Sponsored Links

Warning for Three Customers

mgp69

Member
I wonder how many Three customers are aware of this condition of use:

"3.8 You grant us an irrevocable, royalty free, perpetual and worldwide licence to store... ...or otherwise deal with any content you upload on Three Services"

So they can store and do anything they want with any data you send over their internet services.

That opens up an entire minefield of potential risk for users. A lot of data uploaded by most users won't belong to them anyway, so they could be in trouble for assigning over the rights to it.

When you then add GDPR into the equation you could be looking at major issues.

I don't think there's any way Three customers could be expected to comply with this condition.
 

Attachments

  • Three T&C re data.webp
    Three T&C re data.webp
    49.9 KB · Views: 71
I wonder how many Three customers are aware of this condition of use:

"3.8 You grant us an irrevocable, royalty free, perpetual and worldwide licence to store... ...or otherwise deal with any content you upload on Three Services"

So they can store and do anything they want with any data you send over their internet services.

That opens up an entire minefield of potential risk for users. A lot of data uploaded by most users won't belong to them anyway, so they could be in trouble for assigning over the rights to it.

When you then add GDPR into the equation you could be looking at major issues.

I don't think there's any way Three customers could be expected to comply with this condition.
Most networks likely have a similar term in place.
 
  • Like
Reactions: DJG
I wonder how many Three customers are aware of this condition of use:

"3.8 You grant us an irrevocable, royalty free, perpetual and worldwide licence to store... ...or otherwise deal with any content you upload on Three Services"

So they can store and do anything they want with any data you send over their internet services.

That opens up an entire minefield of potential risk for users. A lot of data uploaded by most users won't belong to them anyway, so they could be in trouble for assigning over the rights to it.

When you then add GDPR into the equation you could be looking at major issues.

I don't think there's any way Three customers could be expected to comply with this condition.
"you upload on Three Services"
Nota bene: "on", not "via".

Ie this may apply to stuff you upload on Three Services, such as the Three FTP server (if there is one) etc, not documents your upload to your employer's file server or clips you may upload to Youtube.
Otherwise is doesn't make sense.
 
Sponsored Links
"you upload on Three Services"
Nota bene: "on", not "via".

Ie this may apply to stuff you upload on Three Services, such as the Three FTP server (if there is one) etc, not documents your upload to your employer's file server or clips you may upload to Youtube.
Otherwise is doesn't make sense.
I thought that, but no, "Three Services" is accessing their broadband.
 

Attachments

  • Three Services Definition.webp
    Three Services Definition.webp
    19.3 KB · Views: 68
PAYG terms:
Three Services (or Services): the services offered by Three, including call services Messaging Services, Storage
Services, Age Restricted Services and Premium Services, which we have agreed to provide for you.
 
3 letters for you, VPN, (Specifically a proven no log VPN) assume all UK ISPs keep massive amounts of data on you.
 
3 letters for you, VPN, (Specifically a proven no log VPN) assume all UK ISPs keep massive amounts of data on you.
Vpn still goes through an uplink :)
However.. yeah, vpn is a good idea... BUUUT most of the vpn providers are a very sketchy bunch which are probably as bad or worse than the ISPs, I can't personally recommend any.
If you have a vpn from work, obviously use it.
 
Sponsored Links
This will be purely for "Web Searches" over thier Network, same as Search Engines, so they have the right Sell or Pass On the Traffic Satistics to 3rd Parties or A N Other, without your permission, it's extremely unlikely that any information they decide to pass on will contain any Personal Info.
 
Vpn still goes through an uplink :)
However.. yeah, vpn is a good idea... BUUUT most of the vpn providers are a very sketchy bunch which are probably as bad or worse than the ISPs, I can't personally recommend any.
If you have a vpn from work, obviously use it.
Indeed, but its encrypted and so 3 wont be able to read it, as for reputable VPNs, i can name a few who have gone through 3rd party audits, even one recent raid that resulted in no data being given over.
 
Indeed, but its encrypted and so 3 wont be able to read it, as for reputable VPNs, i can name a few who have gone through 3rd party audits, even one recent raid that resulted in no data being given over.
what ones are you referring to :)
 
This will be purely for "Web Searches" over thier Network, same as Search Engines, so they have the right Sell or Pass On the Traffic Satistics to 3rd Parties or A N Other without your permission.
 
Sponsored Links
Anything uploaded to a reputable service using HTTPS and modern TLS or similar encryption method won’t be readable by your ISP anyway (assuming you don’t install random certificates, ignore certificate warnings or use dodgy browsers/software). I wont go into too much detail as there are plenty of better explanations online than what i would write here.

They can still see what service you’re connecting to, and potentially fiddle DNS but being able to decode content upload to say youtube or google photos or even see what pages you load is only possible with some kind of exploit.

A VPN can help protect you further as said, but only as much as you trust the VPN provider as its another link in the chain.
 
Anything uploaded to a reputable service using HTTPS and modern TLS or similar encryption method won’t be readable by your ISP anyway (assuming you don’t install random certificates, ignore certificate warnings or use dodgy browsers/software). I wont go into too much detail as there are plenty of better explanations online than what i would write here.

They can still see what service you’re connecting to, and potentially fiddle DNS but being able to decode content upload to say youtube or google photos or even see what pages you load is only possible with some kind of exploit.

A VPN can help protect you further as said, but only as much as you trust the VPN provider as its another link in the chain.
You could also use DoH which would further stop them snooping on your DNS requests.
 
  • Like
Reactions: DJG
Anything uploaded to a reputable service using HTTPS and modern TLS or similar encryption method won’t be readable by your ISP anyway (assuming you don’t install random certificates, ignore certificate warnings or use dodgy browsers/software). I wont go into too much detail as there are plenty of better explanations online than what i would write here.

They can still see what service you’re connecting to, and potentially fiddle DNS but being able to decode content upload to say youtube or google photos or even see what pages you load is only possible with some kind of exploit.

A VPN can help protect you further as said, but only as much as you trust the VPN provider as its another link in the chain.

My awareness is that even if you are visiting HTTPS sites but using the ISP’s DNS server they will still see every single DNS request and domain thats being requested. On board with that they won’t be able to intercept the traffic to survey exact contents or play a man in the middle attack/game, however they still know and able to control (such as block) all DNS requests as it’s their servers you are using. Which is logical considering you are technically asking their server hey what is the IP address for …..

A good example is if you use NextDNS service and point your DNS server to your own private profile account with them, even with HTTPS traffic you will have the ability to see every single request captured in the logs.

Switching over to a DNS provider (many out there, NextDNS just an example with private profile abilities with log capturing) and routing your traffic via their services through HTTPS or DoH (as commenter above mentioned too) would achieve privacy from the ISP being able to recognise.

Of course just like with VPN’s this does mean the DNS provider you select will have the ability to log all your page visits so same ideas apply in choosing based on your comfort with your provider of choice.
 
Yep, its all a bit of a mess of different standards. From my understanding, even with DoH, you may not be completely protected and still requires trust in which DNS resolver you choose. Your ISP's resolvers may support DoH for example, but they'd still have your query. I'd argue the protection DNSSEC gives you is the most important, verifying that the server you're talking to is the server you expected, but it does nothing for privacy.

Most VPN clients have some form of DNS leak protection, but that still requires you to have trust in that VPN provider and their DNS resolvers (and possibly the companies they use to host their services across the world?).

Its definitely worth checking what DNS security settings your router has, DoH, DoT or DNSSEC and configuring with a resolver you trust (more than your ISP).

DNS security is a slightly different point though, the main one from the op is likely a non issue as Three wouldn't be able to store your files uploaded to services you trust outside of their own... unless the services you trust have poor security themselves, which means you probably have bigger issues.
 
Sponsored Links
Top
Cheap BIG ISPs for 100Mbps+
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Vodafone UK ISP Logo
Vodafone £24.00 - 26.00
150Mbps
Gift: None
NOW UK ISP Logo
NOW £24.00
100Mbps
Gift: None
Plusnet UK ISP Logo
Plusnet £25.99
145Mbps
Gift: £50 Reward Card
Large Availability | View All
Cheapest ISPs for 100Mbps+
Gigaclear UK ISP Logo
Gigaclear £17.00
200Mbps
Gift: None
Community Fibre UK ISP Logo
150Mbps
Gift: None
Virgin Media UK ISP Logo
Virgin Media £22.99
132Mbps
Gift: None
Hey! Broadband UK ISP Logo
150Mbps
Gift: None
Youfibre UK ISP Logo
Youfibre £23.99
150Mbps
Gift: None
Large Availability | View All
Sponsored Links
The Top 15 Category Tags
  1. FTTP (6026)
  2. BT (3639)
  3. Politics (2721)
  4. Business (2439)
  5. Openreach (2405)
  6. Building Digital UK (2330)
  7. Mobile Broadband (2146)
  8. FTTC (2083)
  9. Statistics (1901)
  10. 4G (1816)
  11. Virgin Media (1764)
  12. Ofcom Regulation (1582)
  13. Fibre Optic (1467)
  14. Wireless Internet (1462)
  15. 5G (1407)
Sponsored

Copyright © 1999 to Present - ISPreview.co.uk - All Rights Reserved - Terms  ,  Privacy and Cookie Policy  ,  Links  ,  Website Rules