Google Street View Wi-Fi data included passwords and email

Invisible Shield for Apple iPhone 4!“Wi-Fi traffic intercepted by Google’s Street View cars included passwords and e-mail, according to the French National Commission on Computing and Liberty (CNIL),” Peter Sayer reports for IDG News Service.

“CNIL launched an investigation last month into Google’s recording of traffic carried over unencrypted Wi-Fi networks, and has begun examining the data Google handed over as part of that investigation,” Sayer reports. “Google revealed on May 14 that the fleet of vehicles it operates to compile panoramic images of city streets for its Google Maps site had inadvertently recorded traffic from unencrypted Wi-Fi networks. Google’s intention was only to record the identity and position of Wi-Fi hotspots in order to power a location service it operates, the company said. However, the software it used to record that information went much further, intercepting and storing data packets too.”

Sayer reports, “At the time, Google said it only collected “fragments” of personal Web traffic as it passed by, because its Wi-Fi equipment automatically changes channels five times a second. However, with Wi-Fi networks operating at up to 54M bits per second, it always seemed likely that those one-fifth of a second recordings would contain more than just ‘fragments’ of personal data.”

Full article here.

51 Comments

  1. Unbelievable, how do you “accidentally” steal someone’s data. I bet that if I “accidentally” hack Google’s servers and still people’s data, the FBI will be knocking on the door. There’s no reason to collect any data while they captured the street view.

  2. I do not get why people love and trust google.
    They have all your search info, they want all your web viewing data(chrome), they want all your email data(gmail), they want all your phone use/location data(android) and all your tv viewing data.

    Now, they are driving around taking what you won’t give them.
    They are scary.

  3. People…

    Be real here.

    Google was not hacking into anything. These were packets picked up from OPEN, UNENCRYPTED WiFi systems. Anyone stupid enough to have there systems unprotected like that has absolutely no right to complain that their information was recorded by Google.

    It’s no different than if you take the front door off your house. You have no right to complain that someone walks in, sits down and starts watching TV on your set.

  4. <Flame Suit>
    Ok maybe I am missing something here but if a person is broadcasting this info with NO security isn’t it kind of their own fault? Did Goog have special/illegal hardware/software?

    Let me put it this way, if I write my SSN and my bank acct # and tape them to my window and Target walks by and copies the info, is it Targets fault or mine?
    </Flame Suit>

    I’m not trying to be a wise a$$ or start a flame war, just curious as to why in this instance Goog did wrong by gathering info that was floating around?

  5. If you do not want people to access or record your personal data, then do not broadcast it unencrypted over Wi-Fi (or any other radio frequency). They did not “steal” anything in my opinion (although that might not be true in legal terms), they just collected information that people were streaming into the ether. The primary concern should be public education, because many of these people are likely unaware that their wireless networks are unlocked, much less the implications.

    Anyone with a Wi-Fi receiver can do the same darn thing. And if they are willing to sit around for a while to collect a sufficient number of packets, they can probably crack the encryption for most consumer wireless networks using available tools.

    I have not seen any evidence that Google was parsing the Wi-Fi data searching for personal data, and I have no reason to believe that was/is the case. From Google’s perspective, they *were* only collecting fragments of data, and that data was extraneous to their actual purpose of creating a Wi-Fi location database.

    Please don’t go overboard on Google like a pack of lemmings. As the saying goes, news is neither as good nor as bad as it first appears. Or, as they say in scuba training, breathe slowly, deeply, and continuously.

  6. @Macromancer

    Very good point but Goog didn’t B&E;it just drove past and looked at trash that people left sitting at the curb.

    Now if Goog had special hardware/software that cracked security (locked door) that would be different.

    Would you be angry at the garbage collector if they happen to notice that you like (insert your product here) because when they took the lid off of your rubbish can they saw the box it came in?

    BTW Like most I am really starting to despise Goog but in this case *maybe* they aren’t the bad guys

  7. In Canada, someone was arrested, tried and convicted of theft for sitting in the car in front of someone’s house and surfing on their unencrypted WiFi.

    So, it is stealing.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.