Current Event: Google Releases ‘Latitude’
Google has released a new product called ‘Latitude’. It is an extension based on the extremely popular Google Maps web application that allows users to track the exact location of friends and family members using the GPS signal in their mobile phones. This product has already launched, and even with the received criticism Google is standing behind its new product.
This release has opened a whole new world of privacy concerns. The system works by allowing users to download an application on their mobile device that reports their location back to Google servers. Friends and family can then use ‘Latitude’ to get real-time information about where a person is. A user does have to download the application to their cell phone to participate, but any adversary would only need to gain physical access to the device for a couple of minutes to install the application unbeknownst to the cell phone owner. This vulnerability presents itself to stalkers, prying employees, jealous partners, and obsessive friends, to name a few.
For a company who’s motto is “Don’t Be Evil”, this seems a little contradictory. It’s easy to envision this product wreaking havoc in people’s lives, especially when you consider the scenarios mentioned above. Google has taken some precautions, but London based Privacy-International does not feel they go far enough. The only acceptable solution in their opinion is to have the application regularly prompt the user that the service is turned on. This would be very annoying; the application does indicate when it is on, but it may not be obvious to many people.
Another major concern that comes to mind is a distributed attack. With cell phones becoming more powerful and completely ubiquitous, they are vulnerable to a widespread attack. If an attacker created a virus that massively subscribed users, a serious state of panic could ensue during the time in which every person’s real-time location was available online.
Personally, I don’t think this service should have been launched in its current state. I can see the fun and benefit in this application, but it is just too easy to subvert right now. This is a clear example of the moral conflict when it comes to technology vs. privacy. One of the main concerns in this debate is always of falling down a slippery slope, and this seems like it could be the start of one. I think this will certainly stir up controversy, and we will have to wait and see how the public and the media respond. If there are security breaches with this service, it will only take a few of them before public opinion turns against a technology like this.
Comment by devynp
February 6, 2009 @ 8:16 pm
I haven’t tried this new application yet. A friend of mine asked if he could add my number so he can track me, but I resisted. I don’t think this application will be as successful as other Google product because just like me, people will have privacy concerns. People fear that they can be tracked down.
Although people need to send an invitation before they can be tracked, and user can hide their location if they wish at any time, it’s possible that through similar procedure, adversaries use the same technology to prevent the user realizing that his/her phone is being tracked.
Comment by oterod
February 6, 2009 @ 9:49 pm
God…this is out of control. I was already starting to get worried about this kind of thing after a summer at Google, but as you say, Vince, an application like this, especial in its current state, is a million kinds of wrong just waiting to happen.
Latitude raises all kinds of issues. First off, of course, is the risk to people who don’t want to involve themselves in the service. How many of us monitor the processes on our cell phones? If an adversary managed to compromise victims’ cellphones so as to subscribe them to the Latitude service, there is little to no chance that the user would have the initiative or the auditing technology to find out. This could lead to the invasion of millions’ privacy.
I think there’s a greater question, however. I would go so far as to say that a service like this simply should not exist. There are many reasons for this opinion, and they range from invasion of privacy, ubiquity of private information, and the concerns raised by the growing mass of personal information at Google’s fingertips.
Comment by devynp
February 12, 2009 @ 5:01 pm
I think this kind of application had existed before, but it’s use was only limited to authoritative people, such as the government/police. I think tools like Google Latitude shouldn’t have been made available to public. Otherwise millions of problems will arise eventually.