Free Future

Chertoff on Google Glass

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 5:56pm

We’ve been doing a fair amount of thinking about the implications of consumer wearable cameras like Google Glass, and I’m sure we’ll have more to say in this space on the subject. But meanwhile, we’re pleasantly surprised to report a very trenchant analysis of the technology’s implications for our privacy by none other than Michael Chertoff. Writing on CNN’s web page, the former DHS chief writes,

So, who owns and what happens to the user's [video] data? Can the entire database be mined and analyzed for commercial purposes? What rules will apply when law enforcement seeks access to the data for a criminal or national security investigation? For how long will the data be retained? ….

Even those who might be willing to forgo some degree of privacy to enhance national security should be concerned about a corporate America that will have an unrestricted continuous video record of millions.

What is to prevent a corporation from targeting a particular individual, using face recognition technology to assemble all uploaded videos in which he appears, and effectively constructing a surveillance record that can be used to analyze his life?

Chertoff says he’s inclined to think that government regulation may be needed. I haven’t seen Chertoff say anything about the threat of pervasive government surveillance, which would make him a kind of anti-libertarian on privacy—in favor of restricting corporations, but not the government. For the average, relatively powerless person trying to live their life, the threat comes from both directions.

The Burdens of Total Surveillance

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:33pm

Last week’s Washington Post report that the CIA had requested that Boston bomber Tamerlan Tsarnaev be placed on a terrorist watch list raises an interesting point about total surveillance societies: in addition to all their negative implications for citizens, they actually bring some disadvantages for the authorities as well.

It’s not clear what information the CIA’s request was based upon, but reportedly it came from Russian authorities. It is also possible that Tsarnaev’s communications were flagged by US agencies such as the NSA. Either way, it seems as though there’s a real possibility that Tamerlan’s name came to the attention of the authorities through some dragnet-style surveillance technique.

If so, the conundrum for the authorities is this:

Do Young People Care About Privacy?

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:00am

Everywhere I go, I hear some variation of the claim that “young people today just don’t care about privacy.” This is something that people widely seem to believe is “just true.” The latest claim to this effect comes in the form of a new poll, the release of which was trumpeted with unfortunate headlines like “Millennials don’t worry about online privacy.”

In fact, the poll, which was conducted by the University of Southern California’s corporate-partnered Center for the Digital Future, showed no such thing. Although there were some differences between younger and older respondents,

The House Hearing on Location Tracking Law (or the Lack Thereof)

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 1:44pm

My colleague Catherine Crump testified before Congress today on location tracking and privacy, and the GPS Act that would increase legal protections for our location data. The hearing was before the House Judiciary Subcommittee on Crime, Terrorism, Homeland Security and Investigations, and you can read her written testimony submitted here.

The chairman of the committee, Rep. Jim Sensenbrenner (D-Wis.), is a strong supporter of updating the law. He opened the hearing by acknowledging that the law has not kept pace with new technology—certainly a truism, and certainly true with regards to location tracking in particular, but one that is good to hear accepted as fact by powerful lawmakers.

Sensenbrenner also slammed the Justice Department for not sending a witness to the hearing. The reason, he reported, is that “it lacks a clear policy position on ECPA,” referring to the 1986 Electronic Communications Privacy Act. When Sensenbrenner was reading Catherine’s bio, which included mention of her efforts to find out how the DOJ is interpreting

ACLU testimony in hearing today on location tracking

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:59am

My colleague Catherine Crump is testifying today at a House committee hearing on location tracking and the proposed GPS Act. The hearing can be watched live here, and Crump's written testimony is online here.

ACLU Submits Comments to the FAA Urging Increased Privacy Protection at Drone Test Sites

By Scott Bulua & Stephen Elkind, NYU School of Law ACLU Technology Law & Policy Clinic at 3:02pm

The ACLU today submitted comments to the FAA on the agency’s incorporation of privacy into its drone “test zones” program. (You can read our comments here.) Through the FAA Modernization and Reform Act of 2012, Congress has required the FAA to develop a plan for incorporating drones into the national airspace, including the establishment of six test sites where such integration can be tested. The FAA has faced delays on the establishment of the test sites, which the FAA has attributed to privacy issues that have, until now, gone unaddressed. So on February 14, 2013, the FAA published proposed privacy requirements for test site operators. The ACLU’s comments on those proposed requirements commend the FAA’s effort to focus on privacy impacts, while also advocating for more meaningful protections.

Why Won’t the IRS Deploy Basic Web Security?

By Katie Haas, ACLU Human Rights Program & Chris Soghoian, Principal Technologist and Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 10:45am

This tax season, when you visit the IRS’s website seeking tax information, can you be certain that no one else is monitoring which pages you browse?

Unfortunately, right now the answer to that question is “no.” Unlike Facebook, Twitter, Google Mail (Gmail), and virtually every bank and credit card company, the IRS, like most government agencies, does not use HTTPS for encryption and authentication on its website. If you try typing “mail.google.com” into your browser right now, you will see that the URL you end up at is actually “https://mail.google.com.” That “s” after the “http” may seem insignificant, but it means a lot. It signifies that Google is using Secure Sockets Layer encryption, or SSL, to both encrypt and authenticate its communications. When you visit google.com and you see “https” at the beginning of the address, it lets you know that your connection is secure, and that third parties – such as your internet service provider, employer, or university cannot monitor what you’re doing through the use of network interception technology.

Three Reasons the Drone Industry Should Support Privacy Protections

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 9:31am

As I mentioned recently, lobbying by Boeing contributed to the defeat (for now) of drone privacy legislation in Washington state. In fact, we are starting to see a few of the many legislative proposals for regulating drones die in state legislatures (our updated chart on the status of such legislation is here). One of the reasons legislation has been shut down in some of these states is (poorly founded) concern that passing such protections will inhibit a state’s chances of winning one of the drone “test sites” that the FAA is in the process of awarding. Meanwhile, the drone industry association, the AUVSI, has also been opposing state privacy-protection bills, citing the unconvincing argument that existing laws and the courts are enough to ensure privacy. And drone boosters have always intimated that privacy rules will interfere with economic benefits that a booming drone industry will provide.

Report Details Government’s Ability to Analyze Massive Aerial Surveillance Video Streams

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 11:15am

Yesterday I wrote about Dayton Ohio’s plan for an aerial surveillance system similar to the “nightmare scenario” ARGUS wide-area surveillance technology. Actually, ARGUS is just the most advanced of a number of such “persistent wide-area surveillance” systems in existence and development. They include Constant Hawk, Angel Fire, Kestrel (used on blimps in Afghanistan), and Gorgon Stare.

Ohio Aerial Surveillance System Moving Forward Without Having to Wait For FAA Drone Rules

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 9:07am

I wrote recently about ARGUS, the high-flying drone technology capable of capturing super-high-definition video of a 15-square mile area...