SoylentNews

Fnord666 [soylentnews.org] writes:

A privacy advocacy group has filed a formal legal complaint [documentcloud.org] with the US Federal Trade Commission, asking the agency to begin an investigation "into Google's in-store tracking algorithm to determine whether it adequately protects the privacy of millions of American consumers."

In the Monday filing, the Electronic Privacy Information Center (EPIC) said it is concerned with Google's new Store Sales Management program, which debuted in May [washingtonpost.com]. The system allows the company to extend its online tracking capabilities into the physical world. The idea is to combine credit card and other financial data acquired from data brokers to create a singular profile as a way to illustrate to companies what goods and services are being searched for online, which result in actual in-person sales.

Because the algorithm that Google uses is secret, EPIC says, there is no way to determine how well Google's claimed anonymization feature—to mask names, credit card numbers, location, and other potentially private data—actually works. While Google has been cagey about exactly how it does this, the company has previously revealed that the technique is based on CryptDB.

"The foundational algorithm on which the Google algorithm is based has known security flaws," the complaint states [documentcloud.org]. "In 2015, researchers were able to hack into a CryptDB protected database of healthcare records and access over 50 percent (sometimes 100 percent) of sensitive patient data at an individual level." (Ars covered the 2015 research [arstechnica.com] into CryptDB [arstechnica.com] at the time that it came out.)

Worse still, it seems practically impossible for consumers to do anything about this potential tracking in EPIC's view.

Source: https://arstechnica.com/tech-policy/2017/07/group-wants-ftc-to-curtail-googles-linking-online-searches-to-in-store-shopping/ [arstechnica.com]

Original Submission