Surprise! White House Keeps Information on Visitors to Whitehouse.gov

BushComputer.jpgBostonist is never surprised by revelations about the current administration, so when we learned from local internet security expert Richard Smith that the White House web site uses cookies to keep track of the internet browsing activities of people who visit the site and other programs to keep possibly past content from being archived, well, we weren't like, "OMG!" (Full disclosure: In addition to his web sleuthing duties, Smith is our mother-in-law's husband.) But we were excited to have a proper Boston connection to let us post about the President's snooping proclivities (Smith lives in the South End).

Smith, who spends his days working as a consultant on internet security matters, prowling the web for interesting information, and urging Bostonist to get a better job, made his cookies discovery today and promptly reported it to Bostonist (and the Associated Press). Why is this a big deal? Well, to privacy experts like Smith, cookies are the very essence of what's wrong with the internet, because they let web site operators know where you've been and what you've been doing. The Clinton administration apparently felt this way too, since the Director of the Office of Management and Budget established a no-cookies policy for government web sites in 2000. And the Bush administration has lately had some problems following federal laws regulating electronic snooping.

The "Privacy Policy" page at whitehouse.gov says that the site "will gather and store certain information about your visit automatically. This information does not identify you personally." However, the site then goes on to say that the information gathered includes, among other things, your IP address and "the pages you visit." Now, Bostonist is no interweb genius, but we know how to look stuff up on Wikipedia, and they say that "the unique nature of IP addresses makes it possible in many situations to track which computer — and by extension, which person — has sent a message or engaged in some other activity on the Internet. This information has been used by law enforcement authorities to identify criminal suspects." Smith adds that the cookies on the White House site are actually provided by Web Trends, a company that specializes in this sort of thing, and that they aggregate information from the web sites of other Web Trends customers. In other words, a visit to www.whitehouse.gov might pass on information from previous visits to the web sites of T-Mobile, H&R Block, and, most dangerous of all, the city of Calgary.

Smith also discovered that the White House web site is employing certain programs to prevent search engines from archiving some sections of the site's content. That suggests that there are certain things that used to be on www.whitehouse.gov that the White House would prefer no one looked at ever again. Of course, these might just be embarrassingly wrong Final Four picks and catty e-mail conversations about contestants on last year's Apprentice, but Bostonist isn't so sure, given the President's inclination to say things he later regrets. Some of the sites are still up on the whitehouse.gov server, like this one, which links to a speech in which the President urged Congress not to "micro-manage" the administration, and to give it "managerial flexibility to get the job done right." Some are there but contain no information or have been cleansed of pictures, leaving only captions. And some just lead to an error message. Perhaps the content from all these sites is still available elsewhere, but the White House felt a little sheepish about the fact that all the blocked sites have "911" and "iraq" in the same URL. These are questions that Bostonist has neither the time nor resources to investigate, but since Smith also spoke to someone at the Associated Press, the real-life journalists may soon provide some real-life journalism on this matter. Stay tuned.

Contact the author of this article or email tips@bostonist.com with further questions, comments or tips.

Comments [rss]