Feeds

Schmidt explains the Google way to self-erasure

Don't be evil build a creepy facial-recognition database

Reducing security risks from open source software

Google bent over backwards yesterday to show that it has learned its lessons and is really finally taking individuals' concerns over privacy seriously. Honestly.

And while there were some tangible commitments, they were unlikely to satisfy the regiment of privacy activists, academics and bloggers the ads colossus had arranged to be delivered to its Big Tent privacy conference yesterday ... by coach, via the venue's goods entrance.

Alma Whitten, Google's director of privacy product and engineering, kicked off the day's defence. She flagged up Google's Data Liberation Front initiative, which commits the firm to allowing individuals who use its products to remove any information they have uploaded. Whitten, and Eric Schmidt, have promised a dashboard to achieve this with a single press of a button. Or two.

Beyond dealing with the security of information tied to individuals' Google accounts, Whitten said the firm, like any good computer engineers, sought to model threats to its users' security and privacy.

While some critics took an "extreme perfectionist way of doing this," Whitten said, "I think it's a mistake to only have this conversation about absolutes." Rather, the firm had to do "threat modelling" and decide where the security is good enough for that. "Not the security threshold for some kind of mythical super adversary."

Beyond that, she said, people had to realise that Google could manage the data it holds, and delete it if consumers demanded, but was limited in what it could do about information that has leaked or proliferated elsewhere on the internet.

"From where I sit, it looks like we're still very much adapting to the situation where the internet allows everyone to be a publisher," she said.

What Whitten didn't recognise as a privacy problem was the vast piles of data Google accumulates through user searches, cookies and the like.

"A lot of the really powerful information sets are built on information from people but not about people," she said.

This implies anonymised data, not traceable to any one individual, but delivering a great benefit – in Google's case normally an economic one, in the case of, say, the NHS, a medical or technological one.

Which sidesteps the point that people have a problem with Google collecting it in the first place. Although they could always go to another search engine of course.

Whitten said said there was no way individuals could be identified from this data and that Google anonymised data after nine months. Which makes you wonder why governments, among others, seem so intent on getting their hands on it.

It was down to Eric Schmidt to deliver a full-fat mea culpa, admitting the firm had learned the hard way that it had to work with users' data "with your permission".

Whether the reference to the hard way refers to individuals' anger over the firm's sometimes cavalier approach to privacy, or the fact that the US government started sprinkling around subpoenas wasn't totally clear.

He also made the point that the firm had withdrawn from China because of the pressures brought to bear on it by the Beijing regime, and its resistance to data requests from other governments.

Mobile application security vulnerability report

More from The Register

next story
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Microsoft: You NEED bad passwords and should re-use them a lot
Dirty QWERTY a perfect P@ssword1 for garbage websites
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
NUDE SNAPS AGENCY: NSA bods love 'showing off your saucy selfies'
Swapping other people's sexts is a fringe benefit, says Snowden
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
British data cops: We need greater powers and more money
You want data butt kicking, we need bigger boots - ICO
Crooks fling banking Trojan at Japanese smut site fans
Wait - they're doing online banking with an unpatched Windows PC?
NIST told to grow a pair and kick NSA to the curb
Lrn2crypto, oversight panel tells US govt's algorithm bods
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.
Mobile application security vulnerability report
The alarming realities regarding the sheer number of applications vulnerable to attack, and the most common and easily addressable vulnerability errors.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.