Google Accused of Tracking School Kids After Promising Not To (cio.com) 131
itwbennett writes: In a complaint (PDF) filed Tuesday with the Federal Trade Commission, the Electronic Frontier Foundation (EFF) claims that "despite publicly promising not to, Google mines students' browsing data and other information, and uses it for the company's own purposes." The EFF says Google's practice of recording everything students do while they're logged into their Google accounts, regardless of the device or browser they're using, puts the company in breach of Section 5 of the Federal Communications Act.
i know i wasn't supposed to read TFA, but... (Score:5, Insightful)
Breach of protocol there, sorry, but I read TFA.
This part seems kinda disturbing:
some schools require students to use Chromebooks
Why in the hell are schools requiring students to use Chromebooks? We're making people do business and give their personal deals to advertisers now? What's next, requiring Facebook?
This also does something much more subtle but very harmful to our society: it gets kids used to the world where nothing they "own" is really theirs, where everything they do is subject to the whims of someone else. Control over their computing devices is held by a multinational, whether Google or Apple or whoever. Instead, we should be getting kids used to freedom, both the power and the responsibility that comes with it.
Re: (Score:1)
the alternative is microsoft's offerings. is it any better (i.e. respectful of users' privacy)? no.
Re:i know i wasn't supposed to read TFA, but... (Score:5, Interesting)
The other alternatives are things like Linux and BSD. You know, devices beholden to their owners. As a side benefit, we might end up with more computer literate individuals instead of people who can't do anything more sophisticated than what someone else allowed a single mouse click to do.
Re: (Score:2)
Chromebooks and Android are both Linux based. Just sayin. ;)
Re:i know i wasn't supposed to read TFA, but... (Score:4, Insightful)
They are Linux in the same way that my Tivo is Linux. They might have the same kernel, but they don't have the "spirit" of Linux.
Re: (Score:2)
Kids are effectively forced to attend government-run schools and be subjected to government imposed curricula, and you worry about whether their devices run Linux or ChromeOS? You need to get your priorities straight.
Re: (Score:1)
Re:i know i wasn't supposed to read TFA, but... (Score:5, Insightful)
Re:i know i wasn't supposed to read TFA, but... (Score:5, Interesting)
i don't understand why this got downvoted. "let's roll out BSD to these kids' computers" --- said noone ever!
at conferences, i occasionally meet people who've attempted to migrate a school or at least a class to gnu/linux. it's always the same Don Quixotic story. first, there's the smartarse child who complains at home that he's no longer a computer whizz (whizz = plays call of duty at home), then it's parents ganging up on the headmaster to complain and then it always ends with the headmaster or local school council gloriously announcing a new deal with MS.
i've only ever met ONE portuguese guy who was semi successful with gnu/linux in an educational environment.
Re:i know i wasn't supposed to read TFA, but... (Score:4, Informative)
No sense of reality?
Our local elementary school run Linux PCs with LibreOffice. These PCs are actually used for teaching and the transition from Windows went rather smoothly.
It helps that there is a computer guy available to administrate the machines and offer basic training the the teachers.
Re: (Score:1)
Re: (Score:2)
For now. Already, some apps expect network connections each and every time, so people get used to the idea that it's just a net-requiring device.
Re: (Score:3, Informative)
Re: (Score:2)
Re: (Score:2)
Who supposedly owns the computers? If the school buys them and issues them to the students, then the argument if invalid, but if the students (families) must purchase the computers, then it is a valid argument.
Similarly, if in the corporate environment the company provides the equipment, then the company has total right to say what's installed, but if the employee provides the equipment they have no such right. (Power, yest, but not right. The same goes for schools...except that schools are, generally, a
re: Chromebooks (Score:2)
No, in all cases I've seen, the Chromebooks are owned by the school and issued out to the kids when needed in certain classes. The schools aren't demanding the kids buy Chromebooks themselves to use for classwork outside of school.
Re: (Score:2)
Re: (Score:3)
Why in the hell are schools requiring students to use Chromebooks?
Hmm, the price maybe?
Re: (Score:2)
You mean, the portion of the cost to the school as far as money. The TCO is much higher, since the student doesn't get any privacy.
Re:i know i wasn't supposed to read TFA, but... (Score:5, Insightful)
Why in the hell are schools requiring students to use Chromebooks? We're making people do business and give their personal deals to advertisers now? What's next, requiring Facebook?
Schools standardize on a single platform to make support simpler and to make sure that tools are available on every machine in the classroom. Typically, that means a computer cart loaded with several dozen laptops of some kind. Chromebooks have a distinct advantage for cash-strapped school boards in that they cost about $200 each, compared to five times as much for a cart filled with Macbook Airs. Chromebooks boot in well under 10 seconds, have batteries that will last a full school day, don't require complicated software installation and are immune to common PC viruses and trojans. Kids can use Sheets, Slides and Docs to create and edit school work without the school board having to pay significant licensing fees for an office suite. They save schools a fortune.
At the end of the day, Microsoft and Apple also track and data mine their users. The core problem isn't that the Big Bad Google is data mining school kids, it's that everyone is doing it. And that needs to stop.
Re: (Score:1)
Microsoft and Apple also track and data mine their users
Microsoft, yes. Apple, not so much. And in OS X, what "data mining" is on by default is easily turned off.
Re: (Score:2)
Or so you would like to think. Ever look at Little Snitch logs? Unless you spend a lot of time turning things off, OS X sure sends a lot of info back home to the Mothership.
Re: (Score:1)
Or so you would like to think. Ever look at Little Snitch logs? Unless you spend a lot of time turning things off, OS X sure sends a lot of info back home to the Mothership.
I think I said that you had to turn off some stuff that was on by default. And if you consider 10 minutes or so "a lot of time", I think you are exaggerating about the time it takes to turn off that data collection in OS X.
But at least Apple makes it easy to do that, and, unlike certain other OSes, doesn't hide the fact [apple.com] that they collect certain info, what is collected, whether it is anonymized, how long it is kept, what it is used for, who they share it with, what they do when the Gummint comes knocking,
Re: (Score:2)
Speaking of which, it may not seem like it but summer break is fast approaching and that's the refresh time or, in this case, probably an "addition to." I'm thinking I can probably get them the 2015 13" MBP for a steal if I time it right and do so just prior to or right after the 2016 release.
Re: (Score:1)
Speaking of which, it may not seem like it but summer break is fast approaching and that's the refresh time or, in this case, probably an "addition to." I'm thinking I can probably get them the 2015 13" MBP for a steal if I time it right and do so just prior to or right after the 2016 release.
Well, Apple just upgraded the MacBook Pros a few weeks ago; so I would think that any "clear out the old stuff" discounts would have already happened.
If you want, PM me, and I will try to help you with what you are looking for. For example, do you really need MacBook PROs for kids? Would the plain "non-pro" MacBooks or MacBook Airs make more sense? The only thing that would bother me about the new (non-pro) MacBooks would be that damnable USB-C connector. I DO think that kids would REALLY like to be able
Re: (Score:2)
I woulda PMed ya but, ya know... Slashdot doesn't have that feature. ;-) That's why I pointed to my email address a while back. You don't have an email address publicly associated with your account either.
Re: (Score:1)
I woulda PMed ya but, ya know... Slashdot doesn't have that feature. ;-) That's why I pointed to my email address a while back. You don't have an email address publicly associated with your account either.
Oh, I figured you still had my gmail addr since we conversed over that a few weeks ago. I will try to dig up one of those threads and email you.
Re: (Score:2)
I don't think schools are paying a 'significant licensing fee' for an office suite no matter which suite they use.
Is there an office suite that is NOT free for students/schools?
Re: (Score:2)
Re: (Score:2)
I believe schools don't pay 200 bucks per device.
Google has a lease plan for these devices, which means no cost upfront and when one breaks they'll send you a new one.
okay I'm finally going to pull the google plug (Score:2)
this is the first actual proof of evilness in my mind. Others were dubious but this is a bright line they just crossed. Just changed my mail address over to apple, and my browser to duckduck.
Re:okay I'm finally going to pull the google plug (Score:4, Funny)
Re: (Score:2)
Is this your first interaction with government forcing third party interaction on people? I mean some areas mandate
(and have for a long time) vaccinations else no public schools or similar services. The PPACA (obamacare) mandates that you get health insurance from a third party. Before that, there was/is the mandatory age in which you have to start drawing your social security benefits
(even if you are wealthy enough to not need them and think the system would be more solvent if they kept them).
Now the inte
Re: (Score:2)
Taking social security benefits is not mandatory. Just don't apply for them. Tada! Consult a lawyer. I have.
Because like IT, Education has Fashions (Score:2)
and Chromebooks and iThings are in fashion and are tracking kids, obviously. Where I work (secondary ed), people mandate children create gmail accounts and whatnot with no thought whatsoever to what that means.
This is not surprising at all and I'm glad that I support the EFF.
Re: (Score:2)
Why in the hell are schools requiring students to use Chromebooks? We're making people do business and give their personal deals to advertisers now? What's next, requiring Facebook?
Yes. Google+ actually, but schools are requiring class assignments using google docs for collaborative work.
Re: (Score:2)
Re: (Score:2)
Control over their computing devices is held by a multinational, whether Google or Apple or whoever.
And that shit hasn't changed in the last 10 years, and certainly won't change in the next 20. Not sure what you're wanting to fight here, or exactly how.
Well, I'd say that what we want to fight here are governmental overreach, (where the ostensible servant has become the master), and corporate rule, in which Big Business runs roughshod over the populace in the pursuit of profit while it burns the earth and destroys all of our futures.
Instead, we should be getting kids used to freedom, both the power and the responsibility that comes with it.
Sounds great. Now if I could just find where my freedom went. Oh yeah, that's been surgically removed from this country too. Again, not sure why the hell we should prepare the next generation for the opposite of what's to come.
If we don't prepare the next generation for what we want to come, then we're inevitably screwed. Are you advocating that we counsel our children to roll over and play dead so it will be easier for the corporate juggernaut to gr
Re: (Score:2)
Wouldn't it be cruel, to try to get kids "used" to things that will not exist when they grow up?...
Ah, I see. I'm pretty sure you're the AC I responded to a few comments up - and that means that you're probably trolling. Generally, I try not to knowingly feed trolls, but in this case I'll make an exception - so fuck off, you small-minded anti-social anti-human shill for hopelessness.
Re:Who do they think they are? (Score:4, Interesting)
Nah I bet it is a simple algorithm.
In order to determine if they are a minor or not, they determine if they are viewing porn or not. If they are viewing porn then they must not be a minor thus open to tracking data.
Easy algorithm.
Because kids are only exposed or search for it after they reach 18 years of age.
Re: (Score:1)
Re: (Score:2)
Take a close look at Android 6 privacy feature (Score:5, Interesting)
You should also take a damn close look at Android 6 privacy features. The new feature that lets users turn off rights to GPS, camera etc. for apps after installation.
On the face of it it sounds good, but the way they've done it is absolutely the opposite:
It lets an app install first, then demand priviledges as it goes along. It *tells* the app you are refusing it access to the camera or mic or address book, or location, or SMS's etc. So the app can slowly sucker you in Facebook style demanding more and more privileges to run as it has more and more leverage over you. You mid conversation a messaging app can demand access to your address book to let you finish the conversation, and Google's Android 6 will tell it if you refuse.
Google Player Services, aka Google's spyware* gets a free ride and its spyware can't be turned off. This service tracks location and even if you disable all Google services they continue to get the information. That is just the tip of the iceberg as to what that tracks.
Other similar features in other Android distributions, return empty data to the app, so it might demand access to the camera, but the camera data it gets is a noise image, and it might demand your address book, but it gets an empty address book instead if you refuse it access. So the app cannot know it has been refused access to the data and cannot leverage that to force you to give it access.
* Seriously take a good look at what that 'play' store is sending to Google, it helps itself to everything, and requests location even when the phone is on standby.
They are a privacy disaster and where the fook are the regulator?
Re: (Score:1)
Re: (Score:2)
Google Player Services, aka Google's spyware* gets a free ride and its spyware can't be turned off. This service tracks location and even if you disable all Google services they continue to get the information.
Cite? You absolutely can disable permissions for Google Play services, and my team (Android security) would consider it a severe bug if Play services could work around those permission blocks.
That is just the tip of the iceberg as to what that tracks.
Again, cite?
Other similar features in other Android distributions, return empty data to the app, so it might demand access to the camera, but the camera data it gets is a noise image, and it might demand your address book, but it gets an empty address book instead if you refuse it access. So the app cannot know it has been refused access to the data and cannot leverage that to force you to give it access.
Sure it can. Lying to apps would just create an arms race between the OS's attempts to hide the fact that users had blocked some permission and the app's attempts to determine it. That's not an issue with other distributions because the numbers are so small that apps don't bother. Better just to be up front
Empty promises are all a company has... (Score:1)
once Pandora's box has been opened.
Re: (Score:1)
Re: (Score:1)
Actually, according to TFA, Google signed the Student Privacy Pledge [studentprivacypledge.org].
Re:No expectation of privacy on school systems (Score:5, Insightful)
If they are in violation, then fine, be pissed. But data collection does not imply use for unauthorized purposes. I collect phone and address data on my customers. I do not use it to stalk them.
Re: (Score:2)
So say they do comply. They collect information, but don't use it to target advertising, etc. There are two kinds of information Google can collect, actual documents and emails stored on Google's servers, and general search and browsing history. The first is in the nature of those services - no way to not 'collect' it and still provide the service. I guess you could make a similar argument for search and browsing history too - tracking history makes search work better.
I suppose they could run normal Goo
Re: No expectation of privacy on school systems (Score:1)
Re: (Score:2)
A long time ago, in a galaxy far away, I had to deal with data volumes that were pretty much unheard of at the time. Google sold an appliance that (supposedly) made searching this data much easier. While it never worked quite as well as we'd hoped, it worked to some extent (it was not really able to be tuned to give good relevance scores for the data we used) and it wasn't entirely lost revenue.
At any rate... Why not sell an appliance or, better, software that enables the school to run their own private clo
Re: (Score:2)
Re: No ads on Apps for Education (Score:1)
Re: (Score:2)
Leaking to Google *IS* the issue (Score:2, Informative)
Perhaps you should read the claim more closely. Google *agreed* not to spy on students (and yes I did use the word spy because that is what they're doing). This formed part of the basis for which Schools used their services. Since schools have a legal obligation to keep private student data private, this was essential to them.
Yet Google doesn't honor that agreement, and thus exposes the schools to legal consequence:
"Google’s practices fly in the face of commitments made when it signed the Student Priv
Re: (Score:2)
Re: Leaking to Google *IS* the issue (Score:1)
Re: (Score:2)
What you say is technically true. Calling it 'spying' without acknowledging that you can't hold somebody's data without holding somebody's data is a little over the top. if that's your definition of spying, then all bets are off. Schools are using Chromebooks precisely for that cloud syncing feature. It's not just that Google wants the info - it's that the schools don't want the responsibility of saving it and making it accessible to any device. So it's pointless to focus on the collection end. What u
Re: (Score:2)
Students have no expectation of privacy when using school supplied computer systems (Reichert v. Elizabethtown College).
Students have no expectation of privacy *from the school*. They have every expectation of privacy from a random company not associated with the school system.
Say you buy a backyard pool for the kids. You allow the pool installer into your back yard while they're working. A month later, your 13 year old daughter is swimming in her bikini; as your dad, it's ok to take a picture. If the swimming pool installer snuck in and started taking pictures of her, would you be creeped out? In this case, Google is acting
If X is less than the cost of a recall (Score:4, Interesting)
There's probably an algorithm for projected income from the mined data versus likely fines for breach of conduct.
Do The Right Thing (tm) (Score:1)
... to maximize profits.
A name change will solve the problem (Score:2)
Re: (Score:2)
The Adventures of Peter Rapist (Score:2)
"Who's that hiding in my kid's closet with handcuffs and a gunnysack? Molester Joe! You silly-billy! When I hired you to babysit my kids, you promised you weren't going to try to kidnap them! You even signed a contract to that effect!
"Well, it's my fault, really--I knew you wouldn't be able to resist. All right, but this is your second strike. Five more strikes and I'll have to report it. Now get outta here, you scamp!"
remember when... (Score:2)
How about ACTUAL books (Score:2, Insightful)
With ipads and chromebooks everywhere, why aren't kids getting any smarter?
Well, for one thing (Score:2)
they only give a fuck about their phones. It's rare to see a kid in the hall at my school who isn't completely absorbed by a glowing rectangle zombie walking down the hall as slow as possible with ear buds in.
Re: (Score:2)
Cultures change, and yes, kids adapt. Current kids biggest problem is that too much emphasis is placed on standardized testing, so school primary purpose is now test prep, not making good citizens.
Google's new motto (Score:2)
Do no evil... (Score:2)
... to our yearly revenues.
accusations without any evidence (Score:5, Insightful)
Google syncs student data to their servers, including web searches, because Chromebooks back up everything to the cloud. If you back up your Windows machine to the cloud, you back up your search history as well. Nothing in the EFF's press release suggests that they have shown that Google does anything more than this, let alone "mines" that data or "uses it for the company's own purposes".
Re: (Score:2)
Re: (Score:2)
Is there any evidence that Google *doesn't* mine the synced data?
What sort of evidence would you accept? Note that the consent decree Google signed with the FTC requires that Google submit to regular privacy audits. But I'm guessing that doesn't reassure you, so I'm curious as to what would.
(Note: I work for Google so I'm not commenting on the EFF's allegations and won't respond to any discussion that gets close to them.)
Re: (Score:2)
If you don't trust Google how does that help? They still control the browser, the OS, and the encryption. And they still store all the files.
Re: (Score:2)
If you don't trust Google how does that help? They still control the browser, the OS, and the encryption. And they still store all the files.
Well, the sync password encryption algorithm is in Chromium, so you can see exactly how it works. It's harder to prove that Google doesn't sync plaintext in addition to (or instead of) the encrypted content. That would require breaking the TLS connection security -- which is possible on a dev mode Chromebook, you just need to extract the ephemeral key pair from the browser, use that to decrypt the TLS stream, then verify that only the encrypted data is synced and that it's encrypted the same way as in the o
Re: (Score:2)
I doubt they'd do anything so blatant; they'd more likely just do data mining on the client and then send the mining results back to the server.
Re: (Score:2)
I doubt they'd do anything so blatant; they'd more likely just do data mining on the client and then send the mining results back to the server.
You could also see that if you broke the TLS encryption. And would get almost as famous. I'm tempted to do it and publish my findings, but there's no point because (a) I'm quite certain I wouldn't find anything hinky and (b) since I work for Google no one would believe a negative result. I'd like to see someone not associated with Google do this: breaking into TLS on a Chromebook and monitoring everything that gets sent to Google and comparing it with Google's public statements about privacy.
Hmm. https:// [jimshaver.net]
Re: (Score:2)
If Google wanted to smuggle data about kids back to their servers, they could do that steganographically, in DNS queries or images or battery usage reports. Since Google seems to be using a lot of deep learning for data mining, the data you are looking for would also be just a bunch of floating point numbers, data that may not even be decodeable using any information on the device.
My point is that you can demonstrate the presence of data leakage, but y
Re: (Score:2)
If Google wanted to smuggle data about kids back to their servers, they could do that steganographically, in DNS queries or images or battery usage reports. Since Google seems to be using a lot of deep learning for data mining, the data you are looking for would also be just a bunch of floating point numbers, data that may not even be decodeable using any information on the device.
Steganographically-embedded data is a little bit difficult, but most protocols don't have much room for embedding information from the client. You can do it in DNS, but only by adding unusual extensions to your queries. Form posts are a good one, since you have a fair number of bits to play with in the boundary strings. You could do a little bit with TLS key agreement negotiations. But still, these are pretty narrow channels. As for data that isn't decodeable, the presence of undecodeable data would be caus
Re: (Score:2)
How about if you had a private key used to encrypt the data before it was synced?
Google actually provides that. You can set a sync password which is used to derive a key that is used to encrypt the data before it's synced.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
It could be, but the school system happens to have chosen Chromebooks and cloud services, and that means that the data goes to Google. You may feel that Chromebooks are the wrong product for schools, but that's not Google's fault; you have to take that up with the school administrators.
Re: (Score:2)
Re: (Score:2)