On Fri, Jun 25, 2010 at 10:13 PM, Bob Jonkman <span dir="ltr"><<a href="mailto:bjonkman@sobac.com">bjonkman@sobac.com</a>></span> wrote:<br><div class="gmail_quote"><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On Fri, 2010-06-25 at 16:40 -0400, Chris Irwin wrote:<br>
> Google doesn't know your MAC address. They don't even know your<br>
> machine's private IP address.<br>
<br>
</div>Of course, this whole thread started because Google was recording<br>
wireless router MAC addresses (which COULD be useful for geolocation).<br>
<br>
But an AP's MAC address has no correlation to the IP address your ISP<br>
assigns. </blockquote><div><br>Yes. <br><br>MAC addresses have a vendor code part and then a number assigned by the vendor. At most, you can deduce the vendor, and perhaps certain model information from that.<br><br>Contrary to phone numbers, there is no global registry for MAC addresses cross referencing who owns which ones. <br>
<br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">So we're all safe, right?<br></blockquote><div><br></div></div>Google are sniffing WiFi, mainly for MAC addresses. They will probably filter out by vendor to know which ones are routers (likely to stay where they are) and which are transient (laptops, Wifi smart phones, ...etc.)<br>
<br>The issue here is that they were using a tool that happened to log more than just MAC addresses. This included fragments of (unencrypted) data that happened to be on the air at the time the Google van is in range. These include IP addresses, email addresses, and whatever else happened to be in the packets at the time.<br>
<br>The data is just fragments, so probably not useful for much more. And they said Oops! Their explanation is plausible, and for reasons I mentioned earlier, it not likely that they intended to go and sniff everything. And I also explained that phone book information is far more a privacy threat than these mere fragments, and using the open source tool was to blame (lazy engineer?).<br>
<br>But it boils down to whether you want to take their word that the additional info was accidental or not. So everyone need to form their opinion for this part.<br>-- <br>Khalid M. Baheyeldin<br><a href="http://2bits.com">2bits.com</a>, Inc.<br>
<a href="http://2bits.com">http://2bits.com</a><br>Drupal optimization, development, customization and consulting.<br>Simplicity is prerequisite for reliability. -- Edsger W.Dijkstra<br>Simplicity is the ultimate sophistication. -- Leonardo da Vinci<br>