Slashdot Mirror
What MSN, Google, Yahoo and AOL Know About You
hotgist writes "America's top four Internet companies, Google, Yahoo,
AOL and Microsoft's MSN, promise they will protect the personal information of
people who use their online services to search, shop and socialize. But a close
read of their privacy policies reveals as much exposure as protection. The
massive amounts of data these companies collect, which can include records of
the searches you make, the health problems you research and the investments you
monitor, can be requested by government investigators and subpoenaed by your
legal adversaries. But this same information is generally not available to you."
Ok, if I can't find out what records they are keeping about me, but legal adversaries can, someone please sue me and then subpeona them for me.
BTW, TFA appears to have gone though a buggy porn filter. It has words like "cir*****stantial" and "do*****ents"
yawn...nothing you do online is private. The real problem here is that people *think* they cannot be seen.
TFA made an interesting point, though...searches are as close to reading our thoughts as is possible. That is pretty scary. I'll bet there's all kinds of predictive software that could use that search data to profile us, even anticipate our next move. That's pretty scary.
blah blah blah
If you're logged in and you have it enabled, you can have Google tell you all of your search history. I disable that and generally block cookies from being stored by Google. I sometimes, depending on what I'm searching for, use inurl:nph-proxy.pl and find a random open proxy to search through or use a public facility like a SurfThing enabled coffee shop or library.
If my legal adversaries want to find out that I searched converting 3.5 tablespoons to teaspoons while cooking on Saturday, good for them. The rest of it is protected.
Now, what the general public does (like the moron that got busted for searching for how to commit undetectable murder and then poisoning her husband) is another story. No matter what, there will always be idiots that don't know how to cover their tracks regardless of the "privacy policy" of third parties.
Were things really much more private before the Internet as we know it today? You had to approach actual experts like doctors for any questions you had. That leaves a trail. And if you had checked out library books as research, I'm sure the government could trace those records as well, even before computerized systems. Technology simply makes the process shorter.
Always someone has power over you. The thing to consider is this: Is the power good, or bad?
You can find out more about me by rummaging through my trash can - quite legal too. Just make sure you get it off my lawn first, or say hello to my boomstick.
I hope, when they die, cartoon characters have to answer for their sins.
Don't forget to clear your cookies or block them from Google. The default Google cookie doesn't expire for 30 years, and with it Google can track all your activity on Google sites, from maps to gmail to search.
This is why I use different services for different things. While I absolutely love gmail, I don't use it for my primary webmail account. Instead, I use Yahoo! (though I hate those ads at the bottom of messages). This is because I use Google as my search engine of choice. And for messaging, I use AIM. I don't want companies to be able to attach seemingly disparate portions of my life together into a single profile. Sure, it can still be done, but diversifying makes things that much more difficult.
This guy's the limit!
The Aol "accident", government trying to subpoena search results, etc. Big companies whose source of income is to store and analyze massive amounts of personal preferences to sell targeted advertisements effectively store and analyze personal data. This article is a complete waste of time, don't bother reading it.
javascript:x='Nothing';y='preferences';try{if(con
Or else, google for GoogleAnon
They (my nephews and nieces) look at me as though I am an brontosauraus wearing Sanjaya's fauxhawk when I talk to them about the dangers of "overexposure" (both literally and figuratively) in the internet.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
Similar to the upcoming US election results
Look, I know that we don't have to use these services, but that doesn't make this sort of policy any less dangerous to the public in general. The Bush Administration will not be the last time we will hear about data retention policies, and if these services keep maintaining such detailed records, it's only a matter of time before the government gets full access to them. The privacy implications for that are that it'll be the first major step toward a total surveillance state for modern communications. A first, very, very important step once they get the search engines and ISPs working together to help them keep detailed record on what is done online.
I hoped they purged my request to find "the clitoris" on google maps
The original generic sig.
Is it linked by just cookie or also the mac? I would assume that most routers/firewalls mask the mac address, so is the cookie reference the only link?
Clearing cookies is great, but I'm not sure whether you're clearing cookies that will be saved, or cookies already saved.
Well I do not find this surprising. You should just use the Internet and associated products with the assumption of no privacy. If you do not have this assumption, you should read every line of the privacy policies. Even then make the assumption you are not safe. Mistakes and screw up happens. Hackers happen. "0day happens." Even if that information is "protected" it might still get out anyway. Assume they are collecting *.
They're all probably collecting tons of stuff, but I for one will not use Gmail or Google Talk. I make the assumption that they are data mining everything I do.
But Google does.
I'd be interested to know if this information is covered by the DPA for UK residents. Does search data count as personal information if the data is linked to an IP address rather than directly linked to my identity?
If it is then presumably I should be able to make a request under the DPA (without a court order) and they would be required by law to provide me with all information they have pertaining to me for a nominal fee within a certain time-period (I forget exactly how long).
Clearly IANAL and I don't know nearly enough about the DPA or international law to know if this applies. Any actual lawyers about there who can clear this up?
Spelling mistakes, grammatical errors, and stupid comments are intentional.
I'd be surprised if MSN knows anything about me, given that I never use MSN for anything. I only have one friend who uses MSN, so it's never been worth abandoning my principles and signing up.
People who use MSN are the kind of people who refer to their web browser as "the Internet".
GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
Say we accept our overlords as benign. Well a "useful" feature is clearly personalised search/news based on search history or email contents etc. This has been in beta in Google for some time. However what if in a workplace with a colleague looking over my shoulder I search for some innocuous term & it starts offering pornsites (which it knows being a single slashdottian I like) ? Problem is we all have secrets, closed areas ... if we use Google as our primary www interface & it works well then it's like we've written a diary - worse it has intelligent statistical mining in it that offers insights !
It could be the case that Google "knows" us nearly as well as our best friends but doesn't have the tact to keep its mouth shut at certain times !
Does anyone have any information on whether or not Track-Me-Not (which runs random searches against the big engines at random intervals) helps to confuse the trackers or not?
sPh
There are precedents for suing yourself, so the door is open a crack. Actually, no matter what the TFA implies, I imagine that search history wouldn't be the most interesting piece of information you could find about yourself, if you arm yourself with a good subpoena against yourself.
I can assure you, the best way to get rid of dragons is to have one of your own.
I have a VPN tunnel to a hosted dedicated server I setup as a proxy to my home connection. All my home traffic first passes through it encrypted. I share this box out to a few people. To establish connection with the proxy requires secure vpn. At home, I have 2 firefox items in my menu. One for my casual browsing, and another that connects to the proxy and request it to even anonymous communication even further using tor. This, plus not saving cookies beyond session helps me feel at least a little more secure that I can't be easily targeted. It also removes the case of my ISP being able to turn over anything useful on me.
I should have the right to receive, for free, a copy of any information a company has about me. It should be the same as with my credit report. By law (in the U.S.) you are entitled to a free copy of your credit report every year. I don't see why this concept can't be extended to ALL personally-identifiable data. For example, look at the way Google allows people to see their own search history. A law is needed, a "freedom of information" act, if you will, except this one should be applicable to organizations other than the government.
I think its wrong on the part of big search/email engines to log information about its user. For example whenever I use gmail and suppose I am writing an email to my sister asking how she is after her hernia operation, next time when I enter gmail I see all these ads on its interface about medicines/solutions for hernia. This clearly states that all this information is logged somewhere. Seems like we all need to be careful about what we typein our emails. I like how the physical world functions. If I go to a bookstore and buy a specific book, I am not bombarded by similar books the next time I go there. I again have the pleasure of browsing the whole selection rather than having options thrown at me without wanting them. Even though the internet has a larger catalogue of options, sooner or later everyone realizes that through their so called clever use of cookies and information logging we always get the same boring things thrown at us. These online companies do not believe in diversifying the customers options but it believes that if someone buys an action flick, they will always be buying the same genre. Atleast in the real world I am not pre-judged on my previous transactions.
You can mostly protect yourself from this if you use Google and a few simple tips:
1. If you have a Google account, make sure to disable search history and clear your previous searches. Also only login when necessary, not for general surfing.
2. If you get use Firefox get the CustomizeGoogle extension, it allows you to disable Google click tracking and also the Google Cookie (along with a bunch of other nice options like ad removal).
This still won't protect you from your local browser history on your computer, or from your own IP address, you can use a proxy to help conceal your IP from Google, and clearing your local history is easy enough. It really depends on how paranoid you are as to how extensively you wish to cover your tracks.
Finally, another choice is to use the Scroogle Scraper for your general searches, which is basically a totally anonymous Google-front end without Google ads.
It is time to trademark all the things about you that make yourself unique. Then, they cannot buy or sell your info without your expressed permission, which you don't do,
My identity is not for sale, thank you very much. My personal details, aren't for sale, thank you very much.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
Good luck finding a home computer that will host that cookie for 30 years.
How about just use a different browser for private searches etc? One from which, you never log into any service from the said search engine. As far as these sites go, they cannot be sure it is the same person just because the IP info is the same.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Maybe they don't, but I have to assume that they do.
I'd assume that your dedicated server has the same sort of issue.
If you live in the UK, then it *is* legally available to you under the Data Protection Act 1998 (for a maximum of £10). Under s.7(1).(a)(b)(c), they are required to give you a access to "the information constituting any personal data of which that individual is the data subject" (s.7(1).(c)(i)).
Go ahead and try.
It might be better to use a virtual machine, and don't save the changes. VM players are now free, and you don't really get much of a performance hit with the new CPU chips.
I was in the process of refinishing my basement. It had existing cinder-block walls that I chose to leave partially bare along with conventional sheetrock walls which I added. So, not being clear if the same Latex based interior paint would adhere equally well to both types of walls, I googled for "Latex Bondage"
I got a lot of unrelated hits......
A goal is a dream with a deadline
Don't forget TrackMeNot. Thanks to ComputerWorld for telling me about it.
Give me Classic Slashdot or give me death!
You still run into the problem of association by IP address unless you use a proxy.
What I think is best, is use two browsers, and set one up to use a proxy (preferably Tor, because it's better than just a single, basically untrusted, proxy), and do anything sensitive/private there. Don't ever log in there, and set it to get rid of cookies at the end of your session.
Apple's Safari browser has a nice mode called "Private Browsing" where it pauses adding anything you enter to the History or to saved form values, and when you turn it back off at the end, purges the cache and cookies. Although it's not that difficult to clean that stuff in Firefox, it'd be a nice option to see other browsers adopt. (Frankly, it would be nice if they built in Tor/Privoxy, so that when you activated the feature, it automatically started sending your traffic through the onion-router system, but that's an additional level of paranoia.)
"Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
Error 001
Security Scan and Virus Detection do not work with your operating system.
My grocer already knows my order when he sees me coming. Not that he gets them then for me. He already has gotten them ready because he knows when I arrive.
Invasion of privacy OR bloody good service I happily pay his slighly higher then average prices for?
God I love corner stores.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
Crap! You mean they can subpoena Blizzard and find out that I'm the one who slaughtered all those Shadethicket Stone Movers and Bark Rippers near Fallen Sky Lake on Sunday night?
Read any good sonnets lately?
Only three sites came up....an "animusic" video clip....the website of a nearby community college....and a site entirely in what appeared to be German....the image was suppressed by my work computer (as were the other two), and I have no recollection of visiting such a site - particularly given that it's in a language I don't understand.
A bit puzzling
A goal is a dream with a deadline
Edit > Preferences > Cookies > Keep until: I close Firefox
No jokes, please
Everyone concentrates so much on which services are collecting information and what information they are collecting. The next, and more important, question is rightly,"What are they doing with it?" I'm not talking about the generalized vague notion that everyone has: they're selling it. Yes, of course, but to whom are they selling it? Do they portion it out or do they sell the entire database in raw csv format any time anyone asks? Is there a subscription service to receive weekly or monthly updates to the dataset? Is there any effort made to screen the people who offer to buy the dataset to ensure that they will similarly protect the privacy and security of the consumers represented within it? Are there services which will cross-reference the various databases to infer data which cannot be directly collected for legal or technical reasons? Are there services which buy these datasets which offer to correlate them with tax records, grocery card clubs, and DMV records?
The answer to all of the above questions, of course, is "yes--to the worst extent possible and with absolutely no conscientious consideration for the consumer from whom the data is being mined". Take it for what it's worth. Twenty years ago the hospital kept records, the insurance companies kept records, the banks and retail outlets kept records, but they weren't so ready and apt to cross compile and sell those records to hundreds of political and fringe religious groups posing under infinitely ambiguous names such as International Financial Consultants, Ltd.
the NPG electrode was replaced with carbon blac
Personally i find it a little scary that big corporations have access to personal information like this. It doesnt seem justified that something like a search, which should be private, is public to advertising companies and others. Why should large companies be able to go through that information when we cant access it ourselves? I think if anyone should be able to grab my search history, it should be me, not the big name company looking to get more of my money. It almost feels as though im being watched through the screen when i search google for information that i'd like to view. Thats not a very comforting thought to me. This information should be kept private and not given away to anyone without consent of the person in question.
Sure, they can track a session that way, but close your browser, start at www.google.com, and there's no session id in the URL any more.
The difference is your history of search queries and your private email isn't public record. Sure, magazine subscriptions and the stores where you shop are enough info to lump you into a vague category of "marketing preferences", but it's nowhere near the level of detail that Google/AOL/MSN could compile through your login.
It wouldn't be too hard to create a script to randomly search on 5000 different terms a day from a dictionary. Then it would be nearly impossible to see that you were searching for actual info or an automated script did the searching.
Ninjas don't carry tic tacs
But unique URLs will only work within one browser session. Just log off after searching for duct tape and before searching for hamsters.
Have gnu, will travel.
that's unless you have GPS of course.
I had never thought much about it before, but I once I read this article, I couldn't help but to agree with it: http://www.vegasrex.com/2007/01/26/there-is-no-suc h-thing-as-profanity/
Isn't it all about the context?
There are no such thing as "bad" words in and of themselves.
That's only a problem if you never log in to gmail or some other personalized service. Once you do that, Google knows it's you. Sure, it can get confused if you log in from a friend's computer that never logged in to gmail before but has a Google cookie. Sure would be funny if all your friend's searches were linked to your Google profile that way.
Can you tell me what I did to piss my wife off yesterday, she's acting like a real bitch!
I'm the Google executive sleeping with your wife. Sorry about giving her access to your search history.
Once upon a time, I wondered in print why no activist virus writer had yet created a virus that simply watches for Windows dialog boxes that look like license agreements and then automatically simulates pressing the "I Agree" button. If widespread enough, this would render the legality of such "buy before you agree" licenses moot.
Here is yet another candidate for activist virus writers: a virus that secretly submits searches and performs browses to "spam" the spying that ISPs do on their customers. It could make regular searches and browses for ever-expanding variations of things like: "murder", "real estate", "bomb making", "viagra", "assasinate", "penny stocks", and so on. Eventually, spying advertisers would have to conclude that everybody wants to buy one of everything, and spying governments would have to conclude that everyone is a terrorist.
I have no wish to help criminals evade the law, but I have a greater wish to screw with anybody who thinks they have a right to spy on folks without a court order.
Keep Your Parents Off the Internet!
I suffer from attention surplus disorder.
Fixed Link
I have multiple boxes on 24x7 at home. Loads of wasted cycles...
...
How about a bot that throws searches at these guys - Can Google
filter out the noise? Probably something like this already exists..
a firefox plug in or some such..
Perhaps this is what Google/MSN/Yahoo etc fears the most - people
taking counter measures to screw up their valuable keyword database; these
counter measures impacting other algorithms ; bots "clicking" on ads
delete your index.dat's as well.. you'd be surprised what lurks there.. Everyone datamines their customers.. Your bank, CC agencies know a lot about you.. so does anywhere you shop with a rewards program. In this cashless computerized economy what people know about you is actually astounding. Ever see the pizza ad where the call taker tells you what you can buy based upon your health and so forth.. and you must pay much more because of recent crimes in your area.. and if you want double meat (more nitrates) you have to sign a disclaimer so if you get a heart attack you won't sue them.. oh btw they know your recent purchases and your credit as well... Your ISP can know a lot more about you than you realize as well.. ever notice how often just to view something you must register and login these days.. datamining... googles targeted ads... adsense.. live words.. it just goes on and on..
The cops must of found it and shut it down. Viva Le Resistance!