News for hackers. Stuff that matters.
Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @07:23AM (#18647342)
iOS now forcing "While Using" option on all apps is the greatest thing ever. Before this, some apps where forcing the "Always" option on users. Uber and Waze come to mind.

iOS also gives you a warning from time to time about apps using your location in the background. I think iOS right now has the best location management.

---

People are surprised when seeing the Activity section in Google's account details, then freak out about Google tracking their location. At the very least Google is being transparent about it and gives you the option to turn that shit off.

Also I was pleasantly surprised to discover that Google Maps now remembers searches you've made without location history or app activity tracking being active. This wasn't the case about a year ago, when I last tried it, a dark pattern of sorts. They probably changed the behavior being forced by the GDPR or something similar.

So if you haven't done so, turn off "Location History" in your Google account: https://myaccount.google.com/activitycontrols (I turn everything off and I don't see a difference in usability)

---

On the article, I love the maps and the animations. Visualization is the best way to make people understand the threat.

On GDPR, I've seen people complaining about the high cost for implementing it, however for privacy it is a godsend.

Re:Companies use smartphone locations to help advertisers an... by jacquesm on Monday December 10, 2018 @07:46AM (#18647466)
You can't turn it 'off', you can 'pause' it. That's a linguistic difference, sure, but it is quite telling that there is no respect at all for a users desires even in the language that is hardcoded in. It's as annoying as 'not now' for 'no' or '10 different things you should know about "x"', when you really should not.
Re:Companies use smartphone locations to help advertisers an... by lotu on Monday December 10, 2018 @10:52AM (#18648712)
I think 'pause' is a better word than 'off'. The reason is that a person is more likely to think that turning 'off' location history deletes the old location history, which it does not. 'Pause' makes this differences clearer to the user who might not be as familiar with technology.
Re:Companies use smartphone locations to help advertisers an... by jacquesm on Monday December 10, 2018 @10:57AM (#18648761)
> 'Pause' makes this differences clearer to the user who might not be as familiar with technology.

I'd love for the Googles of this world to really make things easier for people not as familiar with technology. For instance lightswitches do not have a pause button.

Re:Companies use smartphone locations to help advertisers an... by usefulcat on Monday December 10, 2018 @11:21AM (#18648939)
To be fair, nor do they have a history. Though simplification can make things easier, it can also result in obfuscation, and it's often not obvious which is the better bargain in general.
Re:Companies use smartphone locations to help advertisers an... by wlesieutre on Monday December 10, 2018 @11:37AM (#18649076)
Historically they didn't have a history, but there are "smart grid" electric meters that track energy usage on a smaller time scale, and privacy is an issue for those.

If the lights in your living room total up to 85.5W, someone with access to fine grained power consumption logs can infer when you turned that light switch on or off.

Similarly, there's going to be a telltale power consumption profile for when you're in the shower, when you run your washing machine, when you turn on your television, etc.

This isn't widespread, but it's something to look out for going forward.

Re:Companies use smartphone locations to help advertisers an... by rhcom2 on Monday December 10, 2018 @03:40PM (#18651009)
This is exactly what sense does https://sense.com/
Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @07:51AM (#18647486)
I agree, the language is annoying and they've also been guilty of dark patterns for getting users to re-enable it.

But being an EU citizen, I'm confident that they can't turn it on, legally, without explicit permission.

Re:Companies use smartphone locations to help advertisers an... by ThaJay on Monday December 10, 2018 @08:54AM (#18647873)
They can't legally, but for them to stop someone has to go through the process of proving this in court.
Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @09:28AM (#18648105)
Where I live there are consumer protection state agencies that handle the suing for you, if the case is strong enough. You just have to file a complaint and I've had great success in the past.

And GDPR is taken seriously, the EU requiring and sponsoring agencies that check for compliance in all EU countries.

Don't know how it is in the U.S. but I imagine that at the very least you can group with others in class action lawsuits, such that the effort of any one individual will be lower.

As long as it is illegal of course, otherwise you don't have a case. I heard California is adopting something similar to the GDPR too.

Re:Companies use smartphone locations to help advertisers an... by seslaire on Monday December 10, 2018 @11:10AM (#18648858)
In Hungary for instance, one can simply send an e-mail with the necessary details of the complaint to NAIH, the National Authority for Data Protection and Freedom of Information, and within the legally mandated period of 60 days, they will carry out the necessary investigation and enforce both national law and GDPR.
Re:Companies use smartphone locations to help advertisers an... by icebraining on Monday December 10, 2018 @08:56AM (#18647886)
Where is the "pause" wording?
Re:Companies use smartphone locations to help advertisers an... by jacquesm on Monday December 10, 2018 @09:03AM (#18647923)
https://myaccount.google.com/activitycontrols

All over the page.

Paused this, paused that.

Re:Companies use smartphone locations to help advertisers an... by akovaski on Monday December 10, 2018 @09:23AM (#18648072)
For those still wondering: the word "pause" appears in the pop-up information window when you toggle off one of the activities and appears next to "paused" activities.
Re:Companies use smartphone locations to help advertisers an... by icebraining on Monday December 10, 2018 @10:51AM (#18648708)
Thanks; I was reading the docs, which do say "turn off".

https://support.google.com/accounts/answer/3118687?visit_id=...

Re:Companies use smartphone locations to help advertisers an... by Despegar on Monday December 10, 2018 @08:23AM (#18647683)
>On GDPR, I've seen people complaining about the high cost for implementing it

The bigger cost is to people's privacy, which is hard to quantify and hard for people to articulate why it's necessary. Collection and use of people's data is opaque and not at all transparent.

Which is why GDPR and other privacy legislation is needed.

Re:Companies use smartphone locations to help advertisers an... by ballenf on Monday December 10, 2018 @10:23AM (#18648504)
Complaining about the cost of respecting user privacy is like complaining about having to clean up after your company's pollution or carbon emissions.
Re:Companies use smartphone locations to help advertisers an... by Tsubasachan on Monday December 10, 2018 @01:32PM (#18650053)
If carriers let outsiders buy cell tower data there is literally nothing you can do except switch on airplane mode.
Re:Companies use smartphone locations to help advertisers an... by jamaicahest on Tuesday December 11, 2018 @03:00PM (#18658365)
Re:Companies use smartphone locations to help advertisers an... by chii on Monday December 10, 2018 @06:18PM (#18651980)
Or, complain to the local gov't/FCC/consumer ombudsman that carriers are selling this data without consent from the consumer. Embroil them in a PR nightmare. Make it costly.
Re:Companies use smartphone locations to help advertisers an... by krageon on Tuesday December 11, 2018 @11:57AM (#18656665)
It doesn't need to come from the towers as we recently saw from the whole Qualcomm thing. There's not really any use burying a Chinese company in a "PR nightmare", because A. they don't care and B. if it becomes a real problem they will resurface with a different name. That being the case, you can of course fight here for a meaningless victory. I cannot imagine a reason to, however.
Re:Companies use smartphone locations to help advertisers an... by Tsubasachan on Tuesday December 11, 2018 @05:59AM (#18654499)
Honestly do you expect that the US will ever embrace consumer rights?

Anyway I just get cynical when I see people talk about how evil Google is and how Apple protects privacy. Every company you do business with WILL sell of your personal data and that includes mobile operators, banks and ISPs. Until that is illegal the entire discussion about privacy is irrelevant and a sham.

Re:Companies use smartphone locations to help advertisers an... by isoprophlex on Monday December 10, 2018 @01:58PM (#18650261)
Strange, for me Google maps doesn't remember anything I searched for. It tells me to turn on location history. And I'm an EU citizen.

Google can fuck right off with their location tracking. When I got my phone, it defaulted to asking me invasive questions about places I was visiting. The option to turn off those nag screens was hidden so deeply I felt compelled to neuter the entire shebang. Disgusting dark patterns.

Screenshot taken just now: https://imgur.com/a/ewSCeRn

My next phone will be an Apple device due to this insidious crap.

Re:Companies use smartphone locations to help advertisers an... by reaperducer on Monday December 10, 2018 @03:50PM (#18651061)
My next phone will be an Apple device due to this insidious crap.

This kind of insidious crap is the reason I've never considered Android as an option.

I have two Android devices for work, and they both stay in my work desk drawer. I'd never take them off campus.

Re:Companies use smartphone locations to help advertisers an... by darren_ on Monday December 10, 2018 @07:34AM (#18647409)
> Also I was pleasantly surprised to discover that Google Maps now remembers searches you've made without location history or app activity tracking being active. This wasn't the case about a year ago, when I last tried it, a dark pattern of sorts. They probably changed the behavior being forced by the GDPR or something similar.

Location history wasn't ever needed for remembering searches, FWIW.

Re:Companies use smartphone locations to help advertisers an... by amaccuish on Monday December 10, 2018 @07:36AM (#18647422)
> Location history wasn't ever needed for remembering searches

It absolutely was. When I tapped on the search bar, there were no results and it told me to turn on location history.

Re:Companies use smartphone locations to help advertisers an... by pjc50 on Monday December 10, 2018 @08:36AM (#18647759)
Just tried this. I have "home" and "work" defined in Saved Places, but if I go to the search bar there are "home" and "work" options which claim not to be set up and won't work until I turn on "web and app history". Hmm.
Re:Companies use smartphone locations to help advertisers an... by darren_ on Monday December 10, 2018 @08:08AM (#18647595)
On iOS, location history absolutely was not required for this. Either its different on android google maps, or you're conflating web and app activity with location history.
Re:Companies use smartphone locations to help advertisers an... by jakobegger on Monday December 10, 2018 @02:40PM (#18650587)
Google Maps used to display a message "please log in to see recent searches" or something like this. Which is ridiculous, there's nothing preventing them from storing search history on the device.

It was really annoying, because there is no back button in the app, so if you search for your hotel, then for a restaurant, and then want to show the hotel again, you had to type the full address again.

They seem to have stopped doing that, it's now possible to use Google Maps on iOS without signing in, and you still see recent searches.

They still display a message "sign in to get better search results". And a second message: "Add your phone contacts to search for their addresses". But it's a lot better than it used to be.

Re:Companies use smartphone locations to help advertisers an... by wendigo on Monday December 10, 2018 @07:45AM (#18647459)
Nonetheless, I actually don’t enjoy seeing my search history accumulate on my device. Half of my searches are just spell checks anyway, the next 40% are just wikipedia shortcuts. Probably less than one in ten searches are genuine queries, to scour for a real result.

The number is small enough that I pretty much can directly remember the thing I was thinking about, and why I searched for it. I don’t even want my device saving my recent searches.

Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @07:54AM (#18647502)
Your preference is not very relevant for people that need to remember their searches though.
Re:Companies use smartphone locations to help advertisers an... by inetknght on Monday December 10, 2018 @08:48AM (#18647835)
People that need to remember their searches should configure their preferences in such a fashion.
Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @10:25AM (#18648522)
Let's not talk past each other. An app can remember preferences and searches locally, without synchronizing them to a central server. Requiring that the server remembers those searches only if you agree to having your activity tracked is a dark pattern.

Which is what we are talking about.

Re:Companies use smartphone locations to help advertisers an... by zaroth on Monday December 10, 2018 @12:28PM (#18649492)
And this is very much still present in the latest version on my iPhone anyway. I still see a big prompt to turn on Web & App Activity I order to “Get the most from Maps” — which includes saving “Work” and “Home” favorites. Boo :-(
Re:Companies use smartphone locations to help advertisers an... by sa1 on Monday December 10, 2018 @02:53PM (#18650665)
You don't see that prompt if you aren't signed in.
Re:Companies use smartphone locations to help advertisers an... by zaroth on Monday December 10, 2018 @07:18PM (#18652321)
Son of a .... &%$!
Re:Companies use smartphone locations to help advertisers an... by Firadeoclus on Monday December 10, 2018 @08:05AM (#18647575)
This is about location search history in Google Maps, though, not general search history. Personally, I rarely need the latter but I find the former very useful.
Re:Companies use smartphone locations to help advertisers an... by zanny on Monday December 10, 2018 @10:22AM (#18648498)
I at least get a substantial value add to my life having Google track me everywhere. It might be overly sentimental but being able to see everywhere I've been in the last ~seven years on Maps feels to me like one of the great innovations Google has made. If people accept Google will sell that data to subsidize the cost of persisting it you get a permanent record of everywhere you've gone. I think its cool to have.

Its something you can probably build off the shelf - log position with durations, draw vectors on Open Street Maps. But Google has already given me the convenience in exchange for my privacy. Its one of the rare times I'm alright with that tradeoff.

Re:Companies use smartphone locations to help advertisers an... by reaperducer on Monday December 10, 2018 @03:52PM (#18651080)
being able to see everywhere I've been in the last ~seven years on Maps feels to me like one of the great innovations Google has made.

Your phone is perfectly capable of making this map on its own. Why does it have to share all that information with the Google mothership?

Apple's phones do the same thing, but don't send your personal location history to Apple. (Though I believe the history isn't a full seven years.)

Re:Companies use smartphone locations to help advertisers an... by zanny on Monday December 10, 2018 @06:01PM (#18651890)
I haven't used the same phone for 7 years. The value add is that its automatic and remotely archived. I've already been burned by lost / wiped / bricked devices without recovering all the photos / video / data on it before it became inoperable. I still have an iphone 3gs with my last photos with my late grandmother on it that I've tried to frankenstein back to life long enough over a usb connection to just grab the photos with no success.

I've tried a lot of automatic backup solutions like syncthing but have had myriad performance or inconsistency problems over the years.

Its tied to my Google account rather than the physical device, and its not data I need to manually somehow keep consistent across devices because Google does it for me.

Re:Companies use smartphone locations to help advertisers an... by mindslight on Monday December 10, 2018 @01:40PM (#18650121)
Stating it as a direct trade for the service being no charge is fallacious in that Google does not actually give you the option to just pay money for the service/storage and skip the surveillance. Instead, the true price remains nebulous - with your "permanent record" continuing to grow and becoming ever more of a liability.

It's certainly possible to develop user-centric software with the same functionality and polish, at a grassroots level. The fact that the industry is being dominated by VC money looking for scalable winner-takes-all growth is indicative of the magnitude of what's really at stake.

Re:Companies use smartphone locations to help advertisers an... by zanny on Monday December 10, 2018 @06:03PM (#18651900)
I run Lineage on my phones, I always have the option to purge Google entirely and not let them track me. The choice is between spying vs money, its between spying or not being spied on.

I sympathize with the plight of those unknowingly being spied upon - I've had enlightening conversations with family members when I show them this very feature they weren't aware of on their Android devices - but it often feels like the demonization of Google treats it like nobody ever volunteers in. Because I definitely wouldn't pay for it, but its a nice service to have.

Re:Companies use smartphone locations to help advertisers an... by amgutier on Monday December 10, 2018 @12:38PM (#18649590)
I love that Google Photos is able to add location information to my old photos and pictures I take on my actual camera without manually mapping everything. It's surprisingly accurate and really enjoy seeing where all I've been over time.
Re:Companies use smartphone locations to help advertisers an... by reaperducer on Monday December 10, 2018 @03:53PM (#18651089)
I love that Google Photos is able to add location information to my old photos and pictures I take on my actual camera without manually mapping everything. It's surprisingly accurate and really enjoy seeing where all I've been over time.

Apple's phones and computers do this, too. This is not unique to Google. What is unique to Google is that Google uses the information to profile you, while Apple just uses the information to draw a map.

Re:Companies use smartphone locations to help advertisers an... by clairity on Tuesday December 11, 2018 @03:14PM (#18658474)
if anyone wants to track your life without divulging it all to google, check out the memex that andrew louis built in ruby: http://confreaks.tv/videos/rubyconf2018-building-a-memex-wit...
Re:Companies use smartphone locations to help advertisers an... by kop316 on Monday December 10, 2018 @08:32AM (#18647735)
I respectfully disagree on Google being entirely transparent about tracking location, especially if you run Android + Google Play Services. I have a tablet (Pixel C) that runs LineageOS + Google Play Services and a Phone (Nexus 5x) that runs LineageOS vanilla (no MicroG, no UnifiedNLP, no Google Play Services). Some things I have noted:

- When you install MicroG/Google Play Services, they take over location services (i.e. they run in /system/priv-app, and if you disable their location, location on the device is disabled totally).

- Android by default has the default on option to scan wifi and Bluetooth when you turn them off to find wifi/bluetooth and coorelate it to your location.

- On my Pixel C, when if I try "high accuracy" or "battery saver" mode Location services, Google Play has tried to force me to agree to their location tracking and I have disagreed every single time. Location services does not work if I use "device only" (which is supposed to only use GPS).

- I have noted that on my phone now, if I disable location and then reenable it when I have moved more than 20-30 miles, the GPS has to reacquire the signal and can take up to 2 minutes (I also tried it when I drove several hundred miles, it took several minutes to reacquire). This is indicative of the GPS module being off totally. This was not so when it had Google Play Services on, it was able to reacquire my location extremely quickly, sometimes almost instantaneously even if I moved a long distance. I suspect that Google Play was still tracking my location even if I turned off location services (due to it totally controlling my location).

- EDIT: Another interesting note is that on my phone has had location services off and then turned just back on (i.e. no GPS lock), it appears to give the last time GPS was acquired as my current location. OSMAnd shows that location but says it doesn't know my location, but other apps do not realize that. I am suspecting that Android does not necessarily have a "stale" location, just the last reported location.

Putting my tin foil hat, I hypothesize Google anonymously tracks your location even if your location services if off (allowing them to do traffic, how busy a restaurant is, etc.).

EDIT: As correctly pointed out, networked assisted GPS is a thing, and may also play into the differences in GPS reacquiring. I believe that network assisted GPS is in AOSP. When I turn on and off GPS in Android, it appears to have the almanac for where to look for satellites based on SatStat, and how quickly my phone acquires the GPS signal is a function of where it used to be compared to where it is now. In addition, UnifiedNLP [1] scans for networks/cell towers and correlates it to location, it does not appear to implement networked assisted GPS. [1] https://github.com/microg/android_packages_apps_UnifiedNlp

Re:Companies use smartphone locations to help advertisers an... by ddeck on Monday December 10, 2018 @09:14AM (#18647993)
>if I disable location and then reenable it when I have moved more than 20-30 miles, the GPS has to reacquire the signal and can take up to 2 minutes (I also tried it when I drove several hundred miles, it took several minutes to reacquire). This is indicative of the GPS module being off totally. This was not so when it had Google Play Services on, it was able to reacquire my location extremely quickly, sometimes almost instantaneously even if I moved a long distance. I suspect that Google Play was still tracking my location even if I turned off location services

This is more likely access to network assisted GPS.

To know your location, the receiver needs the GPS ephemeris and almanac data (basically the status/location/trajectories of the GPS satellites). This is transmitted by the satellites themselves, but extremely slowly (50 bps with the entire navigation message taking 12.5 minutes)#.

To speed things up substantially (almost instant vs minutes), this info can be delivered over the network instead. I presume that in your case it was being provided over the network as part of the Play services.

# https://en.wikipedia.org/wiki/GPS_signals#Navigation_message

Re:Companies use smartphone locations to help advertisers an... by kop316 on Monday December 10, 2018 @09:31AM (#18648126)
Heh, interesting. My assumption is that even network assisted GPS is a part of AOSP versus Play Service. This assumption was that UnifiedNLP [1] scans for networks/cell towers and correlates it to location, it does not appear to implement networked assisted GPS.

[1] https://github.com/microg/android_packages_apps_UnifiedNlp

Re:Companies use smartphone locations to help advertisers an... by reaperducer on Monday December 10, 2018 @04:04PM (#18651153)
To know your location, the receiver needs the GPS ephemeris and almanac data (basically the status/location/trajectories of the GPS satellites). This is transmitted by the satellites themselves, but extremely slowly (50 bps with the entire navigation message taking 12.5 minutes)

Thanks for explaining that. It explains why when I interfaced a GPS receiver yanked out of a 2001 minivan it took so long to lock into a location with my Palm Pilot.

Re:Companies use smartphone locations to help advertisers an... by Despegar on Monday December 10, 2018 @08:53AM (#18647862)
>Putting my tin foil hat, I hypothesize Google anonymously tracks your location even if your location services if off (allowing them to do traffic, how busy a restaurant is, etc.).

This has already been reported.

https://qz.com/1131515/google-collects-android-users-locatio...

Re:Companies use smartphone locations to help advertisers an... by JustSomeNobody on Monday December 10, 2018 @08:50AM (#18647842)
A-GPS is a feature. It exists because GPS is so slow.
Re:Companies use smartphone locations to help advertisers an... by dhimes on Monday December 10, 2018 @09:44AM (#18648205)
Also because GPS is unreliable in cities with tall buildings that obscure the satellites. This is important in the case of needing to make a 911 call. I don't know what the laws are around mobile phones needing to be able to place a 911 call (I know you shouldn't have to guess a passcode to do it, or at least that used to be the case), but it's possible that some of these 'location-on' things are to comply with the law.
Re:Companies use smartphone locations to help advertisers an... by bad_user on Monday December 10, 2018 @10:29AM (#18648541)
Indeed. When I visited New York and Chicago I was surprised to find that GPS is totally unreliable. I would find myself walking several street corners without getting a signal.

I'm used to European cities, crowded, but without skyscrapers and in my city GPS is very reliable, but I realized that's only because we don't have tall buildings.

Re:Companies use smartphone locations to help advertisers an... by azinman2 on Monday December 10, 2018 @11:50AM (#18649172)
Luckily WiFi based location is usually shockingly accurate.
Re:Companies use smartphone locations to help advertisers an... by Puer on Monday December 10, 2018 @01:49PM (#18650191)
Not to mention they buried their option to turn off location tracking on Google Maps within some legal submenu in the app, instead of in the privacy settings menu. If that qualifies as "transparent" I don't know what the word means anymore.
Re:Companies use smartphone locations to help advertisers an... by isoprophlex on Monday December 10, 2018 @02:01PM (#18650284)
The technical need for assisted GPS notwithstanding..:

> - Android by default has the default on option to scan wifi and Bluetooth when you turn them off to find wifi/bluetooth and coorelate it to your location.

What the actual fuck?!

Re:Companies use smartphone locations to help advertisers an... by kop316 on Monday December 10, 2018 @02:09PM (#18650352)
Re:Companies use smartphone locations to help advertisers an... by isoprophlex on Monday December 10, 2018 @03:35PM (#18650983)
Nice, thanks!
Re:Companies use smartphone locations to help advertisers an... by Redoubts on Monday December 10, 2018 @01:05PM (#18649821)
> People are surprised when seeing the Activity section in Google's account details, then freak out about Google tracking their location.

For the curious:

https://www.google.com/maps/timeline