OpenStreetMap (OSM) representatives reported yesterday that miscreants originating from a Google IP address in India had extensively vandalized OSM — a Google spokesperson has since informed us that two contractors had acted "on their own behalf while on the Google network," and that they are no longer working on projects. OSM says that the vandals moved and deleted information from the system, and made subtle-but-devious changes, like reversing the direction of one-way streets.
OSM representatives say that the vandal's IP addresses match those that were discovered last week by Mocality, a small Kenyan firm that caught Google Kenya staff in the act of scraping its database, stealing its customers, and misrepresenting its relationship with Mocality. Google confirmed Mocality's accusations, but we've since learned that a small team was responsible, and that Google did not condone its actions.
Update: A source close to Google tells us that the company has "terminated relations" with the contractors, and that their behavior violated Google's network policies. They also tell us that Google's investigation has found that the contractors only made twenty troublesome edits to OSM, and not thousands as insinuated in the original post. Finally, our source stresses that this case of vandalism has no connection to the Mocality data-scraping incident that surfaced last week — while the network IP addresses are the same, they say that Mocality was working with separate vendors in India, and that the contractors in the OSM case just happened to be working in the same office.
Even OSM's team is not universally convinced about Google's involvement: Tom Hughes, an OSM system administrator, commented on the original vandalism accusation post, claiming that the report is "grossly irresponsible and wholly inappropriate." Hughes says that there's no evidence to suggest that this case of vandalism is any different than other common instances, and that "it seems to me that this is just an attempt to get some cheap publicity by trying to [link] the project to the Mocality incident."

There are 55 Comments. Add yours.
Isn’t this awkward with the other story about copying the directory? Google are being really naughty! Tut tut!
Posted on Jan 17, 2012 | 3:18 PM EST reply Recommend (5) Flag actions
Not really. Some people contracted by Google, not even Google employees, did something bad.
Google’s picking up the pieces of something that they didn’t do.
Posted on Jan 17, 2012 | 3:27 PM EST reply Recommend (5) Flag actions
Google’s fully responsible. The contract/employee basis for employment is immaterial here. I sure hope we don’t see a new paradigm developing, where companies hire scads of contractors
so they can deny any knowledge of their actions.Posted on Jan 17, 2012 | 3:31 PM EST reply Recommend (18) Flag actions
Shit happens. That doesn’t mean that “Google’s being really naughty!”
They’re taking responsibility. I don’t really see the issue here.
Posted on Jan 17, 2012 | 3:35 PM EST reply Recommend (5) Flag actions
For real? ‘Shit has happened’ three times in as many weeks, with this proceeded by the Chrome advertising thing and the Kenya scrapping thing. That’s piss-poor management, pure and simple.
Posted on Jan 17, 2012 | 3:43 PM EST reply Recommend (16) Flag actions
Google blacklisted itself over the advert thing – that seems pretty fair, no?
Posted on Jan 17, 2012 | 4:49 PM EST reply Recommend (5) Flag actions
Sure, but they better get their acts together.
Google is a powerful company so obviously they are taking more heat when shit like this happens.
Posted on Jan 17, 2012 | 4:57 PM EST reply Recommend (1) Flag actions
Perhaps. Though they are a huge company (thus hard to get a perfect 100% handle on everything that happens inside their IP range) and they’ve taken action on these things – I genuinely don’t think that there are high level discussions where Page & Brin decide to “DESTROY OpenStreetMap”.
Posted on Jan 17, 2012 | 7:28 PM EST reply Recommend (2) Flag actions
Google is a world-wide company with tens of thousands of employees and who knows how many others working on their behalf. Not every single one of them is necessarily going to be a good egg.
And it’s not the shit that happens that reflects most on the quality of management, it’s management’s response to said shit that matters. Even the best manager can’t prevent rogue acts.
And to anyone who feels like jumping to oversimplified conclusions, take a step back and think before you post. Our world is rarely as black and white as some decide to see it, so we need to be careful, especially when working with incomplete information.
Posted on Jan 17, 2012 | 7:10 PM EST reply Recommend (2) Flag actions
Indeed, but as I previously remarked, this is the third time that this has happened in three weeks, that indicates bad management and poor oversight.
I agree that management’s response is very telling, that’s why it’s particularly concerning that neither Larry Page or Eric Schmidt have been held accountable for what occured on their watch. When executives aren’t held accountable its not surprising that the rank and file believe that they won’t be either.
Posted on Jan 17, 2012 | 8:23 PM EST reply Recommend (3) Flag actions
But this doesn’t happen nearly as much at other similarly large companies.
The actual problem Google has is that it grew to an enormous size in a short timeframe and built a culture that gave people lots of latitude, and the result is a company with poor chain of command and some little uncontrolled teams doing things that upper management would never sign off on.
Enpowering employees is generally great, and for the most part, Googlers do the right thing and everything happens like it should, but there’s no telling how many random pockets of problem actors there are.
Posted on Jan 17, 2012 | 9:22 PM EST reply Recommend Flag actions
You seem to be downplaying these incidents as a few bad apples within Google, that may be true, but that doesn’t address why there are no incidents like this happening at other large tech companies. Where is Facebook messing with G+? Apple employees vandalizing Samsung? Microsoft employees messing with Linux source code?
I see none of those things happening. Yet in four weeks we have three incidents of Google employees acting in ways that many decry as “evil”. While these may be individuals (or teams as in the case of Mocality), these individuals are representatives of Google and are reflective of Google’s corporate culture.
Posted on Jan 17, 2012 | 3:53 PM EST reply Recommend (12) Flag actions
He probably never work in a company.
Posted on Jan 17, 2012 | 4:59 PM EST reply Recommend Flag actions
These things are actually considerably less problematic than what many corporations engage in, for instance, Facebook hiring that PR firm to anonymously spread stories about Google:
http://www.bloomberg.com/news/2011-05-12/facebook-enlists-pr-firm-burson-marsteller-to-pitch-google-privacy-story.html
Hiring a PR firm does happen at least near the highest levels. Same thing goes for the studies that used to show up, commissioned by groups that until recently didn’t exist, about Linux’s hidden costs and the many patent liabilities companies would expose themselves to if they use it.
Posted on Jan 17, 2012 | 5:13 PM EST reply Recommend (2) Flag actions
No, I’m downplaying this as a few bad apples not within Google. Just because they had clearance to be on Google’s network doesn’t mean they were carrying out contracts by Google at the time.
Jeez.
Posted on Jan 17, 2012 | 7:43 PM EST reply Recommend Flag actions
Are they taking responsibility because it’s the right thing to do, or because they got caught? It seems the latter from my perspective.
Posted on Jan 17, 2012 | 4:06 PM EST reply Recommend (7) Flag actions
“right thing to do?” What are we, 12?
Posted on Jan 18, 2012 | 3:36 PM EST reply Recommend (1) Flag actions
Did they fire the rouge employees before or after the press picked up on this story.?
Posted on Jan 17, 2012 | 4:18 PM EST reply Recommend Flag actions
I don’t know, does it say anywhere that Google knew before the press did?
Posted on Jan 17, 2012 | 7:44 PM EST reply Recommend Flag actions
Once is an anomoly, two is interesting, but three is a trend. It seems like Google needs to add some real oversight to contractors if it is contractors doing all the naughty things.
Sorry but cleaning up after the fact doesn’t undo the damage done. Hopefully they are taking actions to nip this in the bud now.
Posted on Jan 17, 2012 | 3:58 PM EST reply Recommend (5) Flag actions
Exactly. It is trending this way. It seems google has some issues with controlling its staff and contractors, which is alarming seeing as how many other larger orgs can manage it better.
There was also the time when a goog employee took matters into his own hands regarding windows security vulnerability. Now these things.
There is no such thing as innoccent mistakes when in such frequency. It just points to bad policy and enforcement or just…. Unprofessional corp culture.
Posted on Jan 17, 2012 | 8:44 PM EST reply Recommend (1) Flag actions
I can imagine that the contractors tried to contact Google if they were allowed to do these actions but like everyone else couldn’t actually talk to anyone from Google.
Posted on Jan 18, 2012 | 2:41 PM EST reply Recommend Flag actions
That’s like hiring a hitman and then acting surprised that somebody died.
Posted on Jan 17, 2012 | 7:08 PM EST reply Recommend (1) Flag actions
Google: Don’t Get Caught Being Evil™
Posted on Jan 17, 2012 | 3:18 PM EST via mobile reply Recommend (20) Flag actions
It’s hardly like this is a corporate culture issue, aside from the general “side projects” being misunderstood by some employees who are overly eager.
Posted on Jan 17, 2012 | 3:22 PM EST reply Recommend (2) Flag actions
The lesson here is an old and obvious one: if you outsource to the third world, expect to be have your business stolen and sabotaged.
Posted on Jan 17, 2012 | 3:25 PM EST reply Recommend (2) Flag actions
Don’t be ridiculous, this could just have easily happened in the US or other More Economically Developed Countries as it could in Newly Industrialised Countries (this is what we called Countries like China, India and Mexico in the 21st Century). FYI, the “3rd World” is now called Less Economically Developed as it makes us in the MEDCs seem less dickish.
Posted on Jan 17, 2012 | 3:36 PM EST reply Recommend (2) Flag actions
“Third world” started out having nothing to do with wealth – it was a way of indicating during the cold war that a country was not aligned to NATO (1rst world) or Communism (second world).
Posted on Jan 17, 2012 | 3:55 PM EST reply Recommend (1) Flag actions
That’s true, I had momentarily forgotten about that, although it isn’t used in that way now.
Posted on Jan 17, 2012 | 4:13 PM EST reply Recommend Flag actions
but that is not how Psycros used it.
Posted on Jan 17, 2012 | 4:20 PM EST reply Recommend Flag actions
way to be a douche.
Posted on Jan 17, 2012 | 4:20 PM EST reply Recommend Flag actions
Google ‘contractors’ seem to be busy these days.
Posted on Jan 17, 2012 | 3:25 PM EST reply Recommend (3) Flag actions
Don’t be evil, yet seeming more and more evil everyday.
Posted on Jan 17, 2012 | 3:28 PM EST via mobile reply Recommend (2) Flag actions
With all the “few bad apples” Google has maybe they need to hire Former President Bush as CEO.
Posted on Jan 17, 2012 | 3:29 PM EST reply Recommend (2) Flag actions
You know what they say about a few bad apples spoiling the entire bunch. Google needs to do more internal ethics training and enforcement of those ethics.
Posted on Jan 17, 2012 | 4:59 PM EST reply Recommend Flag actions
Finally some light is starting to shine through the “no evil” business practices of Google.
Posted on Jan 17, 2012 | 3:35 PM EST reply Recommend (7) Flag actions
No.
Posted on Jan 17, 2012 | 3:38 PM EST reply Recommend Flag actions
inb4 400+ troll/anti-troll replies
Posted on Jan 17, 2012 | 3:38 PM EST reply Recommend (3) Flag actions
That’s a low bar to set.
Posted on Jan 17, 2012 | 4:48 PM EST reply Recommend Flag actions
We actually don’t know the full timeline here. It’s possible that all these actions happened at more or less the same time, and google is reacting the accusations as they crop up.
That being said, I could be entirely wrong, and google is not paying attention to their contractors. They are responsible for the actions of their employees/contractors, even if they are not necessarily at fault for the actions of their employees/contractors.
Posted on Jan 17, 2012 | 4:24 PM EST reply Recommend Flag actions
As an aside, I appreciate the use of the word “sacked” in the headline.
Posted on Jan 17, 2012 | 4:56 PM EST reply Recommend Flag actions
Looks like they changed the headline :(
Posted on Jan 17, 2012 | 7:05 PM EST reply Recommend Flag actions
How may times is Google going to tell us it was “not Google, but some rogue elements within or contracted by Google”. Google needs to have better management and oversight and ethics training for their employees and contractors. I’m sure all of these are cropping up at the same time because one scandal begets another as people go looking for more. I’m hoping Larry Page is tightening down the organization and putting measures in place to prevent this sort of thing in the future.
Whatever measures they take today obviously won’t prevent more of these incidents being uncovered in the coming month if there really is a lack of oversight in enforcing the company’s values. One thing my employer tells us in ethics training every year is that every employee’s actions directly reflect on the company as a whole. That each employee is the face of the company. Google fans and Google execs seem to be missing that point.
Any company with as much power to influence popular opinion and look at information on an individual needs to not only declare high ethics, but enforce them vigorously with intense oversight. What makes things scary for a company like Google to be “evil” is that you can imagine a Google search for one political candidate favoring the positive articles about that candidate while the search for his opponent favoring the negative articles. With elections as close as they are, a “rogue Google” could actually influence an election far more than the press ever could.
Google, please make enforcement of stated company values priority #1 for 2012.
Posted on Jan 17, 2012 | 4:58 PM EST reply Recommend (2) Flag actions
Guys. These incidents happened in small markets, and were the acts of contractors. I know people really want to believe that a contractor is the same thing as an employee, but it’s not. It’s an outsourced position. They work for another company. They use Google IP addresses only when they’re doing work for Google. It’s very difficult to monitor what contractors are doing because, again, they work for a different company.
Since the disclosures, Google has been incredibly forthcoming and has done everything in its power to make things right. They recognize that these actions pose a threat to their credibility, and they have an incentive to stamp them out.
But let’s get something clear. For those suggesting Mocality was intentional, and somehow condoned by Google corporate: wouldn’t that be predicated on the idea that there was a large profit incentive for them to cheat in the Kenyan market? Seems like a stretch.
Likewise, what incentive does Google have to sabotage OpenStreetMap? They sponsor them. Not to mention creating conflicting digital maps online sows uncertainty for all digital map providers.
Posted on Jan 17, 2012 | 5:17 PM EST reply Recommend (3) Flag actions
The Google Chrome promotion video and the thin content incident show that Google hired an outside source who was known use such tactics for Internet promotions and failed to actually monitor where their money was going.
The evidence for the Mocality incident indicates a planned strategy and a concerted effort with serious funding with touch points on HR and accounting. Some red flags should have gone up somewhere in Google to prevent it. I doubt it was endorsed by the executive team, but it is indicative of a lack of oversight. Certainly some director or manager was given a goal in Kenya and he intended to meet that goal for his annual review by any means necessary. Apparently his boss was not watching him too closely and gave him a whole lot of rope and funding to use however he saw fit.
This maps incident shows that Google’s management is not being selective enough in choosing and training contractors. Just like regular employees, contractors want to get paid. Payment hinges on the renewal of the contract and continued hours. Obviously those responsible failed to understand the consequences of their actions or believed they would never be caught.
Google simply needs better oversight and management in place. It looks more and more like they are spread a bit too thin to properly manage their operations.
Posted on Jan 17, 2012 | 7:03 PM EST reply Recommend (2) Flag actions
Thank you for being clear-sighted.
Posted on Jan 17, 2012 | 7:45 PM EST reply Recommend (1) Flag actions
I think you are all missing something here, a small fact but rather important.
IF I were say wanting to spy on Mocality for example, I might not turn up outside their office in a Google+ T-Shirt, with an Chrome messenger bag clutching my Android plush toy…it might arouse suspicion, rather I would wear my normal clothes (Leather Jacket, Pink Tu-Tu and some Silver Platform boots, ROFL) and blend in.
So if I was Google and I wanted to steal info and I went to the trouble of using sub-contractors to do it, would I not just let them use their own IP addresses, instead of giving them traceable Google ones?
I guess the leaders of Google, in their volcano lair and stroking their kitties must just love the attention :-)
Or maybe its just as were being told, rogue contractors doing things they shouldn’t be, likely for their own benefit and leaving Google with a mess to clean up and apologise for. Its kind of like when a baby spills their glass of grape juice on your neighbours new white carpet…you didn’t do it, but you have to apologise and make amends for it as if you had done it yourself.
Seems straightforward enough.
Posted on Jan 17, 2012 | 7:21 PM EST reply Recommend (3) Flag actions
http://www.newyorker.com/humor/2010/10/18/101018sh_shouts_rich
Posted on Jan 18, 2012 | 4:53 PM EST reply Recommend Flag actions
I gotta say, this feels like amateur hour at google. Come on man, this is seriously unprofessional.
Posted on Jan 17, 2012 | 8:48 PM EST reply Recommend (2) Flag actions
Looks like the Kenyans are trying to revolt.
Posted on Jan 17, 2012 | 10:05 PM EST reply Recommend Flag actions
I’d suggest doing a serious investigation into Google India. Two incidents in a week and I’d question every employee there.
Posted on Jan 17, 2012 | 10:11 PM EST reply Recommend Flag actions
this isnt a good year for google.
Posted on Jan 17, 2012 | 10:25 PM EST reply Recommend Flag actions
Google has made donations to OSM in the past. Like the post says, rogue contractors. If I remember correctly, google has something like 10k employees and lots of contractors. Companies that size will have issues. Too bad that all the bad pub is coming at once.
Posted on Jan 17, 2012 | 10:44 PM EST reply Recommend Flag actions
Nobody insinuated that there were thousands of “troublesome” (read malicious) edits from Google. The OSM blog only said that they still had to go through thousands of edits from the Google India IP range to find out if there was more vandalism.
And what about liability? Why is an apology (or as here, the mere assertion that some unnamed scapegoats have been fired) enough? This is the systematic and strategic damaging of a competitor. Google shouldn’t get away with these practices just because it’s big.
Posted on Jan 18, 2012 | 5:45 AM EST reply Recommend Flag actions
I’ve been heavily involved in OpenStreetMap for a long time, and I find it rather frustrating that people are going wild about this google vandalism story. It’s no big deal.
Looking for google evilness? Looking for a real scandal? Three words: Google Map Maker. Look no further.
Posted on Jan 18, 2012 | 10:41 AM EST reply Recommend Flag actions
Something to say? Choose one of these options to log in.