Slashdot Mirror
Google Street View Logs Wi-Fi Networks, MAC Addresses
An anonymous reader points to this story at The Register that says "Google is collecting more than just images when they drive around for the Street View service. 'Google's roving Street View spycam may blur your face, but it's got your number. The Street View service is under fire in Germany for scanning private WLAN networks, and recording users' unique MAC (Media Access Control) addresses, as the car trundles along.' There's a choice quote at the end: 'Google CEO Eric Schmidt recently said Internet users shouldn't worry about privacy unless they have something to hide.'"
... that it has just been 'Googled'.
... and reeks of Google's Buzz privacy blunders all over again.
... except for that they're doing it for tens of thousands of personal and business WiFi networks.
This doesn't look good on the surface
Why can't Google (and everyone else for that matter) just stick to the personal data people are foolish enough to hand over to the web? This type of action puts them on the edge of WiFi hackers who are "just seeing if it could be done"
Wow. That's pretty shitty reporting, even for The Register. Yes, Google records SSIDs and (I guess) MAC addresses of wifi APs. That way they can estimate your position for Google Maps on a mobile device, even if you have no GPS on that device. This has been public knowledge for at least a year now.
In regards to Streetview itself and recording SSIDs and such, there is simply no privacy concerns. When you are in public, people can see you. When you broadcast signals, people can receive them. If you don't want to be seen, don't go out in public. If you don't want people to see the SSID of your AP, don't broadcast it.
How we know is more important than what we know.
The privacy concern is that Google is building a massive database of SSIDs -- this is not the same as your neighbors being able to see your SSID, this is a corporation with global reach.
This is the same sort of problem that we complain about when a company collects little bits of information that you leak in public, and builds a dossier on you. Yes, the information is technically public, but the fact that it is being assembled en masse is the problem. It is impossible to hide ever detail of your life from view, but when such a large database is built up, it reveals a lot about a person, potentially including things they did not want revealed.
Palm trees and 8
Oh dear, I wish he hadn't said that. I hope he does too. Even quoted a bit out of context (it was possibly a flip tagline), when you direct activities at the biggest datalogger around and have capabilities that most people regard as extremely penetrating, you just do not say anything that might scare people. Bad for business.
Many people do not understand why privacy is a right. As he says "Why worry if you have nothing to hide?" It is not from nothing: One word answer: PREJUDICE. Privacy is basically a right of self defense against prejudice (and malice too, for that matter). We all have good reason to be concerned about the impression we make upon others since they can often make arbitrary decisions that affect our interests.
Of course others have a right to relevant information, but we have a right to control how much beyond we choose to present, and to whom. We do have a right to be treated as individuals. Not products of some correlation -- statistics is _descriptive_, not prescriptive.
It is also not at all the argument he was making. But it's much more fun to just believe everything we hear on the internet rather than look up what he actually said!
And what if I have nothing to hide for the current government but don't get the assurance that today's laws are tomorrow's laws?
With enough information in the hands of governments, it's very easy to change a law, criminalize something that was perfectly legal and find and eliminate most of the 'criminals' under those new laws.
I know I'm kind of invoking Godwin's law here, but in 1939 it was perfectly legal to be Jewish here in the Netherlands. In the 1930s the Dutch government made an almost perfect register of the whole population, so in 1940 it was very easy for the Nazis to eliminate almost all the Dutch Jews.
What they are doing is not even questionable, it is completely legal.
Do you know much about German law?
Because in the USA it IS questionable and in some cities it is ILLEGAL.
How do people use public wireless, then? They have to enter all the information manually, as opposed to scanning and just picking out the right SSID?
Could you post some of the case law / legal statutes involved? Thanks!
Those people who say "if you have nothing to hide" have something to hide -- their ignorance or contempt for your intelligence. There are a lot of things that are not illegal you don't want known; adultery is legal in Illinois. Even in states where it may not be illegal, you still wouldn't want your girlfriend to know she's not the only one. You may be a closeted gay working for a right wing congresscritter, or a closeted conservative working for a left wing congresscritter. You might not want people to know that you watch Mickey Mouse cartoons. The list goes on.
Either Schmidt is stupid (and I don't buy that) or he thinks you are.
Free Martian Whores!
What they are doing is not even questionable, it is completely legal.
That's true here in the US. Existence of companies like Skyhook and the iPod Touch's location feature make that evident. The question is if it's legal in Germany.
Not that it shouldn't be, particularly when an AP is metaphorically screaming,
Hello there, anyone who can hear me!
My name is Linksys!
You can tell me apart from other folks with the same name because I'm XX:YY:ZZ:AA:BB:CC!
If you like, I can give you an IPv4 address!
No, no, I haven't been told to exclude anyone who doesn't know my favorite word or phrase!
Please talk to me! I love you!
Here in the States, logging that you heard such a declaration rightly isn't against the law. Further, based on my very crude analogy, I also don't think that "unauthorized" connection/use of an unprotected/unconfigured AP should be a criminal offense either. Perhaps if someone learns that their pipe is being used against their knowledge, they could (and should) take civil action to force that person to pay for what he's been freeloading on, but I digress.
... Sorry about this, but unless you speak Italian and ol' Tony tells you what my favorite word or phrase is, I can't give you an IPv4 addres!" Any situation where network encryption is either bypassed or broken without the network owner's knowledge and permission is nefarious outright, regardless of intention, and that should most definitely be a criminal offense. Although if ol' Tony finds out before the cops do, you're probably even worse off.
For someone who actually breaks in to an encrypted AP (and yes, WEP counts), consider that WEP might be like a retarded-midget bouncer who'll believe you if you lie to him, whereas WPA could be, "My name is Linksys
Boot Windows, Linux, and ESX over the network for free.
In another ominous development, the phone company is planning to release a compiled document containing every name, address, and phone number of all their wired clients. The books will be published by region but be available globally. They'll be called by the disturbing name "White Pages".
They also will provide a charge-per-call service wherein on a request from not only government agencies but also private citizens, they will mining their data stores nationally in search of a particular individuals detailed info. While there is no clear consensus on this point, it appears this service will either be called 'Information' or mysteriously... just '411'.
They claim there will be an 'opt-out' option, but it will not be enabled by default, and there will be an extra charge for it's use.
Just some perspective to apply, not really meant as humor. This issue is about as dangerous as the phone book IMHO. You've got (or should have) an option in your router to hide your SSID. If you aren't using it, then you are BROADCASTING it. If someone tracking this information centrally really concerns you, change your SSID randomly every 30 days, and the MAC of your router. If your router doesn't support changing it's MAC, get a better one.
If it REALLY concerns you, don't use WiFi! There are much more nefarious things that can be done against WiFi than just logging an SSID/MAC that might actually be worth worrying about (again, IMHO).