Author Topic: AOL-HELL Proudly Releases Massive Amounts of Private Data  (Read 3689 times)

0 Members and 1 Guest are viewing this topic.

drhayden1

  • Guest
AOL-HELL Proudly Releases Massive Amounts of Private Data
« on: August 07, 2006, 05:21:52 AM »
Sometime around 7 pm PST on Sunday, the AOL site referred to below was taken down. The direct link to the data is still live.

AOL must have missed the uproar over the DOJ’s demand for “anonymized” search data last year that caused all sorts of pain for Microsoft and Google. That’s the only way to explain their release of data that includes 20 million web queries from 650,000 AOL users.

The data includes all searches from those users for a three month period this year, as well as whether they clicked on a result, what that result was and where it appeared on the result page. It’s a 439 MB compressed download, expanded to just over 2 gigs. The data is available here (this link is directly to the file) and the output is in ten text files, tab delineated.

The utter stupidity of this is staggering. AOL has released very private data about its users without their permission. While the AOL username has been changed to a random ID number, the abilitiy to analyze all searches by a single user will often lead people to easily determine who the user is, and what they are up to. The data includes personal names, addresses, social security numbers and everything else someone might type into a search box.

The most serious problem is the fact that many people often search on their own name, or those of their friends and family, to see what information is available about them on the net. Combine these ego searches with porn queries and you have a serious embarrassment. Combine them with “buy ecstasy” and you have evidence of a crime. Combine it with an address, social security number, etc., and you have an identity theft waiting to happen. The possibilities are endless.

Marketers are going nuts over the possibilities, users are calling for a boycott of AOL, and others are just enraged:

    User 491577 searches for “florida cna pca lakeland tampa”, “emt school training florida”, “low calorie meals”, “infant seat”, and “fisher price roller blades”. Among user 39509’s hundreds of searches are: “ford 352″, “oklahoma disciplined pastors”, “oklahoma disciplined doctors”, “home loans”, and some other personally identifying and illegal stuff I’m going to leave out of here. Among user 545605’s searches are “shore hills park mays landing nj”, “frank william sindoni md”, “ceramic ashtrays”, “transfer money to china”, and “capital gains on sale of house”. Compared to some of the data, these examples are on the safe side. I’m leaving out the worst of it - searches for names of specific people, addresses, telephone numbers, illegal drugs, and more. There is no question that law enforcement, employers, or friends could figure out who some of these people are.

I am assuming that AOL will take this page and the data down soon, but as of the time of this post it has been downloaded 809 times already. People I’ve spoken with are already building a web interface to the data. If you are an AOL customer, I feel sorry for you.

Note that Microsoft has proposed releasing similar data to researchers, although with an important difference - the data is not associated with a user. Excite released data very similar to what AOL has done here, with user associations, in 1999.


neal62

  • Guest
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #1 on: August 07, 2006, 05:38:38 AM »
Hi Polonus,
      I didn't like what I heard and thought it was strictly un-necessary pressure being put on the customer from AOL. This company is eventually going to "reap what they have sowed" in the long run. I believe we are just seeing the beginning of this.  :)
Doesn't surprise me. They are slowly tightening the noose around their neck so to speak.

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #2 on: August 07, 2006, 07:47:08 AM »
Thanks for the info, Maybe that's why I've had so many calls from people wanting it off their computers.  :o
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

drhayden1

  • Guest
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #3 on: August 07, 2006, 11:22:20 PM »
AOL is apologizing in the aftermath of yesterday’s story about their voluntary release of search data on 650,000 users.

In addition to removing the data, AOL spokesperson Weinstein has left comments on blogs, and to the press in general:

    All –

    This was a screw up, and we’re angry and upset about it. It was an innocent enough attempt to reach out to the academic community with new research tools, but it was obviously not appropriately vetted, and if it had been, it would have been stopped in an instant.

    Although there was no personally-identifiable data linked to these accounts, we’re absolutely not defending this. It was a mistake, and we apologize. We’ve launched an internal investigation into what happened, and we are taking steps to ensure that this type of thing never happens again.

    Here was what was mistakenly released:

    * Search data for roughly 658,000 anonymized users over a three month period from March to May.

    * There was no personally identifiable data provided by AOL with those records, but search queries themselves can sometimes include such information.

    * According to comScore Media Metrix, the AOL search network had 42.7 million unique visitors in May, so the total data set covered roughly 1.5% of May search users.

    * Roughly 20 million search records over that period, so the data included roughly 1/3 of one percent of the total searches conducted through the AOL network over that period.

    * The searches included as part of this data only included U.S. searches conducted within the AOL client software.

    We apologize again for the release.

    Andrew Weinstein
    AOL Spokesman

what's that old saying AOL----cry me a river---(you screwed up AGAIN!!)
« Last Edit: August 07, 2006, 11:25:19 PM by drhayden1 »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33931
  • malware fighter
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #4 on: August 07, 2006, 11:54:03 PM »
Hi drhayden1 and other reading this thread,

I think this is the proverbial tip of the iceberg. What really happens with our combined search results and other Internet data behind our backs is still a mystery, but if you look into this story you can come up with a defines guess, I reckon.
It comes to show how much the balance has topled over into the wrong direction as seen from the point of view of the average user- the completely transparant unprotected participant. It is a sympton of unlimited freedom of corporate entities versus non-existing protection of end-users. These are Wild West practices with no sheriff in sight and no posse to go after those that have stepped over so many a line, that it is almost a hurtfull  experience. I hope they themselves fall into the traps they created or have woven  for others.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

drhayden1

  • Guest
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #5 on: August 09, 2006, 12:01:27 PM »
On Sunday the news broke that AOL purposefully released 20 million partially anonymized search queries. On Monday AOL apologized, and later that evening the first web interface to the data went up.

Today the first person was positively identified from the data - Thelma Arnold, a 62-year-old widow who lives in Lilburn, Georgia.

Based on searches ranging from “numb fingers” to “60 single men” to “dog that urinates on everything,” the New York Times was able to quickly determine and confirm her identity. Ms Arnold is AOL searcher no. 4417749.

Ms Arnold commented: “My goodness, it’s my whole personal life…I had no idea somebody was looking over my shoulder.”

AOL replied: “We apologize specifically to her…There is not a whole lot we can do.

drhayden1

  • Guest
Re: AOL-HELL Proudly Releases Massive Amounts of Private Data
« Reply #6 on: August 11, 2006, 06:30:18 AM »
More Good Aol-Hell News ::)
AOL Miscue Could Reinvigorate Privacy Legislation

http://www.eweek.com/article2/0,1895,2001873,00.asp?kc=EWSTEEMNL081006EOAD
« Last Edit: August 11, 2006, 08:25:59 AM by drhayden1 »