Yahoo Japan net profit >>

Google, DoubleClick, FTC complaint

How many times have you heard this?: "At this time, all electronic devices, including cell phones and two-way pagers, must be turned off and put away. After takeoff, I'll let you know when you may use approved electronic portable devices."

Directory services are a critical component of any enterprise environment. These services provide a database for central account management for both user and computer, as well as a framework for sharing that information among workstations and servers. Mac OS X's native directory service is called Open Directory.

Microsoft moved to fix the critical .ANI vulnerability that affects roughly a dozen of its most popular products, including Vista, but spammers and malware brokers are already tapping into the flaw to infect unprotected machines.

The Australian Taxation Office (ATO) has issued a warning against a phishing e-mail currently in circulation that claims to be from the tax office.

[[ArtId:1592845665|Last month]], Stefan Esser, an independent security consultant and a founder of both the Hardened-PHP Project and PHP Security Response Team (which he has since left), launched his Month of PHP Bugs as a way of improving the security of PHP by outing flaws in its source code.

Three U.S. online civil rights groups have filed a complaint asking the U.S. Federal Trade Commission (FTC) to block Google's planned US$3.1 billion acquisition of DoubleClick unless the company agrees to stop tracking its users.

The complaint, filed Friday by the Electronic Privacy Information Center (EPIC), the Center for Digital Democracy (CDD), and the U.S. Public Interest Research Group (US PIRG), calls upon the FTC to block the merger unless it obtains guarantees from Google and DoubleClick that they will protect Internet users' privacy.

Those guarantees include a promise to destroy all cookies and other persistent identifiers resulting from Internet searches that are or could be personally identifiable once a user terminates a session with Google.

Such a move would seriously affect many of the services Google offers, which are built on storing the entire search or transaction history of its users.

"We are troubled by the fact that search histories are maintained after the session expires," said EPIC Executive Director Marc Rotenberg.

That's not the way people expect things to work, he added.

Asking users' permission to track their searches would not make things better, according to Rotenberg. "This is not something that turns on consent," he said. "The retention of the data is the bad practice."

Google amasses data about the search and surfing habits of millions of Internet users, tracking what they look at, what they write and even what they buy in order to serve relevant advertising. DoubleClick follows Web surfers' activities through cookies attached to the banner ads it serves up, exchanging information with advertisers to help them better target their messages.

The collection of such personal information poses far-reaching privacy concerns that the Commission should address, the three advocacy groups said.

"Neither Google nor DoubleClick have taken adequate steps to safeguard the personal data that is collected. Moreover, the proposed acquisition will create unique risks to privacy and will violate previously agreed standards for the conduct of online advertising," the groups wrote in the complaint , filed with the FTC on Friday.

Those standards include the Organization for Economic Cooperation and Development (OECD) Privacy Guidelines .

The three groups called on the FTC to investigate what effect a Google-DoubleClick merger will have on Google's ability to track and profile Internet users' activities.

They also want the FTC to order DoubleClick to remove cookies and other identifiers identifying individual users from any records it transfers to Google, unless the company has previously obtained explicit consent from those the data relates to, including giving users the right to first inspect, delete and modify the data.

Other demands include ordering Google to explain publicly how it plans to comply with privacy standards such as the OECD Privacy Guidelines, ordering the company to provide reasonable access to personally identifiable data it holds to the subject of that data, and establishing a meaningful data destruction policy.

EPIC campaigns for Internet users' right to privacy, the CDD for a more open and diverse Internet, and the US PIRG for fair marketplace practices.

EPIC's Rotenberg is optimistic that the FTC will take action. "They have responded to similar cases before," he said.

Google's Global Privacy Counsel Peter Fleischer thought such action unlikely, however.

"Google believes the complaint is unsupported by the facts or the law," he said. "When we have a chance to explain to the FTC why we keep this information, I think there is zero chance that the FTC will order us to delete it at the end of a session."

Google, like other Web site operators, keeps logs of page requests in order to detect patterns and protect its servers from attack, Fleischer said. "An order to delete these would leave us vulnerable to security attacks, and that cannot be good for our users' privacy," he added.

Meanwhile, DoubleClick issued its own statement regarding these concerns, saying it's incorrect to say the data it collects could be used by Google or combined with information owned by Google. The data DoubleClick's ad systems collect is owned by its clients, and that will not change as a result of the Google acquisition.

"Further, Google would not be able to match its search data to the data collected by DoubleClick, as DoubleClick does not have the right to use its clients' data for such purposes," the statement reads. "By contract, DoubleClick has only the limited rights to use data for its aggregate reporting and to disclose data, if so required, to government authorities."

(Juan Carlos Perez in Miami contributed with this article.)

ARN has been the premier provider of information to the Australian IT channel for more than 12 years. As the only weekly publication dedicated to the channel, ARN produces timely, accurate news and analysis about IT business issues, products and services, new technology and market opportunities.

Source: [url=http://www.totalcontentandmedia.com/View.aspx?ID=2796&t=2]Total Content + Media[/url]