Slashdot Mirror


Privacy Group Gives Google Lowest Possible Grade

The Washington Post is reporting on a finding by London-based group Privacy International. In a new report, they find that Google has some of the worst privacy-protection practices anywhere on the web, giving them the lowest possible grade. "While a number of other Internet companies have troubling policies, none comes as close to Google to 'achieving status as an endemic threat to privacy,' Privacy International said in an explanation of its findings. In a statement from one of its lawyers, Google said it aggressively protects its users' privacy and stands behind its track record. In its most conspicuous defense of user privacy, Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests."

37 of 260 comments (clear)

  1. Links for nerds on stories that matter by echucker · · Score: 5, Informative
    The Privacy International article - The Privacy International article

    Their report (interim rankings only)

    Final rankings won't be available until September. Wonder what they'll be dicking around for three months for....

    1. Re:Links for nerds on stories that matter by Anonymous Coward · · Score: 4, Insightful

      according to a watchdog group seeking to intensify the recent focus on how the online search leader handles personal information about its users. Seems to me that the goal of the study was to make a single company look bad and not to scientifically evaluate the privacy and then interpret the results.
    2. Re:Links for nerds on stories that matter by Bender0x7D1 · · Score: 5, Informative

      Actually, if you look at the preliminary report, they seem to have done a pretty good job. For example, Google does not consider IP address as personal information. This is OK if you are conneccting from a local coffee shop, but sucks if you have a static IP, or even do DHCP over a small range of addresses. It also points out that they don't always consider privacy implications before releasing information such as Street-level view. With the amount of data that Google gathers, analyzes, utilizes and releases (both publicly and its corporate partners), these kind of actions are a bit disturbing.

      I'm not trying to say this report is perfect, or that there is enough information provided to evaluate it independently. However, seeing a conspiracy targeted at Google because a group got upset about some of their practices, and decided to do a study (which included a lot more companies than just Google), is a bit premature.

      --
      Reading code is like reading the dictionary - you have to read half of it before you can go back and understand it.
    3. Re:Links for nerds on stories that matter by Macthorpe · · Score: 5, Informative

      Google seem to be taking it seriously enough to accuse Privacy International of being in bed with Microsoft, which is a laughable accusation.

      Privacy International responded via an open letter here.

      --
      "It does not do to leave a live dragon out of your calculations, if you live near him." - Tolkien
    4. Re:Links for nerds on stories that matter by whoever57 · · Score: 4, Funny

      Google seem to be taking it seriously enough to accuse Privacy International of being in bed with Microsoft, which is a laughable accusation.

      Well.... if anyone would have the information to prove this link, Google would! But what does that say about Google's privacy practices?
      --
      The real "Libtards" are the Libertarians!
    5. Re:Links for nerds on stories that matter by fuego451 · · Score: 4, Informative

      Well, there is one, albeit small, link to Microsoft. From the "About Privacy International" page, UK advisory board:

      Caspar Bowde ~ Privacy specialist, Microsoft, EMEA UK
    6. Re:Links for nerds on stories that matter by Anonymous Coward · · Score: 3, Insightful

      It also points out that they don't always consider privacy implications If it's visible from the street, you have no expectation of privacy. There are no implications. End of story.
    7. Re:Links for nerds on stories that matter by The+Famous+Brett+Wat · · Score: 5, Interesting

      Google does not consider IP address as personal information.

      And yet Gmail is the only public webmail service I know that does not include the IP address of the browser (HTTP client) in the mail header fields.

      --
      proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
    8. Re:Links for nerds on stories that matter by The+Famous+Brett+Wat · · Score: 4, Interesting

      My point was that they don't reveal your IP address to third parties. There seems to be a bit of clouded thinking on this issue. Privacy is not about how much the company knows, but how much it keeps secret. I share information with Google, and they promise to keep it a secret. So long as they do that, they have upheld their end of the bargain. I'm in control of how much information I decide to give to Google, but I have to trust them not to share it with others. Most webmail services reveal the HTTP client IP to the recipient as a matter of course, using either a "Received:" trace field or the informal "X-Originating-IP:". Google keeps this a secret. They seem to understand the concept of nondisclosure quite well, and have more respect for privacy than I've seen in any other company of its type.

      --
      proof, n. A demonstration that a conclusion is implied by certain premises and axioms.
    9. Re:Links for nerds on stories that matter by Flamsmark · · Score: 3, Insightful

      Anything that can be seen in a public place is not private. Period. Anyone can go out into the street, take whatever photos they want, and publish them however they please. When in a public place, one should have no expectation of privacy.

      --
      copyright © 2005 Flamsmsmark the ravings of a melancholly i
  2. A suggestion... by 313373_bot · · Score: 5, Insightful

    Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests. Very nice, but how long until either Google loses some legal fight, or it simply decides not to fight?

    One solution to the privacy problem, in my oppinion, would be granting users, besides the ability of not surrendering more information than necessary for a given transaction, some effective way of deleting their personal data once done with Google, Yahoo, Amazon or whoever else.
    --
    ^[:q!
    1. Re:A suggestion... by TheGreatHegemon · · Score: 5, Insightful

      Very nice, but how long until either Google loses some legal fight, or it simply decides not to fight? If Google loses the legal fight to defend their data from government violations, then you should be looking at your government, not Google for the privacy violation.
  3. Pot calls kettle black. by mooreBS · · Score: 5, Insightful

    Why are these people attacking Google. Privacy and anonymity are rapidly eroding in the UK. Hello! You've got bigger privacy problems than Google if you're living there.

    1. Re:Pot calls kettle black. by Stormx2 · · Score: 5, Insightful

      The whole "UK is a big brother society" thing is overdone. 99% of cameras are just local shops looking out for their business. Remember that the UK is densely populated and natural selection has ground the a halt; council estates breed criminals. Sure, there are a lot of cameras, but it isn't some government conspiracy that people make it out to be.

    2. Re:Pot calls kettle black. by bky1701 · · Score: 5, Insightful

      The whole "Google is big brother" thing is overdone. 99% of logging is just statistical. Remember that google is mainly an ad firm and they rely on statistics to do their job. Sure, there are a lot of logging, but it isn't some conspiracy that people make it out to be.

    3. Re:Pot calls kettle black. by suv4x4 · · Score: 4, Insightful

      The whole "Google is big brother" thing is overdone. 99% of logging is just statistical.

      Very funny. Statistical would imply they can't tie info back to you. When your mail, history, ip, browsing and search habits are all recorded in your exact account, it's not statistical. It's a disaster.

      Google can pull all this crap out since they're so trusted by the large masses. Companies are pushed to behaving good by customers not trusting them. Google just didn't get enough of that throughout the years, and here's the result.

      Funnier even, they seem to use their "goodness" as an argument here as well: the fact they fight back in court to protect that data isn't helpful. What would be helpful is that data is never collected in a way it can be abused, if god knows what happens (cracked server, loss in court, new law, insider leaking info etc etc)

    4. Re:Pot calls kettle black. by k1e0x · · Score: 5, Informative

      No its not a government conspiracy, they really ARE watching you. The average brit is photographed 200 to 400 times per day.

      Hea, waat the hell, why not just pull random people over for.. no reason at all.. and take fingerprints. http://news.bbc.co.uk/1/hi/uk/6170070.stm Alread on it in the UK, the worlds leading police state.

      Sound Orweallian..? guess what, it *looks* that way too. Check out the "it's for your 'safty'" ads. http://www.infowars.net/articles/april2006/170406w atching.htm

      --
      Bringing liberty to the masses. - http://freetalklive.com/
  4. For the Tin Foil Hat Brigade (myself included) by Anonymous Coward · · Score: 4, Informative

    Firefox and the Customize Google extension make a good team: http://www.customizegoogle.com/

    Features:

            * Remove click tracking
            * Anonymize your Google userid
            * Block Google Analytics cookies

            * Secure Gmail and Google Calendar, switch to https
            * Remove ads

    1. Re:For the Tin Foil Hat Brigade (myself included) by UbuntuDupe · · Score: 5, Funny

      Yeah, I'm the same way. When I have girls over at my place, *all* they have to do is ask about the "no sound/video recording" option, and I won't keep their data. They just never request that feature.

  5. The Future of Google: Total Surveillance by skrew · · Score: 5, Interesting

    The problem is they keep all your search results, with tracking cookie. Google is in bed with the CIA: http://www.disgrunt.com/blog/2006/10/27/former-int elligence-agent-says-google-in-bed-with-cia/ Have any of you guys seen the new gmail? I won't use it...it has a built in calendar, word processor, and of course, permanent email storage, converge this with permanent tracking cookies, logs of all search requests from your IP, and of course google earth/maps (will go live eventually as the technology changes) and you have the recipie for total uncontrolled surveillance.

    --
    Learn to know, the dark side of the force, and you will achieve a power greater than any Jedi...the power to save your w
    1. Re:The Future of Google: Total Surveillance by Deekin_Scalesinger · · Score: 5, Insightful

      Why mod this down? I rarely put on the tinfoil hat, but they can have an awful lot of data for people who choose to use many/all of their services. It is an aggregate of many people's lives. Not saying that they are doing it, but the guy deserves more than a -1 for his thoughts.

      --
      "As the intrepid kobold companion continues his journey, he begins to wonder... if priests raises dead, why anybody die?
  6. Re:Toppling the Top Guy by Fex303 · · Score: 3, Funny

    This is a classic trick of anti-capitalist lefties (and looking at who is on their committees, there's a whole bunch of them).
    Are you aware of the fact that this makes you sound like a cold war era crazy-person? I mean, if so, feel free to continue - I just thought you might want to know.

    If they were the 2nd biggest coffee shop chain in the world, the scorn would not exist.
    If they made decent coffee there would be a hell of a lot less scorn for them too...
  7. You can't by brunes69 · · Score: 4, Interesting

    You have two choices. in one corner, you have a nice, stable, secure ASP that hosts your email / calender/ etc. They have redundant filesystems and/or make regular backups.

    Your other choice is being able to delete your profile with a click.

    People who think that the idea of being able to delete your profile is in any way simple or trivial are deluding themselves. Google themselves have said that because of the way GFS works they can *NEVER* know when a piece of data flagged for deletion is actually no longer recoverable. That fault tolerance and redundancy is built into the design.

    It is the same thing at Yahoo and MSN. All these guys have redundant systems with backups. It would take days worth of man hours to delete a persons profile. Hard thing to demand from a free service.

    If you don't want Google holding your data, no one is putting a bullet to your head. You don't need to have cookies enabled or anything else to use their search engine. Frankly I trust them with my email more than my ISP.

    1. Re:You can't by Anonymous Coward · · Score: 4, Insightful

      Deleting accounts created on systems has always been a default consideration.

      As proper deletion should have been

      Not if the filesystem support and account management code had been properly written.

      You obviously have no clue how a filesystem stack works. Data is rarely deleted per se on *any* filesystem, simply unlinked and possibly flagged for later overwriting. Why do you think projets like this exist?

      Even if a file (if an email or google doc is even stored in what one would *call* a file) did get deleted, the indexing that is done would make at least pieces parts recoverable until their staleness is discovered, which could be a while.

      Even then, a good forensic analyist could probably recover something that had been allegedly deleted.

      Overwriting data to securely erase it is expensive on a desktop and approaching impossible on a busy server. This is why people who don't wear tinfoil hats will use Boot'n'Nuke or somesuch before selling a hard drive on eBay. You can't just delete something (even on your own computer, mind you) and expect it to be gone. That's not the way filesystems work.

      --------
      Check your facts at the door; be sure to pay a quarter!

    2. Re:You can't by renbear · · Score: 3, Informative

      We only run a relatively small network, but you can bet that if anything went wrong, we could walk into the server room and pick up the appropriate back-up tapes and/or call the off-site data archive service we use and get every copy they have within a couple of hours. A very small network, apparently. Most backup methods are predicated on the fact that you will never need to delete JUST ONE record out of a backup set, without deleting the entire backup (of that filesystem, data store, etc.) Also, I rather suspect they use read-only media to store their backups-- but that's only a suspicion. Deleting part of a backup is much, MUCH harder-- well-nigh impossible-- than restoring part of a backup.

      Asking Google to cleanse out ALL of your data, at your whim, is... a bit unreasonable, don't you think?

      One of the biggest differences between Google and other online companies is this: Google is being absolutely, utterly honest about their actual privacy policies and data retention. They will NEVER lie just to tell you what you want to hear, nor will they pretend things are easier than they really are.

      And they're getting raked over the coals for it.
  8. Amusing... by Anonymous Coward · · Score: 3, Insightful

    It's amusing how people root for the underdog but start to turn against it once it gets too big. I remember a time when M$ was viewed as a hero for scoring victories over the evil IBM monopoly.

    I suppose the lesson is that companies are never your friends, just allies of convenience at best. Something to remember the next time some slashbot claims comapny X will save the day because they are a friend of open source.

    1. Re:Amusing... by mrjb · · Score: 3, Insightful

      You have a point. But then what if open source gets too big?

      --
      Visit http://ringbreak.dnd.utwente.nl/~mrjb/growingbettersoftware to download your free copy of the book
  9. Re:Toppling the Top Guy by mrjb · · Score: 4, Funny

    If they were the 2nd biggest coffee shop chain in the world, the scorn would not exist. I'm from the Netherlands. No starbucks at all to be found here- I guess they felt they couldn't compete with the Fine Products sold in coffee shops here :)

    --
    Visit http://ringbreak.dnd.utwente.nl/~mrjb/growingbettersoftware to download your free copy of the book
  10. Re:Toppling the Top Guy by Anonymous Coward · · Score: 3, Insightful

    A bunch of soccer moms on another continent starting a consumer ban against a company supporting drug abuse?

  11. Google? Hardly... by StikyPad · · Score: 4, Insightful

    While a number of other Internet companies have troubling policies, none comes as close to Google to 'achieving status as an endemic threat to privacy,'

    They've obviously never heard of LexisNexis or Accurint. Unless they consider information on what web page you visited to be more infringing than, say, your full financial history, residence, court records, marriage licenses, property deeds, loans, phone numbers (including unlisted), etc., etc. Of course, that's all "public information."

  12. Yeah right by imsabbel · · Score: 3, Insightful

    > Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests.

    Yeaha. Google protects the data from the Justice Department.
    But it DOESNT (and thats the point of the rating) protect the data from google itself. The google privacy idea is more or less "We are good. Thats why WE are allowed to do everything, and you WILL like it (trust us, we know you better than you do yourself)".

    --
    HI O WISE PRINCE. WHT TOOK U SO DAM LONG?
  13. Abuse of "anonymity" by Christoph · · Score: 3, Interesting

    I have been sued for defamation by a Russian businessman after I wrote a webpage that criticized him. One of my witnesses claimed the Russian threatened his life. A commment was later posted on my website using an anonymizing web proxy saying the businessman was in the Russian Mafia, and implying if I win in court I might loose my life.

    I issued a federal subpoena for an IP trace to find out who made this threat. It went to Affinity Internet, who is the ISP for Unipeak, an anonymizing web proxy. I later learned Unipeak was the source of the comment threatening me, but Unipeak didn't have any valid contact information and their website says they keep no traffic logs.

    Further research showed the Russian, Andrew Vilenchik, was a user of Unipeak. See Vilenchik's anonymous comments.

    My local police are now involved, my neighbors keep an eye on my house, and my wife and extended family are very upset about this threat, which we take seriously.

    Whoo hoo! Hooray for anonymity! By all means, terrorize, threaten, steal, and engage in represehsible and illegal conduct with anonymity and impunity. I choose not to lie, cheat, or steal, but I tell the truth without anonymity and I face any consequences. By comparison, every criminal and scumbag wants anonymity.

    A full description of the Lawsuit is online

    1. Re:Abuse of "anonymity" by Anonymous Coward · · Score: 3, Insightful

      That might be tough on you if people are threatening to kill you, but lets not pretend that the ONLY reason someone would want to be anonymous online is to threaten to kill people. What if I live in a country in which I do not trust my government or their agencies to protect me, indeed I suspect that my goals and theirs are diametrically opposed. Say I really like the idea of democracy but my state's dictator is rather set in his ways and would rather see anyone who advocates democracy swinging from the nearest lamp-post... Surely it would be good for me to have a way to protect myself in that situation?

      Obviously this is the most extreme example (and fortunately I don't live in a country in which I fear my government), but it's a damn good reason.

    2. Re:Abuse of "anonymity" by finkployd · · Score: 4, Insightful

      You know, you could have avoided a lot of trouble if you had published your Russian businessman criticizing webpage anonymously...

      Finkployd

    3. Re:Abuse of "anonymity" by Christoph · · Score: 3, Interesting

      After publishing the article, people came forward and told me of other publications where Vilenchik was using my photo. They gave me evidence that a sales agreement he produced in his lawsuit against me was fraudulent.

      These people came forward because the article was published on my own website, which comes up high in search results, and I could not post the article there anonymously (without being discovered). The witnesses needed to have a way to reach me, and needed to know I was the photographer in question.

      I agree that standing up for yourself can lead to "a lot of trouble". I'm figting in federal court to protect my right to speak the truth publicly. Maybe my problem is I have the guts to stick up for my constitutional rights instead of hiding behind anonymity.

  14. How do we know Goog isn't giving up info already?? by classh_2005 · · Score: 3, Informative

    Seriously, did you know...(from wikipedia) "Under FISA, any agency may require a common carrier, landlord, custodian, or other person provide them with all information, facilities, or technical assistance necessary to accomplish ongoing electronic surveillance. They must also protect the secrecy of and cause as little disruption to the ongoing surveillance effort as possible." "A common carrier is an organization that transports persons or goods, and offers its services to the general public. In contrast, private carriers do not offer a service to the public, and provide transport on an irregular or ad-hoc basis. Common carriers typically transport persons or goods according to defined routes and schedules. Airlines, railroads, bus lines, cruise ships and freight companies may be common carriers." So, if the Goog was instructed to provide info, they wouldn't be telling us.

  15. There is a lot Google is by pcause · · Score: 4, Insightful

    Look at the entire scope of what Google does and you see that they want to know everything about you, and not some anonymous information. EMail is something you alomost always log in to. Many people set the login to remember them. Makes it easier to check you email, but once you are logged in your search queries are not anonymous. That is the reason Google has so many other things to try tog et you logged in and to stay logged in. For example, the have IM so that you've leave it running and yourself logged in.

    However, most commercial activity and interesting behaviors, the ones worth money to advertisers and others, don't happen at the search screen. This is why Google has toolbar and desktop. They want to watch all of the sites you visit and what you do on the sites. Using this data they build a detailed behavioral profile of you. But they also have way more information then your commercial behaviors. They know about a wide variety of sites and can determine if you look at sites about health issues, or other sensitive and personal behaviors.

    Google is a HUGE threat to your privacy. One could reasonably say that if you use many Google services and tools you have already given them such a detailed picture about you your privacy is essentially gone. And remember, they keep a 2 year rolling picture of the details about you. But they can also keep the "important" items they discover and toss the detail.

    And, to those who say "Remember that Google went to Court to prevent the Government from getting records", remember what Google said. They said they were doing this NOT to protect your privacy, but to protect their trade secrets. That means so that no one can found out the real details about what they track and know about you.

    Don't believe the "Do NO Evil" stuff. It is just clever marketing. They are a big company, just like all the rest and in many ways worse. Remember that they say that they want to index all of the World's information. That includes the very intimate and personal details about you!

    Many viewed Google as the anti-Microsoft. Microsoft just dominated a market. Is is really debatable whether Microsoft's dominance actually cost consumers financially, but if they did, it was just money. There is no question that Google threatens at least our privac and that is just the first of our basic rights that their behavior and business interests threaten to erode.