http://blog.clearnetsec.com/articles/2006/12/01/ex-coworker-google-analytics-and-%E2%80%9Cstalking%E2%80%9D en-us 40 <p> I debated whether to write on this, but I think it’s funny and freaky. It’ll be a struggle to make this short and to the point without losing you, but here it goes: </p> <p> <ul> <li> A former exec of a company we all worked for now evidently works with google in some capacity </li> <li> We stay connected with other ex-colleagues from this same company </li> </ul> </p> <p> So the other day I was looking to offload some javascript work and I used google to search for former engineering colleagues from this same company that specialize in UI stuff, knowing most UI developers like to show off their works. I found and surfed around their sites -- half out of boredom and half to check out the skills they were marketing, what’s new, etc. </p> <p> Come the next evening I get a message to stop viewing their web sites. I thought WTF! Damn, am I compromised? I fire off a few questions for sanity and to see if this is a joke. I get back snippets of info like: <ul> <li> IP address (it was one of mine -- I wasn’t using a proxy to hide) </li> <li> Google searches performed (I couldn’t remember what I did, but the terms sounded familiar) </li> </ul> </p> <p> More bizarre is I get word this exec called the UI developers and said I was “stalking” them based on my googling and surfing patterns. Wow. Is this for real? Whatever the facts end up being I had a couple of thoughts regardless: </p> <p> <blockquote> 1) This sucks; it seems deranged of someone to equate the viewing of public web pages to “stalking”… and especially to take it far enough to actually call and “warn” people. Crazy, right?<br /><br /> 2) It’s an excellent reminder that it is not difficult for people that have no business keeping tabs on your online activity from learning more about you. Google records everything (source IP, search criteria, what you select) – mix that with a little advanced IP geolocation (or hit up your friend on the inside) and you’ve got the account holder’s details (e.g. address, names). </blockquote> </p> <p> For speed sake I usually avoid hiding behind proxies. Then again thinking about insiders at some search company collecting and sharing all my searches is not exactly appealing. Fri, 01 Dec 2006 13:20:00 -0700 urn:uuid:1d155f5b-dfec-4289-8bdf-8c2aa80506cb tate@ClearNetSec.com (Tate Hansen) http://blog.clearnetsec.com/articles/2006/12/01/ex-coworker-google-analytics-and-%E2%80%9Cstalking%E2%80%9D ClearNet Security Tate Hansen tracking <p>I can&#8217;t help but wondering about the legality of the whole thing. <br /> <br /> The word stalking cannot even remotely apply to searching for information about other people on the internet (or their work). Do I stalk Isac Asimov by using a library&#8217;s card index to find his books?<br /> <br /> Ridiculous.</p> Tue, 05 Dec 2006 14:08:13 -0700 urn:uuid:3faaf1aa-fda6-4f1a-9a64-08b0508d4e5d http://blog.clearnetsec.com/articles/2006/12/01/ex-coworker-google-analytics-and-%E2%80%9Cstalking%E2%80%9D#comment-34