The NSA Is Tapping Your Data Stream
Remember all the hubbub about the Bush administration's warrantless wiretapping? Nowadays, the National Security Agency still sifts through the petabytes of information traveling along the nation's fiber backbone--but legally, thanks to some after-the-fact lawmaking by Congress.
Some quick background: In December 2005, the New York Times reported that the NSA had engaged in domestic digital surveillance without U.S. court approval. In January 2006, former AT&T technician Mark Klein provided documents to the Electronic Frontier Foundation confirming that the NSA had installed surveillance equipment at a major Internet hub in San Francisco.
In 2006 and 2008, the EFF filed suit against AT&T and the federal government, respectively, over warrantless wiretapping. Both suits were rebuffed by federal courts and are currently on appeal. In July 2008, Congress passed a bill granting retroactive immunity to telecoms for their participation in the NSA's wiretaps.
"What people don't know and should is that there is a dragnet sucking up all their communications so the government can review them," says the EFF's Jennifer Granick. "AT&T is still routing all of its data traffic through the NSA."
The Fix: Short of pulling a Ted Kaczynski and holing up in a cabin in Montana, there isn't much you can do. Last September, four Democratic senators introduced the Retroactive Immunity Appeal Act, which would make telecoms accountable for their role in warrantless spying, but the bill hasn't gotten far. In the meantime, avoid googling "Osama" and "improvised explosive device" on the same day, unless you enjoy surprise visits from the Men in Black.
Your Facebook Apps Are Spying on You
Sure, it's silly and fun to play Mafia Wars or to take one of the 2,345,678 quizzes on Facebook. When you install one of these apps, though, it gains access to any information you've designated as available to 'Everyone'. Per Facebook's Platform guidelines, this can include a huge amount of information, including your name, photo, birthday, location, job history, religion, political point of view, relationships, favorite books and movies, and so on. Much of this information is shared by default. It's the motherload for data miners.
The Fix: Facebook recently introduced privacy controls that help limit what information apps can access. Use them. To start, log in and go to Account, Privacy Settings, Profile Information. Change any setting marked ‘Everyone' to Only Friends or Friends of Friends. Then go to Applications and Websites, What your friends can share about you, and uncheck most if not all of the boxes.
Even then, there's some information that Facebook simply won't let you withhold, including your name, profile photo, friends, fan pages, and geographic location, plus the networks you belong to. So think twice before you start harvesting virtual crops or install "Lover of the Day."
Your Geolocation Data Is Not Private
An army of marketers is looking to build profiles based on your habits and to sell you location-based services.
Telecommunications carriers maintain what is known as customer proprietary network information (CPNI), which can include details about your rate plans, who you called, and your location. By law, carriers can't sell your CPNI without your permission, but how they obtain your approval can be quite sneaky. Often they'll simply send an e-mail or letter giving you the opportunity to opt out; if you don't respond, they're free to sell your CPNI to whomever they please.
That doesn't necessarily mean they do so right now. But as more phones become location aware and geocentric services become more widely used, the temptation may be overwhelming. The market for location data is expected to reach nearly $13 billion by 2014, according to Juniper Research.
A company that has your geographic data could sell it to stores and restaurants in your area or offer to pass sales promotions along to you on those businesses' behalf. The classic example: You're walking by a store when your phone receives a text message offering a 20 percent discount--but only if you go in and shop right now. Or you might get an e-mail saying, "We saw that you passed by our store the other day, and we want you to know that we're having a sale." As yet such scenarios are merely theoretical, but they're highly creepy just the same.