Live data from Hacker News

The FBI Is Tracking Our Faces in Secret, and We’re Suing

aclu.org

91–100 of 158 posts

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#91
post #81
post #74

Earlier quoted context omitted.

It's great if websites work without Javascript but, I don't think its fair to call them poorly designed if they dont. The web is made from HTML, CSS and Javascript. Turn off one of them and of course things aren't going to work or look right.

You don't need javascript to show some paragraphs of text with hyperlinks. You don't even need css. If that does not work, this is not a case of poor design, this is simply absolute crap.

ah yes, anything that gives character to the feel of a site is worthless! I don't understand why people use GUI's either, just use a terminal!

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#92
post #52

Earlier quoted context omitted.

DuckDuckGo works perfectly without JavaScript; just use https://duckduckgo.com/html or https://duckduckgo.com/lite .

I strongly second the lite recommendation. Include "?kd=-1" to disable interstitial redirects on links. Discussed here, with a link to full parameters: https://news.ycombinator.com/item?id=21384425

They probably meant "&kd=-1"

Take a look at the parameter list in the linked page. There's no "fd" in there.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#93
post #72

Earlier quoted context omitted.

And they'd still say, "You're not the government." And they'd be right. If you were part of the government, you wouldn't need to ask to see the data on her Facebook or whatever. You'd probably already have some secret access. I mean they're right. "You're not the government, and if you were you wouldn't need to ask." Point is, they trust the government implicitly. (And, for most voters, completely, in matters of secu…

And I'd say, "My party cares enough about safety that we voted that any card carrying party member can do a citizen search if they sense anything suspicious about another citizen. So hand over the phone" Hopefully we can install a sense of where things can lead to. Most folks aren't familiar with such strong tactics, but hopefully they are starting to become more so with party sanctioned violence (e.g. punch that opp…

There's the trap they'd get you into though. With mass and ubiquitous surveillance, they don't even need citizen searches anymore. So the person you are talking to would likely report you for impersonating. An agent who was really acting on behalf of the government doesn't need to execute a citizen search of that data.

What I'm trying to point out is that your line of questioning would not impact her view of the government at all, it would only raise her suspicions about you. To the extent that, at some point, she would call the government to report you. Because the government also conditioned her with the whole mantra:

"If you see something, say something."

Trust in the government, particularly on matters of security, is not so easily undermined.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#94
post #90

Earlier quoted context omitted.

You used “either”, then “nor”, sorry I lost the point you were making. Wasn’t sure on your point about the adversary already owning the pipe. Tailored exploitation is a good point though. Admittedly RPi isn’t any current advice except for outdated hobbyist advice. If I cared to defend against nation state I’d avoid gen purpose CPU’s altogether and focus on in house manufactured minimal circuits, possibly fpga’s and p…

> The poster was concerned about video being hacked. This would be hard to hide, at least for being owned in real-time, if one were keeping track of the packets coming and going. How would keeping track of packets detect a compromised web cam absolutely? An SSL-encrypted connection to Amazon servers, for example, could easily be used to exfiltrate pictures, audio and even low-bandwidth recordings while still blending…

You’re right. One can’t assure that won’t happen unless you can ensure that every outgoing packet hasn’t been tampered with inside your computer. But that problem can also be tackled as part of a solution to reduce risk but not eliminate it.

How about simply using a new style of webcam that uses a physical shutter when active? Any reason I can’t go on amazon and buy one? Are these illegal?

Sadly you’d want analog push button switch on mics only. Latch as well ok if done securely.

You could jump through tons of hoops to minimize risk for the above but given the complexity of a typical computer, most won’t have a chance as you noted.

If you whitelisted all your activity and took the other precautions noted (and if you have clean hygiene) then it would be much more difficult for your strong adversary as your nation state would need to own your box remotely. And it is possible to defend against that sort of thing. Yes if you just have indiscriminate traffic coming and going, defense becomes astronomically more difficult.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#95
post #10

Earlier quoted context omitted.

Instead of assuming you could lock down your internet pipe. Use a RPi as a security appliance with strong whitelisted firewall policy. At least have some insight into what traffic is going to and from your LAN. Could also put in an entirely passive NIDS on a physical layer in-line with your network’s service entrance. Very difficult for anyone to defeat, when done right. Apologies for term misuse.

Or perhaps "the only winning move is not to play". I hear it is difficult to surveil through books.

> I hear it is difficult to surveil through books.

Unless if you swipe your library card.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#96
post #31

Earlier quoted context omitted.

And on the off chance someone reading this is OK with the government doing that for law enforcement purposes, also consider that >At least a dozen U.S. National Security Agency employees have been caught using secret government surveillance tools to spy on the emails or phone calls of their current or former spouses and lovers in the past decade, according to the intelligence agency’s internal watchdog. before giving…

I've spoken with people who have said they are ok with it. But, when I start asking questions or sharing details on how this has been abused I tend to find they have not thought it through and are often unaware. In some cases people think I'm crazy until I show them press coverage on it. I've learned that many don't have the depth of knowledge I have on the topic and have formed opinions with a puddles worth of infor…

This.

One topic I use to get people thinking more about implications is speeding.

Right now, in most places, there is balance. One can speed, and have reasons that are not to be judged at the moment, and there is some chance of it being detected and a ticket written.

Could just be simple error too. Glance down at speedo, see +15 over, think "oops", and correct with no real worries. Happens all the time.

Now, think about that android phone. Google actually knows when speeding happened, where, and all that. So far, the only action I have seen is Google alerting me to speed traps and a request for me to confirm they are still there.

But, where will that lead?

Does my insurer get that data? Can they get it? Should they get it?

Etc...

Then return to that balance bit.

Say one gets a ticket. With, what I call old world balance in play, the general response is to just be a bit more careful and avoid future tickets. Simple, easy, reasonable.

Now, with all that data collected, a ticket could be just the beginning. A review of your last year of driving reveals chronic behavior! To get past the ticket, monitoring is needed, your car may be required to limit speed to the legal limit at all times, and on it goes!

Same scenario, same person, but two very different outcomes and perceptions! Should there be. Why?

Or, say one is not popular politically, or got sucked into some sort of investigation just by poor timing and proximity, or maybe an unfortunate surname similarity.

What could happen?

One morning you get up to find your license to drive has been revoked and you owe a ton of fines. That happens despite never even being pulled over for years, or ever. Maybe it happens at random, like a drug test too.

One day, boom. Your life is forever different, because data.

All of us are extremely likely to be guilty enough to see the worst max penalty allowed for in the law too.

True right now, today for me, you, everyone we know who drives.

What should happen? Why? What public good does it serve?

These are questions of balance. All of that mass data hoovering going on in pretty much all aspects of our lives is not balanced at all. The human factors we are accustomed to do not exist. The watchers are perfect. Or near perfect enough to be a concern.

The first time Google prompted me about a speed trap, I thought, "spiffy" and saw it as a nice help / value add to Maps.

Then later down the road I thought about where it can all lead. Nowhere good without some new rules, and even with those, trust is difficult.

Frankly, I want to put my phone in a faraday cage after thinking about it all. People vary in their responses, but I can say this line of discussion can often get them thinking about these matters and it is all pretty easy to talk about.

People, even those with light knowledge of these things, can picture their own driving, the phone, and potential outcomes.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#97
post #15
post #2

After listening to Joe Rogan's interview with Edward Snowden I bought and listened to his book "Permanent Record." At this point I have to assume that at least a dozen agencies in a handful of countries are watching me through my webcam as I type this message right now. Snowden suggested (or at least I inferred) that he didn't reveal all there is to know about the scope of government surveillance and it's only logica…

They aren't watching you. They're recording you. They're running algorithms to classify and index you. They're building massive data centers to house all of this semi organized and raw data. And when they leak it all they won't be held accountable because terrorists, children, and stuff. It's not a conspiracy theory. It's real and it's a black hat's wet dream. Oh yeah, they can use it for political purposes too I sup…

[deleted]

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#98
post #7

I wish we would stop emphasizing the social justice/accuracy concerns so heavily when talking about this. Starting that way will cause a huge segment of the population to switch off as soon as you start talking. Imagine it works perfectly, and a three-letter agency with practically zero oversight, transparency, or accountability is collecting an accurate history of every single thing you do--everywhere you go, who yo…

> Imagine it works perfectly, and a three-letter agency with practically zero oversight, transparency, or accountability is collecting an accurate history of every single thing you do--everywhere you go, who you talk to, what you say to them, what content you consume and create, what emotions you feel, detailed biometric profiles, and so on. Are you ok with that?

A few years ago I met someone, they asked what I did, I said computer software.

Their first response: "Oh, I hope there's no more of those Snowdens out there!"

So I wouldn't assume everyone is opposed to law enforcement mass surveillence.

We have to give them reasons to be opposed to it.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#99
post #4

What a poorly designed site. Nothing but a spinning circle with Javascript disabled - Firefox reader mode doesn't work, either. Completely unacceptable from a privacy and usability perspective.

Yeah, it's just a blog post with no reactive elements, there's really no need for preventing the page from loading without javascript.

Re: The FBI Is Tracking Our Faces in Secret, and We’re Suing

#100
post #4

What a poorly designed site. Nothing but a spinning circle with Javascript disabled - Firefox reader mode doesn't work, either. Completely unacceptable from a privacy and usability perspective.

Yeah, it's just a blog post with no reactive elements, there's really no need for preventing the page from loading without javascript.

Unless using javascript to track people interested in this type of material is a goal of theirs or others with access to the site's source.
Post reply on HN