Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Privacy Group Gives Google Lowest Possible Grade

Posted by Zonk on Sun Jun 10, 2007 04:14 PM
from the eff-triple-minus dept.
The Washington Post is reporting on a finding by London-based group Privacy International. In a new report, they find that Google has some of the worst privacy-protection practices anywhere on the web, giving them the lowest possible grade. "While a number of other Internet companies have troubling policies, none comes as close to Google to 'achieving status as an endemic threat to privacy,' Privacy International said in an explanation of its findings. In a statement from one of its lawyers, Google said it aggressively protects its users' privacy and stands behind its track record. In its most conspicuous defense of user privacy, Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests."

Related Stories

[+] EU Questions Google Privacy Policy 168 comments
An anonymous reader writes "The BBC is running a piece noting that the EU is scrutinizing Google's privacy policy this month. The company's policy of keeping search information on their servers for up to two years may be violating EU privacy laws. A data protection group that advises the European Union has written to the search giant to express concerns. The EU has a wide range of privacy protections that set limits to what information corporations may collect and what they may or may not do with it. In the US on the other hand privacy laws generally cover government actions while the business sector remains largely unregulated. Is it perhaps time to follow the European example and extend privacy laws to include corporations?"
[+] Google Street View Raises Privacy Concerns 520 comments
Pcol writes "The New York Times is running a story about a woman who says her cat is clearly visible through the living room window of her second-floor apartment using Street View and that she has contacted Google asking that the photo be removed. 'The issue that I have ultimately is about where you draw the line between taking public photos and zooming in on people's lives,' Ms. Kalin-Casey said in an interview. 'The next step might be seeing books on my shelf. If the government was doing this, people would be outraged.' Wired has started a contest on the most interesting photos found using the new Google Tool that now includes sunbathing coeds, alleged drug deals, and the google van itself. 'I think that this product illustrates a tension between our First Amendment right to document public spaces around us, and the privacy interests people have as they go about their day,' says Kevin Bankston, a staff lawyer at the Electronic Frontier Foundation."
This discussion has been archived. No new comments can be posted.
Display Options Threshold:
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • by echucker (570962) on Sunday June 10, @04:20PM (#19460291)
    (http://reefs.org/)
    The Privacy International article - The Privacy International article [privacyinternational.org]

    Their report (interim rankings only) [privacyinternational.org]

    Final rankings won't be available until September. Wonder what they'll be dicking around for three months for....

  • A suggestion... (Score:5, Insightful)

    by 313373_bot (766001) on Sunday June 10, @04:22PM (#19460297)

    Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests.
    Very nice, but how long until either Google loses some legal fight, or it simply decides not to fight?

    One solution to the privacy problem, in my oppinion, would be granting users, besides the ability of not surrendering more information than necessary for a given transaction, some effective way of deleting their personal data once done with Google, Yahoo, Amazon or whoever else.
    • Re:A suggestion... by Anonymous Coward (Score:1) Sunday June 10, @04:24PM
    • by skrew (111096) on Sunday June 10, @04:28PM (#19460351)
      The problem is they keep all your search results, with tracking cookie. Google is in bed with the CIA: http://www.disgrunt.com/blog/2006/10/27/former-int elligence-agent-says-google-in-bed-with-cia/ [disgrunt.com] Have any of you guys seen the new gmail? I won't use it...it has a built in calendar, word processor, and of course, permanent email storage, converge this with permanent tracking cookies, logs of all search requests from your IP, and of course google earth/maps (will go live eventually as the technology changes) and you have the recipie for total uncontrolled surveillance.
      [ Parent ]
    • You can't (Score:5, Interesting)

      You have two choices. in one corner, you have a nice, stable, secure ASP that hosts your email / calender/ etc. They have redundant filesystems and/or make regular backups.

      Your other choice is being able to delete your profile with a click.

      People who think that the idea of being able to delete your profile is in any way simple or trivial are deluding themselves. Google themselves have said that because of the way GFS works they can *NEVER* know when a piece of data flagged for deletion is actually no longer recoverable. That fault tolerance and redundancy is built into the design.

      It is the same thing at Yahoo and MSN. All these guys have redundant systems with backups. It would take days worth of man hours to delete a persons profile. Hard thing to demand from a free service.

      If you don't want Google holding your data, no one is putting a bullet to your head. You don't need to have cookies enabled or anything else to use their search engine. Frankly I trust them with my email more than my ISP.
      [ Parent ]
      • Re:You can't by HomelessInLaJolla (Score:1) Sunday June 10, @04:53PM
        • Re:You can't (Score:4, Insightful)

          by Anonymous Coward on Sunday June 10, @05:53PM (#19460785)
          Deleting accounts created on systems has always been a default consideration.

          As proper deletion should have been

          Not if the filesystem support and account management code had been properly written.

          You obviously have no clue how a filesystem stack works. Data is rarely deleted per se on *any* filesystem, simply unlinked and possibly flagged for later overwriting. Why do you think projets like this [sourceforge.net] exist?

          Even if a file (if an email or google doc is even stored in what one would *call* a file) did get deleted, the indexing that is done would make at least pieces parts recoverable until their staleness is discovered, which could be a while.

          Even then, a good forensic analyist could probably recover something that had been allegedly deleted.

          Overwriting data to securely erase it is expensive on a desktop and approaching impossible on a busy server. This is why people who don't wear tinfoil hats will use Boot'n'Nuke or somesuch before selling a hard drive on eBay. You can't just delete something (even on your own computer, mind you) and expect it to be gone. That's not the way filesystems work.

          --------
          Check your facts at the door; be sure to pay a quarter!
          [ Parent ]
          • Re:You can't by Cal Paterson (Score:2) Sunday June 10, @07:10PM
          • Re:You can't by Bjarke Roune (Score:2) Sunday June 10, @07:12PM
            • 1 reply beneath your current threshold.
          • 1 reply beneath your current threshold.
        • Re:You can't by growse (Score:3) Sunday June 10, @06:39PM
        • Re:You can't by edumacator (Score:1) Monday June 11, @06:44AM
      • Re:You can't by Score Whore (Score:1) Sunday June 10, @05:44PM
        • Re:You can't by Bjarke Roune (Score:2) Sunday June 10, @07:18PM
        • Re:You can't by Arancaytar (Score:2) Monday June 11, @04:58AM
      • Re:You can't by j79zlr (Score:1) Sunday June 10, @07:15PM
      • Re:You can't by Anonymous Brave Guy (Score:3) Sunday June 10, @09:04PM
        • Re:You can't by cp.tar (Score:2) Monday June 11, @02:16AM
        • Re:You can't by renbear (Score:3) Monday June 11, @03:45AM
          • Re:You can't by Anonymous Brave Guy (Score:2) Monday June 11, @08:14AM
            • Re:You can't by Anonymous Brave Guy (Score:2) Monday June 11, @01:37PM
              • Re:You can't by Knara (Score:2) Monday June 11, @06:40PM
                • Re:You can't by Anonymous Brave Guy (Score:2) Monday June 11, @07:19PM
            • 1 reply beneath your current threshold.
          • Re:You can't by VENONA (Score:2) Monday June 11, @12:29PM
      • Re:You can't by deskin (Score:2) Sunday June 10, @09:05PM
        • Re:You can't by Rakishi (Score:2) Sunday June 10, @09:47PM
          • Re:You can't by ortholattice (Score:2) Monday June 11, @09:10AM
            • Re:You can't by Rakishi (Score:2) Monday June 11, @09:34AM
              • Re:You can't by ortholattice (Score:2) Monday June 11, @05:41PM
        • 1 reply beneath your current threshold.
      • Re:You can't by rtb61 (Score:2) Monday June 11, @10:38PM
      • 3 replies beneath your current threshold.
    • delete personal data by green pizza (Score:3) Sunday June 10, @04:48PM
      • 1 reply beneath your current threshold.
    • Re:A suggestion... by exley (Score:2) Sunday June 10, @05:41PM
    • Re:A suggestion... (Score:5, Insightful)

      by TheGreatHegemon (956058) on Sunday June 10, @06:27PM (#19460953)

      Very nice, but how long until either Google loses some legal fight, or it simply decides not to fight?
      If Google loses the legal fight to defend their data from government violations, then you should be looking at your government, not Google for the privacy violation.
      [ Parent ]
    • 2 replies beneath your current threshold.
  • Pot calls kettle black. (Score:5, Insightful)

    by mooreBS (796555) on Sunday June 10, @04:23PM (#19460311)
    Why are these people attacking Google. Privacy and anonymity are rapidly eroding in the UK. Hello! You've got bigger privacy problems than Google if you're living there.
  • by Anonymous Coward on Sunday June 10, @04:26PM (#19460335)
    Firefox and the Customize Google extension make a good team: http://www.customizegoogle.com/ [customizegoogle.com]

    Features:

            * Remove click tracking
            * Anonymize your Google userid
            * Block Google Analytics cookies

            * Secure Gmail and Google Calendar, switch to https
            * Remove ads

  • This is a classic trick of anti-capitalist lefties (and looking at who is on their committees, there's a whole bunch of them).

    Look at how much scorn is pushed onto Starbucks, despite being quite decent to their suppliers, staff and the environment. If they were the 2nd biggest coffee shop chain in the world, the scorn would not exist.

    So, Google, despite behaving a great deal better than Yahoo over privacy get nobbled.

    • Re:Toppling the Top Guy (Score:4, Funny)

      by Fex303 (557896) on Sunday June 10, @04:38PM (#19460415)

      This is a classic trick of anti-capitalist lefties (and looking at who is on their committees, there's a whole bunch of them).
      Are you aware of the fact that this makes you sound like a cold war era crazy-person? I mean, if so, feel free to continue - I just thought you might want to know.

      If they were the 2nd biggest coffee shop chain in the world, the scorn would not exist.
      If they made decent coffee there would be a hell of a lot less scorn for them too...
      [ Parent ]
    • Re:Toppling the Top Guy (Score:5, Funny)

      by mrjb (547783) on Sunday June 10, @04:57PM (#19460509)
      If they were the 2nd biggest coffee shop chain in the world, the scorn would not exist. I'm from the Netherlands. No starbucks at all to be found here- I guess they felt they couldn't compete with the Fine Products sold in coffee shops here :)
      [ Parent ]
    • Re:Toppling the Top Guy by revengebomber (Score:1) Monday June 11, @05:50AM
  • Amusing... (Score:3, Insightful)

    by Anonymous Coward on Sunday June 10, @04:46PM (#19460453)
    It's amusing how people root for the underdog but start to turn against it once it gets too big. I remember a time when M$ was viewed as a hero for scoring victories over the evil IBM monopoly.

    I suppose the lesson is that companies are never your friends, just allies of convenience at best. Something to remember the next time some slashbot claims comapny X will save the day because they are a friend of open source.
  • Probably BS (Score:1)

    by noidentity (188756) on Sunday June 10, @05:21PM (#19460653)
    Reminds me of the recent Greenpeace report on Apple, mainly containing groundless claims that in the end were mainly due to Apple not trumpeting the eco-friendly things they were already doing. In this case, Google is going to have lots of user data simply because lots of people use it many times a day to search for things. I think big companies shouldn't give in to these underhanded tactics, since it only encourages more of this crap from organizations that should have more integrity.
  • Google? Hardly... (Score:5, Insightful)

    by StikyPad (445176) on Sunday June 10, @05:25PM (#19460673)
    (http://slashdot.org/)
    While a number of other Internet companies have troubling policies, none comes as close to Google to 'achieving status as an endemic threat to privacy,'

    They've obviously never heard of LexisNexis [wikipedia.org] or Accurint [accurint.com]. Unless they consider information on what web page you visited to be more infringing than, say, your full financial history, residence, court records, marriage licenses, property deeds, loans, phone numbers (including unlisted), etc., etc. Of course, that's all "public information."
  • Yeah right (Score:4, Insightful)

    by imsabbel (611519) on Sunday June 10, @05:31PM (#19460701)
    > Google last year successfully fought a U.S. Justice Department subpoena demanding to review millions of search requests.

    Yeaha. Google protects the data from the Justice Department.
    But it DOESNT (and thats the point of the rating) protect the data from google itself. The google privacy idea is more or less "We are good. Thats why WE are allowed to do everything, and you WILL like it (trust us, we know you better than you do yourself)".
  • clusty (Score:1, Troll)

    by bcrowell (177657) on Sunday June 10, @05:42PM (#19460741)
    (http://www.lightandmatter.com/)
    Clusty.com seems to have better privacy policies than google, and seems to give results of about the same quality. I use it as a matter of habit these days, except for some fancier searches, for which I need google.
    • Re:clusty by VENONA (Score:2) Monday June 11, @12:53PM
  • Abuse of "anonymity" (Score:3, Interesting)

    by Christoph (17845) on Sunday June 10, @05:51PM (#19460773)
    (http://www.cgstock.com/ | Last Journal: Monday June 11, @11:26AM)

    I have been sued for defamation by a Russian businessman after I wrote a webpage that criticized him. One of my witnesses claimed the Russian threatened his life. A commment was later posted on my website using an anonymizing web proxy saying the businessman was in the Russian Mafia, and implying if I win in court I might loose my life.

    I issued a federal subpoena for an IP trace to find out who made this threat. It went to Affinity Internet, who is the ISP for Unipeak, an anonymizing web proxy. I later learned Unipeak was the source of the comment threatening me, but Unipeak didn't have any valid contact information and their website says they keep no traffic logs.

    Further research showed the Russian, Andrew Vilenchik, was a user of Unipeak. See Vilenchik's anonymous comments. [cgstock.com]

    My local police are now involved, my neighbors keep an eye on my house, and my wife and extended family are very upset about this threat, which we take seriously.

    Whoo hoo! Hooray for anonymity! By all means, terrorize, threaten, steal, and engage in represehsible and illegal conduct with anonymity and impunity. I choose not to lie, cheat, or steal, but I tell the truth without anonymity and I face any consequences. By comparison, every criminal and scumbag wants anonymity.

    A full description of the Lawsuit is online [cgstock.com]

  • by Anonymous Coward on Sunday June 10, @05:57PM (#19460795)
    gets the lowest google ranking available.
  • by classh_2005 (855543) on Sunday June 10, @05:59PM (#19460805)
    Seriously, did you know...(from wikipedia) "Under FISA, any agency may require a common carrier, landlord, custodian, or other person provide them with all information, facilities, or technical assistance necessary to accomplish ongoing electronic surveillance. They must also protect the secrecy of and cause as little disruption to the ongoing surveillance effort as possible." "A common carrier is an organization that transports persons or goods, and offers its services to the general public. In contrast, private carriers do not offer a service to the public, and provide transport on an irregular or ad-hoc basis. Common carriers typically transport persons or goods according to defined routes and schedules. Airlines, railroads, bus lines, cruise ships and freight companies may be common carriers." So, if the Goog was instructed to provide info, they wouldn't be telling us.
  • by charlieman (972526) on Sunday June 10, @06:06PM (#19460835)
    After all, in what other website can I google anybody?
  • This seems hilarious... (Score:3, Insightful)

    by Darundal (891860) on Sunday June 10, @06:16PM (#19460887)
    (Last Journal: Friday October 06 2006, @06:40PM)
    ...that a group based IN THE UK is giving anybody a grade on privacy, considering how much respect the government down there has for it.
  • Yes (Score:2)

    by j00r0m4nc3r (959816) on Sunday June 10, @06:21PM (#19460925)
    Well, if Privacy International says it's so, then it must be so!
    I mean, they're Privacy International for cripe's sake. That's at least 20% better than just Privacy National. Just because I had never heard of them until today is irrelevant.
    • 1 reply beneath your current threshold.
  • GMAIL (Score:1)

    by papason (4755) on Sunday June 10, @06:42PM (#19461035)
    Then I wonder why anyone who sees this would want to have GMAIL?

    -Dee
    • Re:GMAIL by mysterystevenson (Score:1) Sunday June 10, @07:57PM
      • Re:GMAIL by Achromatic1978 (Score:2) Sunday June 10, @10:15PM
        • Re:GMAIL by mysterystevenson (Score:1) Monday June 11, @03:25AM
          • Re:GMAIL by mysterystevenson (Score:1) Monday June 11, @03:54AM
    • Re:GMAIL by finkployd (Score:2) Sunday June 10, @08:27PM
  • There is a lot Google is (Score:5, Insightful)

    by pcause (209643) on Sunday June 10, @07:21PM (#19461219)
    Look at the entire scope of what Google does and you see that they want to know everything about you, and not some anonymous information. EMail is something you alomost always log in to. Many people set the login to remember them. Makes it easier to check you email, but once you are logged in your search queries are not anonymous. That is the reason Google has so many other things to try tog et you logged in and to stay logged in. For example, the have IM so that you've leave it running and yourself logged in.

    However, most commercial activity and interesting behaviors, the ones worth money to advertisers and others, don't happen at the search screen. This is why Google has toolbar and desktop. They want to watch all of the sites you visit and what you do on the sites. Using this data they build a detailed behavioral profile of you. But they also have way more information then your commercial behaviors. They know about a wide variety of sites and can determine if you look at sites about health issues, or other sensitive and personal behaviors.

    Google is a HUGE threat to your privacy. One could reasonably say that if you use many Google services and tools you have already given them such a detailed picture about you your privacy is essentially gone. And remember, they keep a 2 year rolling picture of the details about you. But they can also keep the "important" items they discover and toss the detail.

    And, to those who say "Remember that Google went to Court to prevent the Government from getting records", remember what Google said. They said they were doing this NOT to protect your privacy, but to protect their trade secrets. That means so that no one can found out the real details about what they track and know about you.

    Don't believe the "Do NO Evil" stuff. It is just clever marketing. They are a big company, just like all the rest and in many ways worse. Remember that they say that they want to index all of the World's information. That includes the very intimate and personal details about you!

    Many viewed Google as the anti-Microsoft. Microsoft just dominated a market. Is is really debatable whether Microsoft's dominance actually cost consumers financially, but if they did, it was just money. There is no question that Google threatens at least our privac and that is just the first of our basic rights that their behavior and business interests threaten to erode.

       
  • by Jayfar (630313) on Sunday June 10, @07:22PM (#19461231)
    Never heard of them. Oh wait, now they've attacked google and everybody knows who Privacy International is. Cheap, but effective, PR for PI.
  • Ob Futurama [wikipedia.org]:

    WERNSTROM: I give you the worst grade imaginable, an A minus minus!

  • High Horses (Score:2)

    by DynaSoar (714234) on Sunday June 10, @08:22PM (#19461535)
    (Last Journal: Sunday June 19 2005, @01:43PM)
    P.I. has simply done what ACLU does frequently: jumped up on other peoples' high horses and ridden them, even if its legs are imaginary. Don't get me wrong, I fully support what ACLU stands for and what actions they do undertake. Unfortunately they very often go for PR by chiming in on many topics others happen to be making noise about (ie. getting media attention) even though they have no intention of taking action themselves. Look back through the media and see how many times you can find ACLU "condemning" something in the press, and that's all you hear from them on the subject. Then see how often that's a concern others have raised previously, valid or not.

    P.I.'s report is a summary of accusations, pretty much all of which were raised by others well before they undertook this "study". It is not an empirical accounting of Google's policies or practices. They didn't examine these. They'd have had to do that from the inside. They made no effort to do so, as they had no intention of studying it objectively.

    Note that this takes no stand on the reality of Google's policies and practices. I don't know what they really are from the inside any more than P.I. This is simply an observation and comparison of self-styled "watchdog" groups whose intent too often is more self-promotion than watchdogging.
  • googleisevil (Score:1)

    by TheVelvetFlamebait (986083) on Sunday June 10, @08:49PM (#19461631)
    I for one welcome the return of our new-ish stupid tag overlords.
  • by erroneus (253617) on Sunday June 10, @08:51PM (#19461641)
    (http://slashdot.org/)
    The subject line says it all. Advertising needs to know who the viewers are when targetting an advertisment. And the more accurate a description, the more "effective" an advertisment may likely be. So if they can collect a bunch of info on a user and set up a profile then advertising can be better targetted, be more effective and the advertising space provider can charge highter rates.
  • by etnu (957152) on Sunday June 10, @09:20PM (#19461831)
    (http://www.etnu.org/)
    They make a big deal out of google serving content-targeted ads in email, but they don't say anything about AOL, MSN, and Yahoo actively "wire tapping" IM conversations? Of course, AOL, MSN, and Yahoo aren't that explicit about the wiretaps. They get away with it through a combination of their privacy policy's statements of needing to comply with "local laws and regulations", and the federal government mandating said wiretaps. If you use MSN, AIM, or Yahoo messenger, or email, you are subjecting yourself to wiretapping by the U.S. Federal government -- even if you aren't a U.S. citizen. Do google's targeted ads genuinely bother anyone more than this? I'm not saying that Google's privacy policy can't be improved -- everyone can use some improvement. I am saying that I think people are looking at the wrong things when evaluating how much protection a company offers to its customers.
  • Bullshit (Score:2)

    by Mr. Freeman (933986) on Sunday June 10, @11:03PM (#19462265)
    Oh yeah, Google is really insecure. I mean come on, they've had a whole 0 leaks in the last decade alone. That's almost a measurable increase from previous times.

    Seriously though, with a new "Thousands of credit card/social security numbers released by company XYZ" story every other week, how did Google score this low? Seems to me there's more at play here than facts and studies. Perhaps Google indexed one of their "confidential" pages they put on their server and didn't realize was on the Internet until Google indexed it.
  • News at 11 (Score:2, Funny)

    Criminal defense lawyer John Henry Browne sues [slashdot.org] Privacy International on behalf of Google Inc. for poor rating.
  • Its interesting... (Score:1)

    by LingNoi (1066278) on Monday June 11, @01:25AM (#19462761)
    .. that "Google has some of the worst privacy-protection practices anywhere on the web." when wasn't it just two or three months ago when Yahoo gave the account details of a Chinese blogger to the Government which lead to his arrest and ten year sentence?

    Wake me up when Google does something like this, until then its all BS.
  • ... if "British Privacy Group" isn't a an oxymoron, I don't know what is.
  • In reading the actual findings [privacyinternational.org], I'm a little confused. They fault one company for using "web beacons" and another for using "pixel tags" -- but those are the same thing, so why not be consistent in terminology? They fault Apple because it "kept quiet on the potential watermarking of DRM-free iTunes songs" when this topic only broke out within the last week, and there is zero evidence of actual watermarking (versus plain text additions of your name and email address -- yes, there is a difference). They fault AOL for preventing Mac users from viewing videos, but that's hardly a privacy concern (hello, competing video formats!). For Google, "Privacy mandate is not embedded throughout the company," whatever THAT means. Finally, a majority of the listed sites have no information listed in the categories of "responsiveness", "ethical compass", and "corporate leadership" -- so how can you adequately compare them to the bigger sites who have such information?

  • how to find these (Score:1)

    by alexq (702716) on Monday June 11, @12:56PM (#19467775)
    once the privacy results are published, will i be able to google them?