Mobile // Mobile Applications
News
1/27/2014
04:11 PM
Connect Directly
LinkedIn
Twitter
Google+
RSS
E-Mail
50%
50%

NSA, British Spy Agency Collect Angry Birds Data

National Security Agency and Britain's Government Communications Headquarters have collected data from smartphone apps for years, says new report on documents leaked by Edward Snowden.

6 Robots To Inspire Google
6 Robots To Inspire Google
(click image for larger view)

Spy agencies in the US and the UK have developed ways to gather data from smartphone apps and use these techniques routinely, but they are struggling to make sense of their vast haul of data.

According to a report published jointly on Monday by The Guardian, The New York Times, and ProPublica, based on previously undisclosed documents leaked by Edward Snowden, the US National Security Agency and Britain's Government Communications Headquarters have been working together to access mobile app data at least since 2007.

"Since then, the agencies have traded recipes for grabbing location and planning data when a target uses Google Maps, and for vacuuming up address books, buddy lists, phone logs and the geographic data embedded in photos when someone sends a post to the mobile versions of Facebook, Flickr, LinkedIn, Twitter and other services," the report says.

The report describes secret British intelligence documents from 2012 that detail the computer code necessary to collect Angry Birds player and advertising profiles from Android devices. Such advertising profiles might contain data about users' location, marital status, sexual orientation, political affiliation, or other demographic data relevant to advertisers. That's in addition to all the other personal information available on a smartphone.

[Is US surveillance hurting the economy? Read NSA Fallout: Why Foreign Firms Won’t Buy American Tech.] 

The report amplifies revelations late last year that the NSA relies on commercial ad tracking data, such as Google cookies, to identify targets for government hacking and to augment broader surveillance data.

Google did not immediately respond to a request for comment.

The report is likely to put further pressure on app makers to minimize data collection and on mobile platform overseers such as Apple, Google, and Microsoft to tighten privacy rules.

Nonetheless, if advertising tracking has become indistinguishable from intelligence tracking, online ad providers might see a backlash in the form of accelerated adoption of ad blocking and cookie blocking technology.

Ten days ago, President Obama announced several changes to the way the US handles intelligence collection. The reforms largely fell short of what privacy advocates have sought and didn't address the collection of data from smartphones and mobile apps.

In a statement about its smartphone intelligence collection program included in the report, the NSA insisted that it "does not profile everyday Americans" in the course of its foreign intelligence mission and that privacy protections for US residents and "innocent foreign persons" exist throughout the process. Independent verification of such assertions is all but impossible given that the programs in question are classified and are not subject to direct public oversight.

The spy agencies claim that smartphone traffic intelligence contributed to the prevention of an Al Qaeda bomb plot in Germany in 2007 and the arrest of members of a drug cartel hit squad that had killed a US consulate employee in Mexico in 2010.

However, the vast trove of smartphone information also represents a storage and analysis challenge. According to the report, processing just one month of smartphone data collected by the NSA required 120 computers and led to as many as 8,615,650 "actors," a term that presumably means persons of potential interest. The processing of three months of British data pointed the finger at 24,760,289 "actors." Although these "actors" might not all be inside the UK, they represent a number that's too large to be useful from an investigative standpoint, considering that the total population of the UK is about 63 million.

Thomas Claburn is editor-at-large for InformationWeek. He has been writing about business and technology since 1996, for publications such as New Architect, PC Computing, InformationWeek, Salon, Wired, and Ziff Davis Smart Business. Before that, he worked in film and television. He's the author of a science fiction novel, Reflecting Fires, and his mobile game Blocfall Free is available for iOSAndroid, and Kindle Fire.

InformationWeek Conference is an exclusive two-day event taking place at Interop where you will join fellow technology leaders and CIOs for a packed schedule with learning, information sharing, professional networking, and celebration. Come learn from each other and honor the nation's leading digital businesses at our InformationWeek Elite 100 Awards Ceremony and Gala. You can find out more information and register here. In Las Vegas, March 31 to April 1, 2014.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Susan Fourtané
50%
50%
Susan Fourtané,
User Rank: Ninja
2/1/2014 | 8:45:13 AM
Re: Not surprised about NSA, but what about Angry Birds?!
Shane, 

Have you ever diagreed to app/software license agreements? How often do you read them before agreeing? 

-Susan 
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
1/28/2014 | 10:18:53 PM
Rovio's denial
FWIW, the best headline I saw on Rovio's response to this today was "Angry Birds Doesn't Give Data to Pigs."
DAVIDINIL
50%
50%
DAVIDINIL,
User Rank: Strategist
1/28/2014 | 1:32:05 PM
Re: Not surprised about NSA, but what about Angry Birds?!
I have read those user acceptance agreement statements.  they don't tell you anything.  Where in the angry bird agreement does it tell me that the NSA will have access to my demographic and mapping details?  And why does Angry Birds need access to my buddy list and my location anyway?
mak63
50%
50%
mak63,
User Rank: Ninja
1/28/2014 | 1:29:05 PM
Angry Birds?
The only way to protect your privacy is to not put it on the Internet.
I disagree with that comment. It's like saying if I leave my car running and unlock at night, someone has the right to steal it. He doesn't.
Anyhow, I can't believe they collect data from Angry Birds. Angry Birds, really? If you tell me Candy Crush, well that will be another story.
hrutledge974
50%
50%
hrutledge974,
User Rank: Apprentice
1/28/2014 | 1:16:46 PM
What about others?
What really surprises me is that we are ignoring other flagrent abuses of our privacy.  I've know for years that Google, Yahoo and Microsoft track my emails.  If I get an email from a friend vacationing in Upper Michigan.  Ads on the side of the email are about buying realestate in the Upper pennsula of Michigan.  Corprations are violating our privacy right and left.  They just haven't been caught yet.

What about other nations.  Do you really believe that Germany, France, Spain, Italy, Russia, Poland, Sweden, Norway, China, etc. are not doing the same thing the NSA is doing?  Naive people.  The only way to protect your privacy is to not put it on the Internet.

This is a made up tempest while other organizations with less oversight are doing the same or worse.
Shane M. O'Neill
50%
50%
Shane M. O'Neill,
User Rank: Author
1/28/2014 | 11:21:54 AM
Re: Not surprised about NSA, but what about Angry Birds?!
Yep, it's so easy to blow off smartphone app license agreements. 99% of people tap "I agree." You're not thinking about privacy and the NSA. It's a smartphone game after all!
micjustin33
50%
50%
micjustin33,
User Rank: Moderator
1/28/2014 | 9:04:21 AM
Re: Not surprised about NSA, but what about Angry Birds?!

NSA spies you and steals your privacy infromation through Angry Birds (among with other applications).

No privacy, no mercy. That should be NSA's slogan. It's easy to strike when they know your weakness.
D. Henschen
50%
50%
D. Henschen,
User Rank: Author
1/27/2014 | 6:01:58 PM
Not surprised about NSA, but what about Angry Birds?!
What's news to me is that Angry Birds has data about my "location, marital status, sexual orientation, political affiliation, or other demographic data relevant to advertisers." My son has that app, and now I realize that we all hit "I agree" too easily to all those app license agreements. Beware: there often a lot more you're agreeing to than you would suspect.
Building A Mobile Business Mindset
Building A Mobile Business Mindset
Among 688 respondents, 46% have deployed mobile apps, with an additional 24% planning to in the next year. Soon all apps will look like mobile apps – and it's past time for those with no plans to get cracking.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Tech Digest September 23, 2014
Intrigued by the concept of a converged infrastructure but worry you lack the expertise to DIY? Dell, HP, IBM, VMware, and other vendors want to help.
Flash Poll
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.