Slashdot Mirror


What MSN, Google, Yahoo and AOL Know About You

hotgist writes "America's top four Internet companies, Google, Yahoo, AOL and Microsoft's MSN, promise they will protect the personal information of people who use their online services to search, shop and socialize. But a close read of their privacy policies reveals as much exposure as protection. The massive amounts of data these companies collect, which can include records of the searches you make, the health problems you research and the investments you monitor, can be requested by government investigators and subpoenaed by your legal adversaries. But this same information is generally not available to you."

44 of 169 comments (clear)

  1. Cum on, sue me by Harmonious+Botch · · Score: 4, Interesting

    Ok, if I can't find out what records they are keeping about me, but legal adversaries can, someone please sue me and then subpeona them for me.
    BTW, TFA appears to have gone though a buggy porn filter. It has words like "cir*****stantial" and "do*****ents"

    1. Re:Cum on, sue me by Otter+Escaping+North · · Score: 5, Funny

      Ok, if I can't find out what records they are keeping about me, but legal adversaries can, someone please sue me and then subpeona them for me.

      Try downloading some music - I hear that works pretty good.

      --
      Running Windows^H^H^H^H^H^H^H OSX and Linux in the home. (I don't have time for Solitaire any more.)
    2. Re:Cum on, sue me by networkBoy · · Score: 2, Funny

      I like the open/close quotes disparity ``" :-)
      Yeah, we need to get a subpoena ring together. I'll subpoena your records, you subpoena mine...
      There needs to be a code of honor though, else I'm in for some trouble.
      -nB

      --
      whois gawk date unzip strip find touch finger mount join nice man top fsck grep eject more yes exit umount sleep dump
    3. Re:Cum on, sue me by Qzukk · · Score: 3, Interesting

      BTW, TFA appears to have gone though a buggy porn filter. It has words like "cir*****stantial" and "do*****ents"

      Yet "child pornography" and "sex partners" had no problem. Fascinating priorities for words to censor by a porn filter, there.

      --
      If I have been able to see further than others, it is because I bought a pair of binoculars.
  2. surprised by hobo+sapiens · · Score: 4, Interesting

    yawn...nothing you do online is private. The real problem here is that people *think* they cannot be seen.

    TFA made an interesting point, though...searches are as close to reading our thoughts as is possible. That is pretty scary. I'll bet there's all kinds of predictive software that could use that search data to profile us, even anticipate our next move. That's pretty scary.

    --
    blah blah blah
    1. Re:surprised by voice_of_all_reason · · Score: 4, Funny

      yawn...nothing you do online is private. The real problem here is that people *think* they cannot be seen.

      Ceiling google is watching you masturbate?

    2. Re:surprised by blueZhift · · Score: 4, Informative

      Absolutely! There is no such thing as anonymous on the net. So the real solution is not going to be getting Yahoo, AOL, or whoever to stop collecting data. They never will because it makes them too much money. The real "solution" is spreading the word to users that they are not anonymous and behave accordingly.

      BTW, the Chicago Police already use an Oracle based data mining system to produce crime forecasts for the city that they use to decide how to deploy forces from day to day. I first learned about this system years ago, so it may be safe to assume that there have been improvements since that time. The future is now.

    3. Re:surprised by LordOfTheNoobs · · Score: 5, Funny

      It's a bit muggery out there today folks, with a thirteen percent chance of homicide over on 5th. So remember to don those kevlars. Back to you, Tom.

      --
      They're there affecting their effect.
    4. Re:surprised by ozbird · · Score: 3, Funny

      TFA made an interesting point, though...searches are as close to reading our thoughts as is possible.

      So mess with their heads. For example, go to MSN's search page and enter: Microsoft Vista class action lawsuit...

  3. Google allows you to see past searches... by garcia · · Score: 2, Informative

    If you're logged in and you have it enabled, you can have Google tell you all of your search history. I disable that and generally block cookies from being stored by Google. I sometimes, depending on what I'm searching for, use inurl:nph-proxy.pl and find a random open proxy to search through or use a public facility like a SurfThing enabled coffee shop or library.

    If my legal adversaries want to find out that I searched converting 3.5 tablespoons to teaspoons while cooking on Saturday, good for them. The rest of it is protected.

    Now, what the general public does (like the moron that got busted for searching for how to commit undetectable murder and then poisoning her husband) is another story. No matter what, there will always be idiots that don't know how to cover their tracks regardless of the "privacy policy" of third parties.

    1. Re:Google allows you to see past searches... by voice_of_all_reason · · Score: 3, Funny

      If my legal adversaries want to find out that I searched converting 3.5 tablespoons to teaspoons while cooking on Saturday, good for them.

      Except when they list also includes "fertilizer" or "ammonia" and some guys end up locking you up and throwing away the room.

    2. Re:Google allows you to see past searches... by Anonymous Coward · · Score: 4, Insightful

      Do you really think that Google doesn't keep track of your past searches, just because you disabled it?

    3. Re:Google allows you to see past searches... by mwvdlee · · Score: 2, Funny

      3.5 tablespoons of crack? I guess "teaspoon" is slang for syringe?
      I wonder what kind of searches you want to keep private!

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    4. Re:Google allows you to see past searches... by Billosaur · · Score: 4, Interesting

      If my legal adversaries want to find out that I searched converting 3.5 tablespoons to teaspoons while cooking on Saturday, good for them. The rest of it is protected.

      Which brings up an interesting idea - fake search patterns. On the one hand, you could perform all sorts of irrelevant, meaningless searches to clutter up your search record. On the other hand, imagine you wanted to make it appear that someone was searching for certain information, information that might prove incriminating. Assuming you could somehow gain access to their computer(s), wouldn't it be possible to "plant" searches in a person's search history? How many people who use the major search engines every day know they are being tracked?

      --
      GetOuttaMySpace - The Anti-Social Network
    5. Re:Google allows you to see past searches... by maxume · · Score: 2, Insightful

      I think it adds at least one step for a snoop trying to put me and my searches together(one with direct access to the various databases that is).

      --
      Nerd rage is the funniest rage.
  4. Same problem, new technology by loafing_oaf · · Score: 4, Insightful

    Were things really much more private before the Internet as we know it today? You had to approach actual experts like doctors for any questions you had. That leaves a trail. And if you had checked out library books as research, I'm sure the government could trace those records as well, even before computerized systems. Technology simply makes the process shorter.

    --
    Always someone has power over you. The thing to consider is this: Is the power good, or bad?
    1. Re:Same problem, new technology by voice_of_all_reason · · Score: 2, Insightful

      And when the process is shorter, it increases the scope of abuses. Imagine if 1940s Germany had the ability to find all the jews? It's not so farfetched to beleive the US would ask google to run a find_all_arabs() function in the event of a second terrorist attack.

    2. Re:Same problem, new technology by lawpoop · · Score: 3, Informative

      "You had to approach actual experts like doctors for any questions you had."

      Yes, but a doctor isn't allowed to blab to anybody about your medical problems. If somebody sues you, they aren't allowed to subpoena your medical records.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
  5. Not very surprising by skoaldipper · · Score: 3, Funny

    You can find out more about me by rummaging through my trash can - quite legal too. Just make sure you get it off my lawn first, or say hello to my boomstick.

    --
    I hope, when they die, cartoon characters have to answer for their sins.
    1. Re:Not very surprising by tgatliff · · Score: 3, Insightful

      Yes but you cannot datamine a trashcan over several years without a considerable amount of effort. Meaning, there is an inherent cost in digging thru millions of peoples trashcans, including probably getting shot by some for intruding on their property. From a search engine companies perspective, there is no inherent cost of gathering this data. It is simply an benefit of their business model.

      To me this is a failure of congress once again. In no way should they have allowed companies to keep this information. With the current situation in the US political system, though, I suspect nothing will change anytime soon. I suspect that at some point GOOG and the others will get caught selling some of this intrusive data. At that point the pubilic will force congress's hand. Until then, however, we will have the deal with this situation...

  6. and cookies too by homer_ca · · Score: 4, Informative

    Don't forget to clear your cookies or block them from Google. The default Google cookie doesn't expire for 30 years, and with it Google can track all your activity on Google sites, from maps to gmail to search.

    1. Re:and cookies too by Ngarrang · · Score: 2, Insightful

      If Google really wants to keep on record and ill-tempered sea bass, they are more than welcome. Maybe I am being pessimistic, but I have given up on any true sense of privacy. One week after I purchased my house, I got an unsolicited sales call.

      I asked, "And how would you know about me just buying my house?"
      She replied, "It is a public record."
      "Oh, and did it also indicate that I wanted your stupid unsolicited sales call to wake me up at 9 *AM*?"
      "I am sorry sir..."
      "Just remove me from your list and never call again."

      And this was the result of a simple paper record. That pretty much removed any thought I had to privacy. The Do-Not-Call List seems to have worked in Ohio, but that fact that I had to report my number to a list, just so it wouldn't be called, bugged me.

      I suppose privacy is possible. Only use cash. Don't subscribe to any magazine. Switch e-mail address every month. Don't buy anything on-line. Don't get a credit card. Turn off the cookies in your browser. Register your new PC as "Bob Smith".

      Or, one could revel in the public nature of your records. Create some fake web pages that talk about fetishes you don't really have. Subscribe to the strangest of the strange web sites. Subscribe to every single magazine you can get for free. Drive the marketers crazy as they try to categorize you. "sir, where does a straight bisexual transvestite biker vampire ruby programmer fit into your database?"

      --
      Bearded Dragon
    2. Re:and cookies too by FractalZone · · Score: 2

      Don't forget to clear your cookies or block them from Google.

      I use Gmail and like it. I do not allow google-analytics or other Google scripts that are not necessary for Gmail to run. I don't allow any persistent cookies and I shut down my browser frequently, but at this point it is a given that Google has a pretty good idea of who I am and what my interests are. It bothers me that Google, Yahoo, and others are clearly using their free browser toolbars as a means of tracking people's activity even more closely than they can with info any Web site can easily glean from anyone who visits.

      --
      "You're young, you're drunk, you're in bed, you have knives; shit happens." -- Angelina Jolie
  7. diversify by gEvil+(beta) · · Score: 3, Informative

    This is why I use different services for different things. While I absolutely love gmail, I don't use it for my primary webmail account. Instead, I use Yahoo! (though I hate those ads at the bottom of messages). This is because I use Google as my search engine of choice. And for messaging, I use AIM. I don't want companies to be able to attach seemingly disparate portions of my life together into a single profile. Sure, it can still be done, but diversifying makes things that much more difficult.

    --
    This guy's the limit!
  8. Which is why I suggest "GoogleAnon" by I)_MaLaClYpSe_(I · · Score: 4, Informative
    Copy the code below and bookmark it as if it was an ordinary url. Then, when you visit google the next time, anon your google.


    javascript:x='Nothing';y='preferences';try{if(conf irm('OK: Zero it\n\nCancel: Do_'+x+'_(e.g._already_zeroes?)\n\n'+unescape(docu ment.cookie.replace(/;/g,'\n'))))h=location.host.m atch(/\.google\.((off|com?)(\...)|..|com)$/)[0];do cument.cookie='PREF=ID=0000000000000000:LD=en:TM=1 115409441:LM=1129104254:S=kSuablMgN8pP9-91;expires =Sun, 17-Jan-2038 19:14:07 GMT;domain='+h;location='/'+y+'';alert('Zeroed:\n\ nNow_reset_your\n'+y+'\n\n')}catch(e){alert(x+'_do ne\n\n(e.g._not_Google?)\n\n')}void(0)


    Or else, google for GoogleAnon :-)

  9. Most people dont value privacy by 140Mandak262Jamuna · · Score: 3, Insightful
    Most people just dont care. People carry frequent shopper cards for their regular grocery store. Tagged to a real name, not some pseudo handle, tagged to a real address. And they fill their prescriptions there too. All for what? 25cents off a loaf of bread. Even on line people just dont seem to care. The kind of information people post in Facebook and other places, the amount of information they reveal in their blog, using real name that any prospective employer can search for...

    They (my nephews and nieces) look at me as though I am an brontosauraus wearing Sanjaya's fauxhawk when I talk to them about the dangers of "overexposure" (both literally and figuratively) in the internet.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:Most people dont value privacy by SatanicPuppy · · Score: 3, Insightful

      I picked my frequent shopper card up out of the parking lot in front of the grocery store, so while it is attached to a real name and address, god alone knows whose.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    2. Re:Most people dont value privacy by frdmfghtr · · Score: 3, Interesting

      Actually, I tend to save a couple of dollars every trip to the grocery store with it, and if the grocer knows my grocery habits, I really don't care. I'll spend time and energy protecting info that NEEDS protection, like bank account numbers and credit card numbers, not my preference for whole wheat bread over white or rye. If I don't want a particular purchase "remembered," I don't use the card and pay cash. There's a concern for privacy, and there's paranoia.

      I'll agree with you though as far as Facebook/MySpace type sites go...before you post it on a web site, ask yourself this: Would you post it on a billboard along the freeway? Ask that, because that is exactly where it is going--on a billboard along the "Information Superhighway."

      --
      Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
    3. Re:Most people dont value privacy by fatmonkeyboy · · Score: 2, Insightful

      If you're using anything but cash to pay at the grocery store, they can already store all of this information about you.

      You swipe your credit/debit card and there's nothing to stop the store from recording your name along with everything you purchased in a database. Your address may not be on the card's magnetic strip (but I wouldn't be surprised if it were). My billing ZIP code has been checked at the register before, so its either on the card or (more likely) can be retrieved and/or checked by the software that verifies the transaction.

      Checks have the same problem - your name and address are probably on there. Mine are. Lots of stores are using electronic check readers, so there's not much difference between using those and a card.

      So, unless you're paying with cash, you might as well reap the benefits of the frequent shopper card. I know I will :)

  10. Additional Problems by Foobar+of+Borg · · Score: 2, Interesting
    There are other online data problems besides the main computer companies. You also have to worry about companies like USSearch, PrivateEye, and so on which basically allows anyone to find out tons of stuff about you for a nominal fee. USSearch's FAQ even says

    "Can you search for minors or public figures?

    No. In order to protect the identities and safety of minors and public figures, US Search does not provide searches for these types of individuals."

    So, they understand the danger. They just don't care about the danger posed to the "proles".
  11. oh no, they store our searches!? by physicsboy500 · · Score: 3, Funny

    I hoped they purged my request to find "the clitoris" on google maps

    --
    The original generic sig.
  12. Re:and close browser too! by redelm · · Score: 3, Informative
    You can also be tracked by unique URLs with embedded keys.

    Clearing cookies is great, but I'm not sure whether you're clearing cookies that will be saved, or cookies already saved.

  13. Is this covered by UK DPA? by LighterShadeOfBlack · · Score: 2, Interesting

    I'd be interested to know if this information is covered by the DPA for UK residents. Does search data count as personal information if the data is linked to an IP address rather than directly linked to my identity?

    If it is then presumably I should be able to make a request under the DPA (without a court order) and they would be required by law to provide me with all information they have pertaining to me for a nominal fee within a certain time-period (I forget exactly how long).

    Clearly IANAL and I don't know nearly enough about the DPA or international law to know if this applies. Any actual lawyers about there who can clear this up?

    --
    Spelling mistakes, grammatical errors, and stupid comments are intentional.
  14. Does Track-Me-Not help? by sphealey · · Score: 3, Interesting

    Does anyone have any information on whether or not Track-Me-Not (which runs random searches against the big engines at random intervals) helps to confuse the trackers or not?

    sPh

  15. A way out by Yurka · · Score: 2, Funny

    There are precedents for suing yourself, so the door is open a crack. Actually, no matter what the TFA implies, I imagine that search history wouldn't be the most interesting piece of information you could find about yourself, if you arm yourself with a good subpoena against yourself.

    --
    I can assure you, the best way to get rid of dragons is to have one of your own.
  16. What works for me.. by mulvane · · Score: 2, Informative

    I have a VPN tunnel to a hosted dedicated server I setup as a proxy to my home connection. All my home traffic first passes through it encrypted. I share this box out to a few people. To establish connection with the proxy requires secure vpn. At home, I have 2 firefox items in my menu. One for my casual browsing, and another that connects to the proxy and request it to even anonymous communication even further using tor. This, plus not saving cookies beyond session helps me feel at least a little more secure that I can't be easily targeted. It also removes the case of my ISP being able to turn over anything useful on me.

  17. ...I don't know it? by Slaryn · · Score: 2, Insightful

    ...records of the searches you make, the health problems you research and the investments you monitor, can be requested by government investigators and subpoenaed by your legal adversaries. But this same information is generally not available to you.
    Erm, what? I'm pretty sure that what health problems I've researched or investments I've monitored are available to me, since I was the one that did them.
  18. It is available to you by kippers · · Score: 2, Informative

    If you live in the UK, then it *is* legally available to you under the Data Protection Act 1998 (for a maximum of £10). Under s.7(1).(a)(b)(c), they are required to give you a access to "the information constituting any personal data of which that individual is the data subject" (s.7(1).(c)(i)).

    Go ahead and try.

  19. That happened to me.... by StressGuy · · Score: 2, Funny

    I was in the process of refinishing my basement. It had existing cinder-block walls that I chose to leave partially bare along with conventional sheetrock walls which I added. So, not being clear if the same Latex based interior paint would adhere equally well to both types of walls, I googled for "Latex Bondage"

    I got a lot of unrelated hits......

    --
    A goal is a dream with a deadline
  20. I really should worry by SmallFurryCreature · · Score: 2, Interesting

    My grocer already knows my order when he sees me coming. Not that he gets them then for me. He already has gotten them ready because he knows when I arrive.

    Invasion of privacy OR bloody good service I happily pay his slighly higher then average prices for?

    God I love corner stores.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  21. Why stop at Google? by fang2415 · · Score: 2, Informative

    Edit > Preferences > Cookies > Keep until: I close Firefox

  22. The next question by HomelessInLaJolla · · Score: 3, Insightful

    Everyone concentrates so much on which services are collecting information and what information they are collecting. The next, and more important, question is rightly,"What are they doing with it?" I'm not talking about the generalized vague notion that everyone has: they're selling it. Yes, of course, but to whom are they selling it? Do they portion it out or do they sell the entire database in raw csv format any time anyone asks? Is there a subscription service to receive weekly or monthly updates to the dataset? Is there any effort made to screen the people who offer to buy the dataset to ensure that they will similarly protect the privacy and security of the consumers represented within it? Are there services which will cross-reference the various databases to infer data which cannot be directly collected for legal or technical reasons? Are there services which buy these datasets which offer to correlate them with tax records, grocery card clubs, and DMV records?

    The answer to all of the above questions, of course, is "yes--to the worst extent possible and with absolutely no conscientious consideration for the consumer from whom the data is being mined". Take it for what it's worth. Twenty years ago the hospital kept records, the insurance companies kept records, the banks and retail outlets kept records, but they weren't so ready and apt to cross compile and sell those records to hundreds of political and fringe religious groups posing under infinitely ambiguous names such as International Financial Consultants, Ltd.

    --
    the NPG electrode was replaced with carbon blac
  23. Re:No ISP... by jc42 · · Score: 2, Interesting

    I have a business T1 link from AT&T ..., but I'm under no illusions that AT&T won't still keep track of stuff.

    Maybe they don't, but I have to assume that they do.


    One of the bits of advice from very early in the history of the Net is: Forget about network-level security; the only way to prevent unknown others from copying and analyzing your traffic is to do end-to-end encryption. Even then, they can learn some things by analyzing your packet headers, which can't be encrypted. And, of course, the other end of any connection can keep a copy of anything you send them. You should assume that anything you send or receive has been copied by random unknown actors. The only security you have is making it difficult for them to decode the content.

    In particular, ISPs, phone and cable companies, and other comm companies can and do store and analyze any data that passes along their lines. If you think otherwise, you're just naive. They are for-profit corporations, and if information about your traffic can be sold, they will do so regardless of any silly laws.

    All of this has been understood from the earliest days of the Net. You can't run a network without doing at least some collection and analysis of the traffic. It's impossible to diagnose and fix problems without doing this. And when top management finally realize what the techies routinely do with the traffic, their eyes light up with dollar/pound/ruble/yen/etc signs.

    --
    Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  24. Muddle the information by MooseTick · · Score: 3, Interesting

    It wouldn't be too hard to create a script to randomly search on 5000 different terms a day from a dictionary. Then it would be nearly impossible to see that you were searching for actual info or an automated script did the searching.