"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2019-06-16T17:22:29Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2019/06/16/google-ceo-sundar-pichai-on-privacy-weve-put-too-much-burden-on-users-orig.cnn-business"
data-branding-key="unhackable"
data-video-slug="Google CEO Sundar Pichai on privacy We've put too much burden on users orig"
data-first-publish-slug="Google CEO Sundar Pichai on privacy We've put too much burden on users orig"
data-video-tags=""
data-details="">
Video Ad Feedback
Google CEO on privacy: We've put too much burden on users
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2019-06-16T17:22:29Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2019/06/16/google-ceo-sundar-pichai-on-privacy-weve-put-too-much-burden-on-users-orig.cnn-business"
data-branding-key="unhackable"
data-video-slug="Google CEO Sundar Pichai on privacy We've put too much burden on users orig"
data-first-publish-slug="Google CEO Sundar Pichai on privacy We've put too much burden on users orig"
data-video-tags=""
data-details="">
Video Ad Feedback
Google CEO on privacy: We've put too much burden on users
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2021-04-15T15:48:34Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2021/04/15/google-earth-timelapse-zw-orig.cnn-business"
data-branding-key="innovate"
data-video-slug="google earth timelapse zw orig"
data-first-publish-slug="google earth timelapse zw orig"
data-video-tags="alphabet inc,business and industry sectors,business, economy and trade,celestial bodies and objects,climate change,companies,earth,energy and environment,energy and utilities,environment and natural resources,google inc,planets and moons,space and astronomy"
data-details="">
Video Ad Feedback
Google Earth's new Timelapse feature shows 40 years of climate change in just seconds
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2020-10-20T14:11:35Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2020/10/20/google-doj-antitrust-case.cnnbusiness"
data-branding-key=""
data-video-slug="google doj antitrust case"
data-first-publish-slug="google doj antitrust case"
data-video-tags="alphabet inc,antitrust and trade law,business, economy and trade,companies,continents and regions,economic policy,economy and economic indicators,google inc,government and public administration,government bodies and offices,government departments and authorities,government organizations - us,justice departments,law and legal system,lawsuits and claims,north america,the americas,trade and development,trade regulation and policy,trial and procedure,united states,us department of justice,us federal departments and agencies"
data-details="">
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2020-07-27T22:58:38Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2020/07/27/google-work-from-home-policy-twitter-facebook-coronavirus-brian-todd-tsr-pkg-vpx.cnn"
data-branding-key=""
data-video-slug="google work from home policy twitter facebook coronavirus brian todd tsr pkg vpx"
data-first-publish-slug="google work from home policy twitter facebook coronavirus brian todd tsr pkg vpx"
data-video-tags="alphabet inc,brian todd,companies,diseases and disorders,epidemics and outbreaks,flexible work arrangements,google inc,health and medical,home based employment,infectious diseases,labor and employment,misc people,public health,technology,telecommuting,working hours and patterns"
data-details="">
Video Ad Feedback
Google extends work from home policy amid pandemic
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2020-01-30T16:52:59Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2020/01/30/rip-cookies-orig.cnn-business"
data-branding-key=""
data-video-slug="rip cookies orig"
data-first-publish-slug="rip cookies orig"
data-video-tags="alphabet inc,business and industry sectors,business, economy and trade,companies,consumer products,digital privacy,food and drink,food products,google inc,kinds of foods and beverages,sweets and desserts,technology"
data-details="">
Video Ad Feedback
Google is taking a stand against cookies. But it's not that simple
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2019-06-06T22:57:37Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2019/06/06/google-facebook-duopoly-explr-zw-orig.cnn"
data-branding-key=""
data-video-slug="google facebook duopoly explr zw orig"
data-first-publish-slug="google facebook duopoly explr zw orig"
data-video-tags="alphabet inc,business and industry sectors,business, economy and trade,companies,democracy,electronic commerce,facebook,forms of government,google inc,government and public administration,journalism and news media,marketing and advertising,marketing and advertising channels,media industry,online advertising,online and home shopping,politics,retail and wholesale trade"
data-details="">
Video Ad Feedback
Google and Facebook are great at selling ads. It's terrible for journalism
"
data-check-event-based-preview=""
data-is-vertical-video-embed="false"
data-network-id=""
data-publish-date="2018-11-16T19:39:35Z"
data-video-section="business"
data-canonical-url="https://www.cnn.com/videos/business/2018/11/16/is-google-a-monopoly.cnn-business"
data-branding-key=""
data-video-slug="Is Google a monopoly?"
data-first-publish-slug="Is Google a monopoly?"
data-video-tags="alphabet inc,antitrust and trade law,business and industry sectors,business, economy and trade,companies,computer science and information technology,economic policy,economy and economic indicators,google inc,internet and www,internet software and applications,law and legal system,search engines,software and applications,technology,trade and development,trade regulation and policy"
data-details="">
When you deny a mobile app permission to collect personal data from your phone, it’s reasonable to expect it abides by that. But a new study of popular Android apps found that’s not always the case.
Thousands of popular apps from the Google Play Store are able to bypass permissions to collect user data, according to the nonprofit research center International Computer Science Institute, which partners with University of California, Berkeley. The apps workaroundrestrictions by finding “side channels” or “covert channels” such as taking data from apps that do have those permissions, potentially affecting hundreds of millions of Android users.
Researchersfound roughly 60 Androidapps, which have been downloaded millions of times, are already doing this. Many others are built with code that could allow them to do the same.
The study also points out that Android permissions make it difficult to track how an app will share the information and under what circumstances, even when users do agree to share data.
“These deceptive practices allow developers to access users’ private data without consent, undermining user privacy and giving rise to both legal and ethical concerns,” the researchers wrote.
The researchers contacted Google about what they found, and the company paid them a bug bounty. Google says the issues will be addressed in the next bigAndroid update, called Android Q, that is expected later this year.
The study was sponsored by the US National Security Agency’s Science of Security program, the Department of Homeland Security and the National Science Foundation, among others, and was presented at the Federal Trade Commission’s PrivacyCon event last week.
Researchers downloaded and analyzed the most popular apps in each category of the Google Play Store, 88,000 in total.
In some cases, apps with permission to access information like location data stored it on the phone’s SD card, where apps without proper permissions could access it.
In other cases, users may have technically given the app access to the data without understanding exactly what they were agreeing to. For example, photos often include metadata such as the time and location where they were taken, meaning an app could view a user’s location even if it didn’t have permission.
“We note that these exploits may not necessarily be malicious and intentional,” the researchers wrote.
Google says photo location information will be hidden by default from apps that request photos on Android Q, unless developers specifyon the Google Play Store whether their app is capable of accessing a photo’s location. The update will also require apps that gather wifi access point information (which researchers say is de facto location data) to have location permissions. Apple also recently announced it was cracking down on apps using wifi and Bluetooth connections to gather location data in its next iOS update.
The study reinforces concerns over the ways Big Tech companies manage and protect (or fall short of protecting) user privacy. Google
(GOOGL) CEO Sundar Pichai said at a December Congressional hearing that the company does collect a large amount of user data and offers tools for users to determine how much of their information they allow Google
(GOOGL) and applications on the Android operating system to collect. However, he has conceded that the company could be doing more.
“I don’t think users have a good sense for how their data is being used, I think we’ve put the burden on users to a large extent,” Pichai told CNN’s Poppy Harlow last month. “I think we need a better framework where users get that comfort that they are in control of their data, how it’s used.”
