Slashdot Mirror


Search Engine Privacy Explained

Kesch writes "Zdnet has a posted a FAQ describing the storage of personal information done by the search engines of AOL, MSN, Yahoo, and, of course, Google. They describe what information is stored, how it is stored, what laws protect it (none), how you can attempt to protect your privacy, and what Congress is doing with regards to the issue."

36 of 158 comments (clear)

  1. Speak for yourself by Anonymous Coward · · Score: 5, Informative

    They describe what information is stored, how it is stored, what laws protect it (none)

    As a company operating in the UK, and as I am a citizen of the UK, m privacy is protected by the Data Protection Act. I have the right to demand access to my data, and they are legally obliged to give it to me. If I find it to be incorrect, they are obliged to correct it. They can only use this data in the manner in which they are registered to use it with the Data Protection Registrar, and they can only share it with others under strict rules.

    As I understand it, the rest of the EU have similar laws.

    1. Re:Speak for yourself by Ph33r+th3+g(O)at · · Score: 5, Insightful
      What do you bet that if you invoked this, Google would say "But we're not a UK company!" Of course, when it comes to appeasing the ChiComs for a shot at the billion-enslaved-Chinese market, "We have to comply with Chinese law because we do business in China."

      Google's "Don't be evil" veneer has worn off even quicker than I expected.

      --
      I too have felt the cold finger of injustice.
    2. Re:Speak for yourself by Anonymous Coward · · Score: 4, Insightful

      What do you bet that if you invoked this, Google would say "But we're not a UK company!"

      Like how Microsoft said "But we're not an EU company!" when they are being fined millions and forced to open up their protocols and file formats?

      The bottom line is that if you want to do business in a particular country, you need to abide by that country's laws. Google want to do business in the UK (and China), so they have to abide by the UK's (and China's) laws.

    3. Re:Speak for yourself by FinestLittleSpace · · Score: 2, Insightful

      Nope, if they operate in the UK (which, obviously, they do), they are required to follow UK law. End of. Stop pointless 1337 g00gl3 bashing.

    4. Re:Speak for yourself by cyranose · · Score: 3, Insightful

      I'm not sure where the misunderstanding comes from, but it persists.

      Google.com (US and intl servers) is still available to China UNCENSORED by Google (at least as uncensored as the US database is). Google.com is apparently censored or degraded by China or their ISPs to the point of being painfully slow, spotty, etc..

      Google.cn is the new service that uses servers INSIDE the Great Firewall, therefore isn't censored on the international pipes and is much more available to the people who need it. The tradeoff is that the servers are INSIDE China and therefore subject to Chinese law, no matter what Google chooses. Google could say no censorship and China could say, "Okay, we now own your servers."

      You can argue that Google shouldn't have created a second system for better service (in terms of access) with the caveat that some results are censored by law. But you can't say Google decided to censor China. It's not because "they do business" in China. It's because the SERVERS are in China. Chinese computer users can still get to Google.com (I hope) and have some choice in the matter.

    5. Re:Speak for yourself by cyranose · · Score: 3, Insightful

      I don't think you understand the situation. Take a moment to consider:

      1. Bejing is forcing the censorship. The only way Google could steer clear of it is to avoid all service to China. Who does that benefit? The Chinese people might never even hear about such a stunt.

      2. All countries (even the US) have some level of censorship, so the test is not "selling out" vs. being true to some ideal. It's a judgement ca Or should Google stop service to all countries that don't meat your ideal?

      3. As I said, Chinese can still (I hope) reach uncensored Google.com if they need it (albeit slowly).

      4. Re-read 1984. The Ministry of Truth is not about twisting the truth, not censoring it. Good == bad, etc.. Are you alleging that Google rewords web pages to alter their meaning?

      5. This US administration is more likely to use double-speak (again, re-read 1984) than anything I've heard come out of China. "Unwarranted Spying => terrorist prevention." Death Tax. No Child Left Behind. Would you argue that Google should not operate in the US to make a point about the Bush administration?

      The one big complaint I do have about Google is that they should not log IP addresses. If people want to use their cookies for some service benefit, that's fine. But don't track my IP over time without my permission. On that, I call BS.

    6. Re:Speak for yourself by zcat_NZ · · Score: 2, Insightful

      I understand Google also mentions at the bottom of the page when results have been omitted, much the same as they do for DMCA removals.

      Besides the government of china is blocking those websites, not google. As much as anything google's just removing results that the chinese won't be able to see anyhow. I'd be pretty annoyed if I look something up on Google and the first few pages of results are all 404.

      The only other alternative would be for google to stay out of china. That'd be a loss for the 99.9% of chinese who don't know or particularly care about tianimen square or falungong and just want to do regular, non-controversial searches on stuff that interests them. It'd be a loss for the 0.1% that do, and aren't being told by yahoo or msn that their results are being censored by the government.

      I've thought long and hard about the issue and I can't think of anything less evil that google could have done in this situation.

      --
      455fe10422ca29c4933f95052b792ab2
  2. Not Surprising by valisk · · Score: 3, Funny
    None of this is exactly surprising as it should have occured to anyone who cared to think about the issue.

    But it does leave a legitimate question.
    Will those bastards at Google tell my wife about my chronic pr0n addiction?

    --

    Economic Left/Right: -0.62
    Social Libertarian/Authoritarian: -3.69
    1. Re:Not Surprising by paulthomas · · Score: 4, Funny

      Will those bastards at Google tell my wife about my chronic pr0n addiction?
      No, but /. might.

      Love,
      Your Wife

  3. opt out... by mytrip · · Score: 5, Informative

    Google lets you remove your phone number from their database so other people can't look you up. They ought to let you remove your search history from their databases as well. I'm going to suggest this in their support forums.

    --
    Contrary to popular belief, Unix is user friendly. It just happens to be particular about who it makes friends with.
    1. Re:opt out... by MoonBuggy · · Score: 4, Insightful

      And if they won't remove it, we should be able to make it useless. Just a little program that runs constantly and searches for random words (both innocuous and suspicious) at random time intervals (probably less than every minute). It would use little bandwidth and would result in your 'search dossier' being inconveniently large and legitimately deniable.

    2. Re:opt out... by The+Cisco+Kid · · Score: 4, Informative

      They do. Just log in to your google account and click 'Search History' (at the top), then 'Remove items' (on the left) - As well as the ability to remove individual searches or clicked results, there is also a "Clear entire Search History" option.

  4. Just before anyone jumps down this fellows throat. by reality-bytes · · Score: 4, Insightful

    Yes, I know that Google, Yahoo etc are US companies.

    However, they have UK operations and these operations will fall under UK law. In the case of Google, trying to access google.com will usually force you to google.co.uk if it detects your IPs geographical origin as being in the UK.

    It would be reasonable to assume that the UK DPA would apply to information aquired by the UK operations of US companies.

    --
    Ripping an new rectum in the fabric of spacetime.
  5. Anyone entering dodge search terms by Ph33r+th3+g(O)at · · Score: 2, Informative

    and not taking the easily available countermeasures (e.g. TOR, JAP) is playing with fire. But this isn't necessarily bad news for Google--if they can charge a "reasonable fee," they could make complying with subpoenas from prosecutors on fishing expeditions, the entertainment cartel, and divorce attorneys into a profit center!

    --
    I too have felt the cold finger of injustice.
    1. Re:Anyone entering dodge search terms by Maximalist · · Score: 2, Informative

      Well, being able to get all of the google searches somebody performed in a certain time frame would be useful to lots more than just divorce lawyers... There are plenty of legal matters where "intent" is a factor... for example, in some states the tort of civil conspiracy requires proof of "malice". Search records, and more general net usage records could go a long way toward proving malice or other states of mind. Since lawyers are required to be zealous in their representation of their clients, subpoening this stuff is going to become much more common once it gets onto lawyers's radar.

    2. Re:Anyone entering dodge search terms by Ph33r+th3+g(O)at · · Score: 2, Interesting

      Right--I don't remember who said it, but someone referred to Google's search history data as a "database of intentions." It was sometime around then that I started anonymizing my access to the Internet to the extent practical. I don't want the (example) fact that I was curious about eco-terrorism to make me a suspect in a fur-vandalism case or worse sometime down the road.

      --
      I too have felt the cold finger of injustice.
  6. Worst Case Scenario by xXBondsXx · · Score: 2, Insightful

    Let's think about the worst case scenario here: if search engines are required by law to give up their search history on a particular person, sure it's scary but it doesn't mean much. If you're in court for murder and the evidence is circumstantial at best, will the fact that you googled for "hot sex" and "people dieing" really get you that life sentence? Obviously this applies at a lot more to child pornography and copyright cases, but for some reason I don't think it would sway the majority of criminal cases. Even if google made some kind of GoogleSearchLookUp application right next to Earth and gmail, curiosty != guilty. If a lawyer brought this up, the judge would probably get all sorts of relevance objections from the opposing side, but I can imagine the jury being swayed by such evidence. Still, I think this is just another one of our privacies that we are throwing away today. If kids are getting arrested for requesting copies of the Little Red Book (discussed previously on slashdot) in libraries, I just wonder what you would get for googling "how to kill the president". In TFA, they quote one Harvard law professor calling the subpeona power "a blank check." I think in the future, Google will be forced to hand over their huge search histories on a daily basis for the federal government, and it would just be another big brother thing. Having this information is very useful to Google (study demographics of particular topics), so deleting it is a huge blow to their power Personally, I am infuriated that the government can just request this information at will. And we ALL know that this information won't be used JUST pursue terrorists...

    --
    The voice of the next generation. "In this tower, in my mind..." Babble - Tower
    1. Re:Worst Case Scenario by zaajats · · Score: 2, Informative

      Actually the kid "who got arrested" made up the story.

      I agree on everything else

  7. Ah, yes, the federal government by typical · · Score: 3, Informative

    ...and what Congress is doing with regards to the issue.

    That would be *other* than seizing our search data to try to prove that porn should be banned on the Internet, I assume.

    --
    Any program relying on (nontrivial) preemptive multithreading will be buggy.
  8. Nothing new by Anonymous Coward · · Score: 5, Interesting
    They had this back in 1984: Memory holes.

    If you recall, all information placed in memory holes was supposedly destroyed, but it turned out that the government actually retained every item, and they came in handy for interrogation sessions.

  9. The GoogleWatch Guy by paulthomas · · Score: 4, Insightful

    Okay, so we all thought to some degree that the guy behind GoogleWatch was a nut. I suppose right now is when he can say: I TOLD YOU SO regarding the ability to compile search histories thanks to the never-expiring cookie.

    Best,
    Paul

    1. Re:The GoogleWatch Guy by Everyman · · Score: 2, Interesting

      Google Watch also runs Scroogle.org, a proxy that scrapes Google and/or Yahoo. One reply to the post says that I'm still a nut. But while I may or may not be a nut, this reply from an Anonymous Coward is wrong about the cookie. You don't need a globally-unique ID in a cookie to save the user's preferences. That is NOT the primary purpose of the cookie, but rather a convenient cover story for Google. The purpose of the cookie is so that you have a unique ID to tie together the activity of a single person who uses different IP addresses over time.

      In fact, you don't even need a cookie to save preferences. All you need is a specially-crafted URL that you save as a bookmark.

      Assuming that you delete your cookie constantly, or use a browser that lets you define your search engine cookie as a session cookie despite the expiration date, then the question becomes, "How do I change my IP address, which tends to be a bit too sticky for my tastes now that I'm on broadband?"

      Broadband providers have different policies in different parts of the world, or even different parts of the U.S. But as someone who recently has been a Timer Warner Cable broadband subscriber, and switched to SBC/Yahoo DSL broadband, it seems to me that the key to getting a fresh IP address -- at least in San Antonio, Texas where I'm located, is to show a different network interface card MAC address to your provider.

      I have two computers, and when I switch my Ethernet connection to the other computer, both the cable provider and the DSL provider tended to give me a new IP address. You have to power down the the modem and the computer while the switch is made, or else one or both might remember the old IP address and cause it to get reassigned. Before powering down your computer, clear your old IP address in that window that shows your network connection, so thatn when it powers back up it looks for a new address instead of telling the modem what address it used to have.

      Yes, your service provider probably has a list of all the IP addresses you ever used, and when you used them. But it's one step more complex for the bad guys to pull together a list like this from your service provider. Without this extra step, the information from Google won't be complete.

      Of course, you can use Scroogle.org for your searches and not even worry about this stuff.

  10. can you say irony? by MellowTigger · · Score: 2, Interesting

    ZDnet uses url redirection in the links in its story. You know... the story that mentions url redirection as an unsafe practice.

  11. Scope and Semantics by Quirk · · Score: 3, Interesting
    Q: Let's say the Bush administration wanted to obtain a list of the names or Internet addresses of anyone who typed "how to grow marijuana" or "how to cheat on income taxes" into Google. Could that be done? Probably. If the Electronic Communications Privacy Act does not apply, all that's required is a subpoena from a prosecutor, and no prior approval from a judge is necessary. One Harvard law professor calls the subpoena power "akin to a blank check."

    "The threshold rule is relevance," says Paul Ohm, the University of Colorado law professor. "Relevance has been quite broadly construed. As long as you can show that something's relevant to a case or criminal investigation, I think the litigant would have a pretty good argument."

    The suggestion that relevance has been broadly construed is disturbing. The erosion of civil liberties needn't necessarily follow from the enactment of bad laws, but can, just as easily, follow from too broad an interpretation of existing laws and practices.

    If the judiciary restrict the interpretation of terms like relevance to as narrow a meaning as possible there is less room for abuse, but in the present environment it's likely judges, not only in America, but in the west generally, will allow broad definitions of such terms to the detriment of civil liberties.

    --
    "Academicians are more likely to share each other's toothbrush than each other's nomenclature."
    Cohen
  12. But wait! There's more! by Anonymous Coward · · Score: 5, Interesting

    There's still no mention of Macromedia Flash. Flash applets are very popular on most pages nowadays. They are used for ads, interactive demos, forms and more. But, people don;t seem to realize that they are also highly effective for storing information that can and is used for tracking purposes on your computer.

    Have a look at
    ~/macromedia/Macromedia/Flash\ Player/macromedia.com/support/flashplayer/sys

    or on Windows

    C:\Documents and Settings\%UserName%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys

    Did you know that all of that was there? Do you know what's stored in all those files? Did you know that those files are accessible by any flash applet that runs on your system and that the flash applet can and does report back to its creator?

    Then of course there are the problems due to Java script. Google has one for their analytics service that's all over the web tracking everyone. It's called Urchin and it's even in this page. Just look at the source for this page and search for "urchin.js".

    People don't realize that they are totally OWNED!

  13. Google.nl by Teun · · Score: 3, Insightful
    As you mention most European countries have fairly strict laws governing the collection and keeping of personal data, including the obligation to give access and possible redress.
    Google has a Dutch portal and a Dutch sales office, both might make them responsible to follow the Laws of the Land.

    Till now especially airlines have been exposed to the authority that is supervising adherence with this law but other companies with international operations are aware.

    Teun@Tosh2:~$ whois google.nl

    Rights restricted by copyright. See
    http://www.domain-registry.nl/whois.php

    Domain name:
    google.nl (first domain)

    Status: active

    Registrant:
    Google Inc.
    Bayshore Parkway 2400
    94043
    MOUNTAIN VIEW CA
    United States of America

    Domicile:
    Lagedijk 7
    2064 KT SPAARNDAM
    Netherlands

    Sales Office Benelux
    WTC2, Zuidplein 36
    1077 XV Amsterdam
    The Netherlands

    --
    "The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
  14. Oops by kalbzayn · · Score: 3, Funny

    I was going to RTFA but then realized that zdnet is probably working in association with the government to gather information about people that would be interested in this article. And I'm not going to fall for it.

  15. Re:Just before anyone jumps down this fellows thro by smoker2 · · Score: 2, Interesting
    In the case of Google, trying to access google.com will usually force you to google.co.uk if it detects your IPs geographical origin as being in the UK.
    No, not here it doesn't. You have to specifically enter google.co.uk as the address, unless they are using URL masking - which is possible as the first few results are always uk based. However, I have a gmail account so they already know where I'm located (presumably) and the first results are always paid for ad-spots anyway.

    But having said that, what matters is where the end-user is located not where the page is generated (see French anti-nazi censorship story).

  16. Become Private by Slashdotgirl · · Score: 4, Informative
    The following are just some of the programs, which provide a level of both encryption and anonymous communication for Internet usage:

    • Tor: Onion-based routing that acts as a proxy layer between the client computer and the Tor network. http://tor.eff.org/

    • I2P: Also known as the Invisible Internet Project. The network is regarded as a message based system. http://www.i2p.net/

    • FreeNet: is a distributed information and storage retrieval system designed to address the concerns of privacy. Freenet is designed to be anonymous and totally peer to peer. http://freenetproject.org/

    • GNUnet: is a P2P network that can support many different forms of peer-to-peer applications. http://gnunet.org/

    There are other programs and if you do not want your "private details" known then you would be wise to use them. In addition, anyone who thinks their private data that is held by organisations and government departments is safe whether there is a "Data Protection Act" or not then they should think twice for example the "National Security Agency eavesdropping on Americans incident". This is not the first time nor will it be the last time that such incidents will occur. Without being anonymous, we can never have true freedom of speech.

    --
    The more I know, the less I know
    1. Re:Become Private by Slashdotgirl · · Score: 2, Informative
      The following two articles should make it quite explicit as to what companies and governments are doing.

      The EFF has an article. Where it's suing AT&T for breach of privacy.
      The Electronic Frontier Foundation (EFF) filed a class-action lawsuit against AT&T Tuesday, accusing the telecom giant of violating the law and the privacy of its customers by collaborating with the National Security Agency (NSA) in its massive and illegal program to wiretap and data-mine Americans' communications. http://www.eff.org/news/archives/2006_01.php#00436 9
      In addition the ACLU has an update article on the U.S. National Security Agency, spying on American people and the rest of the world. "Eavesdropping 101: What Can The NSA Do? http://www.aclu.org/safefree/nsaspying/23989res200 60131.html.

      What is it going to take to stop this type of activity?

      --
      The more I know, the less I know
  17. The reason they want to use search engine data... by mabu · · Score: 4, Insightful

    I'm not conspiracy theorist, but it seems pretty obvious the real value of this information and what the government might do with it once you examine the playing field and the objectives of all parties involved.

    Frist and foremost, the Internet is currently unregulated. This really bothers most governments around the world, and probably the United States most of all. They want to have more control over this medium for a myriad of reasons, not the least of which is tax purposes and the ability to influence the populace. Look at what's been done with mainstream media and you can have an idea of what the powers-that-be would like to see happen to the Internet.

    However, the government cannot simply arbitrarily announce they're going to start heavily regulating the Internet. That's not going to work, so the first step will be to try to use some kind of politically-correct issue, to shoe-horn their grimy hands into the issue. This is likely to be something like child pornography, which very few will have problems with. Things like COPA are good examples of regulatory laws which were passed with a minimum of opposition due to the PC-nature of the issues they addressed, but they all have the ultimate goal of setting precedents where the government(s) can tell you what you can do with your web site.

    The demographic profiling done by companies like Google is a big part of the government's ability to make their case for additional regulation.

    Make no mistake, this is and will continue to happen. Whether or not any of us think that it's practical to try to control/regulate what happens online, the government is sure going to try. With more and more commerce moving to the online world, and less dependence upon traditional media sources, big companies are going to want to have their piece of the pie, and they rarely play fair. We should be paying very close attention to what happens from the perspective of this plan. We should expect and anticipate a few popular scenarios to present themselves which will sway public opinion into allowing more government regulation of online activity. This may have to do with terrorism, child porn, or even spam. It's going to be an interesting time in the next decade as we watch and see how select corporate and government interests try to bully their way into having control of the Internet. Search engines are treasure troves of information they can use to prove any claim they want.

  18. Re:Just before anyone jumps down this fellows thro by janrinok · · Score: 2, Insightful

    Of course it does - Microsoft is a US company but when dealing in Europe it has to comply with OUR laws. Google is no different!

    --
    Have a look at soylentnews.org for a different view
  19. Re:Currently, it's all somewhat irrelevant... by tehdaemon · · Score: 2

    You missed a somewhat subtle nuance in his statement. Assumption, - you are right and we legally are not at war. Bush can, and is, still claiming that we are at war and is abusing this with his propoganda. Pretty much until the supreame court says no, Bush can still claim this. Whether he is right or wrong is mostly irrelavant.

    --
    Laws are horrible moral guides, moral guides make even worse laws.
  20. Re:Ah, yes. Truth and Honesty: The New Flamebait. by Original+Replica · · Score: 2, Informative

    So a guy that makes fun of congress trying to ban internet pr0n is in your opinon "right-wing", interesting. Come on, I think /. is if anything slightly liberal, and I live in NYC.

    --
    We are all just people.
  21. Support sites that protect your privacy by mike2006 · · Score: 2, Interesting

    Support sites that protect your privacy and limit government access to it. Pretty simple statement but not easy to do even with the variety of competing search engines. For example for Newslookup.com I can tell you that your search results tracking, logs and personally indentifiable information is regularly purged. There are other search engines that also make this claim however many sites use a 3rd party to display Ads. With every page display the Ad serving company will have logged the referring link from the page which includes your search term.

    There are just so many levels at which you can be tracked and your private data can become public. In most cases I am against government regulation but I believe companies should be required to purge personally identifiable information along with tighter restrictions and penalities should private information be revealed.

    It is likely the reverse will happen and perhaps that is an opportunity for competition where a cookie free news search engine with third party Ad serving such as Newslookup.com will benefit :)

  22. Google Analytics Fixes by Fnord666 · · Score: 2, Informative
    A brute force approach for google analytics is to add the following to your hosts file:
    # [Google Inc]
    127.0.0.1 www.google-analytics.com

    If you are using firefox, then there is an extension to customize your interaction with google. One of the preference sections is privacy settings. Options include anonymizing your user ID and never sending cookie data to google analytics.
    labnol.blogspot.com has an article that discusses both of these options and also discusses how to add the hosts entry on a windows box.

    --
    'The tyrant will always find pretext for his tyranny.' - Aesop's Fables