Showing posts with label Privacy. Show all posts
Showing posts with label Privacy. Show all posts

Monday, January 26, 2015

Network May Be Monitored By A Third Party (a.k.a. Android KitKat scary warning message part 3)

I guess people care about this annoying warning message that Android has thrown on us.   No other blog post here has generated anywhere near the number of hits that this issue has generated.  So, to all of your that have found my blog and read what I have to say, I thank you!

Unfortunately, Google doesn't seem to care about this issue.   (Newsflash!  Google doesn't care about making certificates easy to use on Android.   And, by extension, they don't care to make wireless authentication on Android usable either!   I could write volumes on my experiences trying to get things improved.  But, I fear that it would inspire depression in anyone that read it.)   So, we need to do something to try to GET them to care!

There have been several bugs opened about this problem, and most of those bugs have been closed with various reasons that make no sense.  (Which is what I base my claim that they don't care on.)  Some of the other people on the Internet that agree with me that this is a problem have continued to open new bugs to continue to push the problem and make Google listen.   If you care about this problem, PLEASE go to the Google bug tracker, and at least star the issue.   If you have the time, you might consider posting a comment to the bug that outlines why this issue causes you grief, and what changes you would like to see made in order to improve the situation.   (If you are only going to complain, do us all a favor and just star the issue.   If you want to complain, and offer suggestions on how to improve things, please post a comment!)

I'll even make it easy for you.   The URL (with link!) to the current version of the bug is at : https://code.google.com/p/android/issues/detail?id=82036 .


As you make your feelings known, please consider this.   There is actual value in having a warning like this, if you are the kind of person that values privacy and is against network operators using man-in-the-middle tactics to monitor what you are doing.   And, thanks to stupid legislation here in the US, if you are attending a K-12 school that provides Internet access, you SHOULD care about this very much!   US law requires the schools to snoop on students as a condition to continue to receive funding!    I'm lazy, so I am not going to track down the exact law that requires this, but I know it is true because of my day job.   (Not going to say any more than that because my opinion might get me in trouble.)

Because I would prefer that people being snooped on are given any warning that it could be happening, I am actually in favor of the warning message that was added.   However, I have problems with how it was implemented.   I think there are a few tweaks that could be made to the implementation that would take this from being a pointlessly scary warning message to a valuable warning message, and an opportunity to educate at least a few people on some of the security issues that are associated with installing new root CA certificates on any device or OS.   Also, as I have stated before, I don't like people that complain about a problem without offering solutions!

So, here are my suggestions on how to transform the annoying mess that is the "scary certificate warning message" in to something useful and significantly less annoying :


  • Don't show the message (ever) if the certificate is used with 802.1X on a Wi-Fi connection -- Starting with Android 4.3, the "Credential Store" (a.k.a.  Certificate store, or key store) has been split in to two parts.  One part holds the certificates that will be used for authentication on Wi-Fi networks.   The other part holds certificates that are used for VPN connections, web site connections, and everything else.   Since you *HAVE* to install a certificate in order to securely use a Wi-Fi connection, showing this warning message is pointless.  The other alternative is not to use a certificate to validate the Wi-Fi network, which leaves you WIDE open to anyone doing a man-in-the-middle.   So, the scary warning actually has the potential to make users LESS secure by making them remove the certificates necessary to secure their networks!   Google must recognize this on some level, because they don't show the warning if an app uses the Wifi API to install certificates.
  • When you tap the warning, give useful information --  Right now, when you tap the warning, you are taken to the security settings screen.   This is COMPLETELY useless.   The user is expecting to be given more information on what this warning is all about.   Take them to a screen that explains what the potential issues are with installing a new CA certificate.   Explain clearly what the problem is, and don't try to scare them in to submission.  Try to give the user enough information to allow them to make a good decision about leaving the certificate installed.   Also, provide links to more detailed information so that those that are really curious can really dig in and understand the problems.
  • Allow users to get rid of the warning -- Right now, you can dismiss the warning, but it comes back any time you install another CA cert, or anytime you reboot your device.   This behavior is annoying.   Tell me once, let me decide what to do, and then leave me alone!  Anything else is a bad user experience.   When the user taps the warning to get more information about what it is about, they should also be given two check boxes.   One check box should allow them to dismiss the warning just for the current certificate, the other should allow them to block ever showing it again.   There really are two types of users where this warning is concerned.  There are those that already understand the risks, and those that don't care.   The purpose of the warning to to try to get some of those that don't care to actually start to care.  But, annoying the crap out of them is only going to make them hate the issue so much that they will never care.

If my three suggestions above were implemented, I suspect most people would no longer hate the warning message as much as they do now.   It also gives the power back to the user, which is what I always thought Android was supposed to be about.

I understand that in addition to warning users that they may be causing themselves problems, they are probably also trying to cover their butts should a bunch of users get hacked and complain in the media, or worse, try to sue.   However, I really believe that showing the warning once is more than enough for Google to cover their butts on this.

In the unlikely event that someone from Google reads this, and wants me to put my money where my mouth is, I will offer to submit patches to the AOSP project to implement all of the things above.  HOWEVER, given my previous experiences with submitting patches to AOSP, I will be expecting a promise that the code will eventually be included.   By "eventually", I mean that someone from Google will be assigned to review my code, and comment on it until the code is in the right state to be fully included in AOSP and eventually the main Android builds.   (As an aside, while I have tried not to give out any information on this blog about who I am, I am sure that Google has the ability to look up my e-mail address based on this blog being hosted on Blogger.   There is also someone on the Android dev team that knows me, and someone on the Android security team that knows me.  So, it should be easy enough to verify that I know what I am talking about, and it should be easy to reach out to me.)

Monday, May 27, 2013

Why all the Google Glass hate?

I suspect I am opening a can of worms here, and will probably end up getting flamed wildly in the comments telling me that I am stupid or whatever else.   However, I can't help but notice that most of the complaints about Google Glass are either based on a completely flawed understanding of what Glass is, and can do, or fears of a surveillance society that already exists in much worse ways.

Let me start by saying, I have Google Glass.   But, I also take my privacy really seriously.  I don't have a Facebook account and have requested that anyone I know not post pictures of my family to Facebook or any other social networking sites without my approval.   I do have a twitter account, but I don't ever use it.  I got it so that I could develop some software for a friend that he wanted to use with twitter.   I also take the time to go to as many sites like Spokeo as possible and ask them to remove my information.  When a store asks me for anything but the money to pay for my purchase my response is "Why?".  Finally I am the bane of TSA's existence because I believe that if some stranger playing police officer hasn't touched my junk, the flight will almost certainly have some horrible ending.  So, I always opt out.   While I am sure there is more I can do to protect my privacy, hopefully you will understand that I take my privacy very seriously.

When Google Glass was originally announced I had some concerns about privacy myself.   However, because of the industry I am in, I need to stay on top of the latest technology when it incorporates wireless networks.  What I have found in Glass is far less concerning than what I had imagined in my mind.  (You'll have to trust me.  The technology in your mind is far superior to what currently exists!)  So, I would like to address some of the paranoid fantasies that people have about Glass.


I don't want to have a conversation with someone wearing Glass.  They could be checking Facebook, or Twitter, or something else and not paying attention to me.

Let me start with the obvious.   It doesn't matter if you have Glass or not.  If someone would rather be checking Facebook or Twitter while talking to you, you are either boring to talk to or that person isn't worth talking to.

However, this is really a non-issue with Glass for several reasons.  First, contrary to what people seem to think, Glass does not provide a heads up display (HUD).   Rather, when properly worn the screen is just above your line of sight.  To see the screen, you have to look up.  If you are really engaged in a conversation with someone, you will notice if they start looking up.   But, lets assume for a second that you don't manage to notice that someone is looking up.  The second reason it is a non-issue is that the Glass cube above your eye will light up when it is turned on.  The amount it lights up allows for someone standing close enough to you to have a conversation will clearly see that you have something up on the screen.  In fact, it is light enough that when my sister used my Glass, I was able to see enough of the screen while looking at her to tell her how to navigate!

But, lets go crazy and assume that you have some kind of weird spot blindness that prevents you from seeing the screen and noticing it is on.   There are currently two ways to interact with Glass.  You can reach up to the side of your head and use the touch pad on the frame, or you can nod your head to wake it up and then speak to it.  Again, you will notice if someone is using Glass while talking to them.  If you don't, then you should question why you are talking to that person as you aren't engaged with them enough to notice.

But, since Glass is always recording and streaming data to Google, people will always be able to see what I am doing!

Let me ask you this.   Can your cell phone record an entire day of video?  No?  Then, consider that the battery in your cell phone is larger than the entire volume of Glass, even if you include the frames which have not electronics in them!   But maybe Glass is using some super secret system that uses less power than a cell phone which allows you to record all day!   The specs for Glass are openly available.  The hardware in Glass is basically the same as an under-clocked Galaxy Nexus.   Don't know about you, but the battery on my Galaxy Nexus lasts about a day when I use it lightly.   During heavy usage, like when I was at Google I/O, I am lucky to get half a day.  In addition, I tried recording video constantly while at I/O just to see how long it would last.  At about 55 minutes, Glass powered down.  (I had taken one or two pictures prior to recording, so I would put the actual recording time around 1 hour total on a fully charged battery.)

The fact is that Glass doesn't have the hardware that would be needed to record video all day.  And when you consider the weight issues with a pair of glasses, it is unlikely that such a device will exist in the near term.  Sure, you could wear a backpack full of batteries that connect to the micro USB port on Glass and probably get more recording done, but would you?  In reality, if someone really wants to record constantly, they will use a device that doesn't do anything but record.  Why waste battery power on processing other stuff when all you want to do is record video?

Okay, but when Glass is used to take a picture, the picture is uploaded to Google where they can tag my face and determine where I am.

This argument just floors me.  My response to it is, "And so does every other device that you have that can take a picture!"  But, you argue "Not my camera that isn't Internet connected!"  That is true for the automatically uploaded portion.  But, lets face it.  Most pictures will eventually find their way on line.  Plus, even with all of the steps I take trying to keep myself from being tagged in pictures, doing a Google Image Search on my name turns up at least one picture that is of me.  (Granted, it is over a decade old, but that is really beside the point.)   Your friends will tag you in the pictures, maybe you should start there.  Plus, governments and big business already know what you look like.  They already know what size your underwear is, what health problems you have, and where you like to get takeout from.  Google generally doesn't care where you are, or what you are doing.  (Not to mention they already have that information based on the location of your cell phone.) And, given the number of various types of cameras all over our world, there is a pretty good chance that you were recording by someone else at the exact same time.  In the world we live in, there is only one place that you can be sure you aren't be recorded.  Your home.  (And even that may be questionable at times.)   When you are in the bathroom you can be somewhat more assured that no one is recording you, but are you sure?  There are cases all over the place about people hiding cameras in all kinds of bathrooms around the world.

Thank you!  You brought up the bathroom issue.  I don't want someone filming my junk while I am using the can or doing something else I don't want people to see!

A few years ago, a friend showed me a video that was recorded, in secret, of a guy playing Guitar Hero at Best Buy, jumping around like a rock star would on stage.   This video was recorded on a normal cell phone camera.   For videos in the bathroom, you don't have to search very hard to find articles about the early days of cell phone cameras and people taking pictures of other naked people while in a locker room.  Yet, today, people go in to locker rooms all the time with a cell phone and it doesn't bother people much.  They may keep an eye on that person to make sure they don't do anything that appears to be taking a picture.  But, in reality it is easy enough to modify a cell phone so that it doesn't make a sound when taking a picture.

Then, there is this :

http://www.allpredatorcalls.com/i-kam-xtreme-3-0-mega-pixel-video-recording-sunglasses-4-gb-internal-memory-expandable-to-32gb-flat-black-frame-50029/?gclid=CKPvhO61t7cCFStp7AodZGQAUg

Yup, $99 for a set of glasses with a camera built in that you would probably look at and think to yourself "those are ugly" and go on your way.   If you search around, I know you can find other similar glasses that are even less obvious that you would never notice.  Basically, this problem already exists.  The main difference with Glass is that the glasses upload the images to Google, and Google never deletes anything.  So, Glass would make it easier to throw someone in jail when they went around using the camera for something it wasn't intended.  Further, with the current generation of Glass, it is plainly obvious that someone is wearing it!

But, in addition to this already being easily (and far less expensively) available, my point is that there are societal norms that people will conform to.  I have never worn my Glass glasses in to a bathroom outside of my house.  *IF* I ever did, you can be sure that I would point them at the ceiling so that they couldn't possibly be recording anything.  But, in general, I would leave them with my wife or stuff them in a bag.  I realize that not everyone would think of this, but people will eventually catch on after someone makes a comment to them in the bathroom.  In short, this is already an existing problem, but not one that people with any common courtesy would run in to.

Okay, but what about creep shots?  Guys taking pictures of girls chests (or worse) when they are unaware of it.  (Like I saw in the parody video on YouTube.)

First, please refer to the question above.  It is already easily done with existing technology in ways that are FAR less obvious.   But, I have also overheard conversations where some dude-bro was talking about how he pretended to be texting so that he could get a shot of the cans on some "hottie" across the room.  It doesn't matter if the camera is obviously pointed at you, you don't know what someone is doing and will usually not confront them unless they make a mistake that convinces you they are doing something.  Cameras are on the back of the phone, taking pictures without someone knowing is a reality in out lives.  We deal with it with cell phones, why is Glass any different?

But, I would argue that the real problem here is societal.  Why do the dude-bros think this type of behavior is okay in the first place?   The deeper issue is that they view women as objects meant to excite them.  As a male, I understand that looking at women and assessing their attractiveness is built in to us.  We all do it, and I believe it is a primal instinct that we have that was used to make sure the best genes survived in to the future.  The question is, what do we do after that?   If you don't find yourself thinking, "Gee, I bet she wouldn't be too happy that I just rated her in my mind based on how she looks." then you may want to reconsider how you treat people in general.  But, I'll get off my feminist soap box as I could easily go on and on about things like that.

Short version, people need to teach their children that everyone is a person with thoughts and feelings.  Objectifying anyone in a way they don't approve of is wrong.

But, the difference is that with Glass nobody would know you were taking a picture or recording video.

This argument is interesting, and when taken at face value doesn't work.   There are two ways to take pictures build in to Glass.  The first requires that you reach up and press a button on the frames to take the picture.  The second is to wake the device up and say, "Okay glass, take a picture".  You would notice both of these things just like you would notice someone using a phone to take a picture.

But, there is the hack out there that lets people take pictures of you just by winking.  That is more subtle, but I would bet still requires that Glass be awake before it would work.  Waking Glass up requires tapping the frame or jerking your head up.  Then, there is the issue of strange people winking at you.  And finally, see the spy glasses link above.  The problem already exists, and while I agree that it is disturbing  it really isn't a good reason not to allow Glass to exist.  Rather, Google should take this criticism to heart and make a small modification that would make a huge difference.  Put a super bright LED on the glasses that is connected to the camera with hardware such that the camera cannot be operated without the LED being on.  Most people wouldn't have the expertise to disconnect the LED in such tiny electronics.  And of the few that do, most wouldn't waste the time.   The remaining tiny percentage is people that have real issues and will do inappropriate things no matter what you try to do to stop them.

Okay, but when people have to use their cell phones to take a picture or video, there is the time needed to pull it out of their pocket before they start recording.

As I have already stated, Glass doesn't record all the time.  So, something has to be done to it to wake it up and make it take a picture.   So taking a picture with Glass probably isn't much faster than taking it with a cell phone.  In fact, there are many phones out there that have a dedicated button for taking pictures.  Those devices can probably take a picture FASTER than Glass can.

But, I also noticed something interesting while wandering around downtown San Francisco during the Google I/O 2013.  Most of the people walking around already had their phones in their hands.  Granted, there were a lot of people playing Ingress, which would account for some of it.  But, for the people that looked like they actually lived there, most of them had their phones out.  And a good number of those phones were iPhones, which currently can't play Ingress.

If you already have your phone in your hand, the time needed to take a picture usually drops.  I would argue that you may be able to take a picture faster using a phone already in your hand than reaching up, waking up Glass, and telling it to take a picture.  Add to that, the fact that even after pressing the button there is a noticeable lag before Glass takes the picture, and you may realize that for "OMG this is happening NOW" pictures you are probably still better off with your phone!

Yeah, but I heard that Glass constantly uploads your location when they are on.

Again, another argument that floors me.   First, Glass only uploads your location once every 10 minutes.  Granted, that is a setting that Google should allow people to turn on and off, but they already have that information anyway.   Your cell phone has a GPS in it, and there is nothing that would stop Google from turning it on every 10 minutes and uploading your location.  (Who knows, they may already!)  Then, there is location data from cell towers and wifi access points.   Even without turning on the GPS, you can be triangulated to a very small area for a possible location.  Small enough that it doesn't matter if it is pinpoint accurate.  They can find you if they want.   If you are REALLY concerned about this, you should turn off your phone, never use the Internet, and move out to a cabin in the woods somewhere and have no contact with the outside world.

They already know where you are, and what you are doing.  And they have tweaked the laws so that it is perfectly legal.  That ship has sailed.

Okay, but what about the ads?  I don't want ads popping up throughout my day!

In the current developer specification, showing ads is forbidden.  If a developer started to provide unwanted ads with Glass, I think it would sink the whole system.  I realize that Google makes most of its money off of advertising.  However, I think they also see that people don't want to be bugged by ads all the time.

I honestly believe that Google will continue to keep the "no ads" requirement in their apps.  Glass doesn't have a large enough screen to stick a banner add at the bottom where it is out of the way and still have it be readable.  So, ads would have to take over the whole screen for some amount of time.  Further, if ads popped up randomly throughout the day, early adopters would throw Glass in a drawer and tell people not to buy it.  I am honestly not sure how Google intends to make money off of Glass.  It is possible that the revenue they get from selling Android apps is enough of an incentive to do the same thing on Glass.  But, if Google wants Glass to be successful, they need to make it something people want to use.  Annoying ads popping up at random would kill the user experience.

 Yeah, but the glasses themselves look really stupid and ugly.

Perhaps one of the silliest comments I have heard.   I would agree that most of the time the glasses look silly.  I suspect Google agrees and that is why they are working with a sunglasses designer to make the final product look better.  However, when Glass is worn with the included sunglasses shades, they really don't look as horrible.  I wore them with the sunglasses shade today going through a drive-thru and nobody seemed to care.

Which brings me to perhaps the most important point of that argument.  If it were illegal to have bad fashion sense, many of us would already be in jail.  Further, if it were up to me to decide what looked good, most "high fashion" would land people in jail.  Fortunately, for the entire world, bad fashion choices won't land you in jail, and usually won't have people mocking you.  (Unless you are still in High School, or perhaps the fashion industry.)

We can hope that once Glass is released to the public that it looks better.  If it doesn't, that may well kill the project.

But Glass doesn't do anything my cell phone can't.  And how come Google owns the glasses even after I paid for them?

In general, I agree.  Which I consider to be an argument for why people freaking out about Glass is silly.  At the same time, I also see why it is a valid argument for not using or having Glass.   What this argument fails to take in to consideration is what state Glass is currently in.

There is a reason that existing versions of Glass cost $1500+tax.  The same reason accounts for why you are not allowed to resell them.  Not surprisingly, that same reason accounts for why the software is rough around the edges and loaning Glass is not allowed.  (Even though one of the Glass developers made a comment at I/O about asking someone with Glass if you could try it.)  Glass is not a finished product!   Google wants to get it in the hands of people that will be excited for the potential sooner rather than later.  (Which means developers.)  Those developers will experiment with things and create new apps for it.   The same developers will give feedback to Google about what is good, and what isn't.  And hopefully the final product will be better because of it!

Consider the case of Microsoft and their recently announced Xbox One.   Do a search for "Microsoft Durango".   You will quickly find out that there are a LOT of developers that had access to the development platform long before it was released.    You may even come across an article talking about the "zebra stripes" on the console.   The developers needed access to the development kits early on.  I am sure they signed agreements preventing them from letting non-developers from seeing the prototype hardware along with giving Microsoft piles of cash while the agreement said that Microsoft obtained ownership of the development kit.   In the console industry, the quantity and quality of the launch titles can really help or hurt the adoption of the new hardware.  Microsoft wants to get developers working on top quality titles as early as possible so they can be successful.  At the same time, they are giving those developers an unfinished product to work with so that they can create those titles.  Google is doing the same thing with Glass.  The high price is because so few were made, and to keep out people that probably won't contribute to the success of Glass.  It was primarily available through a developer conference so that developers would get it, and provide feedback while working on new uses for the technology.

I would almost bet money that once the final version of Glass is announced that Google stops caring if you resell the developer versions.  It is just that right now, they want to keep the audience to a group of people that will forgive them for having the software not be polished while hopefully contributing to its success.

Okay, but I don't want Google snooping on me!

The EFF recent put out a report on the privacy policies of various companies.  Of Google, Apple, and Microsoft, Google ranked the highest for privacy.   Hopefully this means that the snooping they are doing isn't as bad as other companies are. (Source : https://www.eff.org/who-has-your-back-2013 )

But, there is also something that Google has going for it.   Glass runs Android!  Given the significant number of custom Android ROMs out in the wild, it is reasonable to believe that something similar will happen with Glass.   Google also has a history of making their hardware fairly easy to unlock for people that know what they are doing.   So, I suspect that if Glass is successful there will be a vibrant custom ROM scene.  That scene will probably have at least one "anti-Google" ROM in it that strips out any reporting that Google may have put in.  And the best part is, I don't think Google will really care!



Wow.  You actually read this far!  I am impressed.  I would imagine that at this point you are either thinking, "You know, he has a point."   Or, you are so pissed off at my obvious lack of understanding of the situation that you could throw your computer out the window.  Please feel free to ask questions and make constructive comments in the comments area of this post.  If you read this whole thing, hopefully you have come away with the impression that I don't believe that Glass is a perfect product.   In addition, if Glass were released today, it would be a huge flop.  But, I would love to know what I am missing, that doesn't already exist in the world in an easier and less expensive solution, that makes Glass so scary it should be banned or hated so much?