I only just thought of this. I have the same cartoon-y profile pic from a foreign TV show on a bunch of my accounts, I wonder if its unique enough and worth tracking.
I think about that sort of thing every time I upload any image at all, just out of inherent paranoia. A profile pic would most likely be one of the first things people check if for some reason they wanted to find other accounts you might have.
I don’t think “data brokers” are quite at the level of sophistication where they’re automatically doing that to everyone, but with AI they’ll probably get there soon.
Yes but the real risk there is likely from individuals trying to dox you who can notice the obvious pattern and put 2 and 2 together to link things and build a profile.
As someone else said, Pixel for Pixel analysis is probably too much compute time for them to bother. But they can do a quick checksum on the file, and they probably do.
Whether the image seriously affects your online fingerprint is mostly about whether a lot of users or only a few users use that exact profile picture.
If they few users have that exact profile picture, then it’s likely that they have a behavior tracking data set assigned to it, in case it’s valuable later.
It’s not that someone is sitting in a room correlating and judging your choice of picture. It’s just that every aspect of your web browsing that can be cheaply tracked and correlated is tracked and correlated.
An image that too many people use is likely also correlated, but won’t be heavily weighted in deciding that traffic is yours, because the error rate is too high.
That’s why I always set my profile image to “Mickey Mouse” while I listen to music by The Beatles. It makes me invisible. Also I just really like Mickey Mouse.
Yes, of course they could. Generating an image fingerprint is not all that computationally expensive by today’s standards.
Is it unique enough to track you? It doesn’t have to be, since online tracking generally keys off of a set of data, rather than a single item. But just for the sake of argument, consider that services like tineye and google images have pretty good success at matching images even with no additional data.
Is it (or will it eventually be) worthwhile for data collectors? You would have to ask them.
I don’t think they use picture analyzing software for tracking. It’s very resource heavy because it uses systems similar to LLMs. You can make very slight changes to your pfp (just one changed pixel is enough) for every website to avoid hash match but it’s not necessary I think. If someone wants to manually find your accounts though then it won’t be too hard for them.
Often websites modify your pfp too, like changing the image format or quality.
Yes but I think most of them use absolutely the same transformation so the resulting image is the same. I really can be wrong though.
Nah they don’t. I uploaded the exact same pic to a bunch of different work profiles (slack, google, microsoft). I inspected them out of curiosity and they were all different sizes and resolutions.
Hmm then no need to worry about it I guess
You should still worry about it for manual association. I rarely use them outside work.
can’t you quantise and downscale the image, then take the hash?
Yes
That works too but then the image will be the resolution of a Minetest texture after uploading.
no i mean downscaling and quantising before taking the hash to be able to reliably get the same hash for images that have been compressed, downscaled, had individual pixels edited, etc
Oh that’s smart but I don’t think they use it for tracking now. The most they can do is check the hash for known CSAM.
If it’s not widely used, and your usernames are similar, anyone could make a reasonable guess that you are the same person.
As far as the paranoia around, say, Amazon being able tonsource that info from other sites for their advertising purposes, it doesn’t work that way.
So what to do when choosing a profile Pic? Is AI generated an option?
Then they can trace it to the account that generated it. Unless its a generator that doesn’t require accounts.
I usually just do a ddg image search. That’s how I got thus profile pic
I do the same. My picture is nowhere to be found anywhere in the web.
Oh, mine is. Under accounts with my real name where I just post about what I’m working on.
Privacy doesn’t necessarily mean going dark. There are things that I do that I want to be public and things that I don’t
It’s different for all of us, for sure. Since my job has nothing to do with the public, I’d rather disappear as much as possible. I just have an adversity to giving away my info unless absolutely necessary.
