Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

A Chrome OS bug might reveal user location history
https://techxplore.com ^ | APRIL 1, 2021 | by Sarah Katz , Tech Xplore

Posted on 04/02/2021 6:35:18 AM PDT by Red Badger

The Committee on Liberatory Information Technology has announced a long-standing Chromebook bug that could reveal user location history. Evidently already on the radar of Google, the platform has a feature allowing anyone with physical access to your device to connect as a guest and view your Wi-Fi logs.

Of course, once said intruder has accessed these logs, they would then need the technical knowhow to make sense of them. However, if they are skilled enough, they may be able to track your place history by viewing your Wi-Fi network access over the past seven days.

It turns out the bug exists largely due to Chrome OS's constant sharing of information with the Internet in order to enhance ease-of-use for the user. So far, a Google representative has stated that they are investigating this issue.

For the time being, users can avoid such tracking by disabling guest browsing mode on their devices. Furthermore, a device owner should only allow guest users run of their device by first having the guest sign into his or her own account from the lock screen. Once finished, the guest should immediately log out, and the device owner should use the user drop down menu to remove the guest from the device.

In order to avoid this bug, users can navigate to the 'Everything' button on their keyboard and input 'Settings'. Next, in the left sidebar, they should visit the 'People' section and then select 'Manage other people'. From there, the user should turn off 'Enable Guest browsing'. However, if your device version shows the 'Accounts' section on the 'Settings' left sidebar instead of 'People', users must click on 'People' in order to access the 'Manage other people' option.

Moreover, users can take the further action of 'Restrict sign-in to the following users', which can be found in the same section. That way, by selecting the option 'Add user', a single device owner with multiple Google accounts can add their email addresses so that Chromebook recognizes and allows access from only those accounts. Once the user makes this change, even someone with physical access to the device will not be able to get anywhere without knowing the credentials of the whitelisted email account.

In terms of reactions to this bug, various outlets such as The Verge have stated that they would prefer Google spend time and effort securing its products rather than inviting potential vulnerabilities simply to provide users higher tech gadgets.

Explore further

Assessing how much data iOS and Android share with Apple and Google


TOPICS: Business/Economy; Culture/Society; Government; Technical
KEYWORDS: acer; adobe; android; apple; asus; chromebook; computer; crouton; dell; freescale; google; hewlettpackard; hp; lenovo; lg; linux; microsoft; qualcomm; samsung; texasinstruments; toshiba; unix; windows; windowspinglist
It's not a "BUG", it's a FEATURE!......................
1 posted on 04/02/2021 6:35:18 AM PDT by Red Badger
[ Post Reply | Private Reply | View Replies]

To: dayglored; Swordmaker; ShadowAce

Ping!..................


2 posted on 04/02/2021 6:35:51 AM PDT by Red Badger ("We've always been at war with Climate Change, Winston."..............................)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger; rdb3; JosephW; martin_fierro; Still Thinking; zeugma; Vinnie; ironman; Egon; raybbr; ...

3 posted on 04/02/2021 6:37:52 AM PDT by ShadowAce (Linux - The Ultimate Windows Service Pack )
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger
"It turns out the bug exists largely due to Chrome OS's constant sharing of information with the Internet in order to enhance ease-of-use for the user"

~~~

BS! Let me fix that.

It turns out the bug exists largely due to Chrome OS's constant sharing of information with the Internet in order to enhance Google's tracking and monetizing of private user information



4 posted on 04/02/2021 6:38:19 AM PDT by z3n
[ Post Reply | Private Reply | To 2 | View Replies]

To: ShadowAce; z3n

‘Bugs’ don’t just spontaneously appear in software; if it’s there it’s because somebody put it there.............


5 posted on 04/02/2021 6:40:23 AM PDT by Red Badger ("We've always been at war with Climate Change, Winston."..............................)
[ Post Reply | Private Reply | To 3 | View Replies]

To: Red Badger
<>Evidently already on the radar of Google, the platform has a feature allowing anyone with physical access to your device to connect as a guest and view your Wi-Fi logs.

If anyone has physical access to your device, you've got other problems than just wifi history.

6 posted on 04/02/2021 6:42:14 AM PDT by ShadowAce (Linux - The Ultimate Windows Service Pack )
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger
‘Bugs’ don’t just spontaneously appear in software; if it’s there it’s because somebody put it there.............

~~~


Exactly. You don't need to keep Wifi "logs", with one exception; if a user tells their OS to remember a WiFi connection and reconnect automatically. But those should not be time and place logs, and the information should be encrypted, or at the very least the passwords should.
7 posted on 04/02/2021 6:44:21 AM PDT by z3n
[ Post Reply | Private Reply | To 5 | View Replies]

To: Red Badger; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; AppyPappy; arnoldc1; ...
ChromeOS has bugs? Who knew? ... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

Thanks to Red Badger for the ping!

8 posted on 04/02/2021 6:59:04 AM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 2 | View Replies]

To: Red Badger

You stole my response!


9 posted on 04/02/2021 6:59:49 AM PDT by Still Thinking (Freedom is NOT a loophole!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
> If anyone has physical access to your device, you've got other problems than just wifi history.

Seriously. :-)

I have a little Chromebook I got for listening patiently to a 30-minute spiel from Google about using Google Cloud Services a few years ago. It hasn't left my office all that time, except to come home with me at the start of the Great WuFlu Episode. So my WiFi history has exactly two locations in it.

Pretty boring.

10 posted on 04/02/2021 7:02:08 AM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 6 | View Replies]

To: Red Badger
That other link at the bottom of the story is also very interesting...

Assessing how much data iOS and Android share with Apple and Google

While it's not surprising Android/Google...

...collects a much larger amount of data from nearby devices than Apple. As a comparison, Google receives about 1MB of data versus 42KB for Apple. While idle, the Android Pixel sends around 1MB every 12 hours, while iOS shares 52KB of data. Furthermore, Google even collects about 20 times more handset data than Apple, and the majority of users in the US have Android devices

Apple is also, just to a slightly lesser degree...

There are even additional features such as iCloud, Safari and Siri that send user data to Apple regardless of whether the user permits this activity or even knows their data is being shared.

Apple, a company that touts its superior privacy protections, needs to explain this.

11 posted on 04/02/2021 7:06:05 AM PDT by ScubaDiver (Reddit refugee.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

“COOL! WE HAVE MOOVOVA’S LOCATION HISTORY!”

“Oh, never mind. Apparently, he spends most of his day on the den sofa watching Prime. The only time he’s not there is when he gets up to get a beer, go to the bathroom, get another beer, or go to bed.”

“Now find someone who has a life...”


12 posted on 04/02/2021 7:09:06 AM PDT by moovova (Yo GOP....we won't forget.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Red Badger

It’s not a bug, Jim.


13 posted on 04/02/2021 7:21:00 AM PDT by Uncle Miltie (Trans Undocumented. Anti Woke Supremacist. Covid Abortionist.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: moovova; Lazamataz

Lazamataz.......................


14 posted on 04/02/2021 7:21:26 AM PDT by Red Badger ("We've always been at war with Climate Change, Winston."..............................)
[ Post Reply | Private Reply | To 12 | View Replies]

To: Red Badger

Google does... for a price to anyone.


15 posted on 04/02/2021 1:27:27 PM PDT by minnesota_bound (I need more money. )
[ Post Reply | Private Reply | To 1 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson