Live data from Hacker News

Google knows nearly every Wi-Fi password in the world

blogs.computerworld.com

31–40 of 312 posts

Re: Google knows nearly every Wi-Fi password in the world

#31
post #16

And in addition to that they have the audacity to not make them accessible to the user! No way to look up your own wireless password in your phone, i.e. to tell a guest, thats just ridiculous.

On (jailbroken) iOS there is an app which displays all saved WIFI passwords. I am sure there are something similar to Androids.

Yes if you jailbreak you can do many things. That it requires a jailbreak is the insult.

Re: Google knows nearly every Wi-Fi password in the world

#32
post #6

Earlier quoted context omitted.

But they didn't have to design it in such a way as to share the passwords with google. All your data could be encrypted with your google account's password (or some other secret derived from it) on the device and backed up encrypted. When you enter your account password on a new device, it then downloads the encrypted data and decrypts and restores it. Same user experience without exposing private data.

Do we know that's not happening? The article says "they can decrypt them, given only a Gmail address and password" which implies that it would be encrypted with your password.

The article states that Google has refused to comment on whether the data is encrypted on their servers. So it seems fair to assume it isn't.

Re: Google knows nearly every Wi-Fi password in the world

#33
post #9

Google also knows all the secrets of General David Petraeus, or anyone else that uses Gmail. And everything you've (secretly) searched for. Google's business model is based on aggregating that information and gaining value out of the data, mostly in the form of advertising. As soon as it lets a major secret out, even just once, it's game over, and no-one will ever trust a secret to Google again. This is why they publ…

All these secrets have been sent in plaintext between Google data-centres over 'dark fibre' we now suspect the NSA has been wholescale recording.

There are belated efforts by google to encrypt the traffic between its data centres, but its basically too late.

Re: Google knows nearly every Wi-Fi password in the world

#34
post #9

Google also knows all the secrets of General David Petraeus, or anyone else that uses Gmail. And everything you've (secretly) searched for. Google's business model is based on aggregating that information and gaining value out of the data, mostly in the form of advertising. As soon as it lets a major secret out, even just once, it's game over, and no-one will ever trust a secret to Google again. This is why they publ…

I agree that it's unlikely Google as a whole would decide to read/use confidential data. on the other hand, the idea that someone w/in Google might abuse their position is completely plausible. if we know that people at the NSA were passing around phone sex calls by US troops, do you really want to keep trusting that no-one at Google will ever do anything problematic w/ yr data? edit: to be clear, I use Google servic…

Given that Google has a VC arm, I am stunned every time I run into a VC who uses gmail and other google-hosted services as part of their business. They are handing their competition an enormous chunk of their business proprietary information and trusting them not to peek at it without even a contract.

To me, that level of naivety with respect to operational security is just baffling. All it takes is one unscrupulous person in the right place at Google and those convenient, "free" services could end up costing millions. It isn't like the people in the finance industry have a reputation for being upstandingly moral either.

Re: Google knows nearly every Wi-Fi password in the world

#36
post #9

Google also knows all the secrets of General David Petraeus, or anyone else that uses Gmail. And everything you've (secretly) searched for. Google's business model is based on aggregating that information and gaining value out of the data, mostly in the form of advertising. As soon as it lets a major secret out, even just once, it's game over, and no-one will ever trust a secret to Google again. This is why they publ…

I agree that it's unlikely Google as a whole would decide to read/use confidential data. on the other hand, the idea that someone w/in Google might abuse their position is completely plausible. if we know that people at the NSA were passing around phone sex calls by US troops, do you really want to keep trusting that no-one at Google will ever do anything problematic w/ yr data? edit: to be clear, I use Google servic…

> on the other hand, the idea that someone w/in Google might abuse their position is completely plausible.

> if we know that people at the NSA were passing around phone sex calls by US troops, do you really want to keep trusting that no-one at Google will ever do anything problematic w/ yr data?

Already happened: http://gawker.com/5638874/david-barksdale-wasnt-googles-firs...

Re: Google knows nearly every Wi-Fi password in the world

#37
This very same point could be made against Apple, for instance, but there hasn't been a single comment to that effect in any discussion of this article.

I wonder if all of this recent Google-bashing is really just a symptom of something larger. People are suddenly waking up to the obvious-in-hindsight realization that simply giving their data to a third party involves a certain amount of trust.

The reason people don't seem to be ganging up on Facebook, Apple, etc. in a similar way is because they never really earned that faith. Take Facebook: from the very start their founder was known to consider their users "dumb fucks" for entrusting him with their privacy.

In my opinion, the fact that Google went out of their to, and generally succeeded at earning that trust is a good sign. It shows they take the matter seriously.

All American companies operate under the same rules. If you've taken the position that all American companies are not to be trusted, fine. But if you haven't, wouldn't Google's history make them one of the more trustworthy ones?

Re: Google knows nearly every Wi-Fi password in the world

#39
post #12

[deleted]

That's not the problem - choosing to give up your own secrets is fine, but giving up the wifi password of your friend's router because they kindly let you use the network whilst visiting is not cool at all. I personally refuse to allow access by friends with Android devices, and they are shocked to learn what Google does when I explain why...

At home, and everywhere I've had a say on how the network is laid out during working hours, I treat wifi as external. They get internet access, and there's a password to prevent the neighbours kids downloading GBs of pr0n, access to internal resources require connection over the vpn.

This has the side benefit that all my devices can connect securely to home resources wherever I am in the world.

Post reply on HN