Live data from Hacker News

Why privacy is important, and having “nothing to hide” is irrelevant

robindoherty.com

151–160 of 329 posts

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#151
post #64

I think the tech crowd is in denial about their role in surveillance. We expect professionals to behave ethically. Doctors and companies working on genetics and cloning for instance are expected to behave ethically and have constraints placed on their work. And with consequences for those behaving unethically. Yet we have millions of software engineers working on building a surveillance society with no sense of ethic…

I'm inclined to agree. I'd like to see more active ostracisation against software developers that have worked for organisations like the NSA and GCHQ. If we can make it a career ending job, it will dramatically reduce their ability to recruit. However, I'd also like to see general software development think more closely about the role it has in normalising these things. Next time you start to create an account system…

Are you giving the green light to guilt via association? Just because someone worked at GCHQ that does not mean they have done something unethical. Said person could have in fact done something very important for their country.

Who are you associated with that I (or society) doesn't like? Maybe your career should be ended for working with an organisation that has done something unethical whether you were involved or not?

Freedom of association is one of the cornerstones of a free society.

You need to think long and hard about your opinions my friend.

I also had myopic opinions when I was fresh out of college though - filed under shithnsays

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#152
"Our digital lives are an accurate reflection of our actual lives"

Which of course presumes we have a digital life, and which of course has been proven repeatedly to not be the case. It is also not accurate.

Take data warehousing companies who are profiling home IP addresses and hoovering up any digital breadcrumbs people leave behind, like user agent strings, length of time spent on a page, any previous cookies stored locally on the machine: an enormous store of value for anyone who decides to purchase such information, except for the fact that it has no value.

The 'info' exists without any context, and could even be poisoned by a small portion of users who decide to stuff the system full of disinformation to control market share or lobby for certain products.

Also - IPV4 addresses (now more than ever) can be attributed to several hundred people because ISPs grant a subnet to multiple customers.

This is not saying everything's fine and our digital doppel is a fuzzy haze of nonsense. But it does say that privacy advocates are apt to overestimate how accurate such information is, and that the people who buy such information are finding out this too and have probably decided to pay more to other collection points to get a finer-grained doppel of some person.

I say let them spend more, but I will cry tears of joy when I find that money has been ill spent too and doesn't accurately portray a person digitally.

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#153
post #112

Earlier quoted context omitted.

Your whole post is written in bad faith and frankly revolting. Which sector is building startup after startup for data mining, tracking, building profiles? This in addition to the already established companies. Then you're trying to downplay the issue to trivial actions such Facebook likes or tracking of IP addresses, a toy version of the state of the art. Finally, the sarcasm, showing how reasonable you are and putt…

> Which sector is building startup after startup for data mining, tracking, building profiles? You talk about it like it's necessarily a bad thing, by default, for everyone. Why?

Most people are not persons of interest and nothing particularly bad will happen to them if various entities have access to their private info. Still, they might have their identity stolen, get scammed (e.g. Dell) or pranked (e.g. swatting, disconnecting utilities) or have their house broken into if they have bad luck. They might pay a premium on insurance for having the wrong friends on FB or get fired for holding certain opinions. Might get mobbed by the internet, get harassed by salesmen or silly ads for herpes.

Let's assume for the sake of argument that the above events are unlikely though. When a few actors have access to the information of tens of thousands to billions of people though, this has an impact on a societal level. As jaquesm said, information is power and when one has so much information and lots of money to boot, they can begin to covertly influence policy and behavior and harass and marginalize their opponents. And they can do that directly, or by using the information of a third party, like a doctor, lawyer, religious leader, or even someone insignificant which happens to be a relative, etc. Moreover, companies can be sold, together with their databases, they can be forced to hand them over or they can be hacked. A treasure trove of data held by an otherwise principled company, might end up in the hands of an unsavory party.

Why is this a bad thing? History has shown again and again how such imbalances of power are abused. Here's a rather harmless example of data mining a mobile device + social network combined with social engineering to scam people out of money: http://toucharcade.com/2015/09/16/we-own-you-confessions-of-... If a game producer can do this, what are the pros doing?

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#154
post #83

Whenever I read one of these articles I am wondering why the examples of WHY mass surveillance affects ME as average Joe negatively have to be so weak / contrived: For example, imagine someone convinced by the argument "nothing to hide nothing to fear". Would this example convince them that in fact they do have to fear something? "You might think twice about contacting or meeting people (exercising your freedom of as…

Still not convincing, at least not to me and many of the people that I know. I'm pretty sure my insurance company has already calculated my premiums based on my demographics and claim history. I made not have told them "I have more than five drinks almost every weekend", but they know. They were making inferences from Big Data since back when it was just "data". And practically, I don't think most insurance companies…

I think your question was answered at a link provided elsewhere in this thread[0].

What you might or might not need to hide cannot be reliably determined in advance. It is not a constant, it is a variable and you don't get to pick which way it goes. Consider the plight of the gay Russian blogger using LiveJournal, which was later sold to a Russian company.

[0]https://news.ycombinator.com/item?id=10849248

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#155

Earlier quoted context omitted.

> But don't discount people that legitimately disagree with you as being irresponsible. Why not? You may disagree, that doesn't mean you can't be flat-out wrong. Having an opinion does not automatically give that opinion equal weight when history has proven to us again and again that that particular opinion ends up with making society either dangerous or at a minimum uncomfortable. I'm sure there were border guards i…

The problem with drawing historical parallels is that they never apply exactly. Saying "A thing happened in the past" can be instructive, especially to people who didn't even realize that the thing was possible. But what's much more practically useful is to say "I think what happened before will happen again in the current context and for these reasons ". An example from the past is only useful if it can be tangibly…

> The problem with drawing historical parallels is that they never apply exactly.

They don't have to. History only happens once, if you refuse to learn from history because it is not an exact repetition of the past then you can never make any progress.

> Saying "A thing happened in the past" can be instructive, especially to people who didn't even realize that the thing was possible.

You seem to think it isn't possible because of "insert magical reason why everything is different now here", not just that it can't happen again for whatever reason. That's an impossible position to argue with. All the weight of history would not be able to sway you from that position because nothing can counter magic.

> But what's much more practically useful is to say "I think what happened before will happen again in the current context and for these reasons". An example from the past is only useful if it can be tangibly connected to the current situation, right now in the present.

No practical examples will counter your magic. You will either say 'that's not the same exactly' or 'that's too long ago to be relevant' and so on.

The only thing that will convince you is when you're lifted out of your bed at 3 am and we never hear from you again. By then it will be a bit too late, but you too will be a believer in government abuse if and when that happens.

Until then you're going to head straight for the last stanza of Martin Niemoeller's most quoted lines. The vast majority of the people living in the former DDR were never lifted from their beds at 3am for interrogation. To them life was just a-ok.

> I can't think of a case where stable and mature democratic bureaucracy has ever used surveillance to influence the majority of its populace.

That's not a bad thing per se. Meanwhile, you're trying hard to change that number from '0' into '1' by allowing the present level of abuse to spread unfettered, which invariable leads to an escalation. Each and every click that you hear is one of a ratchet, it will not voluntarily click back again, it can only go forward until on that scale between '0' and 'police state' you've gotten close enough to 'police state' that there is no relevant difference.

It can't happen here is a very dangerous line of thought. See the movie 'the wave' for some more poignant illustrations of how that thought is a dangerous thing all by itself. It can happen here, it might happen here, and it likely will happen here unless we're vigilant.

> Germany in the early 20th century was a very instable government in a bad economic situation.

ok

> Soviet East Germany was communist, which isn't quite the kind of democratic that I meant.

Yes, and like that there will always be one last thing that is not quite the same which will allow you to look the other way.

> It's true that any government could turn bad, in the same way that anything is possible.

I would consider that progress, hold that thought.

> But there's very little evidence for that in the current context.

That depends on where you are looking. There is plenty of evidence that pressure is being applied, but the pressure is applied subtly enough and in places far enough away from the focal points where change is effected that you'd be hard pressed to connect the dots. That's the beauty of having a lot of information at your disposal.

A nice example is the Iraq war, the run up to that saw massive world wide resistance in the populations of the countries of the 'coalition of the willing' whereas later on this was described as the coalition of the 'gullible, the bribed and the coerced'.

> So my position is this: Given that I live in the United States in 2016

The United States does not hold a privileged position in the world, and it does not matter whether it is 2016, 1938 or 1912. For everybody living in the past in places where these experiments went wrong they could have written "given that I live in X in Y" and they'd be accurate about that.

> I'm not worried about the government randomly deciding to screw with me by looking at my electronic communications

They might have substituted 'electronic' with 'written'.

> and acting on them. It just doesn't make sense. I'm not significant relative to the scale of the US government, the government itself just doesn't work that way and all of the negative scenarios I've heard seem to be very contrived.

They again would not have used US government but whatever place they lived in. And they would have been dead wrong, and in some cases, when the fog lifted they'd have simply been dead.

What seems contrived for you, living in a country that has never seen actual war on its own soil (sorry, your civil war does not count), that exports war on an ongoing basis, that uses IT to kill people by remote control, that used telephone taps, burglary and threats to affect they inner workings of its own government to me seems to be willful blindness.

For some reason it is more convenient to you to re-write all of history up to and including the present rather than to see that maybe your government is not all that benign, neither on the world stage (where they are a bit more overt about their intent) and internally (where they are out of necessity a lot more cautious). Have the Snowden relevations really not managed to at least peg your evidence meter that maybe not all is as it should be? That your constitutional rights were trampled and that the protections afforded you appeared to be of no value whatsoever?

> If you really think that it's possible that the government of a modern western nation could turn into communist East Germany, then it seems like your problem might be with governance, not privacy.

No, I think that we may be reaching a stage where influence can be wielded subtly enough that someone like you could convince themselves that there is none of it at all. And that's the true prize, to wield that power but in such a way that it can be applied selectively enough that as long as the bread is on the table and the games keep going nobody will notice how rotten the core has become.

> If it's possible for the government to go all Walter White and just turn evil over night, then no amount of personal privacy is going to save any of us.

It will never be that overt. It will be more along the lines of parallel construction and other nice little legal tricks such as selective enforcement. Never enough for you to cross that threshold.

> And until it seems like that's a thing that's actually possible, I'm going to make practical decisions about my own privacy.

You're more than free to do that. Unfortunately, those of us living outside of your beautiful country don't even get to have a vote in there. Your personal well-being trumps the rights of everybody that is not you, and like that we race ahead down the hole.

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#157
Is there any polymorphic encryption toolkit that could enable a custom encryption method tailored for your own use? Kinda like security by obscurity for encrypting your own important files by deviating from the established standard encryption schemes in order to overwhelm capabilities of Mallory's/Trudy's reverse engineering?

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#158
post #83

Whenever I read one of these articles I am wondering why the examples of WHY mass surveillance affects ME as average Joe negatively have to be so weak / contrived: For example, imagine someone convinced by the argument "nothing to hide nothing to fear". Would this example convince them that in fact they do have to fear something? "You might think twice about contacting or meeting people (exercising your freedom of as…

> For example, imagine someone convinced by the argument "nothing to hide nothing to fear".

"Please strip yourself to underpants. Yes, this very moment. We (society) need to make sure you don't have any concealed weapons or explosives. I will then assure these other people that are totally unrelated that you don't pose any threat to them. What? Your privacy? Safety is more important than privacy, right? And you do have nothing to hide, so why do you fear stripping?"

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#159

Earlier quoted context omitted.

You're saying, "We should not trust the government because they did things that I didn't agree with in the past". This seems like an unfair standard to hold any person or group of people to. I would be unhappy if people said "I think that karmacondon has made mistakes in the past, so he shouldn't be trusted to do his job ever again." I understand what you're saying, and I think I get where you're coming from. But lik…

> I would be unhappy if people said "I think that karmacondon has made mistakes in the past, so he shouldn't be trusted to do his job ever again." It's not about mistakes. Mistakes are - usually - a sign that someone needed to learn. They do not as a rule include wanton intent. And if a person were to make too many mistakes then they probably should not be trusted. > I understand what you're saying, and I think I get…

We both made the mistake of discussing the US government like it's a single entity. We're talking about hundreds or thousands of individuals spanning multiple generations. I'm not going to worry about government metadata collection because of something that happened during the Eisenhower administration. Each person and group of people should be evaluated based on their own behavior and merits, not the reputation of the organization that they are affiliated with.

It looks to me like the US agencies, and the Five Eyes in general, are capable people who are just doing their jobs. They aren't bothering me and I'm not bothering them. The past actions of the US government or hypothetical scenarios based on historical examples just aren't very convincing. Anything could happen. But I'm not going to concern myself with it until I see some evidence.

Re: Why privacy is important, and having “nothing to hide” is irrelevant

#160
post #64

I think the tech crowd is in denial about their role in surveillance. We expect professionals to behave ethically. Doctors and companies working on genetics and cloning for instance are expected to behave ethically and have constraints placed on their work. And with consequences for those behaving unethically. Yet we have millions of software engineers working on building a surveillance society with no sense of ethic…

I left the intelligence community because of exactly this. Took a 40% pay cut (probably more like 50 if you count benefits) but I don't regret it. I couldn't in good conscience believe in freedom and privacy while working for a government actively working against those things.
Post reply on HN