Surprise, surprise: my online metadata actually reveals where I've been
Here are some of the places that Ars tracked Cyrus Farivar to in February 2014. — In January 2014, documents provided by Edward Snowden showed that a Canadian spy agency used a unique identifier to follow thousands …
Context & Ripple Effects
This piece is Ars's answer to a question the Snowden archive raised in January, when documents showed a Canadian spy agency used airport Wi-Fi identifiers to track passengers for days after they left the terminal. Rather than rely on leaked classified files, reporter Cyrus Farivar turned the method inward, reconstructing where he himself traveled in February 2014 from ordinary online metadata.
The exercise lands in the middle of the post-Snowden debate: Snowden argued publicly in March 2014 that encryption and civilian oversight are the public's main protections, and this self-experiment gives that argument a civilian-scale proof — no agency access required for location exposure.
First-order effects
- Readers see a concrete demonstration that everyday metadata alone mapped Cyrus Farivar's February 2014 movements — the same class of identifier the Canadian agency exploited at scale.
Second-order effects
- Services that log user metadata face a reputational problem: each journalistic replication makes 'it's just metadata' harder to defend as harmless collection.
Third-order effects
- If the pattern holds, metadata transparency shifts from a spycraft story to a consumer one, strengthening demands for encryption defaults and oversight structures of the kind Snowden advocated in March 2014.
The trend: Post-Snowden, metadata is being reframed from technical exhaust into a primary surveillance record, proven by journalists reproducing intelligence methods on themselves.