Slashdot Mirror


Microsoft Exposes Locations of PCs and Phones

suraj.sun sends this excerpt from CNET: "Microsoft has collected the locations of millions of laptops, cell phones, and other Wi-Fi devices around the world and makes them available on the Web without taking the privacy precautions that competitors have, CNET has learned. The vast database available through Live.com publishes the precise geographical location, which can point to a street address and sometimes even a corner of a building, of Android phones, Apple devices, and other Wi-Fi enabled gadgets. Unlike Google and Skyhook Wireless, which have compiled similar lists of these unique Wi-Fi addresses, Microsoft has not taken any measures to curb access to its database."

96 comments

  1. and... by datapharmer · · Score: 2

    we're surprised?

    --
    Get a web developer
  2. Wow.. by Anonymous Coward · · Score: 0

    I didn't see this coming, but should have!

  3. wut? by RenHoek · · Score: 1

    After all the lawsuits that Google had to go through, who was the genius at Microsoft that thought this was a good idea?

    1. Re:wut? by NoNonAlphaCharsHere · · Score: 3, Informative

      You make it sound as if Microsoft does anything in a premeditated fashion. Stuff just happens and then it bubbles up until the lawyers and marketroids find out about it.

    2. Re:wut? by GameboyRMH · · Score: 5, Funny

      Google: I caused a screwup.

      Microsoft: That's not a screwup. THIS is a screwup!

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    3. Re:wut? by alexandre_ganso · · Score: 0

      people have been asking the same to everything microsoft did after windows xp. It's the biggest WTF company in the world.

      The only reason they still exist is that it seems it takes quite a beating to kill a giant elephant.

    4. Re:wut? by steelfood · · Score: 1

      Well, they are trying to outdo the competition in the internet and security markets.

      --
      "If a nation expects to be ignorant and free in a state of civilization, it expects what never was and never will be."
    5. Re:wut? by williamhb · · Score: 2

      Google: I caused a screwup.

      Microsoft: That's not a screwup. THIS is a screwup!

      According to the article, Google and Skyhook were doing exactly this screwup as recently as last month, when CNET published an article about them doing it.

  4. Question... by RLU486983 · · Score: 1

    Isn't this similar to what Google is being sued over? Though Google didn't make it publicly available and came forth stating they goofed, they still are in court over the WiFi info collection incident. Where do we sign up for the Class Action against M$?!

    1. Re:Question... by datapharmer · · Score: 2

      No, it was the other data they captured while it was going through the wireless networks that got Google in big trouble.

      --
      Get a web developer
    2. Re:Question... by Anonymous Coward · · Score: 0

      Google did make it publicly available, but that's not what the got sued for AFAIK.

    3. Re:Question... by poetmatt · · Score: 1

      ignore the dude who replied. the answer is yes, it's the same.

    4. Re:Question... by Anonymous Coward · · Score: 1

      How could it be the same? Google accidentally captured packets. Microsoft simply captured location / MAC address (which was what Google was supposed to be doing). Google got sued in multiple places because of the packet capture. It is not even remotely the same.

    5. Re:Question... by ElectricTurtle · · Score: 3, Informative

      Ignore the idiot who doesn't know where his shift key is. It's not the same. Most wireless networks broadcast a beacon signal that informs nearby receivers the name of the network and other information. Triangulating this signal which is public in its very nature is neither illegal nor unethical.

      Google was capturing the packets being broadcast within the networks themselves by other clients. So a system authenticating with a server in plain text (which happens too often) would have the authenticating information (user/password) intercepted. Depending on the view one takes of open networks, this probably violates the Electronic Communications Privacy Act, or at least its spirit.

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    6. Re:Question... by Anonymous Coward · · Score: 0

      The ECPA was specifically written to NOT apply to unencrypted RF signals.

    7. Re:Question... by zaphirplane · · Score: 1

      how do you authenticate in plain text over wireless? sure WEP is crackable, but not clear text and requires the capture a lot of packets.
      Do you mean people using a public unsecured wireless AP and authenticating to some web site over http (not https) ? hmmm
      So if I am walking down a street taking photos and people have posters with their credit card details hanging, I am breaching their rights? No, they are advertising their information.

  5. So? by YodasEvilTwin · · Score: 4, Insightful

    All the full article really says is that someone could tie a MAC address to a location. So? Knowing your MAC address gives me almost no information about you -- nothing personally identifiable, anyways, unless I have an unrelated method of attaching your MAC to you personally (such as having physical access to your phone...). So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing (that wasn't included in the article).

    1. Re:So? by LearnToSpell · · Score: 2

      It would tell you if they were a Dell customer, e.g. It would tell you what kind of device it was, and where it went...

    2. Re:So? by Anonymous Coward · · Score: 0

      It would tell them who made the device with the MAC address - not necessarily case-branded names i.e. Dell

    3. Re:So? by Anonymous Coward · · Score: 1

      If you use the free WiFi at starbucks, I can record your MAC address. Now, since your phone or other devices in your vicinity send the positions of your MAC address to Microsoft if you are using WiFi , I can query their database and it gives my your position. Depending on how often and fast it gets updated and how often you use WiFi, I can track you (assuming that there are a lot of people using microsoft phones where you are).

    4. Re:So? by John.P.Jones · · Score: 3, Insightful

      I see you on the street and decide to target you, I sniff some packets and learn your MAC address. I then use this MAC address to find where you are/have been/will be. The point is the connection between you and a set of MAC addresses is random but pretty static which can then be indexed to learn a lot about your locations.

    5. Re:So? by Catnaps · · Score: 1

      Or not, if you know vaguely what you're talking about. Which it appears you don't.

    6. Re:So? by Anonymous Coward · · Score: 0

      Lets say I am a Government agency, or insurance company, or some other group that wants to violate your privacy for fun or profit.

            I have all this data on MAC addresses. It becomes a big map with points and time stamps on it. Now I buy or get data from another source(credit card purchases, Facebook posts, etc), it becomes another map of points. I line the two up, and soon am able to narrow the MAC address to the other bit of data. Soon I have connected enough dots to say "Yes, this MAC address belongs to Mister X, who every Sunday buys a coffee at Starbucks, and eats a cheeseburger every day at McDonnalds, withdraws $200 form his ATM, and then drives downtown into the Red light district once a week."

      All one needs is a bit of data that overlaps in the right way with data that does link to you.

    7. Re:So? by shadowrat · · Score: 1

      Your MAC address can be divined through online interactions with people. It's feasible that the boogeyman called the cyber stalker could use this information to find you physically. This news is far more worrying than themobile devices that kept a local cache of locations you had been. Most of the hand wringing surrounding that were that someone could get your phone and discover your movement patterns. In that case, someone would have to be physically by you anyway to get your phone. This allows someone [the creepy stalker, jealous spouse, online pedophile, mob boss, etc] who shouldn't know where you are to find out.

      THEN they will come and get your iphone and find out all the other places you have visited.

    8. Re:So? by blindbat · · Score: 2

      But when you buy a computer with your credit card, or send in electronic registration you give them the personal information.

      They already have the serial number and MAC address of the computer on file.

    9. Re:So? by Anonymous Coward · · Score: 0

      Exactly! If this same information was given about medications it would pass the HIPAA test. There really is nothing to see here.

    10. Re:So? by hawguy · · Score: 5, Interesting

      All the full article really says is that someone could tie a MAC address to a location. So? Knowing your MAC address gives me almost no information about you -- nothing personally identifiable, anyways, unless I have an unrelated method of attaching your MAC to you personally (such as having physical access to your phone...). So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing (that wasn't included in the article).

      Or, if I know my ex-gf's phone's or home access point's MAC address, I could find out where she moved when she told me to leave her alone and stopped answering my phone calls and emails. Makes it easier to pay her a surprise visit and convince her to take me back. Once she sees that I tracked her down and followed her halfway across the country to sit at her doorstep and wait for her to come home, she'll be bound to want me back. Fortunately, the MAC was captured from her phone while she was at work and at he gym, so I can always meet her in one of those places if she spots me at her house.

    11. Re:So? by Anonymous Coward · · Score: 0

      You can track a MAC address. You need to dig a little more to determine if that MAC address is tied to a device of a person that you are interested in tracking.

      Perhaps when Hollywood does a remake of The Jerk, Navin Johnson's name will not be picked out of a phonebook by an insane sniper, but his MAC address will be randomly picked out of this DB.

    12. Re:So? by hawguy · · Score: 1

      Exactly! If this same information was given about medications it would pass the HIPAA test. There really is nothing to see here.

      Are you sure? HIPAA says:

      Protected health information (PHI) under HIPAA includes any individually identifiable health information. Identifiable refers not only to data that is explicitly linked to a particular individual (that's identified information). It also includes health information with data items which reasonably could be expected to allow individual identification.

      And since this database effectively turns a MAC address into a street address plotted on a map, if you had a paper with a prescription with their home access point's MAC address, I think that would be protected under HIPAA, just like if it had their home address rather than MAC address.

    13. Re:So? by adolf · · Score: 4, Insightful

      So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing

      Suppose that there is a method to determine (with reasonable certainty) what your wireless MAC address is.

      Suppose this method is just as simple as driving by a location where you are known to be present (ie: at home) while you're using WiFi.

      What then?

      Or: Suppose that you have legal reasons to be paranoid, and physical access to the device by armed thugs with jackboots is only a warrant away.

      What then?

      Or. Suppose that an app on your phone calls home with your MAC address.

      What if it also knows your phone number?

      What then?

    14. Re:So? by TheCouchPotatoFamine · · Score: 1

      perhaps if you MAC'ed on her some more she would be persuaded by your leet skills /veal!

      --
      CS majors know the time/space tradeoff, but they never get taught the 3rd, crucial, tradeoff of the set: comprehension!
    15. Re:So? by alexandre_ganso · · Score: 2, Funny

      So that's not a problem. Microsoft phones are only seen at the mobile phone shops, and most of them with a mockup sticker instead of a live screen anyway.

      At least here in europe. I'm yet to see a single windows phone in the wild.

    16. Re:So? by Anonymous Coward · · Score: 0

      I'm guessing you mean WP7, cause you can still see a few Windows CE devices around.

    17. Re:So? by formfeed · · Score: 1

      Once she sees that I tracked her down and followed her halfway across the country to sit at her doorstep and wait for her to come home, she'll be bound to want me back. Fortunately, the MAC was captured from her phone while she was at work and at he gym, so I can always meet her in one of those places if she spots me at her house.

      Thanks microsoft, what a great service!
      Maybe one would be able to go even a step further. - Not that you have to, your plan is so romantic that I can't imagine any woman not wanting you back. - But just for curiosity, one could check what other MAC address has a similar movement pattern, goes to the movies with her, a restaurant for 73 minutes, and then stays at her place till 7am.

    18. Re:So? by Anonymous Coward · · Score: 1

      What does 08:00:69:02:01:FC got that I haven't got? Why won't you love me?!

    19. Re:So? by gbjbaanb · · Score: 1

      hey! even better, you could find out where Bill G goes, and follow him around. They might change their mind thinking this is ok after that happens a few times.

    20. Re:So? by Anonymous Coward · · Score: 0

      "Bill G" likely has as much to do with this as you do. Gates hasn't done anything around Microsoft for over a decade in all reality. Just because you and CmdrDildo have your head up your ass doesn't mean everyone else does.

    21. Re:So? by Anonymous Coward · · Score: 0

      Suppose that there is a method to determine (with reasonable certainty) what your wireless MAC address is.

      Look up how a device generates it's IPv6 address. (i.e.: the last 64 bits by default will contain the 48 bits of your MAC address).
      Find out how many currently selling mobile devices are IPv6 capable (i.e.: most of them. although, i don't know about WP7).
      How many mobile data networks have or are about to turn on IPv6, or does your device use some form of tunnelling?

      (and because this is slashdot)
      ???
      Profit!

    22. Re:So? by adolf · · Score: 1

      The mobile data network is different from WiFi. Even if a MAC address (in the conventional sense) is used for assigning IP addresses (which I doubt -- not even IPV6 is sufficient reason for VZW (et cetera) to not NAT the hell out of everything), that MAC will not be the same as the WiFi adapter.

      Two different interfaces, two different MAC addresses.

    23. Re:So? by adolf · · Score: 1

      Your ex girlfriend's access point's MAC address is not entirely unlikely to already be searchable on wigle.net.

      (Her client devices' MAC addresses are another story, though -- you might find out where her Linksys box lives, but you won't discover which gym she goes to.)

    24. Re:So? by ljw1004 · · Score: 1

      Where in Europe? When I was in Italy last October, WP7 was the single most common smartphone I saw on the streets, and every billboard was plastered with Italy's national telecom operator advertising it. (disclaimer: I work at MS).

    25. Re:So? by bloodhawk · · Score: 1

      Or: Suppose that you have legal reasons to be paranoid, and physical access to the device by armed thugs with jackboots is only a warrant away. What then?

      I find it hard to believe there would be someone that paranoid and then not take basic precautions of not broadcasting wireless network details.

    26. Re:So? by adolf · · Score: 1

      Until today, I'd find it very easy to believe.

      I myself am not very paranoid (I have no particular reason to be), but I try to remain aware. I've not really considered the notion of my WiFi widgets MAC addresses being funneled into a database.

      Until -- again -- today.

    27. Re:So? by williamhb · · Score: 1

      All the full article really says is that someone could tie a MAC address to a location. So? Knowing your MAC address gives me almost no information about you -- nothing personally identifiable, anyways, unless I have an unrelated method of attaching your MAC to you personally (such as having physical access to your phone...). So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing (that wasn't included in the article).

      I suspect there's one or two employers that would be tempted to search for "which of my employees are having affairs with each other" (which pairs of phones occasionally spend the night in the same location). Other searches like "who's interviewed at our competitors?", "who's potentially got an alcohol problem (phone is frequently in the pub)", "who's got medical issues", etc, would also be very possible.

    28. Re:So? by Anonymous Coward · · Score: 0

      It would tell you if they were a Dell customer, e.g. It would tell you what kind of device it was, and where it went...

      oh no. if someone got this information they could.... ...probably not do anything with it.

      in other news, if you walk outside, you could actually see real people and know their exact location in real time.

    29. Re:So? by knorthern+knight · · Score: 1

      > If you use the free WiFi at starbucks, I can record your MAC address.

      Computer literacy test...
      Question: What is your MAC address?
      Answer by...

      Clueless user: Duhhhh... I don't got MAC, I got Windows

      Competent user: 01:23:45:67:89:ab

      Expert: What do you want it to be?

      And since we're at Starbuck's...
      ifconfig eth0 hw ether c0:ff:ee:c0:ff:ee

      --

      I'm not repeating myself
      I'm an X window user; I'm an ex-Windows user
    30. Re:So? by alexandre_ganso · · Score: 1

      Really, I'm yet to see any. I have NEVER seen one, and I am curious about it!

      I travel regularly throughout germany, belgium, the netherlands, switzerland, france, andorra and spain. Have not seen ANY.

      What I usually see is iPhones, and the occasional android.

    31. Re:So? by alexandre_ganso · · Score: 1

      of course. My own gps is windows ce (with the occasional ce's version of the BSOD)..

    32. Re:So? by Anonymous Coward · · Score: 0

      The only thing less likely than you ever having had a girlfriend is that you'd know her MAC address.

    33. Re:So? by Anonymous Coward · · Score: 0

      Your MAC address can be divined through online interactions with people.

      How? Your MAC address does not pass the first router your IP packets encounter, which in most cases will be the one on your home network.

    34. Re:So? by Anonymous Coward · · Score: 0

      MAC addresses do not make it past the Ethernet layer (they get stripped and replaced at every router hop). No one on the Internet can find your MAC address without having software on your computer tell it to them explicitly.

  6. Not Apple by Anonymous Coward · · Score: 0

    Well it isn't Apple that's doing it, so what does it matter?

  7. So... Windows Mobile Users.. by Anonymous Coward · · Score: 0

    That's like, what, 3 people?

    1. Re:So... Windows Mobile Users.. by Anonymous Coward · · Score: 0

      Or 10% of American smartphone users....

      http://blog.nielsen.com/nielsenwire/?p=28516

    2. Re:So... Windows Mobile Users.. by Anonymous Coward · · Score: 0

      if 6% = 10%.

  8. Device Control by SavSoul · · Score: 1

    It would be nice if devices had the ability to limit the GPS accuracy for all applications. Something that would allow them to return circular (Spherical?) regions that are defined to fall on a LAT/LON boundry so it doesn't place you in the center of the circle. Have the lowest region be exact LAT/LON, then 100 meters, 1km, 10km, 100km and off. This would only be helpful if the device itself did it to prevent companies with no common sense from doing this.

    1. Re:Device Control by SavSoul · · Score: 1

      I need to RTFA

    2. Re:Device Control by Anonymous Coward · · Score: 0

      then 100 meters, 1km, 10km, 100km and off.

      Then what would be the point? You might as well not be using GPS at all.

    3. Re:Device Control by Anonymous Coward · · Score: 0

      10km would still be useful to send you location specific adverts if you were interested in receiving them. I'm sure there are other circumstances where a imprecise location would still be useful.

  9. Sharing your personal information by DickBreath · · Score: 4, Funny

    Sharing your personal information is part of Microsoft's efforts to be more open.

    --

    I'll see your senator, and I'll raise you two judges.
  10. LINK PLEASE by microcentillion · · Score: 1

    None of the articles covering this include a link to the alleged maps, and I can't find it on the web.
    SOMEONE PLEASE PROVIDE A LINK!!!

    --
    But clearly you have something better to say...
    1. Re:LINK PLEASE by technix4beos · · Score: 2
      Chill the fuck out. If you read the article, you will notice about halfway through they do provide it, they just didn't explicitly link to it.

      Here it is: http://inference.location.live.com/

      Unfortunately after signing in it doesn't work, it takes you back to your Live main page. Perhaps they took it down after realizing it was a bad idea ...

      Can someone confirm?

      --
      user@host$ diff /dev/urandom /dev/uspto
    2. Re:LINK PLEASE by lucidlyTwisted · · Score: 0

      It took a while as it's buried under some of the more esoteric Live services. You might need to log-in.
      http://tinyurl.com/2g9mqh

    3. Re:LINK PLEASE by NoNonAlphaCharsHere · · Score: 2, Informative

      Yes. It's a bad idea.

    4. Re:LINK PLEASE by ElectricTurtle · · Score: 1

      In case MS does take theirs down, don't forget the biggest and oldest community-built database of wireless networks: Wigle.net

      Long before MS, Google, or Skyhook wardrivers have been working in concert on their own time and dime to contribute over 40 million geolocated networks worldwide. A few thousand of those were first done by me in fact, though I haven't contributed in years.

      --
      I support the Slashcott and will not be reading or commenting from 2/10/14 to 2/17/14. Beta is steaming pile of dog shit
    5. Re:LINK PLEASE by technix4beos · · Score: 1

      Thank god you posted that! Haven't laughed so hard in a while. :P

      --
      user@host$ diff /dev/urandom /dev/uspto
  11. Isn't this just being more honest? by m50d · · Score: 3, Insightful

    The only difference is that MS are letting us see what they have. Google have collected the same data and more. (And bear in mind anyone with a fleet of vans could do the same). When it comes to violating my privacy, I don't think I have more faith in any of these companies than I do in random strangers on the internet.

    --
    I am trolling
  12. Well... by msauve · · Score: 4, Funny

    Their security consultant, Mark Zuckerberg, said it was OK.

    --
    "National Security is the chief cause of national insecurity." - Celine's First Law
  13. Slapping around the face... by cyberfin · · Score: 1

    ... with an old herring. They deserve it.

    --
    "I'm taking this loop off." - Jack O'Neill
  14. I seem to be missing something. by Jeng · · Score: 1

    Ok, why does Google, Microsoft, and others map out Wi-Fi locations?

    I'm at a loss here, it's not like they are only mapping out public Wi-Fi.

    --
    Don't know something? Look it up. Still don't know? Then ask.
    1. Re:I seem to be missing something. by Anonymous Coward · · Score: 1

      Because when used correctly, it allows a device without a GPS to do GPS-like things, like finding its location on a map or pull up a list of local services.

    2. Re:I seem to be missing something. by Jeng · · Score: 1

      So they are relying on my neighbors Wi-Fi signal to figure out where I am?

      That sounds pretty dumb. Besides that afaik that is already done with cell phone tower triangulation. Private hotspots sounds like too much of a variable to me.

      Besides, how many Wi-Fi capable devices are out there that have a GPS function but no GPS?

      I know my last phone did that, but it was kinda old, it got it's location from the cell phone towers.

      --
      Don't know something? Look it up. Still don't know? Then ask.
    3. Re:I seem to be missing something. by omnichad · · Score: 1

      Targeted ads.

    4. Re:I seem to be missing something. by Jeng · · Score: 1

      They get that via IP address.

      --
      Don't know something? Look it up. Still don't know? Then ask.
    5. Re:I seem to be missing something. by kylemonger · · Score: 1

      In fact it works pretty well, well enough for their purposes. They don't need enough precision to drop a bomb on you, rather they need just enough to know what neighborhood you're in, so they can target you with ads for local pizza joint you may not have heard of. Also, I have an iPad with a cell radio and WiFi, and the location feature works better with both radios enabled than with either one separately. With both enabled the locator is often accurate enough to nail what parking spot my car is in.

    6. Re:I seem to be missing something. by HTH+NE1 · · Score: 2

      In fact it works pretty well, well enough for their purposes. They don't need enough precision to drop a bomb on you, rather they need just enough to know what neighborhood you're in, so they can target you with ads for local pizza joint you may not have heard of.

      Or region-lock DRMed content against you.

      Coming soon: laws requiring content providers to filter access based on location of the recipient, such as not serving pornographic content to computers on school property. Like the "drug free zone" around schools, except it's a "porn free zone", and it's mapped out on Google.

      Because if such databases are built, considered accurate enough, and are freely accessible, you're going to be expected to check against them as due diligence.

      --
      Oh, say does that Star-Spangled Banner entwine / The myrtle of Venus with Bacchus's vine?
    7. Re:I seem to be missing something. by omnichad · · Score: 1

      To some degree. It's not all that accurate. Where I live - in a rural town of about 6,000, my IP shows me as being about 50 miles away. If you live in a major city, you can get more than a city name with other forms of geolocation - you can get a neighborhood.

      If I go to Google (logged in) and type plumber - I get the ones that are near where my profile says I am, and not where my IP says I am. It's a lot more useful. Plus, Google Maps on my iPod touch always shows me where I am almost to the street intersection. I really like that.

    8. Re:I seem to be missing something. by PitaBred · · Score: 1

      Besides, how many Wi-Fi capable devices are out there that have a GPS function but no GPS?

      Almost every laptop in existence?

    9. Re:I seem to be missing something. by kylemonger · · Score: 1

      Ooo, very nasty. I had not considered that application. But yeah, the accuracy is good enough that sport teams could for instance disable streaming of live feeds of their games within the home city if the game isn't sold out. Or charge you to watch it while letting people elsewhere continue to watch it free.

    10. Re:I seem to be missing something. by Mia'cova · · Score: 1

      Cell tower triangulation is pretty poor when done with on your phone. You'll only be able to pin your location within a few blocks. In an urban area, a few wifi hotspots will pin you within 100m fairly easily. Especially since wifi doesn't travel very far, just finding a known wifi signal is enough to know you're within about 100m of it. Especially handy indoors, eg a mall or at home, where you'll have those known locations.

      Remember the big issue where the iphone cached known locations? That was a really nice performance boost. If you're at home, you're already connected to a known wifi point (your cell phone reports its location to google/ms/apple) and are pretty much guaranteed instant location lookup. If you open up the maps app, it'll pin you as being at home in a fraction of the time it would actually take to figure out by doing a network round-trip to measure signal strenghts, look up cell phone tower locations, etc. Getting an actual GPS signal is really only possible when you're outside with a pretty decent view of the sky.

    11. Re:I seem to be missing something. by Anonymous Coward · · Score: 0

      To provide location services that do not require GPS

  15. Nice juicy DB for your "government"... by Anonymous Coward · · Score: 0

    Sounds like a nice juicy chunk of data for your big-brother in Washington DC.... Sure glad I don't use any MS online crap....

  16. Really so soon? by Anonymous Coward · · Score: 0

    "Stanford researcher Elie Bursztein says Microsoft should adopt the same location-privacy protections that Google implemented last month."

    Last month already? Gosh, I'm so impressed with Google... NOT.

  17. Yet... by trum4n · · Score: 1

    People bitched up a fever when it was google.

    1. Re:Yet... by HeckRuler · · Score: 2

      Well, to an extent, Google is supposed to be the good company that still has a soul. We all know Microsoft is the evil empire that would do this sort of thing.

  18. That's funny... by Anonymous Coward · · Score: 0

    http://www.aptiquant.com/news/is-internet-explorer-for-the-dumb-a-new-study-suggests-exactly-that/

  19. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  20. Feel free to take the stereo too. by jishak · · Score: 1

    Sounds like a burglar's christmas wish come true. Assuming the burglar doesn't post his actions to facebook, I think the privacy implications for this are far worse than what Google's streetview has done.

    1. Re:Feel free to take the stereo too. by CycleMan · · Score: 1

      Depends whether the burglar has a phone giving location info to Microsoft. Then it becomes a local police department's IT team's dream come true. Fingerprints that point to where he was when, which can be aligned with a matrix of known burglaries, and now he's plausibly connected to other crimes. Unfortunately, for them to catch this one burglar, they'll have to start tracking all of us all the time, and someone will wise up enough to steal someone else's phone and carry it to several crime scenes... I'll let someone else finish the story.

  21. I'm a PC by Anonymous Coward · · Score: 0

    and this was my idea...

  22. Time for a protocol update by Mia'cova · · Score: 2

    It sounds like we're due for a protocol change where these addresses are updated to prevent long-term tracking. Give the operator the choice of static or randomized. Some work would have to be done to ensure devices would continue to correctly identify a network they've previously connected to. But some of those details ignored, I think everyone gets my point here. The thing here is which I don't get is that the broadcast id of these routers isn't typically available to anyone intercepting your IP traffic. So this database won't help someone find you unless your machine has been compromised. Perhaps one solution is to have network hardware watch for the Ids but hide them from the OS. That would prevent a compromised machine from revealing its location while at the same time allowing for the broadcast Id to useful for assisted GPS. I'd be a little sad if we lost the awesome navigational benefits due to privacy concerns without first considering protocol/implementation fixes to address the concerns.

    One great example is indoor maps. You can get maps for the inside of a mall now as part of your smartphone's map app. You just zoom in on the mall and it turns into an indoor map. Without the wifi, you're not going to have an accurate location marker inside.

  23. Apple and Android Devices? by Anonymous Coward · · Score: 0

    Or so the summary says. So, what about Windows Phone 7?

    "If you buy one of our phones, we can see to it that the bad guys don't find you. Otherwise, there's no telling what bad stuff might happen."

  24. Access to the database by LongearedBat · · Score: 0

    Microsoft has not taken any measures to curb access to its database

    So? Why bother? If it's Microsoft security, then what difference would it make?

  25. Re:YES by thegarbz · · Score: 1

    Microsoft released their source code and swore that this wouldn't happen, right? RIGHT?

  26. Illegal profits should be distributed to users by Anonymous Coward · · Score: 0

    Typical of the declining company not to realize that it is no longer the 800 pound gorilla who ignored international web standards for 2 decades. I hope they get all the grief that Apple got after the first round.... And more. Their security people and lawyers should have known. Publishing it also makes the crime even more heinous... Constitute illegal profits at public expense!