Cell Phones & Smartphones

Apple’s Persistent Device ID is a Threat to Privacy

By Chris Soghoian, Principal Technologist and Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 7:14pm

Today, a group known as Antisec released a collection of one million UDIDs—serial numbers associated with Apple mobile devices, such as iPhones and iPads—which they claim came from a trove of 12 million UDIDs pilfered from an FBI agent’s laptop.

The FBI has issued a statement denying that an agency device was compromised or that “the FBI either sought or obtained the information.” Clearly, there are a lot of open questions, and few solid facts relating to this alleged breach.

Fighting for Transparency

By Linda Lye, Staff Attorney, ACLU of Northern California at 4:51pm

Today, the ACLU of Northern California went to court in two separate cases with the same goal: shedding light on the government's use of controversial and arguably unconstitutional surveillance techniques.

ACLU at DEFCON 20!

By Ateqah Khaki at 5:04pm

The ACLU will be out in force at DEFCON – one of the largest annual hacker conventions in the country – later this week and weekend! 

We will have a table at the vendor area all weekend (with super awesome ACLU t-shirts for anyone who signs up to become a member!). In addition to trying our hardest not to end of up on the Wall of Sheep, here’s a rundown of what we’ll be up to in Las Vegas.

Friday Links Roundup

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 3:30pm

The New York Times and Propublica jointly published an editorial last week entitled, “That’s Not My Phone, It’s My Tracker.” The authors review the sorry state of cell phone location privacy, raise and dismiss privacy-protecting options such as regularly removing the battery, or living without a phone, and conclude that what we should fight back linguistically at least, by calling these devices “trackers” rather than phones.

Friday Links Roundup

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 3:26pm

Here are some links that have caught our eye recently:

The FBI’s “Next Generation Identification” biometrics database is starting to plan for the inclusion of iris scans. Iris scans raise more issues than some other biometrics (such as fingerprints) because they can be used at a distance without a subject’s participation, permission, or even knowledge. Hand-held iris scanners are being sold to police around the country for identification uses. We were assured in a meeting with the FBI last year that biometric scans in situations such as traffic stops would not be used to enroll individuals into the database, just to check their identity.

Mobile Phone Surveillance by the Numbers

By Chris Calabrese, Legislative Counsel, ACLU Washington Legislative Office at 10:56am

Wow.  Sometimes one word says it all.  The New York Times reports that in response to letters from Rep. Edward Markey (D-MA) and Rep. Joe Barton (R-TX), mobile phone providers disclosed that they received approximately 1.3 million law enforcement requests for customer records last year alone. What an extraordinary number: more than a million accounts subject to at least some level of law enforcement investigation just in 2011. As we have discussed elsewhere, beyond what is reported by carriers in these letters, there is absolutely no reporting or tracking regarding how these numbers are handled.  

Even more amazing, as you dig into the article and read the underlying letters it becomes clear that this is actually a vast undercount of the number of Americans who have been affected by this tracking.  Sprint disclosed that it received approximately 500,000 subpoenas in 2011 (a subpoena is a written request for information from law enforcement that isn’t reviewed by a judge) and that “each subpoena typically requested subscriber information on multiple subscribers.” In addition, several carriers disclosed that they sometimes provide all the information from a particular cell tower or particular area.   Metro PCS for example charges:

$50 for Cell Tower Dump per tower for a 2 hour period
$100 for an Area Dump (if you know the location but do not know the cell towers that affect the area) for a maximum of 2 cell towers for a 2 hour period per cell tower search

Everyone whose phone has been used by a particular cell tower over a particular time period—likely hundreds or thousands of people—could have their data examined by investigators.  And these dragnet data requests are on the rise.  Verizon estimates that over the last 5 years it has seen an average increase of 15% annually, and T-Mobile reported increases of approximately 12%-16%.  This has also led to at least some possible abuse; T-Mobile disclosed that in the last three years it has referred two inappropriate law enforcement requests to the FBI. 

What Your Cell Phone Company Is Telling the Government About You

By Josh Bell, Media Strategist, ACLU at 4:48pm

It’s time for cell phone companies to be up front with customers about how their personal information – including their location history and who they call and text with – is being collected, stored, and shared with the government. In an op-ed on CNN.com, ACLU attorney Catherine Crump argues that wireless carriers – “who we pay to provide a service, not to keep tabs on us for the government” – must let customers know what is happening with this sensitive information:

The Government, Privacy, and Companies (The Ones We Pay and the Ones We Don’t)

By Jay Stanley, Senior Policy Analyst, ACLU Speech, Privacy and Technology Project at 5:18pm

Privacy researcher Chris Soghoian gave a very nice talk at TEDx recently on “Why Google Won’t Protect You From Big Brother.” He provides a cogent overview and some useful perspective on the relationship between companies and the government, which is something we at the ACLU have been concerned about since our 2004 report on the Surveillance Industrial Complex, and before.

Civil Liberties in the Digital Age: Weekly Highlights (5/18/2012)

By Anna Salem, ACLU of Northern California at 3:03pm
In the digital age that we live in today, we are constantly exposing our personal information online. From using cell phones and GPS devices to online shopping and sending e-mail, the things we do and say online leave behind ever-growing trails of personal information. The ACLU believes that Americans shouldn’t have to choose between using new technology and keeping control of your private information. Each week, we feature some of the most interesting news related to technology and civil liberties that we&r

In Congress Today: Testifying in Support of Geo-Privacy

By Catherine Crump, Staff Attorney, ACLU Speech, Privacy and Technology Project at 5:23pm

Today I testified before the House Judiciary Crime, Terrorism and Homeland Security Subcommittee in support of the Geolocational Privacy Surveillance Act, a law that would require law enforcement to obtain a warrant based upon probable cause before tracking a person by (for example) attaching a GPS device to their car or getting records from their cell phone provider. (My written testimony is here).

Statistics image