Not just the usual suspects

After the fallout from Google's accidental capture of personal data from Wifi networks made savage headlines, it's important to remember the real debate at stake

Image: CC-AT-NC Flickr: pipot83 (Fabio Premoli)

Google's collection of personal data from wi-fi networks resulted in a huge public outcry. Google, in turn responded in the correct and dignified manner by apologising and promising to delete this data. Yet, in my opinion, the outcry was somewhat misdirected, as well as disguising an abdication of responsibility by many.

It is essential to remember that Google only collected data from Wi-Fi networks which were open or unsecured, and whilst Google was unquestionably wrong to do so and must be held to account, there are other parties to blame.

The nature of reality is such that people really should take basic security measures for their own peace of mind. Leaving your Wi-Fi network unsecured is that same as leaving your doors and windows unlocked; you can hardly be surprised, then, when your traffic is watched. In both cases, the thief is wrong but for your safety you should take basic precautions.

Google collected data from unsecured Wi-Fi networks by driving past houses – it only took a few seconds for them to collect private data. Imagine if a hacker sat outside your house with a laptop for a hour? Imagine if one of your neighbours listened in to your network? Can you imagine how much personal data can be gleaned if done so intentionally?

So how should you protect your personal data, and whose responsibility is it?

Firstly, it is the responsibility of whoever provides you with a wireless access point; neglecting to ensure that it is secure means that they are not respecting your right to privacy. 

Secondly, web services are responsible to some extent. When using a web service, many companies will ensure they use encryption between your computer and their server to stop others listening in. This is what is happening when you see a padlock icon in your web-browser toolbar. Although it is expensive, it's an essential measure for sensitive data like credit cards.

Those services that deal with sensitive or private information should be using encryption. Google's access to such data was enabled simply because these services were not encrypting data. Google is actually relatively good for this - if you use Gmail, your data is encrypted. So all the complete emails that Google picked up, aren't—ironically—from Gmail. 

But thirdly and more importantly, the debate is far bigger than this issue. We, as a society, need to assess how companies are entitled to use our personal data. Our information is often abused, albeit entirely legally. But how comfortable are you with more and more of your life being lived publicly online? What about your data being locked up and held captive by large multi-national companies? How happy are you about being profiled more and more by computer algorithms, and these algorithms governing your access to services?

Whilst Google's wi-fi controversy has been brought to the public's attention, we should be aware that there exists a much larger debate that is not being adequately discussed in a public forum. 

James Baster is a professional computer programmer living and working in Edinburgh, and tweets @jarofgreen.