본문 바로가기
Advertising

Quibi’s email verification process reportedly sent data to multiple ad firms

by 링마이벨 2020. 5. 28.
반응형

Quibi가 얼마나 확장할 수 있는지 그 가능성에 대해서 생각해 보아야 할 것이다. 얼마나 커질까 의문이다. 아마도 대세가 그리고 이동하고 있는 것은 사실이다. 못참아 한다. 우리가 긴것을 장황한 것을 못 참아 한다. 왜 우리는 점점 인내심이 없어지고 있다. 긴것에 대해서 참을성이 없어지고 심지어 긴것에 대해서 신뢰하지도 않는 문화로 가고있다. 

 

The process Quibi used to verify new users’ email addresses sent them to multiple third-party advertising and analytics companies including Google, Facebook, and Twitter, a new report has claimed. When a new user signed up to the streaming service, they received an email with a verification link. Clicking that link appended their address to the URL and sent it in plain text to multiple other companies.

* Search engine advertising is a method of placing online advertisements on web pages that show results from search engine queries. However, companies can expand their reach beyond search engines to advertise to niche audiences available on third-party websites such as popular blogs and news channels that can help drive relevant traffic to the company’s website(회사웹사이트로 유입하는 대중성있는 블로그나 새로운 채널과 같은 세번째파티의 광고회사들)

Quibi is not the only company whose practices have been called out in the report, which was put together by Zach Edwards at the digital strategy firm Victory Medium. JetBlue, Wish, and the Washington Post were also found to be leaking addresses. But Edwards says that Quibi’s actions are especially egregious because the service launched less than a month ago, well after strict new privacy rules like Europe’s GDPR or the California Consumer Privacy Act went into effect, the New York Times notes.

*GDRP: General Data Protection RegulationGDPR

“NO NEW TECHNOLOGY ORGANIZATIONS SHOULD BE LAUNCHING THAT LEAKS ALL NEW USER-CONFIRMED EMAILS TO ADVERTISING AND ANALYTICS COMPANIES”

어떤 정보도 어떤 광고나 조사분석 회사에 사용자 정보가 새어나가면 안된다. 

In a statement given to Variety, Quibi said that it’s fixed the issue that the report raised. “The moment the issue on our web page was revealed to our security and engineering team, we fixed it immediately,” the company said, adding “Data protection is essential to Quibi and the security of user information is of the highest priority.”

데이터 보호가 쿼비의 가장 기본이고 가장 최우선의 정보는 사용자 정보인것이다. 

However, Edwards says that it’s unlikely Quibi was unaware of the issue. “It’s an extremely disrespectful decision to purposefully leak all new user emails to your advertising partners, and there’s almost no way that numerous people at Quibi were not only aware of this plan, but helped to architect this user data breach,” Edwards says. “In 2020, no new technology organizations should be launching that leaks all new user-confirmed emails to advertising and analytics companies.”

쿼비는 이슈를 모르는 것 같지는 않다. 모슨 사용자의 이메일 주소가 당신의 광고 파트너사에 고의로 새어나가게 하는 결정은 가장 불신받아야 할 처사다. 쿼비의 많은 사용자가 이러한 플랜을 인식할 뿐 아니라 사용자의 데이타 단절을 설계하는것을 도와주는 것이다. 2020년에 어떠한 새로운 기술관련조직도 새로운 사용자 이멜 정보사항을 광고회사나 조사회사에 새어나가게 해서는 안되는 것이다.   

Edwards said he confirmed that email addresses were still being leaked as late as April 26th.

Here’s the full list of places Edwards says that Quibi was initially sending email addresses to in plain text:

1) Google’s DoubleClick.net endpoint

2) Google’s updated ads endpoint @ google.com

3) Google Tag Manager (and therefore potentially custom tags could fire for specific visitors/geos/URL params, thus leaking this to more companies)

4) Twitter ads endpoint

5) Snapchat ads endpoint & the tr.Snapchat.com subdomain

6) Google Cloud infrastructure via cloudfunctions.net

7) CivicComputing.com, which redirects to https://www.civicuk.com/ and appears to be a company based in the United Kingdom.. this raises big GDPR red flags….

8) Facebook events / custom audiences for ads

9) Google ads conversion pixel

10) Twitter ads conversion pixel

11) Google Analytics

12) Facebook analytics, Google Analytics, Twitter analytics (they fire at the end of the page load again)

Quibi’s privacy policy says that users are asked to provide their email address when signing up to the service, and in a separate section discloses that it may share million people have downloaded its app. The service is built around short-form video, or “quick bites,” that are designed to be watched on mobile devices. Disclosure: Vox Media is partnered with Quibi on two shows and there are discussions for a Verge show in the future.

 

반응형

댓글