Slashdot Mirror


FTC Releases Google Privacy Audit, Blacks Out the Details

chicksdaddy writes "Google could tell you about its privacy practices except, well....they're private. That's the conclusion privacy advocates are drawing after the Federal Trade Commission took a black marker to an independent audit of the company's privacy practices before releasing it to the group EPIC in response to a Freedom of Information Act (FOIA) request. Security Ledger is reporting that the FTC released a copy of a Price Waterhouse Coopers audit of Google that was mandated as part of a settlement with the FTC over complaints following a 2010 complaint by EPIC over privacy violations in Google Buzz, a now-defunct social networking experiment. However, the agency acceded to Google requests to redact descriptions of the search giant's internal procedures and the design of its privacy program."

57 comments

  1. An excerpt by Anonymous Coward · · Score: 1

    Don't be XXXX.

    1. Re:An excerpt by davester666 · · Score: 1

      If XXX is just code for sex, then what is Google into? Bestiality and S&M?

      --
      Sleep your way to a whiter smile...date a dentist!
  2. Failure to release the info means only one thing by fustakrakich · · Score: 5, Insightful

    We must assume the worse.. that Google's 'privacy practices' are hogwash. You have no privacy with Google. Let them prove otherwise.

    --
    “He’s not deformed, he’s just drunk!”
  3. It's ok... by Anonymous Coward · · Score: 0

    What we don't know won't hurt us.

  4. Re:Failure to release the info means only one thin by fustakrakich · · Score: 1

    Nice try. National security and corporate policy are slightly different things.

    So, sir, back at ya...

    --
    “He’s not deformed, he’s just drunk!”
  5. It's okay - it's Google by 93+Escort+Wagon · · Score: 1

    I'm sure they'll get a free pass from a good chunk of the community here.

    --
    #DeleteChrome
    1. Re:It's okay - it's Google by Anonymous Coward · · Score: 0

      Exactly. This story has been out there for over 10 hours at the time of this posting. There are 38 comments (now 39). Had this been Facebook, Apple or Microsoft there would be howls from the goose steppers and 10 times as many posts. That's what makes me scoff at the Slasdot groupthink... they don't care about privacy, they just need targets to hate to feel good about themselves.

    2. Re:It's okay - it's Google by Anonymous Coward · · Score: 0

      Or it could be that the story was posted at 10pm and a lot of people would be asleep?

  6. privacy is evil by minstrelmike · · Score: 3, Insightful

    If you're an advertiser, privacy is evil. And since google doesn't wish to be evil, they have to black out all the privacy stuff. It makes total sense.

  7. let me fill in details by Anonymous Coward · · Score: 0

    CIA FBI NSA DHS {your govt spy agency} [some 3 letter variations of words and agencies you dont know about ] all are part of the loop .....enjoy !!!! if you got nothing to hide there is nothing to redact.

    and how easily these all get access and the abuses that arise....oh joy and BING anfd YAHOO and others are all no better.
    SOON as it gets into a corporations hands its game over.

     

  8. Goggle! Ha ha by Anonymous Coward · · Score: 0

    The FTC calls them "Goggle" in the first line of the report!

  9. Re:This is getting old. by Anonymous Coward · · Score: 0

    Sigh... I've seen pink vomit. (._.)

  10. 3 types of data: Log, Account and ??? by Anonymous Coward · · Score: 4, Interesting

    Interesting, the report specifies that user data is 1 of 3 types,
      - Log data (user activity)
      - Account data (Users emails, settings, etc)
      - Third type is redacted.. Wonder what it is

    1. Re:3 types of data: Log, Account and ??? by fustakrakich · · Score: 3, Funny

      Wonder what it is...

      Slashdot UID... Don't worry. You're safe

      --
      “He’s not deformed, he’s just drunk!”
    2. Re:3 types of data: Log, Account and ??? by mister_playboy · · Score: 1

      Anonymous Coward's UID is 666.

      --
      Do what thou wilt shall be the whole of the Law ::: Love is the law, love under will
    3. Re:3 types of data: Log, Account and ??? by mwvdlee · · Score: 1

      They state that they keep account data and that users are allowed to access and delete their account data, yet the part that describes exactly what data they keep is redacted. If I'm able to access all account data, why do they need to redact it? Surely I could just access my account data and find out exactly what was redacted? Surely this redacted part must necessarily be public knowledge?

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    4. Re:3 types of data: Log, Account and ??? by Xest · · Score: 1

      The 3rd type is "Naked pics".

    5. Re:3 types of data: Log, Account and ??? by GameboyRMH · · Score: 1

      Is log data just access records for certain accounts, or does it include user history (sites browsed collected through GA etc?) If not I'd guess that's what it is.

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    6. Re:3 types of data: Log, Account and ??? by emddudley · · Score: 1

      Interesting, the report specifies that user data is 1 of 3 types:

      • Log data (user activity)
      • Account data (Users emails, settings, etc)
      • Third type is redacted.. Wonder what it is

      I wonder if it could be something like "derived" or "deduced" data, which is information about the user obtained from other sources.

    7. Re:3 types of data: Log, Account and ??? by stephanruby · · Score: 1

      Interesting, the report specifies that user data is 1 of 3 types,
        - Log data (user activity)
        - Account data (Users emails, settings, etc)
        - Third type is redacted.. Wonder what it is

      If I had to take a guess, the third item would be:

      $$$ value of user (Past purchases, Purchasing power, Number of years before user dies and becomes worthless, etc.)

      Of course, Google wouldn't know for sure when you're going to die. It would just have a rough estimate (with a margin of error of + or - 2 hours).

    8. Re:3 types of data: Log, Account and ??? by Anonymous Coward · · Score: 0

      Interesting, the report specifies that user data is 1 of 3 types,

        - Log data (user activity)

        - Account data (Users emails, settings, etc)

        - Third type is redacted.. Wonder what it is

      My guess is a users relationship among other users (i.e. family, friends, acquaintances, etc.).

  11. Good news! by Anonymous Coward · · Score: 0

    Google cares so much about privacy that even a text's privacy must be protected. I have no doubts people can enjoy just as good privacy.

  12. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 5, Funny

    One is a huge, evil organization that is spying on you with massive server farms, and the other doesn't have nuclear weapons.

  13. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 0

    Not so much these days.

  14. I've said it before and I'll say it again... by dos4who · · Score: 1

    My money's on the fact that they're building a massive biometric voice-print database on every single one of us every time we use Google's voice-to-text feature on an android device. Apple's not likely doing the same every time you use Siri. "Somebody"'s going to be very interested in accessing that information some day.

    --
    "Yes, I have a Disaster Recovery Plan. It's called my Resume"
    1. Re:I've said it before and I'll say it again... by Shihar · · Score: 1

      Um, money well bet? When you use the Google voice features it asks if it can build a database based on your voice so that it responds better to you. You can say no and it will just default to a standard attempt at voice match. Say yes, and it will start learning... like what most voice software does.

    2. Re:I've said it before and I'll say it again... by Anonymous Coward · · Score: 0

      That's why I put superglue in the mic of my phone, JOKES ON YOU GOOGLE!

  15. Well... by BlueStrat · · Score: 2

    ...We can safely assume the blacked-out information would hurt both the government and Google to varying degrees. So now what to do about it?

    IMHO, the most effective personal strategy is to simply avoid using Google search and associated services. There ARE other services out there.

    https://www.ixquick.com/

    For one example of a free service that emphasizes privacy and anonymity.

    Deprive both Google and the government of the very data they are collecting that gives them more power. Well, at least until they make it illegal to not reveal data.

    Strat

    --
    Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
  16. Hard to avoid Google's tracking by Anonymous Coward · · Score: 0

    Not sure if you noticed (try browsing with adblockplus and click "Open Blockable Items"), but Google is almost everywhere on the web in one way or another.

    Whether it be via doubleclick, google analytics, or AJAX hosting, Google likely tracks about 90% of the sites you visit, and that's not counting your email to friends on gmail or the phone calls you unknowingly make to or receive from Google Voice subscribers. That's also not counting some of the services (like Chrome without privacy tweaks) that send almost 100% of the pages you visit in order to check for fraud or whatever.

    To even attempt to avoid them, you can try using firefox with adblockplus with the EasyPrivacy+EasyList settings, but you still have to tweak it a little (like blocking google analytics and unchecking "Allow some non-intrusive advertising").

    1. Re:Hard to avoid Google's tracking by BlueStrat · · Score: 1

      Not sure if you noticed (try browsing with adblockplus and click "Open Blockable Items"), but Google is almost everywhere on the web in one way or another.

      Whether it be via doubleclick, google analytics, or AJAX hosting, Google likely tracks about 90% of the sites you visit, and that's not counting your email to friends on gmail or the phone calls you unknowingly make to or receive from Google Voice subscribers. That's also not counting some of the services (like Chrome without privacy tweaks) that send almost 100% of the pages you visit in order to check for fraud or whatever.

      To even attempt to avoid them, you can try using firefox with adblockplus with the EasyPrivacy+EasyList settings, but you still have to tweak it a little (like blocking google analytics and unchecking "Allow some non-intrusive advertising").

      I agree, it does take some work. I have a number of privacy/security related extensions installed, use FreeBSD, Tor for many things, changed browser settings in the "about:config", etc.

      It all depends on how much effort it's worth to you to not be digitally anal-probed.

      Strat

      --
      Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
    2. Re:Hard to avoid Google's tracking by blackest_k · · Score: 1

      I noticed just this week, that new installations of adblock+ now come with a whitelist of "approved" advertisers. You can turn it off in the configuration. Oh and I just checked my own install had it allowed by default.

      Wonder how many users know that they are allowing some ads through.

    3. Re:Hard to avoid Google's tracking by cheros · · Score: 5, Interesting

      Actually, I came across another sneaky way with which Google is gathering data: Google fonts.

      It means Google gets a hit every time a website with a CSS layout using Google fonts because it needs to call the fonts API to get them..

      --
      Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
  17. Trust us; we don't trust you. by girlinatrainingbra · · Score: 1
    So Google says "Trust us" while simultaneously saying "we don't trust you." If the point of being under sanctions requiring monitoring by the FTC was to get away with anything it wants to, it succeeded.

    And how we an "independent audit" be trusted if it can't be vetted. It often occurs that government types enter the carousel of working for private industry after initially learning the ropes of regulation; it also often occurs that "independent audit" companies often create reports that are of benefit to the companies being audited in order to curry favor and receive payment for other services down the road. Isn't that what happened with all of the falsely-rated "AAA" mortgage-backed securities?

    _

    So I'll say it again, how can you trust the independence and validity of an audit process if it cannot be separately vetted?

  18. All this seems to confirm by SeaFox · · Score: 3, Insightful

    ...is that the government cares more about Google's privacy than our own.

  19. Re:Failure to release the info means only one thin by poetmatt · · Score: 1

    failure in the first sentence.

    Why would we assume the worst? I don't even understand how that is supposed to be a compelling argument.

    You have no privacy with anything - why should that be specific to google?

    Oh right, please use the privacy-friendly search engine that uses bing instead, right? /facepalm

  20. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 3, Insightful

    Because according to Google's Eric Schmidt "if you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place." Google doesn't want us to know about it, so maybe be they shouldn't be doing it in the first place.

  21. As an employee of Google, I can say that by Anonymous Coward · · Score: 2, Funny

    [REDACTED]

  22. It really make me wonder .. by cheros · · Score: 1

    .. what they have to hide ..

    Do evil. Google.

    --
    Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
  23. Re:This is getting old. by Anonymous Coward · · Score: 0

    also known as "that pepto bismol was a little too late"

  24. Re:Failure to release the info means only one thin by fustakrakich · · Score: 1

    Unchecked authority/power/influence (or even the illusion of impunity) will always be abused. That's a proven fact. It's only natural. You can confirm it with any experiment you want. Or you can check the results of the ones that have already been performed. So, we need to put a price on it. The only way to keep it honest is to enclose it in glass. Make every detail public. And it will serve to keep the riff-raff out of desiring any such position. If somebody wants authority, they should be stripped naked (metaphorically, if you insist). The tired old meme of 'if you have nothing to hide' definitely does apply for this, and it should be.

    This article is about Google and the protection it receives from the public due to a corrupt government, but, of course it can be applied to anything we allow to get too big to control, government/corporation, doesn't matter.

    --
    “He’s not deformed, he’s just drunk!”
  25. FTC Releases Apple Privacy Audit, Blacks Out... by tooyoung · · Score: 2

    This is pretty interesting - as of the time that I'm posting this, there are 41 comments and almost no moderation on this story. I regularly see stories posted at 10PM pacific and wake up the next morning to see 200+ posts, but not in this case.

    I suppose that we could say that this is just not really a story of interest. Perhaps, although before you make that argument, do you think that the comment count and moderation would be a little different if the headline had been:

    FTC Releases Apple Privacy Audit, Blacks Out the Details

  26. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 0

    +(Positive Infty) Insightful

  27. Re:This is getting old. by nschubach · · Score: 1

    Daiquiris and other various drinks can make for pink vomit... really, anything red.

    --
    Every time I start to have faith in humanity, I ruin it by driving to work between 7 and 8 am.
  28. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 0

    Sorry to say, you miss the real difference here. "One is a huge, evil organization that is spying on you with massive server farms", the other has faceless, toothless Quangos to do your bidding.

  29. Re:Failure to release the info means only one thin by Isaac+Remuant · · Score: 1

    Oh right, please use the privacy-friendly search engine that uses bing instead, right? /facepalm

    This sounds exactly like the typical "Would you rather have Romney do that..." that we keep reading every time someone has a valid criticism against Obama.

    You first claim that he doesn't have an argument to assume the worst and later say that there's no privacy anywhere (assuming the worst everywhere?).

    --
    "Science can amuse and fascinate us all, but it is engineering that changes the world. " - Asimov.
  30. Blacks out the details? by Anonymous Coward · · Score: 0

    It's good that someone got the details out, but what does the color of their skin have to do with anything?

    1. Re:Blacks out the details? by Anonymous Coward · · Score: 0

      well.. it could be worse, like, detailing out the blacks.

  31. third type is.. by gl4ss · · Score: 1

    ..access data, for keeping logs on who's tapped that persons private information and for why (fbi, cia..).

    --
    world was created 5 seconds before this post as it is.
  32. Re:Failure to release the info means only one thin by Anonymous Coward · · Score: 0

    If we shouldn't assume the worst why did they lobby to get all the important information redacted? Stop being a fucking fanboi.

  33. Apples to...? by DragonWriter · · Score: 1

    We can safely assume the blacked-out information would hurt both the government and Google to varying degrees.

    Not necessarily in any way that indicates something nefarious. Google likely has something at stake in the realm of business trade secrets which are frequently contained in information gathered in regulatory audits and are specifically exempted from FOIA requests.

    The government has an interest, too, in business cooperating with regulatory audits, and them becoming an indirect tool of corporate espionage contradicts that interest, so the government is unlikely to casually ignore the trade secret exemption from the FOIA.

    IMHO, the most effective personal strategy is to simply avoid using Google search and associated services. There ARE other services out there.

    Other services which have had an external audit, based on the same criteria as the FTC-commissioned audit of Google, of their privacy practices which has been publicly released with no redactions? And, if not, how are they relevant to the immediate story?

    1. Re:Apples to...? by BlueStrat · · Score: 1

      Other services which have had an external audit, based on the same criteria as the FTC-commissioned audit of Google, of their privacy practices which has been publicly released with no redactions? And, if not, how are they relevant to the immediate story?

      How about a service which doesn't collect the data in the first place, so that an audit is redundant?

      https://www.ixquick.com/eng/press/ixquick-privacy-gets-better.html

      If that's not relevant and on-topic then not much is.

      Strat

      --
      Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.