Microsoft Exposes Locations of PCs and Phones

suraj.sun sends this excerpt from CNET: "Microsoft has collected the locations of millions of laptops, cell phones, and other Wi-Fi devices around the world and makes them available on the Web without taking the privacy precautions that competitors have, CNET has learned. The vast database available through Live.com publishes the precise geographical location, which can point to a street address and sometimes even a corner of a building, of Android phones, Apple devices, and other Wi-Fi enabled gadgets. Unlike Google and Skyhook Wireless, which have compiled similar lists of these unique Wi-Fi addresses, Microsoft has not taken any measures to curb access to its database."

Comments

So?

[YodasEvilTwin]

All the full article really says is that someone could tie a MAC address to a location. So? Knowing your MAC address gives me almost no information about you -- nothing personally identifiable, anyways, unless I have an unrelated method of attaching your MAC to you personally (such as having physical access to your phone...). So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing (that wasn't included in the article).

Re:So?

[John.P.Jones]

I see you on the street and decide to target you, I sniff some packets and learn your MAC address. I then use this MAC address to find where you are/have been/will be. The point is the connection between you and a set of MAC addresses is random but pretty static which can then be indexed to learn a lot about your locations.

Re:So?

[adolf]

So the information is entirely useless for someone trying to invade your privacy, unless there's something I'm missing

Suppose that there is a method to determine (with reasonable certainty) what your wireless MAC address is.

Suppose this method is just as simple as driving by a location where you are known to be present (ie: at home) while you're using WiFi.

What then?

Or: Suppose that you have legal reasons to be paranoid, and physical access to the device by armed thugs with jackboots is only a warrant away.

What then?

Or. Suppose that an app on your phone calls home with your MAC address.

What if it also knows your phone number?

What then?

Isn't this just being more honest?

[m50d]

The only difference is that MS are letting us see what they have. Google have collected the same data and more. (And bear in mind anyone with a fleet of vans could do the same). When it comes to violating my privacy, I don't think I have more faith in any of these companies than I do in random strangers on the internet.