COMMENTARY Google (GOOG) got caught last week bypassing privacy settings on Apple's (AAPL) Safari browser. Now it appears the search giant also did an end run around Internet Explorer, according to Microsoft (MSFT).
Specifically, the software maker says Google circumvents IE's so-called P3P Privacy Protection feature, a Web standard that lets websites tell a browser what they intend to do with information they collect about a user. Google "utilizes a nuance in the P3P specification that has the effect of bypassing user preferences about cookies."
According to the Wall Street Journal, Google and other advertising network owners used special code to bypass Safari's privacy settings, letting it track Web users. Google, which appears to have immediately stopped the practice, says this resulted from an effort to make its "+1" buttons -- the equivalent of Facebook's "like" buttons -- work properly. Google's own statement about the Safari issue says that the company needed to work around that browser's privacy defaults "to provide features that signed-in Google users had enabled":
Unlike other major browsers, Apple's Safari browser blocks third-party cookies by default. However, Safari enables many web features for its users that rely on third parties and third-party cookies, such as "like" buttons. Last year, we began using this functionality to enable features for signed-in Google users on Safari who had opted to see personalized ads and other content-such as the ability to "+1" things that interest them.
Google says that Safari -- unlike other major browsers -- blocked cookies by default and that the ability to set other cookies (namely, ad-related ones) was something the company "didn't anticipate." That's a curious explanation, given Google's vaunted technical expertise, particularly in working with browsers and websites.
Whose Web is it, anyway?
Microsoft and Google have regularly traded shots over privacy, each trying to paint the other as serial violators. Trouble is, skirting Web standards goes straight to the heart of how the Internet operates. Without some basic level of cooperation between competing entities, consumers around the world don't know what to expect, arousing regulatory concerns. And the government is unlikely to be impressed by Google's claims that advertising cookies don't collect "personal information."
[Update: CBS MoneyWatch contacted Mozilla, which makes the Firefox browser, to see if it had noticed Google bypassing privacy controls. Here's the statement attributed to Alex Fowler, global privacy and public policy lead: "Our testing did not reveal any instances of Google bypassing user privacy settings.]