Adtech surveillance and government surveillance are often the same
eff.org
eff.org
Yes
There should be rules stopping the collection of that data
There should be rules against locking down devices people "own" that prevent countermeasures
Private use of this data is as worrying as government use. More so. States are often democratically accountable
Also, based on repeated leaks, our public records laws are completely inadequate.
At least when an ad tech company gets caught breaking the law, they get fined a couple seconds of revenue, and there is a theoretical chance someone might get sent out for a few days of community service or probation.
One of my proudest moments is (through reporting) getting the Chicago police department to admit they made an enormous mistake in their analysis, which a colleague says was the first time he's seen them admit to such a mistake in the years he's done this work. So there are signs that it's not all lost. Happy to chat about ways to contribute towards this work if you're interested.
One thing I'll say about leaks is that they occasionally have the effect of revitalizing interest in these issues. But again, it takes persistence.
Maybe in a parallel universe. /s
Around the same time OAuth 1a came out and it seemed like a great ideal to offer a platform that leveraged these relationships to sell location to app developers, subject to consent and with a bunch of features to protect privacy.
In the end, we had one app developer who was even remotely successful and the less privacy-focused aggregators partnered with the next generation of app developers and the product had no future.
Nostalgia is fun.
the article makes it sound like LE is freely able to tap any VoIP call. how would that work?
i thought the usual setup for a VoIP call is SIP to ring the other party (which is partially secured), followed by ICE/STUN/TURN for the parties to find the most direct route between them, followed by the actual audio stream. do clients just not encrypt the audio stream? do carriers MITM everything downstream of that first SIP hop? (that would be inconsistent with the read-only probing suggested: “hardware taps or switch/router mirror-ports are employed to deliver copies of all of a network's data to dedicated IP probes.”).
From my experience, using SIP to interact with the PSTN usually means your first point of entry into the PSTN also proxies the media.
> do clients just not encrypt the audio stream?
SIP encryption is very uncommon, and unless you use ZRTP (which is end-to-end), I believe any SIP server within the path mediates the key exchange and can thus capture the key or downgrade/disable the encryption.
Given the above points, a packet capture on a switch port would give you both signalling and media traffic and is most likely how SIP lawful intercept is implemented.
Victim-blaming? Maybe. But you can choose to turn your phone off.
This can be fully disabled in Settings.
As far as i remember my iPhone told me that even if i disable WiFI the iOS might turn it on when it needs it.
IIRC the baseband can potentially do all kinds of crazy stuff too (no evidence that iphones actually do anything unusual, but perhaps that could change if the government sent a very compelling court order)
(previously submitted with 2 comments only, https://news.ycombinator.com/item?id=37542097)
I mean it isn’t the definition of fascism when corporations collude with governments? So isn’t this what we’re seeing here?
So far we've avoided catastrophe, but it does feel increasingly like the surveillance and internet control lines have already been drawn. I'd hear out anyone who wants to steelman a nicer interpretation of things, though!
(As this question only makes sense to ask if you meant "isn't it" rather than "it isn't", I'm going to make the obvious assumption)
That's the first time I've heard this definition for fascism.
Normally it's defined as authoritarian nationalism, having a centralised autocratic dictatorial leader, militarism, forcible suppression of opposition, subordination of individual interests for the perceived good of the nation or race, and propaganda to support the belief in some natural social hierarchy to maintain all that.
I can't think of an authoritarian nationalist leader who didn't also have a significant measure of control over industry as well, so I think authoritarianism in general usually will involve a high degree of state control.
If you want to effect change, get in earlier when it's still just the crazy fringe talking about it, like 25 years ago, or 25 years from now, and maybe you can steer the course away from the next one.
A lot happened in a very short time after the Snowden revelations. HTTPS became expected and Let's encrypt launched. Data providers started encrypting backbone traffic in earnest.
Countries that had long condoned US Gov surveillance - or were largely compliant/complicit - began to push back.
Did that momentum wind down? Yes.
When did it wind down? When most major news orgs lost most of their interest.
Snowden dragged the press into reporting on surveillance abuses. Eventually that pressure eased and major news orgs went back to doing what they did before - giving most surveillance abuse a pass.
And here we are.
The only way this gets better is if the press gives a crap in a meaningful way. Otherwise, invasive snooping will continue expanding into every nook+cranny of our lives.
The same way US political corruption became normalized after decades of underreporting, surveillance will become equally entrenched - and for most of the same reasons.
And yet the proliferation of the attention economy and "growth & engagement" means that in practice, you no longer need to care about breaking HTTPS if you can just tap the analytics/marketing/adtech providers and can get data from 90% of the internet since these trackers litter pretty much every single webpage nowadays.
As a bonus, you don't even need to fund or maintain the interception infrastructure, since the adtech provider is doing that for you for free.
Right. It's why the LEO's "Going Dark" FUD was complete and utter crap. LEO has more info on us than at any time in history.
However, none of that negates how real progress followed Snowden and that bad actors lost their forward momentum. At least until the press lost interest and then bad actors resumed their progress against us.
News orgs not caring is 98% of how we got here. As far as we let press off the hook, we're earning what we get.
The state of web surveillance today will seem quaint compared to what's coming. Things like Quest 3 and Apple Vision are going to be just the beginning of it, but once everyone is walking around with AR devices, you will have no option of opting out of the point cloud. These companies will have a realtime graph of where and what everyone in public is doing at all times, even those who've never used any services. It's terrifying.
> Traditionally, that required a court order. But increasingly, the government just buys it from data brokers who bought it from the adtech industry.
I presume the adtech industry includes Meta and Google. But some people (even here) get indignant and say “no, Meta doesn’t really sell your data” or “no, Google doesn’t really sell your data”. If these companies are participating in this ecosystem and buying from data brokers, they’re just as evil as the data brokers. Let’s not pretend that Meta and Google are saints who should not be criticized for making most of their money from these relationships and enabling surveillance.
for example dmv.ca.gov and irs.gov both use google throughout their site.
Things break down when the government wants identity, or captcha or other things, and lets google be the solution.
Someone was an idiot. They should read about life in ancient Egypt, Inquisition-era Spain, Nazi Germany or the GDR, each of which was less technologically advanced than Switzerland, New Zealand, Denmark, Estonia or Ireland today [1].
[1] https://worldpopulationreview.com/country-rankings/freedom-i...
Imagine tomorrow's Holocausts but enjoyable, and then quickly forgotten.
Also, if this is so blatant, why hasn’t there been a lawsuit yet? The U.S. government is already bound by the constitution and the 4th Amendment. I don’t think we need half assed legislation from people who don’t know what they’re doing