Consumer brain wave headsets threaten privacy
97 points - today at 2:02 AM
SourceComments
Now we are in a situation that anyone can do anything with any data. And this was not what we were thinking. There needs to be a legal reset.
A new judicial ruling that forbids such permissions as its terms of service. That calls such permissions exploitation. That labels them as a force of evil (like the patents meant to favor edison’s movie cartels) and invalidates all powers they hold. And a judicial ruling that unilaterally limits all prior TOS agreements to be for just specific existing uses. And all future TOS’s to be opt-in, versus being forced to accept or withhold service.
If I subscribe to Google, and Google changes its TOS, why the hell should I accept a new TOS just to get access to my data? Big large govt agencies negotiate TOS’s and hold the companies to those outdated TOS’s so the companies understand well that they cant just unilaterally change it and must maintain older processes that respect legacy TOS’s.
It's a shame this book by my MSc dissertation supervisor isn't coming out until next June, because I'm pretty sure there's a bunch of stuff in there about this kind of neurobollocks: https://www.penguin.co.uk/books/479845/neurobollocks-by-devl...
>But although EEG might not read people’s thoughts, “it would be equally misleading to suggest that it cannot reveal meaningful information about their cognitive states,” says Pietro Aricò, professor of bioengineering at the Sapienza University of Rome. And as consumer EEG devices begin to incorporate AI and are able to conduct increasingly sophisticated analyses, data collected on the outer surface of the brain could be enough to decode intimate features of our mental lives, including our thoughts, emotions, and personality, says Rafael Yuste, co-founder of the Neurorights Foundation, a nonprofit dedicated to protecting people’s brain data rights.
I wonder what these features are.
A side-project of mine recently has been building out this stack:
- Recording audio in proximity to me, and transcribing it
- Grabbing EEG data from cheap sensors on my own head
- Mapping it against the transcription
With a view to eventually train transformer models which might reliably understand, from EEG signals, what words I am thinking. The existing studies on this method don’t seem to show any drop off in efficacy at mind-reading (lol) as the dataset gets larger.
(If anyone wants to invest some seed money so I can justify spending more time strapping things to my head, do hit me up.)
Crucially, the Muse headband the article talks about doesn’t have a microphone. This seems (slightly!) better for user privacy, but it seems like it would hamper training somewhat, depending on your aims.
A less privacy-respecting company in this space with a popular wellness device could do some pretty dark stuff - it doesn’t really bear thinking about. A sleep tracker app with companion EEG sensor device, for example, could reasonably request microphone access without most users batting an eye.
The only way to stop this debasement of humanity is to destroy the tools that store this data. Time for everyone to start carrying portable emp devices and performing 'random acts of privacy preservation'.
https://www.usenix.org/system/files/conference/usenixsecurit...
If the start of an episode can be tracked (sub-second) perhaps there are some counter measures that can be taken to disrupt/subdue the electrical storm that sustains the episode. That detection pattern is something that is unique to the patient so there is custom learning involved. The hope is with enough samples we may be able to detect some hidden 'core' pattern - similar to warnings for earth quakes - and mitigate the episode or use that to go into a heightened sensitivity mode to watch out for the more custom signal.
Multiple attempts to contact any kind of support have gone unanswered, and according to Reddit the founders appear to have quietly disappeared, which pisses me off more than a little bit. This thing was not cheap.
Companies should only be allowed to use people's data for a specific purpose that the customer has explicitly given consent to. No hidden terms in EULs and no using data for any purpose than what they have permission to do.