Catch up on stories from the past week (and beyond) at the Slashdot story archive

 


Forgot your password?
Close
typodupeerror
×
Privacy Technology

Concert Ticket Retailer AXS Collects Personally Identifiable Data Through Its App, Which is Mandatory To Download, and Sells It To 3rd Party Without Anonymizing (theoutline.com) 82

Posted by msmash from the day-light-robbery dept.
AXS, a digital marketplace operated by Anschutz Entertainment Group (AEG), is the second largest presenter of live events in the world after Live Nation Entertainment (i.e. Ticketmaster). Paris Martineau of The Outline reports that the company forces customers to download a predatory app which goes on to snatch up a range of personally identifiable data and sells it to a range of companies, including Facebook and Google, without ever anonymizing or aggregating them. From the report: The company requires users to download an app to use any ticket for a concert, game, or show bought through AXS, and it doesn't come cheap. AXS uses a system called Flash Seats, which relies on a dynamically generated barcode system (read: screenshotting doesn't work) to fight off ticket scalping and reselling. [...] Here's a brief overview of all of the information that can be collected from just the mobile app alone, nearly all of which is shared with third parties without being anonymized or aggregated: first and last name, precise location (as determined by GPS, WiFi, and other means), how often the app is used, what content is viewed using the app, which ads are clicked, what purchases are made (and not made), a user's personal advertising identifier, IP address, operating system, device make and model, billing address, credit card number, security code, mailing address, phone number, and email address, among many others. [...] AXS also shares the personal data collected on its customers with event promoters and other clients, none of whom are bound even by this (extremely lax) privacy policy.
This discussion has been archived. No new comments can be posted.

Concert Ticket Retailer AXS Collects Personally Identifiable Data Through Its App, Which is Mandatory To Download, and Sells It More

Concert Ticket Retailer AXS Collects Personally Identifiable Data Through Its App, Which is Mandatory To Download, and Sells It

Comments Filter:

  • Credit card #? (Score:5, Insightful)

    by b0s0z0ku ( 752509 ) on Tuesday July 31, 2018 @11:01AM (#57041732)
    Name, credit card #, CVN, and EXP? Can't wait till they're on the hook for a massive credit card fraud spree -- should be fun to watch them get sued into bankruptcy.

    • Re: (Score:2)

      by Luthair ( 847766 )
      Its surprising they don't run a fowl of credit card processing agreements.

      • Its surprising they don't run a fowl of credit card processing agreements.

        A CHICKEN??? Really?

        • Not a chicken, they'll parrot the usual excuses and nobody in management is touched. Possibly a cost of doing business fine, less than the cost of doing security properly

  • Who the hell would download an app to buy a ticket?
    • Most Americans at the least.

    • Re: (Score:1)

      by Anonymous Coward

      According to the article, the notice that you MUST install the app came AFTER they have your money.

    • Make it so that you save 1 dollar on a 150 dollar ticket and EVERYONE will.

    • Re:stoopit (Score:4, Informative)

      by jetkust ( 596906 ) on Tuesday July 31, 2018 @11:38AM (#57042104)

      Who the hell would download an app to buy a ticket?

      Someone who is told they must download an app to buy a ticket. But that isn't even what has happened here. They were told they have to download an app and create an account after already buying the ticket.

    • Re: (Score:2)

      by crow ( 16139 )

      So what if (like my wife) you don't have a smart phone?

      • I was thinking the same. The argument is probably that a high enough percentage of people have them that they don't care about the others, and would likely just refund you the money and tell you you can't go. It would piss off those few people, but it's a small enough number that they would reckon it doesn't little to no harm to their business.

        Unfortunately.

      • Re: (Score:3, Interesting)

        by Anonymous Coward

        So what if (like my wife) you don't have a smart phone?

        I frequently ask the same question, since like your wife, I don't have a smart phone either.

        I can't tell you how often some helpful idiot of a cashier or whatever tries to direct me to their app .. sorry, no, don't have apps, don't want apps. What's that? You can't answer my question but you're sure the company app can help? Nope, sorry, I'm simply going somewhere else.

        Fucking apps. Everything is a goddamned app. And every fucking one of them prima

        • Everything is a goddamned app. And every fucking one of them primarily exists to scrape your personal information and sell it.

          Mobile apps seem to be a two-sided race to the bottom. Users think anything, no matter how complicated or how much work is required to create it, should be a $2 app. Consequently, people with something serious to offer struggle to do it at a viable price point through mobile apps. There are some useful free apps provided in conjunction with something else: some exhibitions have really good tour guides as mobile apps now, for example, and there are some helpful journey planners and the like provided by gover

        • Fucking apps. Everything is a goddamned app.

          You should write a letter listing your concerns.

          Here's a link to the Complaint Letter [google.com] app.

    • Re: (Score:3, Informative)

      by originalGMC ( 4046055 )
      most venues in seattle don't charge the ridiculous fees if you show up in person to box office hours. Also I've bought tickets from this company before and never downloaded the app. They did tell me I had to download the app though, which I ignored. The tickets were emailed to me like immediately.

    • Who the hell would download an app to buy a ticket?

      Someone wanting to go to a concert? Installing an app is a frigging low bar for people these days.

  • Companies hate reselling tickets because it blows holes in the demand/price relationship. You can see that for some events the tickets are priced much too high. For instance baseball tickets when resold can go for as low as $5 (or aren't sold at all), because the demand really isn't there.

    • There are some more legitimate grounds for trying to limit the resale market as well. Some high profile artists have been really cracking down on this in the UK recently, because it had reached the point where automated bots were just buying up all the tickets to gigs within moments of them becoming available and then the tickets were being sold on almost immediately but at much-inflated prices on the second hand market.

  • WTF (Score:3)

    by darkain ( 749283 ) on Tuesday July 31, 2018 @11:20AM (#57041924) Homepage

    Try reading the actual article. I couldn't muster the entire thing because the amount of asinine bullshit in it. It really reads as through the guy just read through the TOS for AXS app, and didn't understand half of it, and so made false conclusions based on piecing unrelated parts together.

    Can the app collect your credit card number? Of course, it is a commerce app for purchasing tickets.

    Can the app share information to Facebook? Of course, what app DOESNT have a "SHARE THAT I'M AT THIS CONCERT RIGHT NOW" feature.

    Are these two features directly linked? Of fucking course not. But both exist in the same TOS, therefor the article writer is making false conclusions based on their own idiotic click-baitery sensationalistic bullshit.

    • Re: (Score:1)

      by Anonymous Coward

      Of fucking course not. But both exist in the same TOS, therefor the article writer is making false conclusions based on their own idiotic click-baitery sensationalistic bullshit.

      Well, you are free to refute what he said, but since you've basically said nothing but "yarg, I disagree" ... I'm going to conclude you've made your own false conclusions based on your own form of idiotic bullshit.

    • Dude, why would anyone READ an ARTICLE? Too many ads anyways, can't tell what's an article and what's not anymore. Just stick to the headlines. lulz

    • Try reading the actual article. I couldn't muster the entire thing because the amount of asinine bullshit in it. It really reads as through the guy just read through the TOS for AXS app, and didn't understand half of it, and so made false conclusions based on piecing unrelated parts together.

      I would agree. Going to the AXS website shows you can still do the email ticket to print at home, will call, or "Download the app and no more worries about losing a ticket or realizing you left the ticket at home the moment you arrived at the venue. " I'm guessing the writer assumed the app was the only way to get a ticket, didn't bother to check the AXS website, and then went off on the rant.

    • I'm still going to be outraged that this app will post my location to Facebook without encrypting it.

  • Is that app available in the EU, too?

    • I doubt it. The GDPR would protect from most of what oc is saying about it, or would fine the company to the ground. GDPR violations are based on turnover, not profit. So if a ticket seeks for â100 plus â2.50 handling, the fine is based on â102.50, even though â100 is going to the concert venue.
      There are lots of provision in the GDPR as to what you can collect (typically data that you must have in order to do business with the customer, and no personal data, like religious view, sexual

      • I doubt it. The GDPR would protect from most of what oc is saying about it, or would fine the company to the ground. GDPR violations are based on turnover, not profit. So if a ticket seeks for â100 plus â2.50 handling, the fine is based on â102.50, even though â100 is going to the concert venue.

        I wonder if they block purchases based on IP addresses. An EU citizen could install the app on a visit to the US, use it in the EU to buy a ticket if they don't block via IP address (or using a VPN if they do); thereby potentially opening them up to a GDRP complaint.

      • Re: (Score:3, Informative)

        by sajavete ( 5054387 )
        https://www.gdpreu.org/complia... [gdpreu.org] Actually, the GDPR sets fines to as high as 2-4% of the violating company's annual revenue or €10-20B (whichever is higher :)), not just one transaction. Basically it means that: "if you mess with our people's rights, we will bury you in the smoking ruins of your HQ"

  • 4 letters (Score:4, Interesting)

    by Tomahawk ( 1343 ) on Tuesday July 31, 2018 @11:53AM (#57042238) Homepage

    GDPR

    It's because of stuff like this that the GDPR was put in place in the EU. The rest of the world really should follow suit.

    https://en.m.wikipedia.org/wik... [wikipedia.org]

  • Forced? (Score:3, Informative)

    by sinij ( 911942 ) on Tuesday July 31, 2018 @12:01PM (#57042318)
    I recently went to a show, and while many people used apps to show bar codes, printed version that I presented worked just as well.

    • AXS uses Flash Seats to control entry. The barcode is dynamically generated right when you go to the concert. There's no printed version of anything, no screenshotting, no sharing, nothing.

      No App, No concert.

      • Re: (Score:2)

        by sinij ( 911942 )
        I understand you are tied to your smartphone, but ticket booths and paper tickets still exist. Give up some of the convenience of booking online and this issue completely goes away. You just need to get off your ass and find physical location. I yet to go to a concert, show, or talk that would not accept some form of a paper ticket.

        • I understand you are tied to your smartphone, but ticket booths and paper tickets still exist. Give up some of the convenience of booking online

          Lol what are you watching, some small local musician no one has ever heard of? In all seriousness though there's a large number of shows these days that never make it to any ticket office. A small group are reserved for registered fan clubs, some for competitions, and the rest will sell out within minutes online. Ticket offices just aren't a thing for many events.

          All of that is also beside the point. At no point during the ticket purchase was the app required for this. The app requirement came *after* the t

  • AEG = Philip Anschutz (Score:2)

    by Anonymous Coward

    Wikipedia page is here [wikipedia.org]. He's a Christian conservative, worth over $12B, and owns a multitude of businesses in a variety of different industries.

  • And they probably know who you vote for. (Score:3)

    by Myself ( 57572 ) on Tuesday July 31, 2018 @02:16PM (#57043538) Journal

    Several years ago, we were talking about Gracenote's metadata [slashdot.org], it came up that your musical tastes are a shockingly accurate predictor of your political leanings [archive.org].

    So consider that this metadata just helped all those "partners" build an even more accurate profile of you.

  • This is just one more reason I rarely install apps on my phone.

    It seems as if most apps do suspicious shit in the background, and/or harvest your data, display ads, drain your battery, etc etc etc.

    I mean seriously- why does a flashlight app need access to my contacts or my location information?

    • I use a network monitor on my Android phone (network monitor mini) and I am amazed how many apps hit the network the instant you wake your phone up. I've even tried restricting background data for the apps that show up, but it made no difference.

      I really miss Windows Mobile, and that's saying something!

      Damn you HP for killing PalmOS!!

      Jolla?

      I'll bet it's hard to get venture capital without a good plan to capitalize on your users personal information.

Slashdot Top Deals

You know you've landed gear-up when it takes full power to taxi.

Close