Is your iPod spying on you? (Redux)
posted Mar 10th 2005 3:05PM
Eric Sinrod has a completely nonsensical column in yesterday's USA Today about how MP3 players are going to be the
next big risk to personal privacy. His entire column is based on a piece Dr. Larry Ponemon of the "Ponemon Institute"
(that ain't the Pokemon Institute, it's a "privacy think-tank"—that's rich) wrote back in February for Darwin magazine
about the privacy risks of MP3 players. His evidence? One anecdotal piece of evidence about a ten-year-old girl who got
a "shiny MP3 player" for Christmas (they don't say what kind it was); the girl, who only goes by the name "Olivia,"
started downloading hundreds of songs, only to be deluged a few weeks later with targeted ads for rock concerts, CDs,
and "pop clothing star sales." Her "computer-savvy" mom called the manufacturer to complain about how her daughter's
MP3 player had violated her privacy, only to be told that it was impossible for the device to do that.
Sounds like Olivia probably got hit with some spyware after downloading some not-so-legal music, right? Not according
to Sinrod, who claims that "[MP3] players can collect personal information and track user musical preferences," and
that "the process for collecting end-users' sensitive personal information, such as music and artist preferences, vary
by manufacturer and technology." Really? Too bad he doesn't give an example of a single player that does this.
Instead he says that there are three points at which manufacturers are collecting your private info: when you buy,
set up, or register your warranty for the player (duh, you give them that info, it’s called opting-in), when
you download music from the Internet (if you’re buying music then they usually have your credit card info, and if
you’re getting it over P2P you should be smart enough to know that you’re almost certainly not anonymous—either way,
unless you’re buying from Apple, the manufacturer is almost never the content vendor), and when you’re sharing or
uploading music to other devices (huh?).
We’d maybe be convinced if he provided some evidence that jukebox software apps like iTunes and MusicMatch were
collecting information about what music people have in their collections and then secretly sending it back to the
mothership, but he doesn’t even bring this up as a possibility, let alone present any evidence that it’s
happening.
He then really muddles things by mentioning how some MP3 players now have Bluetooth, which means that someone could
wirelessly grab you personal info. First off, hardly any MP3 players come with built-in Bluetooth, and even the ones
that do typically only support the hands-free and headset profiles—and that’s even assuming there was any personally
identifying information on the thing except maybe those potentially embarrassing MP3s (Kelly Clarkson, eh?).
But it gets worse still. He then mentions that “some MP3 players are now equipped with additional peripherals such as
digital cameras. The wireless capability of these devices make digital images equally insecure.” What? Wireless
capability? Insecure digital images? Name one MP3 player with a built-in digital camera that ALSO has wireless
capability, either integrated or as an add-in.
He then also throws out some BS statistics (also courtesy of the Ponemon Institute) about how most people say they
would stop using their MP3 player if they had become the victim of a privacy breach and that manufacturers should make
sure there are limitations on the sharing of personal information. Yeah, who wouldn’t say that?
The advice he then gives on how you can prevent your MP3 player from being the source of a privacy violation are
either obvious or befuddling. He says you should read your EULA carefully and understand the manufacturer’s privacy
policy, but then he goes on to recommend that you figure out how to “opt-out of data collection or transfer by turning
off polling features within the device itself” and to make sure to keep that Bluetooth-enabled MP3 player you almost
definitely don’t own or use out of “hot zones,” which could be “almost anywhere, including in proximity to someone
else’s mobile phone.” Yeah, really helpful advice there!
Sinrod then concludes with the only part of the column that actually does make sense: that “MP3 users, as a population
segment, do not seem too worried about privacy risks,” and that “perhaps this is because there have not been many
privacy breaches in terms of the use of these devices — yet.” Or at all. It’s one thing to talk about how software apps
or online stores are collecting personal data, but it’s completely weak to try and get people scared about the prospect
of their iPod divulging sensitive data, especially when there has never been an instance of this happening. Look, we
know that before and especially after the
Paris Hilton thing it’s been pretty fashionable to write
scare pieces about how our gadgets are going to give us
away, but this is drivel, plain and simple.
[Via TechDirt]
RealPlayer does this. Part of the EULA is, you give your consent for the RealPlayer software to let them know what you're playing. Windows Media Player USED to do this without your consent, but the latest versions now ask you if that's OK (NO!).
That was classic.
I'm not totally sure, but I think he might be a jackass. . .
iPods are evil. EVIL! Mail your iPod to me & I will dispose of it for you. I promise I will erase all your personal data. Honest.
Muckraker/scaremonger trying to make money by spreading a pack of lies. Pay him no mind. Actually I'd delete this entry - he doesn't even deserve this much publicity.
yet another conspiracy theorist....whats the transfer rate and range of bluetooth...
You're so right Dave -- I have seen the error of my ways. Give me your address, social security number, and credit history and I'll send you my iPod right away!
This happens every so often. Technology is evil.. the internet is scary. Remember in the late '90's when every TV show had some internet security storyline.... it's just sensational news feeding on general ignorance and gullibility.
I think that it could be remotely possible that there's an off-chance that, once in a lifetime, there's a one-in-a-million shot that one of these things could be spying on me.
So it must be true.
Technology is Evil! The Fruits of the Devil!
dude sounds pretty paranoid to me, like, sitting in a bunker wrapping himself in tin foil and duct tape paranoid!
"He [Eric Sinrod] then really muddles things by mentioning how some MP3 players now have Bluetooth, which means that someone could wirelessly grab you personal info.... He then mentions that 'some MP3 players are now equipped with additional peripherals such as digital cameras...' "
from that guy's description, it would appear that the genius has "MP3 Player" confused with an "MP3 compatible cellphone".
Did you know that the iPod can hear and record your thoughts?
The earbud headphone cables are white because the plastic resonates at the frequency of your brainwaves. If you notice, the voice recorder plugs into the same connector on your iPod. And the low frequency range the iPod supports is the exact same resolution needed to capture brain waves.
Your iPod secretly records your brainwaves on the extra space on the hard drive, then when you sync your iPod it secretly uploads that information to Apple.
Luckily, all you have to do to prevent this is to change your headphones. A cheaper way to protect yourself is to wrap your white headphone cords with tin foil, because your brainwaves can't go through tinfoil.
Wonder if this happens with windows media players, or is it jus MP3 players.
“The process for collecting end-users’ sensitive personal information, such as music and artist preferences, vary by manufacturer and technology.” Really? Too bad he doesn’t give an example of a single player that does this.
I've got one... the iPod. It knows the artist name, album etc. Then counts how many times you've played a song. With all the links to the iTunes music store, it's only natural they'd start linking to your personal information. Unlike the writer though, i think this is a good thing
hacking someone's mp3 player to get personal information: unlikely or impossible
a company taking your personal information when you register and using it to spam you: everyone knows that happens already, but which companies does he say do it? none, he just speculates about it.
worthless.
" We’d maybe be convinced if he provided some evidence that jukebox software apps like iTunes and MusicMatch were collecting information about what music people have in their collections and then secretly sending it back to the mothership,"
Uhhhh...
http://www.wired.com/news/technology/0,1282,32350,00.html
It's happened before, it will happen again. RealNetworks was caught red-handed, but not every company will be (or at least, not immediately, so there could be stuff being sent to Apple or Yahoo or whoever that you don't yet know about).
This guy's an idiot and most of what he says is ridiculous, but don't think for a second that these companies are not trying to think up all the possible ways they can use your demographic data for profit, with or without your permission. The only thing that's keeping them honest for the most part is the hailstorm of controversy that erupts whenever one of them is caught doing something they're not supposed to be doing. As soon as we stop caring, though, that's when the fun really starts.
Eric Nimrod is more like it ... these guys are the AIDs of the tech industry ... (Hey, somebody just hacked my Mp3 player ... stole all of my credit card information I keep there in binary format ... bastards!)
I agree with Jeff. It wouldn't surprise me if iTunes, Napster 2.0, etc. sell demographic info to interested parties.
This scare article is just the work of shody reasoning, or a marketing scam of its own. Author realizes putting "mp3 player" and "iPod" in an article attracts eyeballs.
I installed my Ipod yesterday and itunes required an email address to log onto itunes. I'm getting it's possible that _itunes_ determines what kind of music you like based on your purchases, but it's not the ipod itself that's flawed (or "spyware") but itunes itself.
"I'm getting it's possible that _itunes_ determines what kind of music you like based on your purchases, but it's not the ipod itself that's flawed (or "spyware") but itunes itself."
Well in a way the iPod does, because it keeps track of your play count, it stores on-the-go playlists that you create on it, it stores star ratings. These things are all then sent back to iTunes, and god knows what iTunes does with it behind the scenes (there's that little "iTuneshelper.exe" service that runs all the time and who knows what it's really doing?).
If you have an iTMS account, I don't honestly have much doubt that all this stuff is being sent to Apple and tied to your Apple ID. Where it goes from there is anybody's guess. The hope is that it stays with Apple, but Apple could be turning around and giving it to a great company like ChoicePoint for a small fee for all we know. The nice people at ChoicePoint will then aggregate it with a whole bunch of other data about you (your credit history, your medical records, etc.), and they will then sell *that* to pretty much anybody who asks, and of course allow your info to be hacked and stolen by anybody who doesn't ask.
It's not just the stuff of paranoia. We know these companies *do* get caught collecting data they say they're not periodically, we know these aggregators of personal data exist, and we know they sell that data to both scrupulous and unscrupulous people alike, and we know that their security is less than perfect regardless. It's really pretty scary. I don't much care if somebody knows what mp3 I last listened to, but I do care if that's part of a massive profile some bunch of jerks that I don't have any relationship with have on me somewhere, ready to be sold to the highest bidder.
What's most annoying to me about this article is that if the guy had just done a little better research and talked with a bit less hyperbole, I'll bet his basic point would actually make some amount of sense. His message is not getting through because he obviously doesn't know what he's talking about, but it is true that mp3 players (among many other modern devices) do collect at least some unique data, that the companies who control that data do sell it, that that data is then combined with other data, is tied to you personally, and that that aggregated data is often not at all secure.
People, people... Apple, Napster, Yahoo, Real etc are all collecting info about your listening habits - in some cases the info they gather is required so that they can report back to the Recording Copyright owner, or ASCAP, BMI, SESAC who need to distribute license fees to artists etc. The question is, is it dangerous? Time for some folks to take a good look at their amphetamine habit?
Geez Jeff if yo really are that paranoid install a packet sniffer to see what gets transmitted and what does not.
Also iTuneshelper is the deamon that makes it possible to change tracks,pause/play without going into iTunes (on mac anyway) and looks for when the iPod is connected.
Real secret, yeah! :/
well, Jeff, let's make things clear.
there's a big chunk of spyware installed on your computer, whether you want it or not. it's called Microsoft® Windows™ XP. not to mention your copy of Microsoft® Office™ (including Outlook™!) software. and if you happen to own one of those PIM devices running Windows™ Mobile... god knows what do they send to the evil Billy.
time to push the big power button.
wow... that sounds like something my paranoid schitzophreniac uncle would write
Hahaha, Jon (#8) just reminded me of that movie, "The Net" from 1995. The Internet is evil! People will erase your identity online! Your banking balance will be deleted at the press of a button! Oh my!
Wait, wait... that guy is on a payroll? Cluelessness... it's as evil as telemarketers.
"Name one MP3 player with a built-in digital camera that ALSO has wireless capability, either integrated or as an add-in."
all the PDA cell phones... treo 650.
on this data collection issue: people do it, its going to happpen. are you going to stop living and crawl into a hole somewhere fearing that the candle you burn for light and warmth is somehow sending info to someone? NO!
Get over it
Actually, this article isn't too far from the truth. iPod doesn't spy on you, but it does have a way of remembering your preferences (Windows lets you into the iPod as a drive, open notes, rite there is the preferences in a "file" w/o the extension) and i've noticed it remembers (probably by the total played counter) when you use the Music Quiz on it. it seems to remember the last songs you listened to.
Actually, this article isn't too far from the truth. iPod doesn't spy on you, but it does have a way of remembering your preferences (Windows lets you into the iPod as a drive, open notes, rite there is the preferences in a "file" w/o the extension) and i've noticed it remembers (probably by the total played counter) when you use the Music Quiz on it. it seems to remember the last songs you listened to.
Actually, this article isn't too far from the truth. iPod doesn't spy on you, but it does have a way of remembering your preferences (Windows lets you into the iPod as a drive, open notes, rite there is the preferences in a "file" w/o the extension) and i've noticed it remembers (probably by the total played counter) when you use the Music Quiz on it. it seems to remember the last songs you listened to.
Regarding the camera thing, a lot of MP3 players will never have built-in cameras. The reason for this is that many gyms (think 24 hour fitness and its ilk) do not allow cameras or devices with embedded cameras into the gym.
O i figured out the preferences. Drag a copy to the desktop, right clik and select "open". this will bring up a menu saying it cant open it. choose to open with NOTEPAD. there u go. i can't manage the files, o and DON'T ALTER THEM!!! DOING SO CAN SEVERLY DAMAGE YOUR iPOD!!!!
>> Name one MP3 player with a built-in digital camera that ALSO has wireless capability, either integrated or as an add-in.
My Nokia 6230 is an MP3 player with a built in vga digital video camera that has bluetooth capability :) I have everything a RAZR has but hundreds less.
btw, Bluetooth is secure; first of all it needs to be turned on for a device to find your bluetooth device. secondly, the device being connected to must authorize any "handshake".