outright. Particularly for large companies.

This would forced Google et al to charge for their services, creating the market that would stimulate competitors (Open Source or otherwise).

People will argue against this, but online advertising that got us to where we are is the absolute scourge of modern society ... it's poisoned every decent well of humanity.

Even for things like Youtube Premium, I'm certain Google are double dipping ... likely quadruple dipping.

intended 4 hours ago | parent | prev | next [-]

>People were offended when Google launched YouTube Premium because it encroached on their right to "free" everything from Google.

Markets outcomes are not a prophecy.

If it was so simple - why put the unsubscrube or privacy rules behind UI/UX features that required A/B testing and behavioral analysis to make it as onerous as possible?

People aren't happy that they to sell their privacy, and had to be reassured that this is the best option.

Not to mention, this was during an era of camraderie between the US and Europe, not a potential opponent. The idea of a taxpayer funded EuroTube and EuroGram or CountryThing will pick up steam. Why have your information farmed by a nation which acts in a hostile manner to its erstwhile allies?

lazide 5 hours ago | parent | prev | next [-]

Dons psychic hat - and EuroTube and EuroGram will be widely ignored because most people are not only apparently fine with getting taken advantage of if it’s shiny and they don’t notice it.

The reason for all the data/lack of privacy stuff is because most people get something from it - the next shiny manipulative BS thing, or shiny gadget or whatever.

martin-t 6 hours ago | parent | prev | next [-]

How about the other perspective?

The current modus operandi for tech companies is to offer something for free or below market price, gain a userbase, lock them in and destroy competitors who don't have cash to burn, then alter the deal.

If I start using a company's offerings, I have certain expectations, such as the terms and conditions suddenly not changing from under me. Now, you can argue that they are required by law to inform me of any changes to the literal Terms and Conditions. Well, yes, except:

1) They are often worded so carefully from the beginning that they can start doing something exploitative at a later date, only after gaining goodwill and users by not doing it.

2) I can't very well stop using a service if doing so incurs a loss to me. Phone operators are required by law in some countries to allow customers to transfer their phone number to a competitor. I am not aware of a similar law for email addresses. And email is at least 1:1, what any other operator offers it technologically compatible due to open protocols, so a transfer is possible. There are services with no 1:1 alternative.

( Hopefully Open Social will change that but we're not there yet: https://overreacted.io/open-social/ )

---

There's also informed consent. Most countries don't allow people below a certain age to have sex because they might not understand all the implications and consequences. How many people do truly understand how tracking and profiling works, the risks of data breaches, doxxing, stalking, surveillance, etc? I argue informed consent cannot be formed unless people are aware of _exactly_ where each bit of data about them is stored and accessed; and also are made aware of the probabilities of all the possible adverse events over their lifetime.

wafflemaker 6 hours ago | parent | prev [-]

>People were offended when Google launched YouTube Premium because it encroached on their right to "free" everything from Google.

Nope. At least I was offended, because YT Premium wanted $15 from me for hosting other people's videos. That's more than streaming services that pay for production of TV shows and movies.

Don't think they really need THAT much to cover hosting costs. Not when they operate on that scale and in addition can hover up and profit on all the usage data.

If YT Premium costed $3 or $5, I'd pay and I'd bully any friends and family that watch YT and don't pay into supporting the service. As it is now, my appraisal skill says "SCAM" and I pirate YT with clean conscience.

Workaccount2 6 hours ago | parent [-]

Youtube has a 60/40 revenue share with creators for long form video (inverse for shorts). 60% to creators 40% to youtube. It's also dependent on watch time and split evenly among channels (unlike spotify where big names get all the money and small guys get nothing). Youtube premium viewers are the juiciest viewers for creators, by a large margin.

Also blocking-ads/pirating on youtube provides the creators with nothing. I'm not sure how people justify this besides the established internal conditioning that anything on the internet must be free. Also conversion rates for "watches all their content" to "pays for their patreon" are <1%. meanwhile ad-blocking/pirating rates are around 40-60% depending on your audience.

At some point the internet has got to have a reckoning with reality if they want things to improve.

kyboren 4 hours ago | parent | next [-]

In a free and competitive market, the price of any good trends towards the marginal cost of production.

Producing de novo some valuable information--a YouTube video, blog post, software program, news article, song, etc.--has a real cost that must be paid for each new information good created.

But making copies of information in our digital world with gigabit networks and terabyte disks is now very nearly free, so the marginal cost of production of copies of any piece of information is very nearly zero.

This is why centralization and scale are such powerful strategies for IP-based industries: They offer enormous leverage. And it's also why they are so dependent on government intervention to ensure unfree markets.

These creators can only make a profit if they are able to monopolize their information goods. If a new "factory" opens up down on BitTorrent Boulevard literally giving your product away for free, how can you compete with that? Moreover, what incentive do you have to produce new goods in the first place, if anyone can just offer infinite copies of your product to the market for free?

Thus, these creators rely on government intervention to make it illegal to offer copies of their information goods. But there's a fundamental tension between the twin economic realities that the marginal cost of production is ~zero yet the marginal price of consumption is nonzero. Thus, piracy.

In my opinion the copyright system is broken in the digital age. Instead of granting monopolies on information goods produced, we ought to figure out an alternative economic structure that incentivizes the production of these information goods in proportion to their consumption while accepting that their marginal cost of production is zero and abandoning any attempt to control the copying, transmission, creation of derivative works, etc.

afiori 5 hours ago | parent | prev [-]

It depends if Google ranks all users' watch time the same or less profitable users are weighted less in the "algorithm"

If all users' are ranked the same then loyal adblocking users can still help a lot

Workaccount2 5 hours ago | parent [-]

It's weighted on the individuals watch time, not all of YouTube's watch time. That's why it's so good for small channels. The most amount of your money goes to whatever channels you watch the most, regardless of their size.

an0malous 6 hours ago | parent | prev | next [-]

Apple has been a great privacy advocate but doesn’t get mentioned in comments like these and gets dragged through the mud for having proprietary cables and particular UI aesthetics. It’s interesting to observe who it’s fashionable to hate and the double standards this community applies to tech companies.

NooneAtAll3 6 hours ago | parent | next [-]

you mean Apple that scans all your photos to send to police? despite all the flak it got after first attempt at doing so?

an0malous 4 hours ago | parent [-]

source?

zwnow 5 hours ago | parent | prev | next [-]

You mean Apple that said they'd never spy on their users only to be caught spying on their users?

an0malous 4 hours ago | parent [-]

source?

submeta 6 hours ago | parent | prev [-]

You mean the Apple that gets targeted by Israel spyware firms constantly? The Apple iPhone used by a Saudi journalist named Adman Khasoggi whose iphone was hacked with Israeli spyware, targeted and murdered? Just one example.

Apple devices aren’t secure either.

jfindper 5 hours ago | parent | next [-]

This is a silly take unless you believe that Apple facilitated its devices being hacked.

Privacy and security are two different things.

"It’s interesting to observe who it’s fashionable to hate and the double standards this community applies to tech companies" Indeed....

an0malous 6 hours ago | parent | prev [-]

I mean the Apple that refuses to build government backdoors in spite of intense pressure from possibly the most powerful entity in the world, the US military intelligence community.

You're also conflating security with privacy, a security hole is unintentional it's not like they were selling their customer's information. No system is perfectly secure. Apple has done more to address those issues than any other tech company. They’re targeted because they’re popular, maybe your antagonism should be directed towards the country that openly sells such software to murderous authoritarian regimes or the government that condones it from their alleged “greatest ally”

bigyabai 5 hours ago | parent [-]

Refuses is not the right word, there is no way to audit Apple's refusal or hold them accountable here.

US Senator Ron Wyden whistleblew how iOS Push Notifications are collected by US intelligence, which is concerning when you consider how much iMessage relies on it:

https://www.macrumors.com/2023/12/06/apple-governments-surve...

https://daringfireball.net/2025/12/imessage_push_notificatio...

spwa4 7 hours ago | parent | prev | next [-]

What EU governments are doing goes a lot further than mere lackluster gpdr and other privacy law enforcement. They are forcing citizens to give their private information to US firms, nothing less.

> IMHO it requires conscious choices by European citizens to choose more carefully which online services they dedicate their time and money to. Or expect unintended consequences.

You mean, European citizens "need to" expect to, and pay for, basic internet services like search, mail, ... and, let's be honest, pay for worse services than are available free.

Imho proton is about the best available, it's just mail and office, and it's 5 euros per month for just mail and basic office, essentially Google's free tier.

Obviously, this will never happen. So either the government makes such services, and makes them well enough to seriously compete or implements a "great firewall of Europe" Chinese/Russian style and forces the change.

Instead, governments are introducing dependency after dependency on FANG companies. Is there any place left in the EU where you can even do your taxes without identifying through Google/Android or Apple/IOS on Chinese made hardware? Any at all? How about all of Europe? There was a row in the Netherlands about efforts to force homeless people to pay for cell phones ... and the government is refusing to back down. It's just incredible.

Even if the EU kicked out the FANGs with a "great firewall of EU", to force people to pay, it would decimate the gig economy and show that EU unemployment, especially among young people, is really double or perhaps even more the figure it appears to be. Plus I don't think it would work. Too many people would choose to simply stop interacting with the government under such a situation. And while the government can deal with 1 or 1000 people not doing their taxes, they cannot hope to deal with 10% not doing their taxes.

The only solution is that all European governments force themselves to ONLY work through "sovereign" channels not dependent on American companies. Right now they are all doing the opposite, and in fact not just encouraging EU citizens to give their information to FANGs, but actively forcing them to do so.

And you're right. This can only end in disaster. But it's slightly cheaper now. And the disaster is tomorrow.

Didn't Charlie Munger say "you young people ... tomorrow's politicians will make you wish Trump had eternal life"? If it's not Trump, sooner or later someone will blow up relations with the EU, and even within the EU, on either side.

ricardo81 6 hours ago | parent | next [-]

You've said a lot so excuse myself if I don't address all your points or address them enough.

>proton

Yes, probably 'good enough' at the scale they have as an alternative.

>Obviously, this will never happen.

Hard sell for sure vs the status quo.

>Obviously, this will never happen. So either the government makes such services, and makes them well enough to seriously compete or implements a "great firewall of Europe" Chinese/Russian style and forces the change.

Consumer change of habits but obviously having alternatives count.

>Is there any place left in the EU

Is definitely a problem wrt dependency. Also outages from Cloudflare etc suggest further dependency and its all about convenience.

>The only solution is that all European governments force themselves to ONLY work through "sovereign" channels not dependent on American companies.

They don't. The US companies have gradually pushed the envelope and unfortunately EU reaction has resulted in time wasting cookie modals etc for front end users. There is surely a measure of lost EU business opportunity vs what is actually happening, a wholesale copyright and privacy override. Google was bad enough before AI but now it's just wholesale stealing of everyone's everything.

esbranson 6 hours ago | parent | prev | next [-]

> either the government makes such services, and makes them well enough to seriously compete

Europeans have already made open source versions of quite a few things as side projects without any funding. The issue is a lack of transparency (by American standards) that hides just how hideously incompetent and outrageous (even by American standards) member state governments are. (PACER is a big reason how Americans know what Europeans are ignorant about.) I do believe an EU member state could otherwise create any service that American companies already proved are desirable, make it free for nationals and residents and require payment for others, and use EUDI as the login and verification, probably for quite cheap.

whimsicalism 7 hours ago | parent | prev [-]

wow, you all are having some crazy nationalistic thing going on it seems.

best of luck

CalRobert 7 hours ago | parent | prev | next [-]

Europe’s (really Ireland’s) lacklustre enforcement of GDPR means it has hurt European companies (which at least try to comply) without even meaningfully improving privacy. Subject access requests are fun at least.

snickerbockers 6 hours ago | parent | next [-]

How enforceable is GDPR against foreigners anyways? FANGs are motivated to comply because any sufficiently large corporation will inevitably have assets that the EU can freeze, but otherwise it's just a limp-dick attempt at exerting sovereignty well beyond their borders which will get laughed out of any court.

CalRobert 6 hours ago | parent | next [-]

I’m an eu citizen in Europe concerned with data practices of European entities so I don’t care about how it might be limited outside the EU.

bacr 6 hours ago | parent | prev [-]

GDPR isn’t enforceable against foreign companies. It is enforceable against subsidiaries registered within the EU. Living in Germany means you are doing business with Google GmbH (or likely, the Irish subsidiary). Don’t want to comply with German law? Then Google GmbH must exit the German market.

mnky9800n 7 hours ago | parent | prev | next [-]

Yes gdpr could be good. But instead it’s a cookies warning.

qwertox 7 hours ago | parent | next [-]

Cookie warnings are a sign of companies not willing to accept that they cannot just collect data on you and monetize it.

How does that make the EU regulation something bad? The bad thing is that the companies are willing to bombard us with the worst possible cookie banners, in order to monetize our visits.

Maybe the next EU regulation should be to prohibit those banners and allow companies to add a small toggle somewhere on their site so we can toggle it to allow them to set 3rd-party cookies.

petcat 7 hours ago | parent | next [-]

> The bad thing is that the companies are willing to bombard us with the worst possible cookie banners, in order to monetize our visits.

The EU's own government websites [1] are littered with the same cookie banners. They want the visitor data just as bad as everyone else.

> Maybe the next EU regulation

We don't need anymore EU regulations seeing how bad and thoughtless they already are.

[1] https://european-union.europa.eu/

qwertox 7 hours ago | parent | next [-]

-> [Accept all cookies] [Accept only essential cookies] at the bottom of the page.

Sure, I don't understand why they don't remove it if they know that an average-iq'd person would accept only essential cookies, but that cookie banner belongs to the top 5% of friendly cookie banners.

I was talking about those you find on the typical website, usually news sites, who make them as annoying as possible.

eps 7 hours ago | parent | prev [-]

> _We_ don't need anymore EU regulations seeing how bad and thoughtless ...

Try and speak for yourself. No need to speak on everyone's behalf, this is disingenuous.

CalRobert 6 hours ago | parent | prev [-]

It’s bad because they’re not enforcing it. Have the law and enforce it or don’t have the law.

ascorbic 6 hours ago | parent | prev | next [-]

Cookie warnings are from the ePrivacy directive.

CalRobert 6 hours ago | parent | prev | next [-]

Cookie warnings predate gdpr actually. (Random discussion from 16 years ago - https://www.theregister.com/2009/11/25/cookie_law/) The funny thing is 99% of cookie dialogs are illegal anyway (it should be opt in, not opt out)

moi2388 7 hours ago | parent | prev | next [-]

No, those two are completely separate laws

juliangmp 7 hours ago | parent | prev | next [-]

I never understood the crying about the cookie banners

They're not the problem, they never have been. It's the fact that so many parts of the modern internet rely on selling user data to make a profit, not the regulation that they now have to do the outrageous thing and (gasp) ask for consent first.

immibis 7 hours ago | parent [-]

The problem with GDPR and cookie banners is that GDPR allows the cookie banners to be worded so indirectly. "To improve our service we share collected information with 5723 partners..."

If the law would force them to say "Do you want Larry Ellison to get richer by looking through your webcam? [Yes] [No]" it would be a good law.

MiddleEndian 6 hours ago | parent | next [-]

Ideally it would just be like the Do Not Track flag, with one flag for each category of opt-out tracking, but actually enforced (even if on by default) so no popups would be needed at all.

CalRobert 6 hours ago | parent | prev [-]

It doesn’t. That’s violating gdpr. But you can break gdpr without consequences.

jwr 7 hours ago | parent | prev [-]

GDPR has nothing to do with cookies, in spite of the commonly spread false narrative.

hexbin010 7 hours ago | parent | prev [-]

I wonder why Ireland has such lackluster enforcement of GDPR...

Oh, aren't many of big tech's EU HQs in Ireland?

omnimus 6 hours ago | parent [-]

It's not only about GDPR. It's even more about profit shifting and low taxation of big tech. Ireland has been selling out EU on digital front for over a decade.

af78 5 hours ago | parent [-]

Taxation is only part of the picture. Quoting from https://pluralistic.net/2025/12/13/uncle-sucker/:

In the EU, they've had the GDPR – a big, muscular privacy law – for nine years, and all it's really done is drown the continent in cookie-consent pop-ups. But that's not because the GDPR is flawed, it's because Ireland is a tax-haven that has lured in the world's worst corporate privacy-violators, and to keep them from moving to another tax haven (like Malta or Cyprus or Luxembourg), it has to turn itself into a crime-haven. So for the entire life of the GDPR, all the important privacy cases in Europe have gone to Ireland, and died there:

https://pluralistic.net/2025/12/01/erin-go-blagged/#big-tech...

Now, again, this isn't a complicated technical question that is hard to resolve through regulation. It's just boring old corruption. I'm not saying that corruption is easy to solve, but I am saying that it's not complicated. Irish politicians made the country's economy dependent on the Irish state facilitating criminal activity by American firms. The EU doesn't want to provoke a constitutional crisis by forcing Ireland (and the EU's other crime-havens) to halt this behavior.

hexbin010 4 hours ago | parent [-]

Wow he did NOT mince his words. I've not seen the situation described like that ever. Thanks for sharing

markus_zhang 7 hours ago | parent | prev [-]

IMO European countries, especially France/Germany are more of “I don’t allow other countries to take privacy data of EU citizens but I want backdoor accesses/whatever I need”, which is fine though.

altoid 5 hours ago | parent | prev | next [-]

this page forces you to create an account. Just delete the "quickSubscribe" class in the html and remove the popup to te able to scroll for free.

nikoomilana 4 hours ago | parent [-]

or just find the archived link in the comments?

unyttigfjelltol 11 hours ago | parent | prev | next [-]

TL;DR: An EU health data firm run by ex-military cryptographers offers a web portal for encrypting documents, which inherently exposes unencrypted documents to the company and US national security laws. The media outlet incidentally also doubts the trustworthiness of military veterans from Israel.

Even following the "if there's smoke there's fire" model, unclear there's a strong scent of "smoke" here. One could write a similar guilt-by-historical-association article concerning anyone, in the same position, really. Obviously if you're uploading a file to a 3d party website, the vendor has some technical access, this should be warned.

pareidolia 11 hours ago | parent | next [-]

The bigger problem is that this model is inherently flawed. Even if end-to-end encryption with browser crypto were implemented, there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

I've been forced to use this service, by way of healthcare professionals just disclosing correspondence to this service without asking for my consent.

Smeerlappen.

tucnak 9 hours ago | parent | next [-]

> there is never any security since the code in the browser can simply be swapped with compromised code that diverts the plaintext somewhere.

This is not the case in the land of DICE-like key derivation; see TKey protocol for example. You can download and run an actual rv32 program on actual FPGA over WebUSB without having to worry about its provenance. If the program is modified, firmware will derive a completely different key.

pareidolia 8 hours ago | parent [-]

Zivver is a web application. The javascript that comes with the webpage can change at any time for any reason, as Zivver sees fit.

tucnak 5 hours ago | parent [-]

I'm simply pointing out that web standards allow for secure end-to-end communication, and more, in fact they happen to allow arbitrary cryptographic constructions—as long as the program itself never changes.

pareidolia 4 hours ago | parent [-]

But this requires special hardware right?

tucnak 3 hours ago | parent [-]

Not necessarily. You can run TKey in qemu :-) etc. The hardware aspect is what makes it easy to use, with WebUSB and all. The derivation algorithm is key. And it takes program binary as parameter to Blake2 hash function.

_el1s7 10 hours ago | parent | prev [-]

Security is an illusion.

pareidolia 9 hours ago | parent [-]

Then reply with your passwords.

sallveburrpi 9 hours ago | parent [-]

******

Luckily HN automatically detects when you post your password and obfuscates it with * - try it out yourself!

pareidolia 9 hours ago | parent | next [-]

You think I was born yesterday :P

Mordisquitos 8 hours ago | parent | prev [-]

hunter2

Mordisquitos 8 hours ago | parent [-]

Doesn't look obfuscated to me.

throw310822 8 hours ago | parent | next [-]

It only obfuscates it for others :)

KaiserPro 6 hours ago | parent | prev [-]

Thats the genius of it, to us it looks like **** but you see hunter2. Its an automatic replace.

SilverElfin 7 hours ago | parent | prev [-]

It looks to me like the article is using “Israel” in its title for inflammatory discrimination. The person who submitted it probably knew full well what they were doing.

yonixw 6 hours ago | parent [-]

LOL

Next one: Cloudflare has an edge in Israel. And has workers who were in Unit8200 before 1991 (per linkedin) and ISRALIES. Who uses Cloudflare? MANY MEDICAL ORGS. Also, Cloudflare is just like MITM (CDN SSL termination). So does ISRAEL SPIES read all your MEDICAL data?

> "To think otherwise is completely naïve" (real qoute from the article btw = no proof)

What a sham article. Trump's TruthSocial level. But hey, most upvoted today (440+ points). And no point on reporting to mods also, I just get copy paste reply.

lwn 9 hours ago | parent | prev | next [-]

I used to get multiple Zivver messages a week from the health providers I work with. However, I haven't received a single one since the announcement of the takeover a while ago.

altoid 5 hours ago | parent | prev | next [-]

this article forces you to create an account, just delete the "quickSubscribe" class in the html and remove the popup, you will be able to scroll free.

hermanzegerman 9 hours ago | parent | prev | next [-]

I've never seen Zivver used in German Healthcare.

Also Germany uses and is already Rolling out a Matrix-based Messenger and S/MIME-Mail with End-to-End-Encryption for Communication between Healthcare Professionals.

So at least for Germany this is not a problem.

More problematic was our prior health Minister who wanted to make data accessibile to OpenAI et al for "research". That's also why I opted out of the electronic health record

https://www.heise.de/news/Lauterbach-zu-Gesundheitsdaten-Goo...

sallveburrpi 9 hours ago | parent | next [-]

I don’t think you can opt out of the electronic health record long term. We should instead elect officials that can deal with the “Neuland” of the digital age and have some technical chops and don’t immediately cave in when there is some money to be made (in no way implying that you don’t already do this)

hermanzegerman 9 hours ago | parent [-]

Right now, you can and should do it.

See https://www.bundesgesundheitsministerium.de/themen/digitalis...

> We should instead elect officials that can deal with the “Neuland” of the digital age and have some technical chops and don’t immediately cave in when there is some money to be made

Yes, but I don't think this will happen during our lifetimes. Especially since the Gematik has shown again and again that they can't be trusted with it

jack_tripper 9 hours ago | parent | prev [-]

>I've never seen Zivver used in German Healthcare.

How would you even be sure of this just from what you can see from the outside? That doesn't mean your health insurance company isn't using Zivver internally same how they use Office 365 or SAP. It's not like they tell you all the SW they use.

hermanzegerman 9 hours ago | parent [-]

Why would they use it internally?

Internally, you have the Hospital Information System where you can look up all the informations you need.

I can just say I know the inside of one of Germany's biggest Hospitals, since I'm a Doctor. And requesting Patient Data or giving it out to other Parties is unfortunately a Task that Doctors still have to do on their own

And for communication with the outside world it's down to Fax, Phone or Letter.

And that will be replaced with KIM in the future

user_7832 9 hours ago | parent [-]

> Fax, Phone or Letter

That's interesting because in The Netherlands most of my doctor's communications come through email (and zivver), followed by snail mail.

hermanzegerman 9 hours ago | parent [-]

Theoretically they could already send this via S/MIME encrypted Mail (KIM) to the family doctor, but most Hospitals haven't rolled out this service yet.

They just started installing Card Readers for the Doctor Identity Cards, so they can issue electronic prescriptions

For communication with Patients some Hospitals have Web Portals/Apps for getting/sending information.

user_7832 8 hours ago | parent [-]

That's pretty interesting. We have electronic prescriptions too (though it goes straight to the pharmacy however - we don't see it).

As far as I know, I don't think the hospital portal has ever been used for communication like that. An email seems more "obvious" perhaps to the docs, and that's what they use most of the time.

hermanzegerman 8 hours ago | parent [-]

The Hospitals in NL that use Epic as EHR also have Patient Portals. But I don't know how much they get used

https://www.umcutrecht.nl/en/login-patient-portal

Krasnol 6 hours ago | parent | prev | next [-]

Archive link: https://archive.ph/Se55J

epolanski 4 hours ago | parent | prev | next [-]

I always find it absurd how good Israelis are at security and intelligence yet failed miserably on October 7th.

JumpCrisscross 3 hours ago | parent | next [-]

> absurd how good Israelis are at security and intelligence yet failed miserably on October 7th

Offense and defence are different games.

jules-jules 4 hours ago | parent | prev [-]

It’s not absurd, it’s deception.

inshard 7 hours ago | parent | prev | next [-]

Strange that a 9th October article shows up at the top of the feed given the events of the day in Sydney.

Fnoord 6 hours ago | parent | next [-]

Typical ad hominem diversion. I listened to the related podcast episode of FTM yesterday evening on Spotify, and today decided to search more information and read the coinciding articles. I have no control about what gets upvoted here, since I don't work for an agency or troll farm. Look at my submission history. Another article I submitted related to Israel (Correllium getting acquired by Cellebrite) got no uptake whatsoever. It was never discussed here, at all.

I oppose civilians being targeted by terrorism, and that also obviously includes Israelians. For example, I was very much shocked by Oct 7.

I also do have a problem with Israel's alleged genocide by the current government.

I don't believe any of the above makes me antisemite. It is very typical of agents of a certain agency to frame like that though.

bar000n 5 hours ago | parent | next [-]

Agency is what those people you call trolls don't have. Leave them be, you don't want to end up lynched.

tome 5 hours ago | parent | prev | next [-]

> I don't believe any of the above makes me antisemite. It is very typical of agents of a certain agency to frame like that though.

An astonishing pair of sentences.

Fnoord 4 hours ago | parent [-]

So astonishing there's a Wikipedia article about the phenomenon [1].

[1] https://en.wikipedia.org/wiki/Weaponization_of_antisemitism

JumpCrisscross 3 hours ago | parent | next [-]

As someone with no dog in this race, I’m genuinely struggling to distinguish folks calling for a global intifada and railing against Zionists from anti-Semites. Particularly when they blame—to the point of dismissal—rising anti-Semitism (like, block or shoot up a synagogue anti-Semitism) on Israel.

tome 4 hours ago | parent | prev [-]

I see. So who are these "agents of a certain agency" you're referring to? Can you be specific?

weatherlite 5 hours ago | parent | prev [-]

> Israelians

Israelis

dang 4 hours ago | parent | prev | next [-]

This was probably random, as are most things like this on HN.

That is terrible news.

beAbU 7 hours ago | parent | prev | next [-]

What happened in Sydney?

underdeserver 7 hours ago | parent [-]

https://edition.cnn.com/world/live-news/bondi-beach-gunshots...

beAbU 6 hours ago | parent [-]

Terrible event. How is this relevant to HN and its topics of discussion?

mupuff1234 6 hours ago | parent [-]

Is a CEO of a company serving in the military 40 years ago relevant?

bar000n 5 hours ago | parent [-]

maybe the "data sold to" part

newspaper1 5 hours ago | parent | prev [-]

This is a tech article and has nothing to do with Sydney.

jack_tripper 11 hours ago | parent | prev | next [-]

It's always companies run by Unit 8200 ex-Israeli spies that are running these telemetry-/ad- surveillance dragnets, and there's never any retaliatory action against them.

Like how about a call to Benny's office saying "hey buddy, reign your dogs in, our citizens are off limits"?

jdietrich 8 hours ago | parent | next [-]

Unit 8200 hand-picks the best and brightest young Israelis and trains them in computer science. You might as well say "It's always MIT" - of course an elite educational institution produces a lot of successful startups.

If you're looking for a sinister plot, look no further than In-Q-Tel.

Fnoord 8 hours ago | parent [-]

MIT students have different loyalty than to a fascist government like Trump's administration. The political situation in USA is also not like the one in Israel (which country is a direct result of the outcome of WWII and hatred by nazi-Germany, who are in constant fight with their neighbors). It isn't a fair comparison. One should also take into account that Mossad's way of operating is aggressive.

The English article doesn't mention this, but vulnerabilities were found in Zivver. See my comment elsewhere in the thread referring to the Dutch version of the article.

flyinglizard 6 hours ago | parent [-]

There's something very visceral in being attacked by Jihadists, rockets and ballistic missiles which makes Israelis quite enthusiastic about taking on the fight.

sa501428 4 hours ago | parent [-]

There's something very visceral in being attacked by Zionists, rockets, and bombs (for 70+ years) which makes some folks quite enthusiastic about resisting ethnic cleansing and genocide in their homeland.

flyinglizard 3 hours ago | parent | next [-]

The Palestinians have the right to fight just like the Israelis have the right to win. I don't see a non-violent solution to this conflict. Maybe you do.

zappb 4 hours ago | parent | prev [-]

Keep on digging your grave, Hitler.

Hikikomori 4 hours ago | parent [-]

>>maybe they shouldn't be killing that many children

>You are literally hitler

user_7832 9 hours ago | parent | prev | next [-]

Why would you assume the said counties wouldn't want their citizens surveilled? "But they will know what our citizens do..." yeah unfortunately 5 eyes proves otherwise.

Govt surveillance is a big club, and you ain't in it.

user_7832 8 hours ago | parent [-]

I am... really not sure why this comment is getting downvoted? It's not really a conspiracy theory so many years after Snowden now, is it?

foundddit 9 hours ago | parent | prev | next [-]

It's really, truly strange just how intertwined the US is with Israeli spies at all levels. If people affiliated with The Netherlands or Rwanda had this much influence in the US, nobody would tolerate it.

jack_tripper 8 hours ago | parent | next [-]

It helps when majority of US congress is composed of highly convicted Zionists or on AIPAC payroll because they don't wanna risk being JFKd.

coliveira 8 hours ago | parent | prev [-]

At this point it's all a i-controlled spy operation everywhere in the US. Just check where the main "cyber-security" firms come from. They're just fronts for spy operations.

ishi 10 hours ago | parent | prev | next [-]

It isn't a "telemetry-/ad- surveillance dragnet". Kitenet's product is a "Private Data Network (PDN) to control, monitor, and secure data exchanged between people, machines, and systems across user collaboration, automated workflows, and enterprise AI".

It stands to reason that ex-cryptographers from Unit 8200 would use the expertise they gained to launch legitimate companies that provide cybersecurity solutions.

diydsp 9 hours ago | parent | next [-]

It's not inevitable. It's up to us in a shared world to decide how to govern ourselves and live our lives. Not to be at the whims of a small group of powerful strangers.

stocksinsmocks 10 hours ago | parent | prev [-]

I think it’s much more likely they’re creating honeypots as contractors. There is a lot more money in surveillance than privacy

ishi 9 hours ago | parent [-]

Is there any factual basis to this claim, or just your personal opinion? It's like claiming Oracle's real business isn't a database, but rather stealing customers data which was stored in Oracle's databases. Or practically any other company that has access to customers data.

Fnoord 9 hours ago | parent | next [-]

> Is there any factual basis to this claim

Please feel free to translate and read the Dutch version of this article. On the bottom, several security researchers found vulnerabilities in Zivver [1]

[1] https://www.ftm.nl/artikelen/vertrouwelijke-zaken-te-grabbel...

ishi 9 hours ago | parent [-]

So Zivver created a product with security vulnerabilities, Kitenet bought Zivver (probably for their customer base), and it's all some sort of conspiracy to steal personal data?

Fnoord 8 hours ago | parent | next [-]

We merely bought the honeypot, Your Honor! We didn't know what we were buying!

Perfect cover story /slowclap

Secret services use companies as cover all the time. Nothing new there.

The conspiracy is that it is a dragnet for the data, and given the data is first send plaintext to Zivver (see the Dutch FTM article I already linked), it isn't far-fetched.

Looking at the current geopolitical situation, it also isn't far-fetched. It even fits in the Israeli secret services' M.O.

Actually, anyone who uses Zivver can find these vulnerabilities. I was worried about this, and reported it to my former employer (while still employed), but alas I did not have a PoC and they had a lot of other security related incidents so this was low priority. Also, this was at a time when the company was still privately owned by the Dutch founders. My hypothesis is that someone working for such an organization passed it to the Israeli secret service, who then got motivated to buy this honeypot.

Chinese do something similar: release some piece of technology, never provide any meaningful updates to the product, and voila it is insecure as hell (yet 'we didn't know' provides plausible deniability). I saw this first-hand with KRACK vulnerability.

Also... Kiteworks [1] is the name of the company. Not sure why you keep calling it Kitenet.

[1] https://en.wikipedia.org/wiki/Kiteworks

chiefalchemist 8 hours ago | parent | prev | next [-]

To be fair, it’s not a conspiracy if it actually happens. It’s surprising how often this type of reasoning is still so common.

dlubarov 8 hours ago | parent [-]

What are you saying actually happened? It sounds like the concern is that in a certain context, messages are cloud hosted instead of client-side e2e encrypted? Did anyone even claim otherwise?

How is this different from suggesting Netflix was all a secret plot by Stanford to spy on Europeans' TV binging?

Fnoord 4 hours ago | parent [-]

Two anonymous security researchers working at Dutch government found the data is send plaintext [1]. One independent security researcher was able to verify their claim.

This should be a concern if the company is owned by Dutch people, but more so if it is owned by a company with questionable jurisdiction. Which unfortunately the USA and Israel are these days.

[1] https://www.ftm.nl/artikelen/vertrouwelijke-zaken-te-grabbel...

dlubarov 3 hours ago | parent [-]

Did they ever claim otherwise? They say "Zivver scans the content of every email" prominently on the front page. The flow seems to be TLS to Zivver first, scanning, then encryption.

If all it takes to convince us that a communication product was created as a front for spying operations is not having a strict e2e design like Signal's, then do you think virtually all of them are fronts for spying operations?

SilverElfin 6 hours ago | parent | prev [-]

There’s really nothing concrete in this “article”. It’s basically vague insinuations and conjecture and conspiracy theory, all in support of putting out content with something nefarious implied about all Israelis. In other words, it’s propaganda.

nunobrito 8 hours ago | parent | prev | next [-]

It is an obvious and recurring phenomenon to anyone minimally following cybersecurity topics. This isn't the first time, nor the second, nor the third, nor the last.

This is the same as claiming that water isn't wet until someone here on HN brings you 10 articles and news proving otherwise. This particular topic was never really denied, nor even by the authors themselves as you can read on the article.

coliveira 8 hours ago | parent | prev | next [-]

Do you understand that Oracle has real features used daily by clients other than "securing" their communications?

cluckindan 9 hours ago | parent | prev [-]

Are you sure such claims about Oracle are completely unfounded?

kasey_junk 9 hours ago | parent | next [-]

This framing is a cheap rhetorical trick. Restated this leads to the statement “all companies by default are in the business of capturing customer data, all other claims about their product and smoke screens to hide that.”

Which is something you can believe but it falls into the extraordinary claims, extraordinary evidence category. But by claiming it about Oracle or Israeli cyber firms or whatever you swap the evidence burden to the person who has the not extraordinary claim, that most businesses are doing what it claims on the tin.

coliveira 8 hours ago | parent | next [-]

It's not just a rhetorical trick. Amazon collects most of their data in Virginia, right at the doorsteps of a well known "intelligence" org in the USA. These companies that handle data all around the world are authorized to exist for some reason...

kasey_junk 7 hours ago | parent [-]

Then the argument should be that. Not “hey commenter you must prove a never ending set of ‘now do Oracle’, ‘now do Amazon’”.

Say the words “I believe all companies exist as an extension of the US intelligence apparatus” and claim the burden for yourself.

cluckindan 7 hours ago | parent [-]

That is a strawman argument.

Oracle gets its name from a codename of a 1977 project for the Central Intelligence Agency, Oracle's first customer.

In 2004, then-United States Attorney General John Ashcroft sued Oracle Corporation to prevent it from acquiring a multibillion-dollar intelligence contract. After Ashcroft's resignation from government, he founded a lobbying firm, The Ashcroft Group, which Oracle hired in 2005. With the group's help, Oracle went on to acquire the contract.

Following the beginning of the Gaza war in 2023, Oracle’s top executives, including Safra Catz and Larry Ellison, publicly aligned the company with Israel’s military operations. They issued statements of solidarity, paid double salaries to Israeli employees, and donated to organizations connected to Israel’s wartime response.

kasey_junk 7 hours ago | parent [-]

See. Thats a good comment. “Your use of Oracle is a bad counter factual because…”

Switching to that is commenting in good faith. It educates and argues the point and makes it clear that you aren’t in fact claiming that all companies are surveillance state apparatus. Note that other commenters ran with the “but they are actually argument” because the door was opened.

chiefalchemist 8 hours ago | parent | prev [-]

Books such as:

“The Age of Surveillance Capitalism”

and

“Stand Out of Our Light”

might not change your mind, but you’re likely to end up realizing customer data hovering is more of a driver of modern business decisions than you realize. To say nothing of the assets such activities provide the intelligence communities.

This is happening. Please don’t dismiss it as conspiracy theory.

ishi 9 hours ago | parent | prev [-]

It's easy to make baseless accusations that are impossible to disprove, that's exactly my point.

cluckindan 7 hours ago | parent [-]

Come on. The CIA was Oracle’s first customer.

mikkupikku 10 hours ago | parent | prev | next [-]

Online scamming and malware are Israel's most cherished national industry, they've been specializing in this stuff for nearly 30 years:

https://en.wikipedia.org/wiki/Download_Valley

> Download Valley is a cluster of software companies in Israel, producing and delivering adware to be installed alongside downloads of other software.[1] The primary purpose is to monetize shareware and downloads. These software items are commonly browser toolbars, adware, browser hijackers, spyware, and malware. Another group of products are download managers, possibly designed to induce or trick the user to install adware, when downloading a piece of desired software or mobile app from a certain source.

> Although the term references Silicon Valley, it does not refer to a specific valley or any geographical area. Many of the companies are located in Tel Aviv and the surrounding region. It has been used by Israeli media[2] as well as in other reports related to IT business.[3]

Getting an Israeli extradited is almost impossible, their in-group ethnic bias is so strong that they even fight the extradition of rapists. The Israeli government would rather see a jewish rapist escape justice in Israel than face justice in a gentile nation. Extraditing some businessmen who merely scam and destroy people's computers? Fat chance in hell.

https://en.wikipedia.org/wiki/Malka_Leifer_affair

https://www.cbsnews.com/news/how-jewish-american-pedophiles-...

pricechild 10 hours ago | parent | next [-]

Could the same not be said about the US?

I suspect it'd have a different spin put on it.

ipaddr 9 hours ago | parent [-]

No the US has no issue with extradition.

kakacik 8 hours ago | parent [-]

I am having extremely hard time believing this, I don't mean that on paper chance exists but out there in real world, especially with current government. Checking for 2024 the number can be counted on all fingers and toes and all were special high profile cases.

US has a law that they will invade International court of justice if ever any US personnel is tried there (ie for war crimes, that one would be easy to pull on thousands of US citizens). That's the US mindset against other jurisdictions.

Israel would be an exception of course.

Cyph0n 7 hours ago | parent [-]

ICC, not ICJ - the so-called Hague invasion act.

dmix 9 hours ago | parent | prev | next [-]

Based on your wiki almost all of those are from 2010 era and shut down long ago

The US has always had a number of grey market scammy businesses like those too. Lots of countries do.

anonym29 10 hours ago | parent | prev | next [-]

I remember when the IDF guy did this right after getting arrested at DEFCON earlier this year!

https://www.timesofisrael.com/senior-israeli-cyber-official-...

https://www.jpost.com/israel-news/article-865532

https://www.aljazeera.com/news/2025/8/19/how-was-an-alleged-...

tdeck 7 hours ago | parent [-]

Hey now. Isn't it more likely that the cops spent months preparing this sting, caught the suspect red handed and arrested him, got a confession from the suspect in an interview, and everyone involved just honestly completely forgot to take his passport or impose any sort of travel restrictions?

gosub100 7 hours ago | parent | prev [-]

https://www.8newsnow.com/investigators/israeli-official-plea...

this alleged sex offender just appears remotely for his court appearances lol. I wonder if he will attend prison remotely too? Maybe an RC robot will serve his sentence and he can look out the bars through a camera and VPN from Israel.

tonyhart7 8 hours ago | parent | prev | next [-]

acting like they arent already controlling gov politician

leoh 7 hours ago | parent | prev [-]

It’s largely because military service is mandatory and 8200 is like the MIT or Stanford of Israel.. not some nefarious bullshit about intelligence

flanked-evergl 7 hours ago | parent | prev | next [-]

Was it done so illegally? If so who will prosecute the people who sold it?

fithisux 4 hours ago | parent | prev | next [-]

It gets better and better.

p0w3n3d 8 hours ago | parent | prev | next [-]

Ex-Israeli or ex-spies?

rr808 10 hours ago | parent | prev [-]

Do Europeans care if their health data is secret or not? I feel in the US its a big deal that people dont want insurance companies to measure them and deny coverage to those who need it most, but in most of the world that isn't an issue.

setopt 10 hours ago | parent | next [-]

Yeah we do. For many reasons:

Privacy is privacy. I ideally don’t want any of my data sold to anyone, but health data is even more vulnerable.

In my country it was even a big deal when they allowed different doctors to access your health data via a common system, as there were e.g. concerns that the information recorded by one doctor might bias another doctor, so some felt that it should be your choice what data to share between different parts of the public health system (except for explicit referrals).

Moreover, most European countries do have private doctors, private hospitals, and private health insurance – it’s just way less used than the public system. Those would have the same concerns as in the US.

muzani 8 hours ago | parent | prev | next [-]

Health data is usually the highest level protected data under most laws. It's not about just insurance. Part of the problem is once data is out there, it can be used by any shady person.

You can be discriminated against a job based on health records. Scary diseases like AIDS and TB make it hard for unskilled labor to land a job since it's so easy to discriminate. Pregnancy history may hurt women who are in countries with more generous maternity leave.

Mental health history will hurt just about everyone - who wants a worker who can claim ADHD, depression, anxiety, etc as reasons to be unproductive?

Then people will simply deny getting diagnosed for fear that they may uncover something that puts their jobs at risk. That hurts the medical system as a whole.

Combine with weird stuff like eugenics. What if we identify a possible rapist gene and neuter them in advance? Or bar people with a klepto gene from working in finance? You may live in happy, sane, democratic societies today, but it may not be the case 30 years from now.

jijijijij 8 hours ago | parent | next [-]

> You can be discriminated against a job based on health records.

Just to make this clear, probably EU-wide, you can't legally be discriminated against. However, it's gonna be hard to prove leaked data won't be illegally integrated in e.g. ATS models, or was attributed as skill issue when it popped up during manual background checks.

Although, infectious disease like HIV or dystopian scenarios like eugenics are probably the classical discrimination examples for these privacy implications, I don't think they are very likely to be discriminated against (outside of jobs where discrimination is legal and require disclosure anyway, e.g. health workers, food industry etc.). It's easy to dismiss those worries, since most people aren't affected. But common issues with mental health (e.g. depression), hidden disabilities and chronic disease (e.g. PMS), or potentially severe recurring disease (e.g. cancer) realistically are going to be much more impactful. Everything which statistically increases chances to fall out the work force due to health reasons - especially in combination with strong labor protections.

exasperaited 8 hours ago | parent | prev [-]

I once had to threaten to resign from a job (in the EU, pre-Data Protection Act) over the data handling of evidence of one of the things in your comment.

I think this has been something people have had an instinct about forever, and the only reason I had to threaten to quit was because of a misunderstanding of the level of data safety involved; put simply it was not common knowledge that socket connections could be snooped and that targeting a popular service would be easy for a malicious person to do. (This was before SSL was efficient or easy to manage, and in the days when only payment screens were encrypted).

Once the message was across, everyone's objectives were aligned again.

Health information is deeply private because disease is entangled with shame/weakness/vulnerability/taboo/intimacy.

Propelloni 10 hours ago | parent | prev | next [-]

> Do Europeans care if their health data is secret or not?

Can't speak for all Europeans, but in my neck of the wood, Germany, they do very much.

amelius 9 hours ago | parent | prev | next [-]

Of course they do, don't ask silly questions.

dgellow 9 hours ago | parent [-]

Actually, please do ask silly questions! The overwhelming response has been interesting

amelius 8 hours ago | parent [-]

The response is overwhelming because the question is almost insulting.

dgellow 7 hours ago | parent [-]

Yes, I completely agree, I did feel insulted by it. There is a real anti-European/EU narrative in the US, with European countries described as collapsing, failed, etc (which is pretty obvious bullshit). if people are on the fence and ask stupid questions I think it’s ok? I hope they will be corrected, like happened here.

Of course there is no way for me to know if the poster was trolling or pushing an agenda. Some other commenters in this whole comment section are more obvious to identify

rr808 3 hours ago | parent [-]

Sorry, it was just a genuine question. No one in my extended family has had serious problems or issues with insurance companies and I genuinely dont care if my records or even dna are public. Probably would support it for research purposes.

leviliebvin 10 hours ago | parent | prev | next [-]

Of course we do. And for exactly the same reasons, too.

zapkyeskrill 10 hours ago | parent | prev | next [-]

Isn't an issue yet.

troupo 9 hours ago | parent | prev | next [-]

> Do Europeans care if their health data is secret or not?

Do Europeans care if their private and personal data is secret or not? What kind of question is that?

exasperaited 10 hours ago | parent | prev | next [-]

Why would they not?

You still wouldn't necessarily want a life insurance company to know stuff they haven't formally asked to know, you still have health information that could be used to blackmail you or whose reveal would be humiliating or upsetting.

polytely 9 hours ago | parent | prev | next [-]

Deeply

fuomag9 10 hours ago | parent | prev | next [-]

As an European, I HATE when my data is mishandled or leaked (and this is basically the entire point of the GDPR)

dgellow 10 hours ago | parent | prev | next [-]

For sure, yes!

Fnoord 9 hours ago | parent | prev [-]

I mean, of course? This is why I opposed electronic health record ( EPD (elektronisch patiëntendossier)) back in the days. Even then, SSL (TLS) downgrade attack existed and was known to NSA. IIRC EPD was started as opt-in, then opt-out, then mandatory.

I received my daughter's ASD diagnosis via Zivver. This included very personal details about her life. No parent would want that to be public. For adults it is worse: they become vulnerable to extortion, and Mossad is known to go very far for the cause.