Feeds

Mozilla goes where Google fears to tread with geolocation service

Privacy? We're keen on it now but might let you opt out in future

Next gen security for virtualised datacentres

A few years back Google got into fearful trouble by recording the location of WiFi transceivers without asking for their owners' permission. Lots of public outrage later, regulators pulled out their biggest and pointiest sticks and the Chocolate Factory destroyed the data.

What then to make of the newly-revealed Mozilla Location Service, “an experimental pilot project to provide geolocation lookups based on publicly observable cell tower and WiFi access point information”, that does more or less the same thing?

Mozilla says the service is an experiment “... to assess the impact Mozilla can have on the geolocation landscape, specifically to improve user privacy and enable innovation by creating public data sets”. The organisation is trying to position itself as an honest broker, with the following explanation of its intentions:

“Geolocation lookup is a very useful service to provide to users. There's no public data set to provide this service. None of the current companies offering this type of service have any incentive to improve on privacy. Geolocation lookup and the potential for tracking the physical movement of individuals is a serious privacy issue.

Why Mozilla? The web platform needs the capability, and currently we have to provide it in our offerings through business deals without much impact on the privacy aspects of the service. We have a unique access to Firefox on lots of devices for gathering and reporting back data. We don't have to monetize the gathered data and can make it available to the public. If we can run a successful service, we get leverage to improve the privacy aspects in the landscape.”

The foundation intends to crowdsource location data through tools like this “MozStumbler” app on GitHub. The app records SSIDs and tags them with GPS co-ordinates, uploads them to Mozilla and can also allow users to see their progress on leaderboards that turn collecting data into a fun compeition.

Google got into trouble with its geolocation service because it collected data that may have made it possible to identify individuals. Mozilla's privacy parameters suggest it knows of that strife and plans to avoid it, with the following regime:

“For the purposes of the geo-location service we are only interested in the public metadata about wifi networks, specifically the technology standard in-use, the frequency it's operated on, the signal strength and the technical network name (bssid). We'll never listen in or record actual network traffic.

For the wifi operator to opt-out, we follow the industry standard of filtering out any wifi networks with a clear text name (ssid) ending in '_nomap' and ignore any ad-hoc wifi networks. Both of these filter actions happen on the client side, so our service never sees them.”

The organisation has, however, left the door open to future services based on IP addresses, saying that “In the future we might want to use Geo-IP based lookups to enhance or provide coarse-grained fallback for the service. Before we do this, we'll do a thorough analysis of the involved risk, as the combination of IP address and time of service usage can uniquely identify users.” ®

The essential guide to IT transformation

More from The Register

next story
6 Obvious Reasons Why Facebook Will Ban This Article (Thank God)
Clampdown on clickbait ... and El Reg is OK with this
So, Apple won't sell cheap kit? Prepare the iOS garden wall WRECKING BALL
It can throw the low cost race if it looks to the cloud
EE fails to apologise for HUGE T-Mobile outage that hit Brits on Friday
Customer: 'Please change your name to occasionally somewhere'
Time Warner Cable customers SQUEAL as US network goes offline
A rude awakening: North Americans greeted with outage drama
We need less U.S. in our WWW – Euro digital chief Steelie Neelie
EC moves to shift status quo at Internet Governance Forum
BT customers face broadband and landline price hikes
Poor punters won't be affected, telecoms giant claims
prev story

Whitepapers

Endpoint data privacy in the cloud is easier than you think
Innovations in encryption and storage resolve issues of data privacy and key requirements for companies to look for in a solution.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Next gen security for virtualised datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.