AT&T

EFF Hits AT&T With Class-Action Lawsuit For Selling Customers' Location To Bounty Hunters (vice.com) 53

An anonymous reader quotes a report from Motherboard: Tuesday, the Electronic Frontier Foundation (EFF) filed a class action lawsuit against AT&T and two data brokers over their sale of AT&T customers' real-time location data. The lawsuit seeks an injunction against AT&T, which would ban the company from selling any more customer location data and ensure that any already sold data is destroyed. The move comes after multiple Motherboard investigations found AT&T, T-Mobile, Sprint, and Verizon sold their customers' data to so-called location aggregators, which then ended up in the hands of bounty hunters and bail bondsman.

The lawsuit, focused on those impacted in California, represents three Californian AT&T customers. Katherine Scott, Carolyn Jewel, and George Pontis are all AT&T customers who were unaware the company sold access to their location. The class action complaint says the three didn't consent to the sale of their location data. The complaint alleges that AT&T violated the Federal Communications Act by not properly protecting customers' real-time location data; and the California Unfair Competition Law and the California Consumers Legal Remedies Act for misleading its customers around the sale of such data. It also alleges AT&T and the location aggregators it sold data through violated the California Constitutional Right to Privacy.
The lawsuit highlights AT&T's Privacy Policy that says "We will not sell your personal information to anyone, for any purpose. Period."

An AT&T spokesperson said in a statement "While we haven't seen this complaint, based on our understanding of what it alleges we will fight it. Location-based services like roadside assistance, fraud protection, and medical device alerts have clear and even life-saving benefits. We only share location data with customer consent. We stopped sharing location data with aggregators after reports of misuse."
Businesses

T-Mobile Says It Can't Be Sued By Users Because of Forced-Arbitration Clause (arstechnica.com) 151

T-Mobile U.S. is trying to force customers into arbitration in order to avoid a class-action lawsuit that accuses the phone carrier of violating federal law by selling its customers' real-time location data to third parties. Ars Technica reports: T-Mobile yesterday filed a motion to compel arbitration in U.S. District Court in Maryland, saying that customers agreed to terms and conditions that require disputes to be handled in arbitration instead of courts. The two plaintiffs named in the lawsuit did not opt out of the arbitration agreement, T-Mobile wrote. "As T-Mobile customers, each Plaintiff accepted T-Mobile's Terms and Conditions ('T&Cs')," T-Mobile wrote in a memorandum of law. "In so doing, they agreed to arbitrate on an individual basis any dispute related to T-Mobile's services and to waive their right to participate in a class action unless they timely opted out of the arbitration procedure outlined in the T&Cs. Neither Plaintiff elected to opt out. Accordingly, Plaintiffs have brought their grievances to the wrong forum and their claims should be dismissed in favor of arbitration."

T-Mobile's terms and conditions say, "Thanks for choosing T-Mobile. Please read these Terms & Conditions ('T&Cs'), which contain important information about your relationship with T-Mobile, including mandatory arbitration of disputes between us, instead of class actions or jury trials. You will become bound by these provisions once you accept these T&Cs."
Customers can opt out of arbitration by calling 1-866-323-4405 or online at www.T-Mobiledisputeresolution.com, but action must be taken within 30 days of activating a new phone line. The customers who opted out of T-Mobile arbitration could file a similar lawsuit, but that would result in a much smaller pool of customers who could seek damages.

The class-action complaint seeks financial damages and certification of a class consisting of every person who was a T-Mobile customer in the U.S. between May 3, 2015 and March 9, 2019. That's at least 50 million people, the class-action complaint says.
The Almighty Buck

When Facebook's Libra Team Came To Congress (prospect.org) 83

"Staffers challenge Facebook's happy talk about its digital currency in a briefing," reports the American Prospect, introducing a new article in a series written anonymously by Congressional staffers, this time a House Democratic aide "who attended a briefing last Thursday with executives who are developing Libra..."

"Such briefings are commonplace to convince staffers who write legislation (and by association the members they serve) of the righteousness of corporate causes." The briefing was fascinating. The lead representative, the head of policy for Libra, kicked it off by admitting that the whole endeavor required a "suspension of disbelief." They were asked about the timeline, and said they hoped to have Libra operational in about a year, which they kept suggesting was a prolonged timeline, but didn't seem lengthy to anyone in the room.

They kept selling Libra as a means of providing banking services to 1.7 billion unbanked people around the world. When challenged on how they were going to do that, and asked directly whether they'd figure out how exactly a digital currency would be an answer for people who can't access credit currently, they said, "The short answer is no." The phrase "the miracle of blockchain" was used at one point...

Because Facebook is proposing to take over a role traditionally under the purview of central banks, not private companies, we should expect the skepticism we heard in the room from staffers to be publicly aired by House Financial Services Committee members on July 17.

Security

Google Admits Bug Could Let People Spy On Nest Cameras (dailydot.com) 30

Google on Thursday confirmed that a bug in its Nest security cameras could have allowed users to be spied on. The Daily Dot reports: The issue was first raised by a user on Facebook who recently sold his Nest Cam Indoor yet was still able to access its feed. The problem involves Wink, an app that lets people manage multiple smart devices regardless of their developer. The Facebook user noted that despite carrying out a factory reset on his Nest camera before selling it, his Wink account remained connected to the device, allowing him to view snapshots of the buyer's live feed.

Wirecutter tested the vulnerability on its own Nest Cam by linking it to a Wink account and then performing a factory reset. The publication also found it was receiving "a series of still images snapped every several seconds" via its Wink account. "In simpler terms: If you buy and set up a used Nest indoor camera that has been paired with a Wink hub, the previous owner may have unfettered access to images from that camera," Wirecutter says. "And we currently don't know of any cure for this problem."
Google responded to the report and said it has fixed the problem. "We were recently made aware of an issue affecting some Nest cameras connected to third-party partner services via Works with Nest," a spokesperson told Wirecutter. "We've since rolled out a fix for this issue that will update automatically, so if you own a Nest camera, there's no need to take any action."
Desktops (Apple)

Apple Poised To Bring Mac and iPad Closer Than Ever (axios.com) 56

It's pretty much a given that next week's Apple Worldwide Developer Conference will bring new versions of MacOS and iOS. The real question is just how much convergence there will be between the 2 operating systems. From a report: The Mac remains popular even as the bulk of Apple's business is now selling phones and tablets, both of which have been increasing in computing power. Apple has long said it doesn't plan to merge its mobile and computer operating systems, but the two have been moving closer together recently. Apple offered a "sneak peek" last year at its multiyear effort (known internally as Marzipan) to allow programs written for iOS devices like the iPad to run on Macs with minimal changes.

Last year, the company said it was testing the technology first with its own apps, like Stocks and Voice Memos, and would offer other developers a chance to adapt their apps over time. Developers are champing at the bit for their taste of Marzipan, and WWDC could offer them a way in. Apple is likely to preview upgrades to its TV and watch operating systems and perhaps give a few more details on some of its new services, such as Arcade, a subscription iOS game service due out this fall.

Government

Maine Lawmakers Pass Bill To Prevent ISPs From Selling Browsing Data Without Consent (zdnet.com) 37

Maine lawmakers have passed a bill that will prevent internet providers from selling consumers' private internet data to advertisers. From a report: The state's senate unanimously passed the bill 35-0 on Thursday following an earlier vote by state representatives 96-45 in favor of the bill. The bill, if signed into law by state governor Janet Mills, will force the national and smaller regional internet providers operating in the state to first obtain permission from residents before their data can be sold or passed on to advertisers or other third parties. Maine has about 1.3 million residents.

The Republican-controlled Federal Communications Commission voted in 2017 to allow internet providers to sell customers' private and personal internet data and browsing histories -- including which websites a user visits and for how long -- to advertisers for the biggest buck. Congress later passed the measure into law.

Businesses

Amazon Interested In Buying Boost From T-Mobile and Sprint, Says Report (reuters.com) 34

Amazon is reportedly interested in buying prepaid cellphone wireless service Boost Mobile from U.S. carriers T-Mobile and Sprint. "Amazon is considering buying Boost mainly for an attached wholesale deal that would allow the buyer to use T-Mobile's wireless network for at least six years," reports Reuters, citing two sources familiar with the matter. "Amazon would also be interested in any wireless spectrum that could be divested." From the report: It was not immediately clear why the U.S. online retail giant and cloud services provider would want the wireless network and spectrum. T-Mobile and Sprint have offered concessions, including selling Boost, to reduce their market share in the prepaid wireless business and gain regulatory approval for their planned $26 billion merger. The U.S. Justice Department would need to scrutinize the buyer of a divested asset to ensure it will stay viable and preserve competition. The carriers are also considering divesting wireless spectrum, or airwaves that carry data, in order to push the merger through.
Businesses

Amazon Will No Longer Sell Chinese Goods In China (cnn.com) 74

Amazon announced today that it will close its marketplace in China in the coming months, meaning Amazon customers in the country will no longer be able to buy goods from Chinese merchants. "Amazon did not explain why it was withdrawing its marketplace service, saying only it will instead focus on selling goods shipped from other countries into China," reports CNN. From the report: "We are notifying sellers we will no longer operate a marketplace on Amazon.cn, and we will no longer be providing seller services on Amazon.cn effective July 18," the company said in a statement. Amazon's platform competes for Chinese sellers with Tmall, owned by the country's e-commerce leader Alibaba.

Users logging onto Amazon's Chinese site after July 18 will see products sold from its global store, the company said. "Over the past few years, we have been evolving our China online retail business to increasingly emphasize cross-border sales, and in return we've seen very strong response from Chinese customers," Amazon said. It will retain its other operations in China, such as cloud computing services. It will also continue to sell its Kindle e-readers and content in the country. "Amazon's commitment to China remains strong. We have built a solid foundation here in a number of successful businesses and we will continue to invest and grow in China," the company added.

Cellphones

Police Are Using Google's Location Data From 'Hundreds of Millions' of Phones (cnet.com) 125

"When law enforcement investigations get cold, there's a source authorities can turn to for location data that could produce new leads: Google."

An anonymous reader quotes CNET: Police have used information from the search giant's Sensorvault database to aid in criminal cases across the country, according to a report Saturday by The New York Times. The database has detailed location records from hundreds of millions of phones around the world, the report said. It's meant to collect information on the users of Google's products so the company can better target them with ads, and see how effective those ads are. But police have been tapping into the database to help find missing pieces in investigations.

Law enforcement can get "geofence" warrants seeking location data. Those kinds of requests have spiked in the last six months, and the company has received as many as 180 requests in one week, according to the report.... For geofence warrants, police carve out a specific area and time period, and Google can gather information from Sensorvault about the devices that were present during that window, according to the report. The information is anonymous, but police can analyze it and narrow it down to a few devices they think might be relevant to the investigation. Then Google reveals those users' names and other data, according to the Times...

[T]he AP reported last year that Google tracked people's location even after they'd turned off location-sharing on their phones.

Google's data dates back "nearly a decade," the Times reports -- though in a statement, Google's director of law enforcement and information security insisted "We vigorously protect the privacy of our users while supporting the important work of law enforcement." (The Times also interviewed a man who was arrested and jailed for a week last year based partly on Google's data -- before eventually being released after the police found a more likely suspect.)

"According to the Times, Google is the primary company that appears to be fulfilling the warrants," reports Gizmodo, adding that Apple "says it can't provide this information to authorities..."

"A thriving black market in location data has persisted despite promises from carriers to stop selling it to middlemen, who divert it from intended uses in marketing and other services."
Crime

Facebook's Black Markets Just Keystrokes Away, Researchers Say (nbcnews.com) 28

Facebook is connecting not only old friends, but also new criminals. Researchers uncovered more than 70 Facebook groups openly selling black-market cyberfraud services, some of which they say had been running for up to eight years. From a report: The now-removed groups had more than 385,000 members in total and offered a variety of illegal services, from credit card information and identity theft to website hacking and email phishing, according to cybersecurity researchers at Talos, the threat intelligence division for the technology company Cisco. By searching for a few well-known fraud terms, the researchers exposed a sizable online black market hiding in plain sight on the world's most popular social media site. "Selling CVV fresh $5" read one post for stolen credit card numbers. "100k mail list fresh" touted another from the "Professional Spammer's and Hacker's [sic]" page. Both posts included purported screenshots of their wares.
Android

Google Is Killing Off the Pixel 2, Inbox, goo.gl URL Shortener, and Google+ This Week (pcworld.com) 90

In addition to shutting down Google+, Google URL Shortener, and Inbox by Gmail this week, the company has stopped selling its Pixel 2 and Pixel 2 XL smartphones through its online store, which means whatever remaining stock at other retailers will likely be extremely limited. It also means that the $799 Pixel 3 is now the cheapest phone Google sells. PCWorld summarizes the other three products coming to an end this week: Inbox by Gmail: When the Inbox by Gmail app launched in 2015, it was a revelation. A completely new way to view and organize your messages, Inbox boiled your emails down to a smart task manager, with bundles, pins, scheduling, and shortcuts that made managing your inbox a breeze. But over the years, Google's interest in Inbox faded, and it never really got the attention it deserved. Most of its unique features are now part of the Gmail app (though we're still waiting for bundles), and several third-party apps have adopted Inbox's style. Apparently that's good enough for Google, because as of this week you won't be able to use it anymore.

Google URL Shortener (goo.gl): Back in 2009, link shortening was still a novel idea, and Google was one of the first to bring the concept to the masses with the Google URL Shortener. It was a simple way to turn a lengthy web address into a short one that consisted of goo.gl and a short string of letter and numbers. With the rise of bit.ly and similar services, Google's own URL shortener became less important to people's work flow and now, nearly 10 years later, it's gone for good.

Google+: Google+ was once supposed to be the one-stop shop for social and support among Google users, but it never really caught on. And then it was revealed that some 50 million users may have had their name, email address, occupation, and age exposed to third-party developers, which accelerated its demise. Now it's going away for good, but we can't imagine that anyone will actually notice.

Government

FTC Tells ISPs To Disclose Exactly What Information They Collect On Users and What It's For 32

An anonymous reader quotes a report from TechCrunch: The Federal Trade Commission, in what could be considered a prelude to new regulatory action, has issued an order to several major internet service providers requiring them to share every detail of their data collection practices. The information could expose patterns of abuse or otherwise troubling data use against which the FTC -- or states -- may want to take action. The letters requesting info went to Comcast, Google, T-Mobile, and both the fixed and wireless sub-companies of Verizon and AT&T. These "represent a range of large and small ISPs, as well as fixed and mobile Internet providers," an FTC spokesperson said. I'm not sure which is mean to be the small one, but welcome any information the agency can extract from any of them.

To be clear, the FTC already has consumer protection rules in place and could already go after an internet provider if it were found to be abusing the privacy of its users -- you know, selling their location to anyone who asks or the like. (Still no action there, by the way.) But the evolving media and telecom landscape, in which we see enormous companies devouring one another to best provide as many complementary services as possible, requires constant reevaluation. As the agency writes in a press release: "The FTC is initiating this study to better understand Internet service providers' privacy practices in light of the evolution of telecommunications companies into vertically integrated platforms that also provide advertising-supported content."
The report provides this example as to the kind of situation the FTC is concerned about: "If Verizon wants to offer not just the connection you get on your phone, but the media you request, the ads you are served, and the tracking you never heard of, it needs to show that these businesses are not somehow shirking rules behind the scenes."

"For instance, if Verizon Wireless says it doesn't collect or share information about what sites you visit, but the mysterious VZ Snooping Co (fictitious, I should add) scoops all that up and then sells it for peanuts to its sister company, that could amount to a deceptive practice," TechCrunch adds. "Of course it's rarely that simple (though don't rule it out), but the only way to be sure is to comprehensively question everyone involved and carefully compare the answers with real-world practices."
The Internet

Music Labels Sue Charter, Complain That High Internet Speeds Fuel Piracy (arstechnica.com) 197

The music industry is suing Charter Communications, claiming that the cable Internet provider profits from music piracy by failing to terminate the accounts of subscribers who illegally download copyrighted songs. The lawsuit also complains that Charter helps its subscribers pirate music by selling packages with higher Internet speeds. Ars Technica reports: While the act of providing higher Internet speeds clearly isn't a violation of any law, ISPs can be held liable for their users' copyright infringement if the ISPs repeatedly fail to disconnect repeat infringers. The top music labelsâ"Sony, Universal, Warner, and their various subsidiariesâ"sued Charter Friday in a complaint filed in U.S. District Court in Colorado. While Charter has a copyright policy that says repeat copyright infringers may be disconnected, Charter has failed to disconnect those repeat infringers in practice, the complaint said: "Despite these alleged policies, and despite receiving hundreds of thousands of infringement notices from Plaintiffs, as well as thousands of similar notices from other copyright owners, Charter knowingly permitted specifically identified repeat infringers to continue to use its network to infringe. Rather than disconnect the Internet access of blatant repeat infringers to curtail their infringement, Charter knowingly continued to provide these subscribers with the Internet access that enabled them to continue to illegally download or distribute Plaintiffs' copyrighted works unabated. Charter's provision of high-speed Internet service to known infringers materially contributed to these direct infringements."

The complaint accuses Charter of contributory copyright infringement and vicarious copyright infringement. Music labels asked for statutory damages of up to $150,000 for each work infringed or for actual damages including any profit Charter allegedly made from allowing piracy. The complaint focuses on alleged violations between March 24, 2013 and May 17, 2016. During that time, plaintiffs say they sent infringement notices to Charter that "advised Charter of its subscribers' blatant and systematic use of Charter's Internet service to illegally download, copy, and distribute Plaintiffs' copyrighted music through BitTorrent and other online file-sharing services." The music industry's complaint repeatedly focused on BitTorrent and other peer-to-peer networks, saying that "online piracy committed via BitTorrent is stunning in nature, speed, and scope."

Businesses

Apple's Plan For Its New TV Service: Sell Other People's TV Services (recode.net) 95

An anonymous reader quotes a report from Recode: After years of circling the TV business, Apple is finally ready to make its big splash: On Monday it will unveil its new video strategy, along with some of the new big-budget TV shows it is funding itself. One thing Apple won't do is unveil a serious competitor to Netflix, Hulu, Disney, or any other entertainment giant trying to sell streaming video subscriptions to consumers. Instead, Apple's main focus -- at least for now -- will be helping other people sell streaming video subscriptions and taking a cut of the transaction. Apple may also sell its own shows, at least as part of a bundle of other services. But for now, Apple's original shows and movies should be considered very expensive giveaways, not the core product.

All of this might very well work. Apple has an installed base of 1.4 billion users, and some of them will buy the things Apple promotes: Look at the success of Apple Music, which launched seven years after Spotify but quickly amassed 50 million subscribers due to a free trial period and prominent real estate on Apple's devices. Another reason this could work: Amazon has already been very successful with its own version of the same idea. Facebook is also bullish on selling TV subscriptions and is pushing would-be partners to sign up so it can launch later this spring or summer, according to industry sources. Similarly, Comcast (which is a minority investor in Vox Media, which owns this site) is rolling out Flex, a $5-a-month service that gives you a bunch of free content (some of which you can also get other places) and the ability to easily buy HBO, Showtime, etc. Instead of offering exclusive content, Comcast is offering subscribers a Roku-like streaming box.
According to people who've talked to Apple about its plans, Apple's new TV service will consist of selling TV subscription apps surrounded by millions of other apps in its main app store. "Apple plans on making a new storefront that's much more prominent for those who use Apple TV boxes and other Apple hardware," reports Recode. "It will also be able to offer its own bundles -- for instance, it could offer a package of HBO, Showtime, and Starz at a price that's lower than you'd pay for each pay TV service on its own."
Crime

Man Arrested For Selling One Million Netflix, Spotify, Hulu Passwords (bitdefender.com) 25

Police in Australia have arrested a man who allegedly made AU $300,000 (US $211,000) running a website which sold the account passwords of popular online subscription services including Netflix, Spotify, Hulu, PSN, and Origin. From a report: The 21-year-old man was arrested on Tuesday in Sydney, Australia, following an international investigation by the FBI and the Australian Federal Police into the website Wicked Gen. The Wicked Gen website bragged that it had over 120,000 users and almost one million sets of account details, offering monthly and yearly membership plans for those who wanted "access to thousands of premium accounts across a huge range of services." The account passwords, however, were not obtained via legitimate means. Instead the details were typically obtained through credential stuffing using swathes of usernames and passwords leaked through other data breaches, without the knowledge of their genuine owners.
Privacy

120 Data Brokers Just Registered In Vermont Under a Landmark Law (fastcompany.com) 34

tedlistens writes: Vermont's newly enacted data broker law is the only law of its kind in the U.S. so far, and it's forced any company collecting data on its citizens to register with the state. Fast Company wrote about the limitations of the law and compiled a list of the companies, what they do, and tips for opting-out if possible.

The Vermont law only covers third-party data firms -- those trafficking in the data of people with whom they have no relationship -- as opposed to "first-party" data holders like Amazon, Facebook, or Google, which collect their own enormous piles of detailed personal data directly from users. It doesn't require data brokers to disclose who's in their databases, what data they collect, or who buys it. Nor does it require brokers to give consumers access to their own data or opt out of data collection. Brokers are, however required to provide some information about their opt-out systems under the law -- assuming they provide one.
"The registry is an expansive, alphabet soup of companies, from lesser-known organizations that help landlords research potential tenants or deliver marketing leads to insurance companies, to the quiet giants of data," reports Fast Company. "Those include big names in people search, like Spokeo, ZoomInfo, White Pages, PeopleSmart, Intelius, and PeopleFinders; credit reporting, like Equifax, Experian, and TransUnion; and advertising and marketing, like Acxiom, Oracle, LexisNexis, Innovis, and KBM. Some companies also specialize in 'risk mitigation,' which can include credit reporting but also background checks and other identity verification services."

The report lists all the companies that have registered under Vermont's data broker law, with descriptions drawn from their websites or other sources where noted.
Facebook

Facebook Sues China-Based Companies For Selling Fake Accounts (bloomberg.com) 24

An anonymous reader quotes a report from Bloomberg: Facebook and its Instagram unit sued four companies and three people based in China for promoting the sale of fake accounts, likes and followers that the social network giant says can be used for nefarious purposes. The Chinese companies advertised and created the fake accounts over the last two years and marketed them for sale on six websites, selling them in bulk quantities, according to a complaint filed Friday in San Francisco federal court. "Fake and inauthentic accounts can be used for spam and phishing campaigns, misinformation campaigns, marketing scams, advertising fraud, and other fraud schemes which are profitable at scale," Facebook and Instagram alleged. They said fake accounts were also created on Amazon, Apple, Google, LinkedIn and Twitter. The companies named as defendants -- 9 Xiu Shenzhen, 9 Xiu Feishu, 9 Xiufei and Home Network -- are based in Longyan and Shenzhen. They are affiliated manufacturers of electronics and hardware, as well as providers of software and online advertising services, according to the complaint.
Transportation

VW Investing $800 Million In Tennessee Factory To Make Next-Gen Electric Vehicles (techcrunch.com) 89

Volkswagen will spend $800 million to expand a U.S. factory that will produce the automaker's next generation of electric vehicles. "The factory in Chattanooga, Tenn. will be the company's North American base for manufacturing electric vehicles," reports TechCrunch. "The expansion is expected to create 1,000 jobs at the plant." From the report: VW's Chattanooga expansion is just a piece of the automaker's broader plan to move away from diesel in the wake of the emissions cheating scandal that erupted in 2015. Globally, VW Group plans to commit almost $50 billion through 2023 toward the development and production of electric vehicles and digital services. The Volkswagen brand (so not including its Audi or Porsche brands) alone has forecasted selling 150,000 EVs by 2020 worldwide, increasing that number to 1 million by 2025.

The Tennessee factory (along with the other new facilities) will produce EVs using Volkswagen's modular electric toolkit chassis, or MEB, introduced by the company in 2016. The MEB is a flexible modular system -- really a matrix of common parts -- for producing electric vehicles that VW says make it more efficient and cost-effective. Electric vehicle production at the Tennessee site will begin in 2022. However, Volkswagen of America says it will offer the first EV based on the MEB platform to customers in 2020.This EV will be a series-production version of the I.D. CROZZ SUV concept that was first shown at the North American International Auto Show last year. This vehicle will have the interior space of a midsize SUV in the footprint of a compact SUV. Volkswagen of America will also offer a multi-purpose EV based off the I.D. BUZZ concept. This EV will be a series-production version of the I.D. CROZZ SUV concept that was first shown at the North American International Auto Show last year. This vehicle will have the interior space of a midsize SUV in the footprint of a compact SUV. Volkswagen of America will also offer a multi-purpose EV based off the I.D. BUZZ concept.

Google

Google Demanded T-Mobile, Sprint To Not Sell Google Fi Customers' Location Data (vice.com) 58

An anonymous reader shares a report: On Thursday, AT&T announced it was stopping the sale of its customers' real-time location data to all third parties, in response to a Motherboard investigation showing how data from AT&T, T-Mobile, and Sprint trickled down through a complex network of companies until eventually landing the hands of bounty hunters and people unauthorized to handle it. To verify the existence of this trade, Motherboard paid $300 on the black market to successfully locate a phone.

Google, whose Google Fi program offers phone, text, and data services that use T-Mobile and Sprint network infrastructure in the United States, told Motherboard that it asked those companies to not share its customers' location data with third parties. "We have never sold Fi subscribers' location information," a Google spokesperson told Motherboard in a statement late on Thursday. "Google Fi is an MVNO (mobile virtual network operator) and not a carrier, but as soon as we heard about this practice, we required our network partners to shut it down as soon as possible." Google did not say when it made this a requirement.

Government

Senators Call On FCC To Investigate Carriers Selling Location Data To Bounty Hunters (vice.com) 60

An anonymous reader quotes a report from Motherboard: On Tuesday, Motherboard revealed that major American telcos T-Mobile, AT&T, and Sprint are selling customer location data of users in an unregulated market that trickles down to bounty hunters and people not authorized to handle such information. In our investigation, we purchased the real-time location of a cell phone from a bail industry source for $300, pinpointing it to a specific part of Queens, New York. The issue potentially impacts hundreds of millions of cell phone users in the United States, with customers likely unaware that their location data is being sold and resold through multiple companies, with even the telcos sometimes having little idea where it ends up and how it is used.

Now, Senators and a commissioner for the Federal Communications Commission (FCC) have urged government bodies to investigate, with some calling for regulation that would ensure customers are properly made aware of how their data is being sold. "The American people have an absolute right to the privacy of their data, which is why I'm extraordinarily troubled by reports of this system of repackaging and reselling location data to unregulated third party services for potentially nefarious purposes. If true, this practice represents a legitimate threat to our personal and national security," Senator Kamala Harris told Motherboard in a statement. Harris explicitly called on the FCC to investigate the issue. "The FCC needs to immediately investigate these serious security concerns and take the necessary steps to protect the privacy of American consumers," she said.
On Tuesday, FCC commissioner Jessica Rosenworcel tweeted: "The FCC needs to investigate. Stat."

"It shouldn't be that you pay a few hundred dollars to a bounty hunter and then they can tell you in real time where a phone is within a few hundred meters. That's not right. This entire ecosystem needs some oversight," she added on MSNBC's Velshi & Ruhle show on Wednesday. "I think we've got to get to this fast."

Senators Mark Warner and Ron Wyden are also calling on the FCC to act.

Slashdot Top Deals