Page 1 of 1

The AOL search logs

Posted: Tue Aug 08, 2006 7:54 pm
by NHJ BV
You may or may not have heard by now, that a few days ago some people at AOL decided that it would be a good idea to release three months of log files. The files contain people's searches through AOL's search site. All they did to protect their user's privacy was changing each username into a number, but this still allows for people to see what searches belong to the same user.

The logs contain a huge amount of searches for child porn and other things you don't want to know about, as well as credit card numbers, Social Security numbers and other personal information.

The logs also show that in those three months, March 1st to May 31st, out of those 650.000+ users, exactly one person searched for O&M :smile:

The files (nearly 500MB zipped!): http://www.gregsadetsky.com/aol-data/

Search through the logs here: http://www.aolsearchdatabase.com/

A better searchsite (more results), though less advanced:
http://czern.homeip.net/aolsearch/

AOL removes the files, NY Times article: http://tinyurl.com/m6xe9

Re: The AOL search logs

Posted: Wed Aug 09, 2006 12:32 am
by Zaaphod
as well as credit card numbers, Social Security numbers and other personal information
How helpful of AOL to assist people who wish to commit identity theft. At least they removed said data once they realized what kind of idiots they were for making it available in the first place.

Posted: Wed Aug 09, 2006 1:08 am
by Dr. Doog
man wish I'd been using that site.

...

Posted: Wed Aug 09, 2006 4:22 am
by osprey
Makes me want to go to that site and look up complete gibberish things.

Screw AOL and their spying, user disregard operations. Use....


GOOGLE!

Posted: Wed Aug 09, 2006 10:49 am
by NHJ BV
Makes me want to go to that site and look up complete gibberish things.

Screw AOL and their spying, user disregard operations. Use....


GOOGLE!
Well, every search engine keeps these kind of logs, it's just that AOL is the only one stupid enough to release them like this :smile:

Posted: Thu Aug 10, 2006 9:25 am
by osprey
I don't mind my searchs being logged...what I do mind is having them released to the public. Through my searchs, I could become a target.

Posted: Tue Aug 22, 2006 12:21 am
by Zaaphod
I suppose this was inevitable. Still, it smacks of closing the barn door after the horse has already escaped.
3 AOL Workers Depart Over Privacy Breach

Aug 21, 5:45 PM (ET)

By ANICK JESDANUN

NEW YORK (AP) - AOL's chief technology officer left the company and two other workers were fired in the aftermath of a privacy breach that involved the intentional release of more than 650,000 subscribers' Internet search terms.

Although AOL had substituted numeric IDs for the subscribers' user names, the search queries themselves contained Social Security numbers, medical conditions and other data that could be traced to an individual.

Maureen Govern, the technology chief, will be replaced on an interim basis by John McKinley, who had held that position before becoming AOL's president for digital services. The change takes effect immediately, according to a memo AOL Chief Executive Jonathan Miller sent to employees on Monday.

"This incident took place because some employees did not exercise good judgment or review their proposal with our privacy team," Miller said in a second memo. "We are taking appropriate action with the employees who were responsible."

The data release is among a series of breaches involving sensitive information in recent months. Unlike those resulting from computer hacking or missing laptops, however, the AOL data had been intentionally released as part of a program to assist academic researchers.

AOL, a unit of Time Warner Inc., apologized two weeks ago for what it termed a mistake made by a company researcher who had failed to properly seek clearances before releasing three months' worth of search data. Though the information was meant for researchers, it was released to a public site and quickly circulated once a blogger discovered it.

The company fired the researcher who released the data and that employee's direct supervisor, who reported to Govern, said one person familiar with the company's decisions. The person, who spoke on condition of anonymity because release of personnel information was not authorized, would not say whether Govern's departure was voluntary. The person also would not identify the two employees who were fired.

Although the search terms released were not directly tied to real names, many individuals type their own names to find out what's being said about them. They may later search for online mentions of their credit card or Social Security numbers and perhaps for prescription drug prices, revealing their medical ailments. All the searches for each user name were linked to the same numeric ID in the released data.

AOL removed the information from its site once senior executives learned of it, but by then copies already were widely available. Some people even created search sites just for the AOL data.

At least two groups have asked the Federal Trade Commission to investigate. In its complaint, filed last week, the Electronic Frontier Foundation accused AOL of breaking a promise to protect its subscribers' privacy.

Kevin Bankston, staff attorney with the EFF, said he hoped the breach would prompt Internet companies to be more forthcoming about what data they keep and for how long. Congress, he said, may need to intervene.

"Rearranging personnel is not going to get to the root of this problem, a problem which extends far beyond AOL and to the rest of the Internet industry," Bankston said. "As an industry, the search engines have been unacceptably tightlipped about what their practices are regarding search logs."

To prevent a recurrence, Miller said AOL will:

- Create a task force led by senior executives to review privacy and data-retention policies.

- Place additional limits on employee access to data, regardless of whether they are linked to individual accounts.

- Evaluate technologies designed to flag sensitive information. Under such a system, for instance, a 16-digit string might be assumed to be credit card number and kept out of research databases.

- Improve employee education and awareness on privacy.

The fallout occurs as AOL tries to lure more people to its search services and other free, ad-supported features to offset a revenue decline that's likely to accelerate as the company stops charging for AOL.com e-mail accounts and software.

AOL continues to rank fourth in search, behind Google Inc., Yahoo Inc. and Microsoft Corp.'s MSN, according to data released this week by Nielsen/NetRatings and comScore Media Metrix.

Shares in Time Warner closed unchanged at $16.50 in Monday trading on the New York Stock Exchange.

Posted: Tue Aug 22, 2006 9:41 pm
by Tavis
Remind me not to use AOL with the search term "privacy".

Posted: Fri Sep 08, 2006 3:38 am
by Dead Rabbits
the weekend web article on somethingawful does an in depth look into this by compareing searches made by the same person. One search person searched for child porn several times before searching for games for church youth groups. That person is a horrible human being that should not be alive

Posted: Sat Sep 09, 2006 6:47 am
by autopilotnocontrol
Gonna sink it, make em think it's too late

Posted: Sun Sep 10, 2006 1:50 pm
by NHJ BV
the weekend web article on somethingawful does an in depth look into this by compareing searches made by the same person. One search person searched for child porn several times before searching for games for church youth groups. That person is a horrible human being that should not be alive
Part 1
Part 2
Part 3

Posted: Sat Sep 16, 2006 4:41 am
by Bubblegum
Oh my. Those are too much.