Slashdot Mirror


Google Declines To Turn Over Harvested Wi-Fi Data

An anonymous reader writes "Google declined to submit data collected as part of the 'Spy-Fi' flap, and Connecticut Attorney General Richard Blumenthal is now promising further action: '"I certainly will be pressing for continued involvement at the federal level in coordination with the states," Blumenthal told Politico Monday, just days after promising to explore "additional enforcement actions" if Google does not share the data soon. Asked to describe what those federal efforts might include, the outgoing attorney general said, "There's a range of potential opportunities for oversight and scrutiny by a member of the US Congress – including letters, meetings, hearings, and potentially even legislation." For its part, Google has tried to defuse the issue by offering to delete the data. The company reaffirmed that position in a Friday statement, promising to work with Blumenthal in the coming weeks, but declined to comment further on Monday.'"

22 of 201 comments (clear)

  1. Should have deleted it from the start by alvinrod · · Score: 4, Insightful

    Google should have deleted the data before they even publicly announced that they had accidentally collected it. Would have made the matter a whole lot simpler and would have left less room for political grandstanding.

    1. Re:Should have deleted it from the start by beakerMeep · · Score: 5, Insightful

      Destroying evidence while being investigated by the FCC/FTC is usually frowned upon. But I'm glad they are declining to hand it over for what you aptly called grandstanding. Honestly I think Google has handled it the best they can given the situation. Seeing politicians exploit the situation is beginning to irk me too though.

      --
      meep
    2. Re:Should have deleted it from the start by icebike · · Score: 4, Insightful

      It'll probably end up on wikileaks once a government body gets it's paws on it; safer to chuck those discs in the microwave.

      Exactly.

      I'm rooting for Google to stand fast. What possible use would the government have for these account names and passwords.

      When the government can prove that they can hold onto their own secret data then maybe they can be entrusted with this. (NAH, what was I thinking!?)

      If it is released to the government, (AND Government) it will be leaked.

      --
      Sig Battery depleted. Reverting to safe mode.
    3. Re:Should have deleted it from the start by qubezz · · Score: 4, Insightful

      Oh noes! Google might have recorded an unencrypted packet or two of someone checking gmail while they were driving through a neighborhood! They are clearly guilty of receiving and recording electromagnetic signals IN A FREQUENCY THAT IS PUBLIC AND UNLICENSED, by devices that were advertising their SSID and transmitting unencrypted data. Guilty of doing something completely legal and completely trivial.

      I trust Google with my personal contacts and emails, documents, schedule, voice mail, etc. I do not trust and never authorized the State of Connecticut to have access to any data of mine, and neither should you. Go away extortionist attorney general.

    4. Re:Should have deleted it from the start by whoever57 · · Score: 3, Insightful

      They are clearly guilty of receiving and recording electromagnetic signals IN A FREQUENCY THAT IS PUBLIC AND UNLICENSED, by devices that were advertising their SSID and transmitting unencrypted data

      I think that there is a good case that privacy concepts need to be re-thought in the light of what is possible now through data-mining. Today, private information can be derived from amassing and relating lots of disparate public information. This is an issue that is not simply dispatched by pointing out that the source information was public. I think that we need new concepts of privacy.

      --
      The real "Libtards" are the Libertarians!
    5. Re:Should have deleted it from the start by AltairDusk · · Score: 5, Insightful

      Well the whole thing just seems like an ever climbing level of stupid. First Google collects data that while not illegal certainly wouldn't look good for the company: Dumb. Then they announce it to the world: Extra Dumb The governments demand to see the data...why? Just to see if there are any juicy bits? :Really Dumb, and now Google refuses to hand any of it over rather than just redact the names and let them have the boring bits: Extra Super dumb.

      First Google accidentally collected the data, they didn't do it on purpose. Then after realizing they had collected it they decided to come forward and do the right thing rather than doing what most corporations would have done and covering it up. Then instead of governments realizing "hey they screwed up and they've admitted it, we want to encourage this kind of behavior rather than cover-ups" all of the governments involved have done a fine job making the cover-up look like the smart choice over doing what's right.

    6. Re:Should have deleted it from the start by AltairDusk · · Score: 3, Insightful

      While I agree I also think there needs to be some clear indication that privacy is desired. Encrypted WiFi, however weak the encryption may be, clearly signals a desire for privacy and the argument can convincingly be made that anyone cracking the encryption is willfully violating privacy. Unencrypted WiFi should carry the same expectation of privacy as talking over a clear channel on a CB radio, the concept is actually quite similar.

      What really should have happened here is that the government should have asked Google "Ok, you screwed up, now what are you going to do about it? How about you fund a campaign to educate the public on privacy matters and the importance of encrypting their WiFi?" That would have been a better solution for everyone involved. The government still gets to look like they stepped in and took care of the issue. Google still pays for the mistake, while helping people in the process. The public gets to use this incident and all of the publicity surrounding it as a lesson and many more people will encrypt their wireless networks or clamor to their ISPs to provide their wireless routers with encryption already set up. Very large missed opportunity here.

  2. What could go wrong? by Knave75 · · Score: 3, Insightful

    Yes, the government is certainly a safe place to store sensitive data, what is google thinking?

  3. Holy Crap! by tpstigers · · Score: 3, Funny

    "letters, meetings, hearings" - If that doesn't scare the bejesus out of Google, I don't know what will.

    1. Re:Holy Crap! by ColdWetDog · · Score: 3, Funny

      "letters, meetings, hearings" - If that doesn't scare the bejesus out of Google, I don't know what will.

      The Spanish Inquisition. Nobody expects the Spanish Inquisition.

      --
      Faster! Faster! Faster would be better!
  4. Why not the US government? by sapphire+wyvern · · Score: 3, Insightful

    Apparently Google has already given some or all of the sniffed data to authorities in Germany, Spain and France. I wonder why the US is causing so much more controversy?

    Perhaps the US government is asking for more data (eg data from other countries) or has refused to meet conditions Google had set for the European governments, when handing over their shares of the data?

    1. Re:Why not the US government? by melted · · Score: 3, Informative

      IANAL, but maybe it's because by law of _this_ country they _don't have to_ turn it over without a court order?

    2. Re:Why not the US government? by Lloyd_Bryant · · Score: 5, Informative

      Apparently Google has already given some or all of the sniffed data to authorities in Germany, Spain and France. I wonder why the US is causing so much more controversy?

      Perhaps the US government is asking for more data (eg data from other countries) or has refused to meet conditions Google had set for the European governments, when handing over their shares of the data?

      The issue is that it is *not* the US Government asking to see the data, it's the Attorney General of the State of Connecticut. Who may or may not have any legal justification for even asking for it.

      Google has already underwent an FTC investigation over this issue, and an FCC investigation is still pending.

      So how many levels in our kludgeocracy should Google have to explain its actions to?

      --
      Don't tell me to get a life. I had one once. It sucked.
  5. Re:Sounds about right by Americano · · Score: 5, Informative

    They want it as part of an investigation into the "accidental" collection of the data. This is standard procedure for a regulatory investigation - the data Google collected is evidence relevant to the investigation.

    I'm not sure why you'd be interested in pretending that you don't get this... When's the last time you heard of an investigation in which the law enforcement and legal officials involved DID NOT want to see evidence relevant to their investigation?

    Whether or not Atty General Blumenthal has jurisdiction and the right to request that data is something that may need to be decided in a court, but SOME investigative body is certainly going to want to review the data that was collected, since it is (perhaps) evidence of wrongdoing on Google's part, and entirely relevant to an investigation into whether or not Google broke laws in collecting and retaining that data.

  6. Re:Sounds about right by beakerMeep · · Score: 5, Insightful

    The fact that his answer was so evasive is actually very telling. If they had a good reason to be looking at the data they'd have a warrant in hand.

    “There’s a range of potential opportunities for oversight and scrutiny by a member of the U.S. Congress – including letters, meetings hearings, and potentially even legislation.”

    Translation: we got nothing, so we're gonna try and invent some reason to get the data.

    --
    meep
  7. Re:What if an individual did what Google did here? by _Sprocket_ · · Score: 3, Insightful

    Wouldn't the state just extradite and prosecute? What is different in the process for a corporation?

    They would ignore it. Fun fact for you: Google was doing the same thing thousands of hobbiests are doing every day using the same tools. But it's different for Google since there's political hay to be made.

  8. Re:they didn't "accidentally" collect it by Neil+Boekend · · Score: 5, Funny

    I mean come on...someone would have noticed the drives filling up, wondered why, etc. These people are supposedly geniuses, right?

    You apparently have no idea how much harddrive space Google has.

    --
    Well, I might have a way, but it only works on a semi spherical planet in a vacuum.
  9. Re:they didn't "accidentally" collect it by whoever57 · · Score: 4, Insightful

    This is a major privacy invasion.

    I'm a little confused on how giving more people access to the data helps to ameliorate the supposed privacy invasion?

    --
    The real "Libtards" are the Libertarians!
  10. Re:Sounds about right by TapeCutter · · Score: 5, Insightful

    "Whether or not Atty General Blumenthal has jurisdiction and the right to request that data is something that may need to be decided in a court, but SOME investigative body is certainly going to want to review the data that was collected, since it is (perhaps) evidence of wrongdoing on Google's part, and entirely relevant to an investigation into whether or not Google broke laws in collecting and retaining that data."

    Evidence for what charge? What you are describing above is commonly known as a "fishing expedition". If Google has been accused of a crime then by all means go to court and get a search warrant to collect evidence, but demanding evidence so that you can go away and scour the books to see if you can find a crime is not how it's supposed to work.

    --
    And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  11. Re:Sounds about right by TapeCutter · · Score: 5, Insightful

    "There's all kinds of things that data could show, leading to any number of possible charges against (and eventual fines collected from) Google."

    Sure, just like a cop without a search warrant could find lots of things in your home to hang you with. It's not about trusting either google or the government it's about the rule of law which says the authorities must have probable cause. In this case they don't have probable cause, they don't even have an allegation, which is why they don't have a search warrant.

    "You're naivety is astounding!"

    Voulenteering ANY information to an investigation that is spending a pile of taxpayer's money looking for a reason to hang you, is not just naive, it's stupid.

    --
    And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
  12. Re:they didn't "accidentally" collect it by adamofgreyskull · · Score: 5, Funny

    1)You don't "accidentally" retain sniffed traffic logs of that size, across your entire international operations, for months if not years, "accidentally." See http://gizmodo.com/5671049/google-street-view-cars-collected-emails-and-passwords [gizmodo.com] I mean come on...someone would have noticed the drives filling up, wondered why, etc. These people are supposedly geniuses, right?

    Eric: Hey Larry, this D drive is filling up pretty quick.
    Larry: Huh?
    Eric: I said the D drive is filling up pretty quick.
    Larry: It's probably nothing, what are you doing?
    Eric: Oh, nothing..I was just going to create a new logo for the anniversary of the invention of the potato peeler and I got this message.
    Larry: What did it say?
    Eric: I don't remember exactly, I just clicked ok, but it said something about disk-space, and wouldn't let me create my jpeg.
    Larry: Well did you check the Control Panel?
    Eric: Yeah, it's saying it's all full...
    Larry: What? Seriously? I thought we put a 100Gb in there a few months ago? It shouldn't be full.
    Eric: Well...it is. See? All blue!
    Larry: Should we delete some of it?
    Eric: I did, last week, and the week before...maybe it's a virus?
    Larry: What are all these? Hmmm. They look important...probably Sergey's.
    Eric:Shit...Sergey. Do you think...shall we tell him? Shall we tell Sergey?
    Larry: Do you want to tell him? He's going to be super pissed when he finds out you filled the new hard-drive with porn or whatever you did..
    Eric: I...Good point. I'll go down to best-buy and get one of those external disk things. What should I get? 200Gb or 300Gb?
    Larry:I don't know? Just get the biggest one you can, and hurry! It's his turn to use the computer next!!
    Sergey: Hey guys, what's up?
    Eric & Larry (together): Nothing!

    End Scene.

  13. Re:they didn't "accidentally" collect it by guruevi · · Score: 4, Insightful

    1) Yes you can accidentally retain sniffed traffic logs. Run Kismet for instance. I have once accidentally left it on, sniffing all encrypted and non-encrypted traffic in my neighborhood (~15 networks) for about 48 hours: ~10GB. Google did not sniff all traffic, it only sniffed (or sampled) a few packets from every hotspot (maybe 10-20kb). With standard disk sizes being 250GB it takes a really, really long time to fill up your disk with random samples.

    2) People are pissed for what? Not securing their own wireless? Transmitting their passwords in clear text over an insecure medium? They only correlated what any WLAN tracker/sniffer can provide. If you own a wireless network you might know that your MAC addresses and SSID's get transferred and being able to correlate them against GPS locations has been done not just by Google. Even so, it's still legal in most places to receive radio transmissions (since it's physically impossible not to) and you can do whatever you want with them those transmitting those radio transmissions should know that there can be eavesdroppers anywhere.

    3) It's not slightly creepy. I have done it as have probably many others here. Ever been at a location where you need internet? Maybe at your local coffee shop or at a hotel? You open your laptop and scan for networks hoping to find an unsecured one - you're now wardriving. Doing it for profit has been done before, there are companies that sell these databases successfully since at least the last '90's, not just Google.

    --
    Custom electronics and digital signage for your business: www.evcircuits.com