Google Audits Street View Data Systems

schliz writes "Google's plans to upgrade to high-definition Street View in Australia are on hold until it completes a rigorous internal audit of the processes, it announced today. The company is currently being investigated by international regulators about possible privacy breaches when it became known that its Street View vehicles were capturing not only publicly available SSIDs and MAC addresses, but also samples of payload data transmitted over these networks."

Comments

"Publicly Available"

[dward90]

While I'm not an expert on security or privacy, it seems to me like "publicly available" should mean that they didn't gather any data that citizens weren't openly broadcasting anyway. From an ethical perspective, it's shaky at best, but it's probably a huge difference legally.

I'm not endorsing Google's collection, but aren't people who openly broadcast their data be at least *a little* at fault here?

Re:"Publicly Available"

[cbiltcliffe]

Google didn't just "waltz right in."

They collected it by accident, and when they realized they had it, they publicly stated that they had the information, and were purging it.

They didn't need to say anything, because nobody knew they had it until they announced it. But in the spirit of openness, they stated what had happened, how it had happened, and their proposed remedy for the situation.

The fact that various regulators are getting pissy about it isn't their fault.

Re:"Publicly Available"

[papasui]

**Cough**Bullshit**Cough** There's plenty of wifi scanners available that only collect SSID and mac addresses. They don't necessarily sniff the data and record it. Google or the company they contract made a decision to gather this data, the only accident was getting caught.

Re:"Publicly Available"

[HungryHobo]

and if someone publishes a web page you shouldn't be able to just waltz right in and view whatever's on it!

If someone watches you walk around naked while you're in the bathroom that's a violation of your privacy.
If someone watches you walk around naked in the middle of the street then they have done nothing to violate your privacy.

people shouldn't be required to secure their communications *effectively* but some kind of symbolic security should be required to expect any kind of privacy.

Re:"Publicly Available"

[ATestR]

Look at it another way. If there was a company - call it "Gaggle" - that drove up and down the streets and roads of the world making sound recordings to present a "Street Sounds" feature to their new mapping program. Would there be such a fuss if they recorded the voices of two people shouting across the street at each other? Its about the same thing.

Re:"Publicly Available"

[Miros]

The people shouting *know* that other people can hear them.

Re:"Publicly Available"

[nedlohs]

So you know their claim that they reused some software from another google project without noticing it recorded more than what they actually cared about is false?

And you know that the programmer who did so either didn't realize at all or didn't just think "who cares if it wastes resources grabbing that stuff it's minuscule and we can just not use it" and just used it without mentioning it to anyone?

Are you omniscient? Or do you just spend your life spying on google?

Re:"Publicly Available"

[Miros]

No, they don't, which is exactly my point. In order to have an organization that could do something like protect the privacy of the users/customers/public effectively the culture of the corporation has to promote accountability and responsibility all the way down to the lowest levels. People on the bottom, the ones who actually do the acting on the part of the organization, have to have been given a good understanding of what management thinks is valuable from a moral standpoint and encouraged to act on that understanding. What we have here is possibly a failure of that system, which means that this may be an anomaly only in that it was detected not in that it occurred. That would be bad.

Re:"Publicly Available"

[rotide]

If you buy radio equipment you should also *know* that other people can pick up the signals as well. If you don't want other people listening in on your data, simply "whisper" by using encryption.

Ignorance is no excuse. RTFM when you purchase your radio transmitter (read: WAP/Wireless Router). Don't just bitch that you had no idea what security was and everyone listening is wrong for doing so.

Re:"Publicly Available"

[skywire]

Precisely. That is why it is the perfect analogy. Just as a person shouting from a window has no reasonable expectation that passersby will somehow "shut their ears", neither does a person broadcasting unencrypted information have a reasonable expectation that the public will not receive that. This is not just a legal technicality; it is practical reality.

Re:"Publicly Available"

[HungryHobo]

Also you keep going on and on and on and on and on.... and on and on about this "double standard".

Here's the big secret: There's more than one person on slashdot.
My opinions can differ from the twits complaining about their tweets and facebook profiles being datamined.

You know how I avoid those problems?
I don't use twitter,facebook or open my wifi network.
it's amazingly easy.

Re:"Publicly Available"

[HungryHobo]

it doesn't yet the simplest and easiest way I can think of to capture that useful data with a simple laptop would be to set some program like cain listening in promiscuous mode and later match the SSID/timestamps with where I was at the time to build a map of network hotspots.
Such an approach would also probably log the whole packets even if I'm not interested in them in the slightest.

cutting out the contents of the packets out would likely be more complex and would require some dev work.

Re:this is gonna be interesting

[shentino]

Simple.

We trust Google more than we do BP.

Personally, I think for a good reason too.

Re:this is gonna be interesting

[asukasoryu]

I think the consequences are a little different. Google's data gathering isn't destroying the Earth.

Re:this is gonna be interesting

[Anonymous Coward]

Perhaps you trust Google more than BP.

Don't apply that to everyone here.

Compared to Google, BP is the mom and pop grocery on the corner.

Re:Privacy breeches? Sign me up!

[Megane]

I was wondering about privacy trousers myself.

Re:this is gonna be interesting

[Anonymous Coward]

I like apples and oranges.

One they can 'format C' the drives and the problem is solved in a day or so. The other will take 10-20 years of cleanup.

For Google though this could be a good thing. They can sometimes be overzealous in the drive to make all data searchable. Some data is not meant to be seen by others. If everyone played nice this wouldnt be a problem. But there are many out there looking to take advantage of any sort of data you 'leak'.

Perhaps they need to take a step back and ask 'would I want my data shown like this?' They need a few paranoids working for them. They may need to take on some rigor in the way they release 'applications'. Currently it seems like whichever group decides to put it up gets their way.

NOW on the other hand Google is only putting together something that anyone else *could* do. But they are doing it with a grand scale. For example If I wanted to 'snoop' on my neighbors wifi I wouldnt even need to leave my couch to do it and I can see at least 20 networks.

So they picked up some extra data. Wipe it and be done with it and apologize profusely...

With BP they can not just turn the thing off so they will take ages to fix it. Even if they could 'turn it off' they will be soaking up oil for many years to come. Then never mind the dozens of businesses and families lives that will be ruined over this. Yeah they are on a different scale.

The difference is like I stubbed my toe and I hacked it off with a chainsaw.

Re:this is gonna be interesting

[commodore64_love]

>>>Google's data gathering isn't destroying the Earth.

Neither will an oil spill destroy the Earth. In fact about the only thing that would destroy the earth is the sun going supersized, or a black hole skimming by & tearing the planet apart. The earth is hard to destroy..... even when an asteroid hit the planet, the earth continued merrily on and life recovered. Nothing mankind could do would destroy the earth.

Re:I wasn't aware Google was causing

[Anonymous Coward]

I'm still not even convinced that they did anything wrong. Are we really okay with the precedent that you aren't allowed to even look at data that's being broadcast right into the damn street?

Re:this is gonna be interesting

[LordLimecat]

I like how both your comment AND TFS imply that Google got "caught" doing something. You DO realize that they openly disclosed (without coercion or prompting) this whole wireless mess, right? How is disclosing a mistake to those affected, and then working towards a resolution "failing to do the right thing"? What steps would you propose they take?

Re:this is gonna be interesting

[commodore64_love]

Large? The Gulf is actually quite small compared to the Earth. For example the animals living along Maine's coast have no clue there's an oil spill happening. Also let's not forget that prior to 1800, it was common for the Earth to "belch" oil all over the place, creating giant pools of oil both on land and in the ocean. On his journey to Philadelphia as first president, Washington had to detour around several tarpits (oil) to get there.

That was the natural state of the world, until man came along and cleaned it up. It helps if you study history instead of hyperbole.

Re:this is gonna be interesting

[Ephemeriis]

I'm really looking forward to the comments. When BP lets the oil spill continue day after day, the /. crowd goes asking why we let them handle it at all, after all they're the ones responsible for the mess.

The whole BP thing is simply a giant WTF.

I have a genuinely hard time wrapping my head around the fact that they're drilling in water this deep with absolutely no ability to deal with problems like this. They aren't just scrambling to deploy a fix, they're scrambling to come up with a fix.

It doesn't seem like BP should be willing to do something that risky without a disaster plan.

It doesn't seem like the Government should give them the go-ahead to do something that risky without a disaster plan.

It doesn't seem like stockholders should allow them to do something that risky without a disaster plan.

And yet, here we are.

Now Google has a mess, and is doing an internal audit. I'm curious if we will apply the same reasoning, or a different standard. And what justifications we'll see for it.

Google's mess isn't going to kill any wildlife or pollute any waterways. It's very unlikely to result in anybody losing their livelihood. They're also conducting the audit before going ahead, rather than after something has gone horribly wrong (at least with the HD thing in Australia).

Re:this is gonna be interesting

[Morty]

BP's oil spill has far greater scope and urgency:

* The oil spill is a regional environmental catastrophe. It has scope well outside of BP or even the oil industry as a whole -- it's impacting marshlands, seafood industry, tourism, and other industries. So far, this privacy issue seems to only be present within google.

* The oil spill is an emergency. We normally give companies a chance to "make it right". In the case of the oil spill, any unnecessary delay means definite short-term damage/impact to the environment, the seafood industry, and tourism, and possible long-term damage. We don't have time to take a wait-and-see attitude.

Normal legal processes have taken years to "fix" problems. That's fine for improperly gathering private data; not fine for an ongoing environmental catastrophe.

Re:this is gonna be interesting

[Kaboom13]

Google's data mining is annoying at best, BP's oil spill is an environmental disaster that will harm millions of people (not to mention wildlife) in ways we can't even begin to calculate yet. Applying the same standard is stupid, because it implies the scale of the problem is in anyway similar. Furthermore, while it is fairly understandable to make mistakes in software systems that will at worst collect data about unencrypted wifi traffic, it is not understandable to make mistakes in a critical safety device that lives and the economic and environmental prosperity of an entire coastline depend on.

Google is in the wrong, and so is BP. But to pretend that the seriousness of the way they are wrong is in the same ballpark is ridiculous, and therefore the expect the same reaction is ridiculous. If you do an employee background check, and one of your employees was fined for littering, the other convicted of theft, manslaughter, criminal negligence, bribing public officials, and destruction of property, you would react in different ways. Thats the difference in severity we are talking about.

Re:this is gonna be interesting

[Lunix Nutcase]

Market cap is not synonymous with the size of a company. BP has 10x the yearly revenue and 4.5x as many employees as Google. It is the far larger company.

Re:this is gonna be interesting

[kb_one]

You make a good point. It is important to consider that Google's motives may not be altruistic. Furthermore, you're right that in the past companies "come clean" only after it becomes clear that they have no choice.

However, I don't think it is fair to presume the guilt of Google simply because of the actions of other companies. There is no proof of anything here other than what is publicly known about the situation. In admitting we don't know what prompted the disclosure you must also admit finger pointing is baseless until we learn more about what happened. The systematic method of data collection doesn't even speak to guilt. Any sufficiently large and complex system could be difficult to audit especially on a global scale.

I think it is fair to say that it is at least possible that there were no evil intentions on Google's part. There is just as much evidence for this as any other conclusion at this point.

Re:this is gonna be interesting

[phantomcircuit]

I'd rather see Google's corporate license revoked. Let them operate as a proprietorship whose owner(s) have full liability for his company's actions

You are seriously arguing that a single person should be responsible for the actions of twenty thousand other people?

REALLY?

Re:this is gonna be interesting

[Anonymous Coward]

The fact that Google came forth with this information willingly and detailed the steps it was going to take to solve the problem (instead of telling nobody and just deleting the data) earns them lots and lots of points.