If you’re connected to a wireless network, odds are high that little bits of data are trickling out of your device like water from a leaky faucet. “Our phones leak data in a bunch of different ways,” says artist Kyle McDonald. “Sometimes it’s really insidious or unexpected.”
Recently at Moogfest, a music and technology festival in Durham, N.C., McDonald with the help of fellow artist Surya Mattucreated an installation called WiFi Whisperer that called attention to all that data your phone is giving away for free. As festivalgoers walked past the installation, the artwork grabbed insecure data and display it on monitors, while a hidden speaker whispered the stream of data---what networks you've recently connected to and websites you've visited, for example---like a creepy, demon-voiced Big Brother. "It's sort of like looking over someone’s shoulder," says McDonald, "except you’re doing it without actually looking over their shoulder.”
The artists built sniffers made from eight Raspberry Pis and wireless antennas, tuned to the different frequencies of open wireless channels. “We know where the data is in the air,” McDonald explains. “Normally these packets are getting sent from one device to another, but there’s no reason you can’t just stand nearby and listen to that same data as though you were the device it was intended for.”
By partnering with Festify, Moogfest’s wireless internet provider, the artists were able to grab even more data---things like the names of networks you were previously connected to, your device’s MAC address, the host name of your laptop or phone, the server your http traffic is aiming for, and even text from whatever website you’re visiting. “You can see exactly what articles people are looking at,” McDonald says. “You can see exactly which comment they’ve thumbs-up’d.”
Businesses have actually used this kind of data to build consumer profiles. In 2012, Nordstrom began tracking the wifi signals emitted from shoppers' phones, to pinpoint their location in the store. Nordstrom argued it was simply the brick and mortar version of what online retailers do with cookies. Consumers didn't agree, and Nordstrom ended its experiment. Analytics companies like Euclid and Nomi use what they claim is anonymous data to figure out exactly where customers go and how many customers leave without buying something. Fairly practical information, you might think. The issue, McDonald says, is that most of us don't even realize we're broadcasting personal information.