Industry


Ads by TechWords

See your link here


C. J. Kelly's picture
C. J. Kelly

A Day in the Life of an Information Security Officer

Is Google becoming the next evil empire?

I heard on the news this morning something about Google's founders getting close to being richer than Bill Gates.  Is money the root or the root of all evil?  I don't know.

I read this recent piece by Preston Gralla, Seven ways to keep your search history private.  I am interested in keeping my searches private from any big enterprise that could correlate my searches to me personally.  It's kind of like the big grocery store chains that give you a shopping card to track your purchases in order to market to you personally.  I don't mind the marketing as much as I mind that everything on my grocery list is in a database attached to my name.  A database that can be compromised.  I don't like it that anyone can compile data on me about my personal preferences, habits, or interests.  It's just an invasion of privacy.  The same feelings apply to the big search engines selling my information (searches) to marketing types.

After looking at Preston's list, I decided to install the Firefox extension to "anonymize" the Google cookie UID, so that I can still use gmail and search using the Google engine without my searches being correlated to my login name.  I also selected the option to not send any cookies to Google Analytics.  I still switch between Firefox and IE7, depending upon my mood.  I like FireFox, but IE7 gives you tabbed browsing and that was one of the main features I liked in FireFox.  I liked the fact that I could configure FireFox to delete all private information each time I closed the browser. 

In IE7, which I will not use for personal email, only surfing, with the phishing filter turned off (see below), I changed the location of where my Temporary Internet Files are stored to my local hard drive instead of the network server.  That way I can delete that information without worrying about it being backed up by a network server. 

Now, more about IE7's anti-phishing tool.  Did you know if you turn on the anti-phishing tool ("phishing filter") in IE7, IE7 sends the URLs to Microsoft.  So now you know that both Microsoft and Google are interested in what you do on the web.  Here's a direct quote from the Q&A on the phishing filter taken from IE7's help feature:

 "When you use Phishing Filter to check websites automatically or manually, the address of the website you are visiting will be sent to Microsoft, together with some standard information from your computer such as your computer's IP address, browser type, and Phishing Filter version number. To help protect your privacy, the address information sent to Microsoft is encrypted using SSL and limited to the domain and path of the website you are visiting. Other information that might be associated with the web address, such as search terms, information you entered in forms, or cookies, will not be sent."

Yeah.  Sure.  Right.  You have their word on it.  Between the WGA (Windows Genuine Advantage) tool and the phishing filter, you have to believe that Microsoft must be having data warehouse headaches right about now.  And they probably know more about me than I want them to.

When you are behind a corporate firewall, the IP address is going to be the public address of the company, so it's not like they can narrow that down to a specific PC.  But, if you are surfing from home, that IP address is associated with you personally by your ISP.

At any rate, we've standardized on IE7 for the desktop at work, but the IT and Security folks are all using FireFox.  That dang WGA tool gets reinstalled every time you patch your system, so I've given up trying to clean it out of the registry every time it installs.  It's futile. 

So what is my chief complaint?  I don't think anyone or any company who I buy products from should keep my personal identity associated with my personal browsing or shopping habits.  It's wrong.  It's no one's business.  And it's not about having something to hide.  I don't invite you into my house to browse in my underwear drawer?  If I invite you over, you are limited to the guest areas.  That's the way it's supposed to be.

My other beef is that storing information that people have not given you permission to store is sitting in databases or data warehouses that can be compromised.  That really unnerves me. 

What People Are Saying

When you are behind a

When you are behind a corporate firewall, the IP address is going to be the public address of the company, so it's not like they can narrow that down to a specific PC.

You got javascript enabled like WELL over 99% of surfers? Then your NAT'ed address shows up on my web logs which most definitely *does* "narrow it down to a specific PC"

You see whether someone is a CLASS-A or CLASS-C and assigned static IPs with a business give a good indication of how many PC targets are behind that corporate firewall that you give much too much credit to.

And home users private IPs basically leak whether they are NetGear routers or DLINK or Microsoft sharing with the 192.168.0.2 or 192.168.1.100 or 192.168.1.3 numbering, etc.

It does NOT take some stand-alone, downloadable executeable like from GRC.COM to determine your internal address ... just javascript and standard browser settings.

Google has always been a

Google has always been a corrupt company. It started life as a spyware company and they haven't changed. Their integrity should have become obvious when they were caughtlying about the govt request for information. Turned out the request explicitly stated that no personally identifying information was to be included; but Google saw a great opportunity for a publicity stunt by claiming they were protecting privacy rights. If that wasn't enough, about a week later it was disclosed they were willingly helping the Chinese govt identify people that were making "illegal" searches on the internet.

I avoid all evil software

I avoid all evil software companies that keep track of me pluss who likes viruses and crashes anyway? Use Linux! Check out my web site. www.mindblowingidea.com and more specifically http://www.mindblowingidea.com/WindowsVista.html

If you don't like WGA, then

If you don't like WGA, then move to Linux. I have found that Mandriva Linux is very good, it's easy to install - a must if you replace windows - very easy to learn, especially if you use the KDE desktop, and very very secure (no viruses [AV unnecessary]).

There a a few extra things you have to do to watch movies, and a few other things but any Linux user can help you there. But once done it's well worth the change.

Money might be corrupting

Money might be corrupting but as far as I have seen Google really haven't done anything much I am aware of that rates even remotely like the abuses of Microsoft and I don't see the huge level of self delusion in Google's creator that Bill Gates seems to carry ("I'm responsible for the whole worlds great progress" and "no one gives consumers so much" kinds of thinking).

You want to be sure your

You want to be sure your details are NOT stored?
Check out Ixquick.com! High Quality results of the 11 best search engines combined, and your Privacy is secured.

Read more on how your privacy can be at risk when using search engines, and how Ixquick makes sure your privacy is protected:
http://us.ixquick.com/eng/protect_privacy.html

www.ixquick.com

Google and Microsoft don't

Google and Microsoft don't use reasonable means to protect our privacy. I use a different tool - CallingID. This free solution protects me well from all types of Internet scam and instead of sending to CallingID every URL I I visit only domain name is sent and if I visit same domain several times the data about my visits is not sent to CallingID

Google is broken in many

Google is broken in many ways: full of commercial spam from eBay by intent, unstable search results, good content often punished by end of results penalty , search by date have been broken for a year or more. A good empire would not allow all this errors. More details:
Axisnova Internet

I knew when I was offered

I knew when I was offered this great deal--a discount shopping card--that everyone would find out I secretly eat hard shell chocolate sauce on a regular basis. It was either sign up for this card OR we will overcharge you for everything you buy in this store. Considering the amount of food I need to buy for the family, overcharging me for everything would add up quickly. I had no choice. I didn't want to, but I had to. I didn't like it one bit.

We had a store do that in my

We had a store do that in my area - and I knew they were overcharging for not giving them information because I had been in the same store a few weeks before the introduction - and the prices went up for me when I came back for the exact same items because I didn't have the card, but stayed the same for those that had the card. I now shop at a different store. If I do shop at the first store, I don't buy items where they show a discount for using the card. If they want my business back, they can drop the card. If enough of us do that, maybe things will change.

On a similar topic, I give a bogus zip code when asked by a store. They are wanting me to tell them where to put in the next store to drive the manager profits down on the current store. Old trick of franchise operations - and one I won't play in to.