Google staff 'knew of wi-fi snooping'

http://www.bbc.co.uk/news/technology-17892288

by ed209 • 14 years ago

56 33 14 years ago

bbc.co.uk

billpg• 14 years ago

Don't panic!

http://blog.hackensplat.com/2010/05/google-snooping-wifi-don... (Shameless plug.)

Spearchucker• 14 years ago

From your link: "...your WiFi access point has to broadcast it’s identity to the public in the clear..."

It doesn't. You can hide the SSID.

tomflack• 14 years ago

Hiding the SSID breaks 802.11 specifications and isn't actually hidden anyway. It isn't private, it was never intended to be private.

itg• 14 years ago

Extremely easy to get around and doesn't accomplish anything.

BillPosters• 14 years ago

Right on. The BBC article should link to this. Better that Google nabs unsecured data without intent that someone else with intent. Too much hype.

What's worse than nabbing private packets is Google sticking a camera on a 10 foot pole and drive down residential back lanes where the camera can see over fences into private backyards and in some cases into living rooms. This happened in my town, to my house, and I felt my privacy was invaded. Google street view can see a lot more than someone walking along the street because nobody but Google is 10 feet tall.

anamax• 14 years ago

> Google sticking a camera on a 10 foot pole ... Google street view can see a lot more than someone walking along the street because nobody but Google is 10 feet tall.

No one else has 10 foot poles or can attach cameras to them?

There's also satellite view....

tseabrooks• 14 years ago

Link mentions collecting that private data is illegal. Is this a UK thing? Is collecting that private data illegal in the US also? was under the impression it was not illegal in the US.

mattmanser2• 14 years ago

It's wire tapping which is illegal in pretty much every country.

underwater• 14 years ago

Did you read the BBC article? Your entire blog post tries to explain away the storing of private data as an accidental byproduct of capturing the names of access points. Even Google admitted this was not true.

"Engineer Doe intended to collect, store and review payload data for possible use in other Google projects."

pixelbath• 14 years ago

I feel like this sentence is misleading; it implies that the 'payload' Google's interested in is personal user data, as if Google has a team of engineers in its basements looking through the cat photos and credit card numbers it captured in Wi-fi packets.

"Payload data," in this case, is most likely fragmented packets for which it can glean metrics on how to make the process more expedient in the future.

Of course, I can't say this with 100% certainty, as I'm not involved, but the entire story seems geared to make Google's capture of radio-broadcast data packets seem far more sinister than it really is.

nl• 14 years ago

Previous discussion: http://news.ycombinator.com/item?id=3904903

sparknlaunch12• 14 years ago

Are we really surprised?

Pretty sure there is alot more they know about.

tbundy2• 14 years ago

I know it's the BBC, but I am always disappointed by the technical calibre of these reports, "The data gathered included contents of some emails and web browsing history". Guess I should read Ars.

user24• 14 years ago

well, technically if they got a being-requested URL then that will be web browsing history.

tbundy2• 14 years ago

True, just wish they'd put some meat on it! Tell us a bit about how it worked, what they captured. Then again, it is mass media and the comment is probably a reflection of me being too lazy to read the FCC report, etc. :)

btian• 14 years ago

Don't be evil?

eli2• 14 years ago

Ugh, I hate this whole story.

Digital privacy is a really important issue. There are debates we should be having about this stuff, as a society. Google accidentally capturing some stray packets from unsecured wifi is not one of them.

redwood• 14 years ago

I've long been curious if G uses(d) the wifi data to augment its android location triangulation resolution...

eli2• 14 years ago

They definitely use WiFi data for geolocation. I'm pretty sure that was one of the primary reasons their streetview cars were collecting wifi in the first palce.

luser0012• 14 years ago

Hmm, the crux of the story is that it wasn't accidental. Which is what makes it newsworthy. YMMV.

VikingCoder3• 14 years ago

The next news story:

Google KNEW it was providing internet services to everyone in Kansas City. This gave them access to ALL of the emails, ALL of the passwords, unless people took extraordinary measures, such as using a hypothetical "https" access. We spoke with one researcher and he said he didn't trust https because it ends in an 's', just like the word 'snakes.' Senior officials at Google knew that they had spent billions of dollars to provide this service to residents of the unsuspecting town. Congress to have hearings about this so-called "Internet Service." Top officials at the FCC scoffed, "How can they claim to not be evil when they provide internet service to children - some of whom are probably watching pornography?!"

luser0012• 14 years ago

You do realize that Google promised not datamine your email when building a Google-wide profile of you until March 1st?

I'm not sure I understand the point of your reply. The https here is a red herring: Google can read your email even if you use https. https only prevents intermediaries from reading your email.

peterwwillis• 14 years ago

It was a joke.

VikingCoder3• 14 years ago

In this article, Google was the intermediary. I was pointing out that when they're an ISP, they're ALWAYS an intermediary. As is every other ISP.

https is absolutely not a red herring. If you use an unencrypted wifi, and use http to access your online services, you do not care at all about security.

After the fact, blaming Google for recording open wifi data is absurd.

The point of my post was, if you're concerned about Google accessing the data between a computer and random services on the internet, then you should be REALLY concerned about them being an ISP. Just like you should be concerned about every OTHER ISP. The solution to not having ISPs - or other intermediaries - have access to all of your data is to use an https connection to your web services.

Do you see the acronym "https" show up, at all in the linked article? No. That's absurd. It is THE SOLUTION to people sniffing your emails and passwords.

sigil• 14 years ago

Is passive war-driving illegal? The only precedent I've found is State v. Allen (1996) [1] where war-dialing was ruled legal so long as one didn't actively try to gain access beyond the connection to the "public interface."

As billpg points out in [2], in passive war-driving you have to receive the whole 802.11 frame before you even know if it's a beacon frame, which ostensibly was Google's primary interest here. Is it odd that Google stored all captured frames to disk? It's true, they could have just logged network information and discarded the frames. Then again, consider that the default in kismet is to save both a log of networks and a pcap dump. So this may have just been an engineering shortcut -- collect the data and process it centrally.

[1] http://en.wikipedia.org/w/index.php?title=State_v._Allen

[2] https://news.ycombinator.com/item?id=3908794

7952• 14 years ago

Of course it makes technical sense to just log everything. Especially at a company with the culture of google.

Google staff 'knew of wi-fi snooping'

Related Stories