Graduate Student Unveils Sprint's GPS Sharing With Feds Eight million 'pings' to user tracking database in 13 months... 09:01AM Wednesday Dec 02 2009 by Karl Bode
Blogger Christopher Soghoian is raising eyebrows this week with a recording of a Sprint executive at a conference exploring how Sprint has been using a new portal to give user GPS data to law enforcement agents an astounding 8 million times over a thirteen month span. The disclosure of course immediately raised questions over what kind of legal process is being followed, and who's being tracked. Sprint tells Wired News the 8 million number is the number of times the portal was "pinged" for information from law enforcement, and that one surveillance target can have their location pinged multiple times:
The spokesman wouldnt disclose how many of Sprints 48 million customers had their GPS data shared, or indicate the number of unique surveillance requests from law enforcement. But he said that a single surveillance order against a lone target could generate thousands of GPS pings to the cell phone, as the police track the subjects movements over the course of days or weeks. That, Sprint claims, is the source of the 8 million figure: its the cummulative number of times Sprint cell phones covertly reported their location to law enforcement over the year.
According to Sprint, the company also has to get a subpoena before a person can be tracked via GPS, except in "special circumstances" -- which include tracking a 911 caller, a missing person, or with a customer's consent. The EFF has a little more detail for those interested, and responds to Sprint's response with additional questions regarding user privacy and Sprint's process:
Is Sprint demanding search warrants in those cases? How secure is this automated interface that law enforcement is using to "ping" for GPS data? How does Sprint insure that only law enforcement has access to that data, and only when they have appropriate legal process? How many times has Sprint disclosed information in "exigent or emergency circumstances" without any legal process at all?
Sprint's at least engaged in a public dialogue on the issue, which is certainly more than many carriers would do. Wired's Threat Level blog goes on to note Yahoo and Verizon's legal objections to Soghoian's FOIA request, the companies defending limited disclosure of their surveillance activities because knowing the truth would "shock and confuse" customers, and "impair our reputation for protection of user privacy and security."
Poster Comment:
LOL to the last paragraph.