Stories
Slash Boxes
Comments

SoylentNews is people

Submission Preview

Link to Story

New York's Free LinkNYC Internet Kiosks May Be Tracking Your Movements

Accepted submission by Fnord666 at 2018-09-11 20:54:28
Security

LinkNYC kiosks have become a familiar eyesore to New Yorkers. Over 1,600 of these towering, nine-and-a-half-foot monoliths — their double-sided screens festooned with ads and fun facts — have been installed across the city since early 2016. Mayor Bill de Blasio has celebrated their ability to provide "the fastest and largest municipal Wi-Fi network in the world" as "a critical step toward a more equal, open, and connected city for every New Yorker, in every borough." Anyone can use the kiosks' Android tablets to search for directions and services; they are also equipped with charging stations, 911 buttons, and phones for free domestic calls.

But even as the kiosks have provided important services to connect New Yorkers, they may also represent a troubling expansion of the city's surveillance network, potentially connecting every borough to a new level of invasive monitoring. Each kiosk has three cameras, 30 sensors, and heightened sight lines for viewing above crowds.

[...] Now an undergraduate researcher has discovered indications in LinkNYC code — accidentally made public on the internet — that LinkNYC may be actively planning to track users' locations.

[...] In May of this year, Charles Meyers, an undergraduate at New York City College of Technology, came across folders in LinkNYC's public library on GitHub, a platform for managing files and software, that appear to raise further questions about location tracking and the platform's protection of its users' data. Meyers made copies of the codebases in question — "LinkNYC Mobile Observation" and "RxLocation" — and shared both folders with The Intercept.

According to Meyers, the "LinkNYC Mobile Observation" code collects the user's longitude and latitude, as well as the user's browser type, operating system, device type, device identifiers, and full URL clickstreams (including date and time) and aggregates this information into a database. In Meyers's view, this code — along with the functions of the "RxLocation" codebase — suggests that the company is interested in tracking the locations of Wi-Fi users in real time.

[...] LinkNYC disputes these speculations. David Mitchell, Intersection's chief technology officer, told the Intercept that the code was never intended to be released and was part of a longer-term research and development process. "In this instance," he explained over email, "Intersection was prototyping and testing some ideas internally, using employee data only, and mistakenly made source code public on Github. This code is not in use on the LinkNYC network."

Source: The Intercept [theintercept.com]


Original Submission