Slashdot Mirror
Google Facing New Privacy Probe Over Safari Incident
An anonymous reader writes "Last month we discussed news of a controversial method Google was using to bypass Safari's privacy settings in order to enable certain features for users who were logged in to Google. Now, U.S. regulators are investigating Google's actions to see whether the search giant has violated the privacy protection agreement they signed last year that includes a clause prohibiting Google from misrepresenting how users control the collection of their data. 'The fine for violating the agreement is $16,000 per violation, per day. Because millions of people were affected, any fine could add up quickly, depending on how it is calculated. ... A group of state attorneys general, including New York's Eric Schneiderman and Connecticut's George Jepsen, are also investigating Google's circumvention of Safari's privacy settings, according to people familiar with the investigation. State attorneys general can have the ability to levy fines of up to $5,000 per violation.' European regulators are adding the Safari investigation to their review of Google's consolidated privacy policy."
I still don't understand, isn't this a browser exploit that needs to be fixed? What's stopping another website from doing exactly the same thing?
Summation 2
"Google did no wrong. Google is awesome."
Realthink:
I don't trust Google anymore than I trust Microsoft or Apple or any other megacorp. I hate corporations. (But I fear government.)
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
If my boss asked me to do something like this, I'd fight it kicking and screaming. I'd probably quit too if the software was significant like a google.
Do you inspect a roller coaster everytime you ride it?
Isn't Safari the one misrepresenting what the security settings do?
While I'm as shocked as the next person that google knows I've been buying windshield wipers, how is it that google is being held to the promises Safari has made to its users?
t
would change their mind if Google gave them access to that info. THEN it would be ok because the online safety of every citizen and restoring the consumable media market is paramount.
by TheSpoom (715771) Uncaring Linux user here. I have nothing to add to this but please continue. *munches popcorn*
Before the comprehension-side of the my brain caught up, for a moment I thought we were talking about Google going out for a hunt on the savanna.
Why fix security problems when you can just prosecute people?
Palm trees and 8
Google created an invisible form on a web page and then simulated a click on to bypass Safari's privacy controls. That didn't happen by accident. That's hostile code.
Safari treated a "submit" action as permission for the site to plant a cookie. It's hard to stop that in the browser without breaking some legitimate forms. As a result of this, all web forms which want to trigger a cookie event may have to have explicit "submit" buttons.
Ever noticed that facebook history and cookies are stored irrespective of running Safari (5.1.3) in Private mode?
I consider that as a privacy breach .. what abt you guys?
Not sure what a "privacy probe" is but it does not seem very pleasant.
It's okay for Google to do the same things Apple and Microsoft do, because Google has goodness in their hearts.
Pot, meet kettle!
> A group of state attorneys general, including *New York*'s Eric Schneiderman and Connecticut's George Jepsen, are also investigating Google's circumvention of Safari's privacy settings,
http://yro.slashdot.org/story/12/03/16/1428243/new-york-state-passes-dna-requirement-for-almost-all-convicted-criminals
> 'Lawmakers in *New York* approved a bill that will make the state the first to require DNA samples from almost all convicted criminals. Most states, including New York, already collect DNA samples from felons, according to the National Conference of State Legislatures. What's remarkable about the New York bill is that it would expand the state's database to include DNA from people convicted of almost any crime, even misdemeanors as minor as jumping over a subway turnstile.'
If google had only been doing this to convicted criminals you might have had a point. Hint: don't try to construct analogies when you are in an emotional tizzy.
What's remarkable about the New York bill is that it would expand the state's database to include DNA from people convicted of almost any crime, even misdemeanors as minor as jumping over a subway turnstile.'
Interesting. Of course, it would make sense to simply collect a DNA sample in circumstances where previously they would have collected fingerprints. Going beyond that is expansion of their tracking.
Keep in mind, it's not "the government" that's asking for this. It's the people who elect the government. Maybe not all of them, but most of them.
So if it's counted in the only way that the "millions of people were affected" would be significant, that is one violation per user, then it would be 10s of trillions of dollars (depending on how many millions of people). -- one day would be sufficient to fix the US national debt, and two days would probably exceed the annual global GDP.
While I'm sure this makes certain Google-haters cream their panties, it's just silly talking about such numbers with a straight face.
I visited this rogue site that posts hostile code exploits and learned how to circumvent user privacy....
http://www.w3schools.com/jsref/met_form_submit.asp
Even worse, this malware generating site makes exploit code even easier...
http://api.jquery.com/submit/
And yes, I used the most evil and corrupt search engine ever invented (past and future) to locate these hacker havens
It's like making a door without a key and a lock. Instead we post instructions on the door telling you when you are allowed to open the door and when not. We then sue people for by passing the security mechanism instead of simply adding a lock.
Very nice.
Who cares what's in their heart? I only care about what's in their pants.
It's like making a door without a key and a lock. Instead we post instructions on the door telling you when you are allowed to open the door and when not. We then sue people for by passing the security mechanism instead of simply adding a lock.
Very nice.
Where I'm from, this is called "Trespassing," and is illegal.
Comment removed based on user account deletion
I love how one branch of the government is suing Google for privacy breach, while another is building a top secret domestic spy center (in Bluffdale Utah of all places), in absolute contempt of the US constitution. Is it that the right hand doesn't know what the left hand is doing or does the government think only it has the right to spy on us? And isn't Google hooked up to the NSA? How does that work? Boggles my fragile little mind. Maybe the whole thing's just a publicity stunt to keep the American Idol crowd feeling secure that they don't have to think and everything's being handled by their altruistic big brother. The whole thing stinks of deciet and snake-like corporate/government incestuous fu**ing. Blech.
All that happened is: you are allowed to press a +1 button, right? How does that violate your privacy?
I mean, does that expose you police record, or criminal record, or credit card numbers, or something like that?
Or is that just an MS/Apple thing?
How about getting caught outright lying to the US DoJ?
How about getting caught bribing OSI officials?
How about getting caught red-handed astroturfing?
How about fake TCO studies?
I could go on.
There is absolutely no comparison between google and msft. I some people are just stupid enough to buy into Microsoft's smear campaign.
I cannot believe that Google would ever do anything a nefarious as this. Only Microsoft is capable of this treachery.. Why next thing you know, they will be insinuating that there are security bugs in Firefox.
Pigskin-Referee
Linux: Yesterday's technology, tomorrow