Privacy Group Asks FTC To Block Pentium III

Welcome Guest. | Log In| Register | Membership Benefits

February 26, 1999 (4:34 PM EST)

By Mary Mosquera,

The Center for Democracy and Technology asked the Federal Trade Commission on Friday to block Intel from shipping its Pentium III chip while the regulator investigates the privacy concerns related to the newest chip's personal serial number.

The civil-liberties group also wants the FTC to stop computer makers from shipping their Pentium products unless the identifying-number feature is turned off in a secure manner, said Deirdre Mulligan, the group's staff counsel in Washington, D.C.

The Pentium III chip, which is available now, contains a serial number that is accessible by browsers and other software when users visit a site. The new chips let consumers be followed as they click through the Internet, collecting data about users without their knowledge or consent, the underlying concern of privacy groups such as CDT, and the Privacy Information Clearinghouse which is joining the complaint.

Two other privacy groups, the Electronic Privacy Information Center and JunkBusters, are urging a boycott and investigation of the Pentium III.

"Data has few limits from government access. The personal serial number could be a treasure trove for some governments around the world."
-- Deirdre Mulligan
Center for Democracy and Technology

"The personal serial number is just as likely to undermine privacy as it tracks people as they travel the Web, even though it is a security device," Mulligan said. And the fact that the most dominant chip maker is utilizing this feature suggests it could become widely used among companies operating on the Web.

Intel's design decisions have far-reaching impact on the computer industry, said Mulligan. "Data has few limits from government access. The personal serial number could be a treasure trove for some governments around the world," she said.

Intel said the technology improves the security of online transactions. And it has altered the feature so that consumers have the choice to use it or not as a result of talks with privacy groups. "We certainly, over time, have taken into account privacy concerns in how we designed the feature and software designs to help control the feature," said Intel spokesman Mike Waldrop. "Consumers have exposure on the Internet that is not insignificant," he said, and need the security benefits.

The Santa Clara, Calif.-based chip maker said the personal serial number will help authenticate remote users in large networks when a password may not be enough, strengthening the security of transmissions.

CDT said it filed the unfair and deceptive practice complaint because Intel created a perception in the marketplace that the personal serial number was only a security device, but Intel has no control over how it is used, said Mulligan. Companies that mine data to assemble personal profiles and sell them could take advantage of the serial code without the knowledge of the user. "We are doubtful that Intel's tools will provide consumers meaningful control," Mulligan said.

Intel provides a software-utility control device that gives consumers the choice to turn the feature on. However, a German magazine last week showed that the software could be hacked and the control activated remotely. All software can be hacked, Intel said. That's why it encouraged computer makers to install an adjustment to the BIOS, which is closer to the hardware.

Computer makers IBM and Compaq will turn off the serial code in BIOS, or the input-output system, Mulligan said. IBM will also provide materials online and with its computers about the personal serial number. Compaq said in its materials it will provide a software utility that informs users about activating the code.