Slashdot Mirror
Google Didn't Delete All Street View Wi-Fi Data
nk497 writes "Google is in more trouble over the Street View Wi-Fi data slurping incident. Two years ago Google admitted it had collected snippets of personal data while sniffing for Wi-Fi connections. The UK's data watchdog, the ICO, didn't fine Google, but did demand it delete the collected data. Following the FCC's investigation, the ICO double-checked with Google that the data was deleted, receiving confirmation that it had. Except... it hadn't all been deleted, Google has now admitted. That breaches the deal between the ICO and Google, and the watchdog has said it's in talks with other regulators about what to do next."
Sometimes.
Two years ago Google admitted it had collected snippets of personal data while sniffing for Wi-Fi connections.
Yes, they admitted after being caught by the German authorities.
Google is being fined for collecting "public" data... in the UK. The same UK that has cameras everywhere and all sorts of invasive monitoring, line tapping, you-name-it big-brother we're-watching-you technlogy and laws in place?
I think this ICO organization needs to get their priorities straight.
All of these accidents and mistakes, yet we are supposed to believe all of these actions have been unintentional. I call bullshit Google.
This stuff was was broadcast in the clear over public airwaves. That means it has no expectation of privacy. If you want privacy, every WAP I've ever heard of provides encryption. Turn it on, and you DO have an expectation of privacy, so if Google was decrypting it, then they should be punished.
Must we design the whole world to protect the least competent people from themselves?
I'm really not sure why this is an issue. Sure, there are situations where people have an expectation of privacy. But if you are transmitting data through the air in a public space, isn't it fair game? If you don't want people to look at it, shouldn't you encrypt?
If you want news from today, you have to come back tomorrow.
Is there any explanation for this other than pure incompetence on Google's part?
I generally think Google didn't do anything wrong in the first place. People shouldn't be complaining that publicly broadcast unencrypted data is recorded by a third party, and if Google had wanted to fight them on the legality of the issue i would have been behind them. However agreeing to delete the data in some kind of plea bargain and then not actually deleting it is a d*** move. (I'm not quite sure at this point if it's a dick move or just a dumb move, but it's definitely one of them.)
This Space Intentionally Left Blank
The article mentions health records and browsing history among the data. How is that possible from the street view?
I'm kinda surprised Google admitted it did wrong. I was just as surprised Microsoft admitted it didn't install the browser choice screen on some Win7 computers. The corporation ought to keep its mouth shut. (See Don't Talk to Cops on youtube.)
My AC stalker: " I personally agree with your posts most of the time, but that won't keep me from modding you troll"
Did you really expect them to? I didn't, information is to valuable. And they are certainly in the information business.
Capturing HTTP "remember me" cookies for seems like it would be dangerous since they might be reused back in the lab to access all the data stored at the social or webmail site.
It would be helpful on this issue to understand the magnitude and makeup of the data, and how much of it is actually valuable / dangerous.
Hey, Windows users, there is no such thing as "forward" slash, there is only slash and backslash.
This makes no sense:
“In their letter to the ICO today, Google indicated that they wanted to delete the remaining data and asked for the ICO’s instructions on how to proceed. Our response, which has already been issued, makes clear that Google must supply the data to the ICO immediately, so that we can subject it to forensic analysis before deciding on the necessary course of action.
If the data is so sensitive and worrisome, why doesn't the ICO just insist that it be deleted as agreed upon? If it was ok to delete it earlier, why does it have to be handed over now?
I'd rather have my data in the hands of Google than in the hands of Google *and* some random regulatory body. Many companies have a hard time certifying data destruction with multiple redundant offsite backups and replication, and data stored in the cloud where they may not even know every place their cloud provider stores it.
Though really, why is there no outrage about the fact that plaintext email passwords (and credit card numbers or whatever other personal data they are worried about) are even able to be captured with a simple drive-by Wifi scanner? There is no reason why a Wifi router should default to an open unencrypted mode, and even if it does, there is no reason why personal data should be allowed to be sent in the clear. CPU powerh is cheap, SSL should be used to secure *all* sensitive data.
The fact that Google drove by and captured snippets of data is not the problem... they aren't going to steal your credit card number or hack into your bank account (and there is a good chance that they already host your email) - the problem is when an identify thief does the same thing.
Associated with an address? Quick! Someone call the RIAA/MPAA.
I would rather have my data in hand of governement ONLY (and anyway they almost certainly have it or can subponea it) which is beholden to keep it secure, rather than in the hand in private industry which can sell it to anybody, can be unsecure, and can just snub me if I don't want to have it spread.
Furthermore you can vote a governement out. It may be hard but it is possible. Private company ? Forget it. Once in their hand it is utterly impossible to stop it spreading.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Why are people getting their panties in a bunch for collecting information that was being broadcast publicly?
That would be like someone getting upset because something they posted on Twitter was used to deny them a job.
It seems to me that a car driving through neighborhoods and past businesses will only capture a very small amount of the traffic from some fraction of the access points which have no (or weak) encryption), and "sensitive" traffic (e.g. unencrypted logins) would be a very small fraction of that. So a fraction of a fraction of a fraction diminishes the value quickly - though I suppose they make it back on scale.
In addition to that, you have to take into account, all the people browsing sensitive information over insecure channels.
Some stupid banks, medical companies, etc. don't systematically encrypt everything over HTTPS.
And Europe is much more privacy conscious. For example Facebook didn't start enforcing HTTPS everywhere only recently. (Remember the whole Firesheep debacle ?) If Google captured unencrypted private message between users, that would also set the EU privacy laws, even if it's not "sensitive" information (no account/session/login information, no banking information, no medical information, etc.)
Same also for E-Mail: Not every user has activated encryption between the server and their machine (not everyone uses STARTTLS or IMAPS etc) nor end-to-end encryption (PGP, etc.) thus e-mail could have been intercepted. Again, even if the mail doesn't contain any sensitive information, its nonetheless private communication.
And recipient's and destinary's coordinate (name, e-mail, etc.) are all subjected to law defining how long they can be retained.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
This stuff was was broadcast in the clear over public airwaves. That means it has no expectation of privacy.
So is your voice inside your home.. that doesn't mean I can use a long range microphone and secretly record conversations of thousands of people. That would be against the law.
My ass. Sounded good when you started up, Google...now you are your own enemy - all the things you loathe and heap on Microsoft and others. You are no better, plain and simple.
I love this attempt to distract the discussion. "How could Google be fined for harvesting people's personal data without their knowledge, followed by promising to delete it and then breaking that promise, in the UK where there are vague monitoring laws I won't give any specific examples of?" *instant +5*
Any wireless device (radio, cordless phone, cell phone, wifi, bluetooth, NFC, etc) is basically acting as a radio transmitter. Anyone that cares can listen in on the signal, capture it, and possibly decode it.
If you want to keep your data private, encryption is the only choice.
Google did not voluntarily alert authorities. Try again. You fanbois are not going to write history by repeating this lie.