Smoke, mirrors and Google's privacy policies

Google has magnamimously decided to halve the time it holds onto your IP address -- or has it? There is less to Google's latest privacy moves than meets the eye.

Hi, my name's Cringely, and I am powerless over my Google addiction. ("Hi, Cringely.")

If there actually were a 12-step group called Googler's Anonymous, I think millions of us would join -- as long as it wasn't run by Google.

Last week, with the grace and solemnity of a god descending to earth to bestow favor upon us puny humans, Google announced changes to its data retention policy: Starting next year the search giant would now only hold onto all of your search data and your IP address for 9 months instead of 18 months. And thus the bowing and scraping in the mainstream press began: All hail mighty Google, lord of all data.

Except that Surveillance State blogger Chris Soghoian looked a little more closely at what Google actually plans to do, and asked them to elaborate a bit. Here's what they told him:

After nine months, we will change some of the bits in the IP address in the logs; after 18 months we remove the last eight bits in the IP address and change the cookie information. We're still developing the precise technical methods and approach to this, but we believe these changes will be a significant addition to protecting user privacy.... It is difficult to guarantee complete anonymization [sic], but we believe these changes will make it very unlikely users could be identified.... We hope to be able to add the 9-month anonymization process to our existing 18-month process by early 2009, or even earlier.

As Soghoian points out, even after Google changes "some of the bits" (ie, one or two numbers at the end), reconnecting the dots between the unique ID Google's tracking cookie drops on your machine and your full IP address is trivial. The announcement was designed to make headlines and appease regulators while doing nothing to release Google's stranglehold on your data.

Their solution? Kill your cookies. The Register's Cade Metz quoted an anonymous Google spokesperson (how's that for irony?), who said:

"We have focused on IP addresses, because we recognize that users cannot control IP addresses in logs. On the other hand, users can control their cookies.....When a user clears cookies, s/he will effectively break any link between the cleared cookie and our raw IP logs once those logs hit the 9-month anonymization point. Moreover, we are still continuing to focus on ways to help users exert better controls over their cookies."

Of course, clearing your cookies means losing all your log in information or selectively parsing the cookies you want and the cookies you don't want -- either option is a total pain. The private browsing modes of the latest generation of browsers may help slightly (though IE8's apparently leaks like a sieve), but only after Google has had its way with your data for more than a year.

Maybe it really is time to start a Googler's Anonymous group. Or for Google to make amends for its half-hearted attempts at protecting customer privacy.

Do you care if Google knows where you searched last summer?

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags privacyGoogle

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Robert X. Cringely

InfoWorld
Show Comments

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?