Street View cars grabbed locations of phones, PCs | Privacy Inc. – CNET News

Google’s Street View cars collected the locations of millions of laptops, cell phones, and other Wi-Fi devices around the world, a practice that raises novel privacy concerns, CNET has confirmed.

The cars were supposed to collect the locations of Wi-Fi access points. But Google also recorded the street addresses and unique identifiers of computers and other devices using those wireless networks and then made the data publicly available through Google.com until a few weeks ago.

The French data protection authority, known as the Commission Nationale de l’Informatique et des Libertés (CNIL) recently contacted CNET and said its investigation confirmed that Street View cars collected these unique hardware IDs. In March, CNIL’s probe resulted in a fine of 100,000 Euros, about $143,000.

The confirmation comes as concerns about location privacy appear to be growing. Apple came under fire in April for recording logs of approximate location data on iPhones, and eventually released a fix. That controversy sparked a series of disclosures about other companies’ location privacy practices, questions and complaints from congressmen, a pair of U.S. Senate hearings, and the now-inevitable lawsuits seeking class action status.

A previous CNET article, published June 15 and triggered by the research of security consultant Ashkan Soltani, was the first to report that Google made these unique hardware IDs–called MAC addresses–publicly available through a Web interface. Google curbed the practice about a week later.

via Street View cars grabbed locations of phones, PCs | Privacy Inc. – CNET News.

BBC News – Google’s wi-fi data to be deleted

The UK’s information commissioner has said that wi-fi data accidentally collected by Google’s Street View cars will be deleted within the next nine months.

Deputy information commissioner David Smith told the BBC that there would be no further enquiries into the matter.

He said there was no indication that any information collected “had fallen into the wrong hands”.

It will not appease critics who called for the search giant to be fined.

There were no grounds for fining Google, Mr Smith told the BBC.

“We’d have had to find that there was substantial damage or distress to individuals from the collection of snippets of e-mails, URLs and passwords. We’d have to meet that criteria for a penalty to be imposed,” he said.

via BBC News – Google’s wi-fi data to be deleted.

FCC investigating Google over Street View – Computerworld

The Federal Communications Commission (FCC) confirmed on Wednesday that it is investigating whether Google broke any federal eavesdropping laws when collecting data for its controversial Street View mapping service.

The investigation stems from Google’s disclosure recently that its Street View cars collected passwords, e-mails and other personal information from unprotected residential wireless networks, the FCC said in a statement.

In light of Google’s disclosure, “we can now confirm that the Enforcement Bureau is looking into whether these actions violate the Communications Act,” Michele Ellison, chief of the FCC’s Enforcement Bureau, said in the statement.

“As the agency charged with overseeing the public airwaves, we are committed to ensuring that the consumers affected by this breach of privacy receive a full and fair accounting,” the FCC statement said.

via FCC investigating Google over Street View – Computerworld.

BBC News – Google in ‘significant breach’ of UK data laws

There was a “significant breach” of the Data Protection Act when Google collected personal data via its Street View cars, the UK’s Information Commissioner has ruled.

But Google will not face a fine or any punishment, Christopher Graham added.

Instead, the Information Commissioner’s Office (ICO) will audit Google’s data protection practices.

The move marks a U-turn for the ICO which originally ruled that no data breach had occurred.

Last week the ICO vowed to look again at the evidence, after the Canadian data agency found the search giant in breach of its law.

via BBC News – Google in ‘significant breach’ of UK data laws.

Post Tech – Google Street View privacy flap shows growing rift between U.S., E.U.

The federal government has ended an inquiry into a privacy breach involving Google’s Street View service, satisfied with the company’s pledge to stop gathering e-mail, passwords and other information from residential WiFi networks as it rolls through neighborhoods.

Wednesday’s decision by the Federal Trade Commission is a sharp contrast with the reaction of regulators in Europe. The United Kingdom has launched a new investigation into Google’s collection of unencrypted WiFi data, exposing the company to potential fines. Germany told Google to mark its Street View cars that take pictures of neighborhoods and homes. The Czech Republic banned Google from expanding its mapping software program.

The differences highlight an increasing gap between regulators in the United States, where the freewheeling Internet culture has birthed many of the social networking sites and search engines used worldwide, and governments in Europe and Canada, which tend to be much more aggressive about privacy.

“Part of it is cultural, and part of it is that the U.S. and Europe have radically different privacy regimes,” said Chris Calabrese, legislative counsel for the ACLU. “The European model is extensive data protection in private information, and the U.S. model is piecemeal.”

The result is a rising number of trans-Atlantic conflicts. The Obama administration has been criticized for its efforts to allow law enforcement to surveil Internet networks, for instance. In addition, the European Union is pushing back against U.S. demands to share data about U.S.-bound air passengers.

via Post Tech – Google Street View privacy flap shows growing rift between U.S., E.U..

Google to tighten privacy policies after Wi-Fi fiasco – Computerworld

Under fire for months over its capture of people’s Wi-Fi traffic data, Google has announced several steps aimed at preventing similar missteps in the future.

At the same time, Google is acknowledging that its inadvertent Wi-Fi snooping collected not only data fragments but entire e-mail messages, website addresses and passwords.

Google has been in hot water with privacy advocates, government agencies and concerned individuals since its disclosure in May that, since 2007, its Street View cars, in addition to taking photos for its Maps product, had also collected Wi-Fi transmission data from unencrypted networks.

Government agencies and legislators in the U.S. and abroad are investigating the issue, and a number of users have filed privacy-breach lawsuits against the company.

Google had intended the Street View cars to only grab and store open Wi-Fi networks’ names (SSIDs) and their unique router numbers (MAC addresses) for use in Google location-based services.

Due to a software glitch, the Google cars intercepted and stored Web traffic data, which initially the company had said was highly fragmented, but that it now is admitting includes the full text of e-mail messages and passwords.

via Google to tighten privacy policies after Wi-Fi fiasco – Computerworld.

Google ditches all Street View Wi-Fi scanning | Privacy Inc. – CNET News

Google has no plans to resume using its Street View cars to collect information about the location of Wi-Fi networks, a practice that led to a flurry of privacy probes after the company said it unintentionally captured fragments of unencrypted data.

The disclosure appeared in a report on Street View released today by Canadian privacy commissioner Jennifer Stoddart, who said that “collection is discontinued and Google has no plans to resume it.” Assembling an extensive list of the location of Wi-Fi access points can aid in geolocation, especially in areas where connections to cell towers are unreliable.

Instead, Stoddart said that, based on her conversations with headquarters in Mountain View, Ca., “Google intends to obtain the information needed to populate its location-based services database” from “users’ handsets.”

via Google ditches all Street View Wi-Fi scanning | Privacy Inc. – CNET News.

Google ditches all Street View Wi-Fi scanning | Privacy Inc. – CNET News

Google has no plans to resume using its Street View cars to collect information about the location of Wi-Fi networks, a practice that led to a flurry of privacy probes after the company said it unintentionally captured fragments of unencrypted data.

The disclosure appeared in a report on Street View released today by Canadian privacy commissioner Jennifer Stoddart, who said that “collection is discontinued and Google has no plans to resume it.” Assembling an extensive list of the location of Wi-Fi access points can aid in geolocation, especially in areas where connections to cell towers are unreliable.

Instead, Stoddart said that, based on her conversations with headquarters in Mountain View, Ca., “Google intends to obtain the information needed to populate its location-based services database” from “users’ handsets.”

via Google ditches all Street View Wi-Fi scanning | Privacy Inc. – CNET News.

After Google incident, Wi-Fi data collection goes on – Computerworld

Four months ago, amidst a backlash from government regulators and privacy advocates, Google stopped collecting Wi-Fi data with its Street View cars. But that doesn’t mean Google has stopped collecting wireless data altogether, and neither have other companies such as Apple.

Instead of sending out cars to sniff out wireless networks, Google is now crowdsourcing the operation, with users of its Android phones and location-aware mobile applications doing the reconnaissance work for it. In the past few months, Apple has quietly started building a similar database, leveraging its large base of users to log basic Wi-Fi data.

There are others: A Boston company, Skyhook Wireless, has been logging wireless access points for years, as has its competitor, Navizon of Miami Beach, Florida.

It’s a trend that’s been spurred by the intense interest in applications such as FourSquare and Facebook Places. As it becomes increasingly important for programs that run on your phone to know exactly where you are — to be location-aware in industry parlance — having a way of figuring out exactly where you are becomes critical. But the companies collecting this data haven’t come under much scrutiny, many users do not understand how the data is being collected or why, and security experts are just now starting to discover some of the ways that this information could be misused.

via After Google incident, Wi-Fi data collection goes on – Computerworld.

Google Removes WiFi Gear from Street View Cars – Search Engines from eWeek

Google July 8 said it has officially removed all hardware and software used to corral WiFi data in its Street View cars, which have resumed their tours of Sweden, Ireland, Norway and South Africa.

Google grounded its entire fleet of Street View cars—which collect real-life footage of city streets in countries all over the world—in May when it discovered the vehicles had grabbed 600 gigabytes of e-mail and other data fragments from unsecured wireless networks.

via Google Removes WiFi Gear from Street View Cars – Search Engines from eWeek.