Oopsie! Google Accidentally Harvested WiFi Data
Google today revealed in a blog post that the company's street view cars had been accidentally collecting data from open WiFi networks.
Google today admitted that, in the years that it's been photographing the streets of the world for Google Maps, it has also been unintentionally collecting payload data from open WiFi networks and public hotspots. The revelation came after the German Data Protection Authority asked to audit the WiFi data collected by the Google Street View cars.
Alan Eustace, Senior VP, Engineering & Research today said that during that review the search giant discovered that a statement it sent to data protection authorities (and in an earlier blog post) was incorrect. On April 27, Google sent out a technical note that stated that, while the Street View cars did collect publicly broadcast SSID information and MAC addresses, they did not collect payload data. However, it seems that is not actually the case.
"… it’s now clear that we have been mistakenly collecting samples of payload data from open (i.e. non-password-protected) WiFi networks, even though we never used that data in any Google products," said Eustace.
Eustace goes on to assure us that typically, Google would only have collected fragmented payload data because:
"Our cars are on the move; someone would need to be using the network as a car passed by; and our in-car WiFi equipment automatically changes channels roughly five times a second."
The accidental data harvesting is attributed to a mistake made in 2006. Four years ago, an engineer working on an experimental WiFi project wrote a piece of code that sampled all categories of publicly broadcast WiFi data. Eustace says that a year later, when Google's mobile team started a project to collect basic WiFi network data like SSID information and MAC addresses using Google’s Street View cars, it included that code in their software—although the project leaders did not want, and had no intention of using, payload data.
Google says to maintain the users' trust, it will be asking a third-party to review the software issue, how it worked and exactly what data was gathered. Additionally, this third-party will also be checking to see that Google deleted the data appropriately. There will also be an internal review of procedures to ensure that should something like this ever happen again, Google will be able to handle the issue properly.
Eustace signs off with an apology from the engineering team at Google.
"The engineering team at Google works hard to earn your trust—and we are acutely aware that we failed badly here. We are profoundly sorry for this error and are determined to learn all the lessons we can from our mistake."
- Facebook CEO Called Trusting Users ''Dumb F***s''
- Windows 3.1, Zeemote Controller Seen on Android
- Anti-IE6 Ads: You Wouldn't Drink Old Milk
- iPad May Hit Wal-Mart By End of Year
- Dell Demos Streak, Confirms AT&T
- Google Shutting Down Nexus One Online Store
- Source: BlackBerry Tablet Due This December
- The Shape-Shifting Car of the Future
- Experiment: We're Suckers for Virtual Bods
- Modern Warfare 2 Resurgence Map Pack Also $15
- Tattoos to Help Diabetics Soon
- Retro Space Invaders Toaster Leaves an Imprint
- The Pad That Makes Your USB Port Useless
- Report: Browsers Still Leave Your Fingerprint
- iPhone 4G in June with Cortex A8, More RAM
- DuPont Creates 50" OLED in Under 2 Minutes
- Nvidia Refocuses on Android with Tegra 2
- Germany Questions Google's Data ''Accident''
- Wikipedia Founder Caught in 'Porn Purge' Debate



yeah..finally caught and now they decide to call it a mistake. but it was only from non-secured wifi. anyone can get info off that so who cares. I guess if you don't want people carelessly taking your network info then its a good idea to use a bit of security encryption! Derrrr.
this doesn't really bother me cause lets be realistic if google want to fuck u over u think ur wifi password is gonna stop them. I'll just let the paranoid people take this one.
All of them collect data about us, its how they make money!
I call BS.
I kan has ur deytuh?
I'm still slightly confused as to how this seems so 'bad' when anyone could do it to any network if they were close enough...
Anyone one else just plain not trust Google anymore? This combined with them keeping your search (and advertising) data for 3 years is just plain creepy.
Also, it pays to remember that EVEN IF your wifi is secured, google still recorded the MAC address of your router.
Interesting. So they did collect it after all.
Which means my Google has my network's SSID as well...
Anyone one else just plain not trust Google anymore? This combined with them keeping your search (and advertising) data for 3 years is just plain creepy.Also, it pays to remember that EVEN IF your wifi is secured, google still recorded the MAC address of your router.
Doesn't bother me one bit. have fun with my router info...i mean really what can they even do with / or would want to do with that data? steal my bandwidth? they're google they don't need to do that.
this is a good lesson for everyone to encrypt their connection and to use a password.
i could do the same and noone could blame me bacause they are BROADCASTING and VOLUNTARILY sharing their data. there's a choice that makes a big difference.
Interesting. So they did collect it after all. Which means my Google has my network's SSID as well...
So do all your neighbors. Who cares? They can't do anything with it, nor do they even know it's yours. I pick up SSIDs all the time, no idea who they belong to.
I laugh at those of you who still trust Google. Ha Ha Ha!!!
yeah..finally caught and now they decide to call it a mistake. but it was only from non-secured wifi. anyone can get info off that so who cares. I guess if you don't want people carelessly taking your network info then its a good idea to use a bit of security encryption! Derrrr.
Your statement is a contradiction. If public wi-fi is open and ANYONE can retrieve data from it then it would be safe to assume a search engine GIANT using the latest and greatest hardware might have access to sampling some of this useless data (from ignorant individuals) without even knowing it. Who cares? They messed up. Bruce Lee once said, "If you ask me if I am a good martial artist and I tell you yes, then you will think I am boasting. If I tell you NO, then you would think I was telling a lie"...
still don't know what payload data is..
When a company harvest private data then publish it for profit it not only break the law but also indecent. It looks like Google will do anything it feel like to make money until it got caught. An apology will be good enough from the richest company on earth.
"yeah..finally caught and now they decide to call it a mistake."
Only they weren't actually caught by anyone but themselves but still went public with it and asked for a third-party review of the handling.
Can you think of any company that would do the same under similar circumstances? Neither can I.
The Google fright is vastly overrated and entirely unjustified, at least on a factual basis. Google no doubt has the means to screw us over royally with the kind of information they are sitting on, yet we get news pieces like these when they openly admit to mistakes, apologize and ask for outside review.
Would you prefer they kept us in the dark, lied to us and secretly abused any and all information instead?
Google is taking War Driving to another level.
I don't know why router software doesn't just disable ssid publication after a setup was run... it's useless and dangerous
When a company harvest private data then publish it for profit it not only break the law but also indecent. It looks like Google will do anything it feel like to make money until it got caught. An apology will be good enough from the richest company on earth.
How is Google the richest company in earth?
still don't know what payload data is..
Me neither!!
There is no privacy on the web.
Anyone one else just plain not trust Google anymore? This combined with them keeping your search (and advertising) data for 3 years is just plain creepy.Also, it pays to remember that EVEN IF your wifi is secured, google still recorded the MAC address of your router.
Not really.
Any website you go on tracks as much data on you as it can, and it never tells you what it is that they're collecting
Google is bloody honest. I love em.
Hardly surprising, we all know Google respects privacy about as much as a hungry cow respects my lawn...
Every time I use a Google product, there's this little voice in the back of my head telling me I'm using a product that monitors me more than anything else, including the so called 'nanny state'. Too bad many of their products still don't have an equal competitor.
Chrome? Opera is as fast (slightly faster according to some), yet lacks extensions. FF has all the nice extensions, but lacks the blazing speed. Bing still doesn't give results as meaningful as Google does. Gmail is better browser integrated than hotmail.
Even collecting only MAC addresses is sketchy. If that is connected to google earth/street view then one could find out where you lived based on information in packets. Piss the wrong person off and they might come knocking on your door. If they come to my town (luckily it's rather small so they may not bother) I'ma turn off my access point and put a big-ass mirror in front of my house.
"Hardly surprising, we all know Google respects privacy about as much as a hungry cow respects my lawn..."
While it's healthy to question the security of integrity of data-harvesting there's one major difference between Google and anyone else. Namely, Google is honest about it.
Also, they've never actually been caught doing anything untoward with the data which is quite impressive considering their size, mindshare and skepticism shown by people such as yourself.
So in the end we 'know' nothing but what we've actually seen or heard and judging Google by those merits they're probably the most stand-up company of their size anywhere.
On another note, for those wondering, payload data refers to what most would simply term 'data'. In other words the actual information transferred as opposed to header data that only contain the source and destination of the data, it's type, length and checksum etc.
"Even collecting only MAC addresses is sketchy. If that is connected to google earth/street view then one could find out where you lived based on information in packets."
And why on earth would they publish any information that they collected, allegedly as a mistake, and tie it into street addresses for the general public to search through?
Even the frothing-at-the-mouth conspiracy theorists must realize something like that would never float.
Look, both rival companies and several government agencies, of multiple nations, have been trying to find dirt on Google _for years_. The fact that they've yet to do so is nothing short of astonishing, and yet people come up with the most absurd ideas regarding the company.
As I remarked earlier, skepticism is a good thing but it can be easily pushed into paranoia.
@ Exodite4: They collected SSID's and MACs intentionally according to their own statement as shown in the above article: "On April 27, Google sent out a technical note that stated that, while the Street View cars did collect publicly broadcast SSID information and MAC addresses,.."
I'm sure they would never publish that information for the general public to access, however that's not to say it still couldn't be leaked through a security breach. I'm just saying they shouldn't be collecting this information in the first place. What possible legitimate use could it have? Granted one could just change their SSID and secure their network, but changing your MAC means buying a new router/access point.
Is anyone else a little uneasy that they were collecting mac addresses and SSID information while mapping out said data's physical location?
This is the kind of thing scam artists and such wish they could have. To make scams more believable. (Hey i'm your neighbor by three blocks and I always noticed bla bla bla...so give me 100$ and all of your other info so I can forward 1million dollars to your account.)
But in all seriousness. If google decided to take over the world, the first step to domination is domination of the internet. Now they can hunt you down physically. By MAC address. No spoofing IP's will save us now!!1*tinfoil hat shaped like chrome symbol*
As the head of facebook would probably say, anyone who trusts what google says about them not making use of the data at all are dumb ffucks.
They are gonna have a new "WiFi Hotspots" Layer and show us all the open networks around the world so we know where to freeload
I don't know why router software doesn't just disable ssid publication after a setup was run... it's useless and dangerous
You realize that your laptop or whatever will just almost constantly send out probes, which includes your routers SSID, when it is set to connect to a hidden SSID right? So you won't have your router sending out your SSID but all your wireless devices will be and those probes can be found as easily as your router sending it's SSID out. Also if you really want to get into a hidden router, there are programs that will find the hidden SSID anyway. Might as wlel leave it on since turning it off won't change anything to anyone who wants to break in anyway.