Slashdot Mirror


AOL Releases Search Logs of 657,427 Users

An anonymous reader writes "AOL has released the search logs of over 650,000 users for research purposes. This looks like it may become a public relations disaster for AOL, as well as a privacy nightmare for the users involved as Michael Arrington of TechCrunch notes: "AOL has released very private data about its users without their permission. While the AOL username has been changed to a random ID number, the ability to analyze all searches by a single user will often lead people to easily determine who the user is, and what they are up to. The data includes personal names, addresses, social security numbers and everything else someone might type into a search box." This is also being covered on The Paradigm Shift and Oh My News." fantomas adds " Looks like they've just taken it down but it's still available on The Pirate Bay; not sure why but some of the academic researchers are going crazy musing the ethical aspects of letting the world know who's searching for how to kill their wives ..." Update: 08/07 21:32 GMT by T : amromousa writes "AOL is now apologizing for the release ..., calling it a "screw-up," which they're upset and angry about."

34 of 346 comments (clear)

  1. finally, maybe users will wake up by yagu · · Score: 4, Insightful

    Finally, for all my support nightmares AOL users I know (and there are many!) that I endured over the years, a misstep that may offend and bother them as much as supporting AOL has bothered me for the last bazillion years. Go away AOL! (But, leave a few of your coasters at the store counters, those did come in kind of handy.)

    So, all of that aside (the court of public opinion stipulates AOL as stupid and insensitive), how equally egregious and offensive is others would propogate and perpetuate this misguided release of data? Any mirrors still carrying this information (and they are there) serves few purposes for continuing to provide access, and none are defensible: either they are happy and willing to allow potentially embarassing or damaging data to continue to be distributed, or they are sticking it to AOL when AOL has already fallen on their own sword -- enough is enough. It's not okay.

    (So, how many wives are either not going to be home tonight, or are going to fix hubby his very favorite dish?)

    1. Re:finally, maybe users will wake up by 'nother+poster · · Score: 4, Funny

      (So, how many wives are either not going to be home tonight, or are going to fix hubby his very favorite dish?)

      I bet the guy works for Rockstar games and is simply researching their next big hit. "Slap the Ho!" Where you put up with yo biotches shit till...

    2. Re:finally, maybe users will wake up by Richy_T · · Score: 4, Funny

      Me too.

    3. Re:finally, maybe users will wake up by Tackhead · · Score: 4, Funny
      > (So, how many wives are either not going to be home tonight, or are going to fix hubby his very favorite dish?)

      You keep making oblique references to steak and cheese. I do not think that phrase means what you think it means.

      (If it's 17556639's favorite dish, maybe his wife is looking forward to death.)

    4. Re:finally, maybe users will wake up by Irish_Samurai · · Score: 4, Interesting

      So, how many wives are either not going to be home tonight, or are going to fix hubby his very favorite dish?

      You're probably just trying to be funny, but this could be a real problem. I know I have had some seriously bizarre search historys when doing research on possible articles to write in my lame ass vanity site. They could very easily be taken out of context and used to make me look like a sicko instead of a cynic who wanted some of the bizarre material that non fiction can provide.

      Maybe this guy is doing some research on a book. Maybe he's an artist doing some death metal band's cover. Hell, maybe they have a socially retarded CS major for a dorm mate and are trying to freak them out.

      It's the ridiculous release of this type of data and the sensationalist warping of these smallest elements that allow our privacy to get train wrecked.

    5. Re:finally, maybe users will wake up by MillionthMonkey · · Score: 4, Interesting

      Check out Disturbing Search Requests where people search through their logs for interesting HTTP REFERER links from Google and submit the most disturbing. A common reaction is befuddlement from webmasters when Google returns their site in response to certain queries (such as "sweet as food delicious cheap dog fellatio").

      Who hasn't typed "how to kill your wife" into a search box by now anyway? (That was a joke! Hi honey!)

  2. Searching for SSN's?? by StarvingSE · · Score: 4, Interesting

    personal names, addresses, social security numbers and everything else someone might type into a search box.

    Who in their right mind would type their social security number in a search box, in plain text??? I mean, really???

    --
    I got nothin'
    1. Re:Searching for SSN's?? by RonnyJ · · Score: 5, Funny

      AOL users! ;)

    2. Re:Searching for SSN's?? by cbr2702 · · Score: 4, Insightful
      Who in their right mind would type their social security number in a search box, in plain text??? I mean, really???

      Maybe they want to be sure no one's posted it anywhere?

      --


      This post written under Gentoo-linux with an SCO IP license.
    3. Re:Searching for SSN's?? by The+Good+Reverend · · Score: 5, Insightful

      I have. I want to know if it's out there anywhere on the public internet. Same reason I search for my phone number, full name, etc.

    4. Re:Searching for SSN's?? by radarsat1 · · Score: 4, Interesting

      Who in their right mind would type their social security number in a search box, in plain text??? I mean, really???


      Who in their right mind would give their SSN to AOL?
      People really don't understand these issues.. I've this to be true recently when an HR person at my university asked me to send my SSN to her over email. Also, a couple weeks ago I booked a room at a hostel over the internet, and apparently I mistyped my credit card information, so they asked me if I could to to them again over email. You know, I just said "No, I'll call you." But it just goes to show that most people just don't even think about privacy issues. Even professionals who should know about these things. They just don't. Either that or they don't understand the technical side of it... like that email is not encrypted, etc.

      As for search engines, I've no idea why you'd be searching for one on Google, unless for instance you wanted to see if your own was available somewhere--Which is funny, now that I think about it. How can you search for your own online information (to see what is out there) without giving it away yourself by typing it into a search engine?
    5. Re:Searching for SSN's?? by Anonymous Coward · · Score: 5, Insightful
      It's a good way to find out if your SSN is being mismanaged by sloppy organizations.


      I've read of someone who tried it only to find that a group/department at his college had is SSN# posted :-(; which he now fixed. My guess is that his identity is safer for ahving done this.


      Of course, a partial SSN with a wildcard match might be a better idea.

    6. Re:Searching for SSN's?? by Anonymous Coward · · Score: 5, Funny

      But I thought AOL was the Internet? Now I'm confused..

    7. Re:Searching for SSN's?? by drix · · Score: 4, Funny

      Well, the thought never occured to me, but I just did it. If that number is publicly accessible on the web, I want to know about it.

      Unfortunately, though, Google thought I was entering a subtraction problem. The answer was -966. Now go theft my ID :-)

      --

      I think there is a world market for maybe five personal web logs.
    8. Re:Searching for SSN's?? by Jherek+Carnelian · · Score: 5, Interesting

      Also, a couple weeks ago I booked a room at a hostel over the internet, and apparently I mistyped my credit card information, so they asked me if I could to to them again over email. You know, I just said "No, I'll call you."

      I send my credit card numbers over email all the time. But I only use "throw-away" numbers that are generated on the fly and can only be charged by a single vendor up to a specific amount (pre-set by myself). Most of the big card issuers offer a similar service for free (last I heard, MBNA, which has offered it for at least 5-6 years now, has not had a single instance of succesful fraud involving such throw-away numbers, never mind free, they ought to be paying me to use the service).

    9. Re:Searching for SSN's?? by fragmentate · · Score: 4, Funny

      I know your SSN.


      It's 000-00-0966!

    10. Re:Searching for SSN's?? by slushdork · · Score: 5, Interesting
      So, after reading this, I thought I'd have some fun with Google:

      - Go to http://www.ssa.gov/employer/statewebcali.htm and pick an SSN prefix for a particular state (say, CA, which is from 545 to 573).

      - Go to Google, click Advanced Search, and in "With all of the words:" enter "SSN".

      - In "Return web pages containing numbers between" enter 545000000 "and" 574000000.

      - Click Search and stare in horror all the student listings, bankruptcy filings, etc. posted with names, SSNs, addresses, etc.

      I'm sure I'm not the first to think of this, but if you abuse any of this information, the Erinyes will come after you!

  3. Killing wives? by SoCalChris · · Score: 4, Insightful

    Way to jump to conclusions. How do you know that they weren't working on a screenplay, or simply trying to find a phrase they heard mentioned somewhere?

    If "End of the world" was searched for, how do you know if they are looking to the lyrics for an REM song, or trying to build a WMD?

  4. it's a geographic location! by krell · · Score: 5, Funny

    You insentive clod! The end of the world is a geographic location! Not everyone has been sold on the junk science of the round earth!

    --
    Where were you when the voynix came?
  5. Hopefully Google takes note by zibix · · Score: 5, Funny

    I hope that Google will now mark aol.com as an unsafe website to visit.

  6. This just in by Klaidas · · Score: 4, Interesting

    Company calls data posting a mistake.
    Hmm, I wonder if this "sorry" will be enough

  7. Funniest thing so far by saskboy · · Score: 5, Interesting

    A friend of mine downloaded this dataset.
    A teacher's credit union employee was searching for sexy underwear, how best to conduct a relationship with a co-worker, and have sex in a pickup.
    Just before that, she was searching for cars. And appears to have cancer as well, or lives with someone with cancer. Maybe it's her sick husband.

    I wonder if that demonstrates why someone wouldn't want their Google searches or AOL info to make it into the public realm. AOL is obviously a bastion of consumer rights.

    --
    Saskboy's blog is good. 9 out of 10 dentists agree.
    1. Re:Funniest thing so far by schwaang · · Score: 5, Informative
      Why were you ever under the delusion that aggrigate data about your searches would be kept private.


      Maybe because AOL's privacy policy says so? First because it defines Member Information to include:
      information about the searches you perform through the AOL Service and how you use the results of those searches;


      And then it says:
      AOL will only share your AOL Member information with third parties to provide products and services you have requested, or when we have your consent


    2. Re:Funniest thing so far by ivan256 · · Score: 4, Insightful

      Keep reading.

      Get down to the part about AOL Search, which has additional privacy terms. It is implied that they have your consent unless you opt out of the data collection.

  8. The last nail in the coffin by NightWulf · · Score: 4, Informative

    This is the last nail in the coffin for AOL I would say. This is a horrible invasion of privacy for people. Many people, myself included have probably searched for our own names, addresses, cities, credit card numbers, etc. I really hope that an attorney somewhere sues AOL into oblivion over this.

    Some intresting tidbits:

    17556639 how to kill your wife 17556639 how to kill your wife
    17556639 wife killer 17556639 how to kill a wife
    17556639 poop 17556639 dead people
    17556639 pictures of dead people 17556639 killed people
    17556639 dead pictures 17556639 dead pictures
    17556639 dead pictures 17556639 murder photo
    17556639 steak and cheese
    17556639 photo of death 17556639 photo of death
    17556639 death 17556639 dead people photos
    17556639 photo of dead people 17556639 www.murderdpeople.com
    17556639 decapatated photos 17556639 decapatated photos
    17556639 car crashes3 17556639 car crashes3

    160689 light brown colored semen 3/2/2006 16:30 9 http://experts.about.com/

    6497dog eat monkey5/22/2006 5:39
    6497dog eat monkey5/22/2006 5:39
    6497capuchin monkey dog5/22/2006 5:39
    6497dog eating monkey5/22/2006 5:40
    6497dog eating monkey5/22/2006 5:40
    6497dog eating monkey5/22/2006 5:40
    6497dog eats monkey5/22/2006 5:40
    6497dog eats monkey5/22/2006 5:41
    6497eating capuchin monkey5/22/2006 5:41
    6497eating capuchin monkey5/22/2006 5:41
    6497eating capuchin monkey5/22/2006 5:41
    6497kill capuchin monkey5/22/2006 5:41
    6497killing capuchin monkey5/22/2006 5:41
    6497slaughter capuchin monkey5/22/2006 5:42
    6497feeding capuchin monkey5/22/2006 5:42
    6497feeding capuchin monkey5/22/2006 5:42
    6497eyes capuchin monkey5/22/2006 5:42
    6497tail capuchin monkey5/22/2006 5:42
    6497tail capuchin monkey5/22/2006 5:43
    6497tail capuchin monkey5/22/2006 5:43

    6497beach stud speedo5/23/2006 1:24
    6497beach martin ricky5/23/2006 1:24
    6497beach martin ricky5/23/2006 1:25
    6497beach martin ricky5/23/2006 1:25
    6497beach martin ricky5/23/2006 1:25
    6497beach martin ricky5/23/2006 1:25
    6497beach martin ricky5/23/2006 1:27
    6497beach martin ricky5/23/2006 1:27
    6497beach martin ricky5/23/2006 1:28
    6497beach martin ricky5/23/2006 1:28
    6497beach martin ricky5/23/2006 1:28
    6497beach martin ricky5/23/2006 1:28
    6497beach martin ricky5/23/2006 1:29
    6497-5/23/2006 1:55
    6497-5/23/2006 1:55
    6497recent5/23/2006 1:55
    6497speedo triathlete5/23/2006 1:55

    3302children who have died from moms postpartum depression
    3302children who have died from moms postpartum depression
    3302rotovirus2006-03-24 19:55:12
    3302statistics on infancide
    3302statistics on infantcide
    3302statistics on infanticie
    3302statistics on infanticide postpartum depression
    3302statistics on infanticide postpartum depression
    3302statistics on infanticide postpartum depression
    3302pictires of tom cruise and his wife
    3302people magazines pictures of tom cruise and katie holmes

    2652898my space.com (about 100 times)
    2652898different ways to jerk of
    2652898how to not ejaculate so early
    2652898my penis has a big erection
    2652898free videos of big dicks

    Thanks to FARK.com for the snippits.

  9. New data just released by Anonymous Coward · · Score: 5, Funny

    657,437 searches for "how to cancel AOL"

  10. Child Porn by db32 · · Score: 5, Insightful

    Ahh...great...maybe I can expect a call from authorities if Google ever caves. I got one of those stupid ICQ Child Porn spams one day and started googling for reporting agencies. Not that I think it would do much good, but hey...I would rather have reported it and have it do nothing than to not have reported it and have no chance of it doing anything.

    In Soviet....err...In America the government watches you! Ahh...how the times have changed...Working on losing the 1st Ammendment and 4th Ammendment in 8 years. As Thomas Jefferson said "The beauty of the 2nd Ammendment is that you don't need it until the government tries to take it away"... I recently had a picture taken of my baby girl at the National Archives with those 3 terribly important documents honestly wondering if they will mean anything or even exist by the time she is old enough to show her kids the picture.

    But hey...may just be me being a pessimist...so maybe the spooks won't get up and arms datamining slashdot and seeing my TJ quote and come interrogate me for being a terrorist...just in case...

    Last post!

    --
    The only change I can believe in is what I find in my couch cushions.
  11. 14 download mirrors + BitTorrent link to the file by russiste · · Score: 5, Informative

    The file is available here:

    http://www.gregsadetsky.com/aol-data/

    There are 14 mirrors listed there. They have all been added after this first mirror went live less than 20 hours ago.

    I have already transferred 863Gb of data in that short period of time.

    --
    Loopsh of fury.
  12. Re:Just like the Bush Phone Tapping by Anonymous Coward · · Score: 5, Informative

    so I don't really see the privacy issue

    Then you're an idiot. The info itself can contain private info, and being linked by ID makes it much easier. Imagine this set of searches:
    Susan Smith phone number
    britney spears
    Smallville high school
    shoe store near smallville
    Smallville abortion clinic
    dr. joe jones

    6 searches and already we can assume the user lives in smallville, is young, knows susan smith, and is looking for information on abortions.

    Now, if instead of 6, we had every search for a month or two. How much more information about this "anonymous" user do you think we could find?

  13. User 17556639 by aquatone282 · · Score: 5, Funny

    FTA:

    17556639 how to kill your wife
    17556639 how to kill your wife
    17556639 wife killer
    17556639 how to kill a wife
    17556639 poop
    17556639 dead people
    17556639 pictures of dead people
    17556639 killed people
    17556639 dead pictures
    17556639 dead pictures
    17556639 dead pictures
    17556639 murder photo
    17556639 steak and cheese
    17556639 photo of death
    17556639 photo of death
    17556639 death
    17556639 dead people photos
    17556639 photo of dead people
    17556639 www.murderdpeople.com
    17556639 decapatated photos
    17556639 decapatated photos
    17556639 car crashes3
    17556639 car crashes3
    17556639 car crash photo

    Mmmmmm. . . Steak and cheese. . .

    --
    What?
  14. Identifying some users is easier than others by Anonymous Coward · · Score: 5, Funny

    13455621 how to fucking bury someone
    13455621 funky gibbon
    13455621 chair repairs seattle
    13455621 addams family
    13455621 OSS cancer
    13455621 FUD spreading

  15. Re:14 download mirrors + BitTorrent link to the fi by Yvanhoe · · Score: 4, Funny

    You should be logging the ips downloading the file and leak that in a few days...

    --
    The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
  16. Time to revisit "personally identifying info" by geekotourist · · Score: 5, Interesting
    When AOL appologized today, the spokesperson said '"Although there was no personally-identifiable data linked to these accounts, we're absolutely not defending this."


    Back in January, related to the story on how the DoJ demands and gets ISP data, AOL had said that "We did not comply with the request made in the subpoena," spokesman Andrew Weinstein said. "Instead, we gave the Department of Justice a list of aggregate anonymous search terms that did not include results or any personally identifiable information."


    AOL- you need to rethink that phrase personally identifiable, because it doesn't seem to mean what you think it means. You're hiding behind one technical definition of PII, without concern about whether or not the results actually have PII. If you're releasing results with personally identifying information, then you cannot say you're not releasing PII. I'd written in January I'd writen "I question this assumption by Yahoo, AOL, etc. that search terms, by themselves, have no privacy considerations because they've been separated from personal info. What if the search itself contains personal information? Are the search companies deleting the timestamps and randomizing the order of the search terms themselves? Because otherwise I could see personal info showing up." Obviously, half a year later, they still think that replacing a name with a number takes away the PII. They need to have a talk with, say, the Census Department, about why the department will withhold data about *groups* of businesses in a region. Grouped data can easily become PII data if you can tease out characteristics. AOL didn't even group the data!


    As always, relevant quotes from the best.essay.evar on why privacy is a fundamental human right: "If information that is actually about someone else is wrongly applied to us, if wrong facts make it appear that we've done things we haven't, if perfectly innocent behavior is misinterpreted as suspicious because authorities don't know our reasons or our circumstances, we will be at risk of finding ourselves in trouble in a society where everyone is regarded as a suspect. By the time we clear our names and establish our innocence, we may have suffered irreparable financial or social harm..."

    "...agents of the state in Canada cannot order Canada Post to photocopy the address on every envelope we send, nor can they order bookstores to keep a record of every book we buy, let alone of every page of every magazine we leaf through. There is no reason why they should be able to exercise such powers with regard to every e-mail someone sends or every Web site he or she visits."

    "I do not see any reason why e-mails should be subject to a lower standard of privacy protection than letters or telephone calls. And I do not see why Internet browsing should be subject to a lower standard of protection than book purchasing or researching in a reference library. Canadians should not be subject to greater state monitoring or scrutiny just because they choose to use new communication technologies."

  17. Re:What if he's searching for a story by Fortran+IV · · Score: 4, Funny

    ...there are a lot of stories and sites that are just supposed to be obviously humorous, not actually to be a DYI guide to the subject in their title.

    "A Do-Yourself-In guide"? I thought he was looking for help with murder, not suicide.

    --
    I figure by 2030 or so my 6-digit UID will be something to brag about.