Google Wi-Fi data grab snared passwords, e-mail – Computerworld

Wi-Fi traffic intercepted by Google’s Street View cars included passwords and e-mail, according to the French National Commission on Computing and Liberty (CNIL).

CNIL launched an investigation last month into Google’s recording of traffic carried over unencrypted Wi-Fi networks, and has begun examining the data Google handed over as part of that investigation.

Google revealed on May 14 that the fleet of vehicles it operates to compile panoramic images of city streets for its Google Maps site had inadvertently recorded traffic from unencrypted Wi-Fi networks. Google’s intention was only to record the identity and position of Wi-Fi hotspots in order to power a location service it operates, the company said. However, the software it used to record that information went much further, intercepting and storing data packets too.

At the time, Google said it only collected “fragments” of personal Web traffic as it passed by, because its Wi-Fi equipment automatically changes channels five times a second. However, with Wi-Fi networks operating at up to 54M bits per second, it always seemed likely that those one-fifth of a second recordings would contain more than just “fragments” of personal data.

That has now been confirmed by CNIL, which since June 4 has been examining Wi-Fi traffic and other data provided by Google on two hard disks and over a secure data connection to its servers.

“It's still too early to say what will happen as a result of this investigation,” CNIL said Thursday.

“However, we can already state that [...] Google did indeed record e-mail access passwords [and] extracts of the content of e-mail messages,” CNIL said.

via Google Wi-Fi data grab snared passwords, e-mail – Computerworld.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Italy investigates Google’s Street View | Reuters

Google Street View Car in Southampton, Hampshi...
Image via Wikipedia

Italy has started an investigation into Google Inc’s Street View web service, a local watchdog said on Wednesday following the U.S. group’s announcement it had accidentally collected personal data over wireless networks.

Google said last week its fleets of cars which have been photographing streets around the world had for several years accidentally collected personal information — which a security expert said could include e-mail messages and passwords.

Italy’s privacy regulator said it would verify whether Google treated correctly the data acquired by Street View, which allows users to navigate around a 360-degree view of city streets using pictures taken by Google’s camera vehicles.

The regulator said Google Italy had admitted it collected pictures but also “data regarding the presence of wireless networks … as well as electronic communications, eventually transmitted by users via unprotected wireless networks.”

via Italy investigates Google’s Street View | Reuters.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Google Opens Up on What Its ‘Street View’ Cars Collect – Digits – WSJ

By now, Google’s cars have driven down roads around the world — and in some places, they’re sparking concerns about just what information they are collecting.

So the Internet-search giant is opening up a bit about the data it compiles. Google is trying to address criticisms that have been leveled against it in European countries in particular and provided details about Street View cars in a post on its European Public Policy Blog on Tuesday. The company said it had discussed the information before but that it wanted to make it more easily accessible.

Privacy officials from 10 countries, including seven in Europe, sent Google a letter earlier this month outlining several concerns. The letter said Google’s Street View service was “launched in some countries without due consideration of privacy and data protection laws and cultural norms” and said “there is continued concern about the adequacy of the information you provide before the images are captured.”

So what does Google get with those cars? As anyone who has used Google Street View knows, cameras on the cars collect photos that are used in Google’s maps, and people who are out and about when the car passes can appear in images. Google reduced the amount of time it retains unblurred images in Europe, bowing to pressure from European privacy authorities. But the company has been urged to cut the time further. Google also allows people to request that images of them be removed, and a Google Germany spokeswoman told Bloomberg in March that the company would announce when it was driving by to take photos in that country.

In addition to photos, the cars gather information about Wi-Fi networks they encounter. This feature isn’t as well known, and it sparked a new round of criticism in Germany last week, with Germany’s federal commissioner for data protection saying he was “horrified” by the discovery. That’s why Google’s recent blog post devotes a considerable amount of time to explaining what Google is doing with Wi-Fi data.

Wi-Fi networks broadcast information such as the name of the network and a number given to the Wi-Fi device. In its post, Google explains that it collects this data to improve location-based services where GPS is slow or unavailable or for devices that aren’t GPS-enabled. Those devices can still triangulate location using transmissions from things like Wi-Fi networks and cellphone towers that Google has identified.

via Google Opens Up on What Its ‘Street View’ Cars Collect – Digits – WSJ.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

UK data watchdog to quiz Google on Streetview Wi-Fi database • The Register

Sharp criticism of Google in Germany has today prompted the UK's privacy watchdog to quiz the firm over data its Street View cars have collected about Wi-Fi networks.

Officials from the Information Commissioner’s Office (ICO) will seek details and assurances about the practice.

A spokeswoman told The Register the ICO had been unaware the Street View fleet has been recording the MAC addresses and locations of Wi-Fi networks as they photograph national road netwoks – until its German counterpart launched an attack last week.

Peter Schaar, Germany’s Federal Commissioner for Data Protection, was quoted as saying he was “horrified” by the data gathering exercise and demanding the Wi-Fi database be deleted.

The ICO spokeswoman said British regulators are interested in how the data is being processed and used by Google. If the firm were collecting data on the security settings of Wi-Fi routers, she said, it would be asked to give assurances about what it might do with that information.

“If it’s just to tell you there's a cafe nearby – fine,” she added.

In Germany, concerns have centred on claims that a national database of Wi-Fi MAC addresses or network names could prove a boon to authorities tracking online activity. Similarly, easy look-up of encryption standards on Wi-Fi routers might be useful to investigators, or criminals.

via UK data watchdog to quiz Google on Streetview Wi-Fi database • The Register.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare