Think You Can Live Offline Without Being Tracked? Here's What It Takes
fastcompany.com
fastcompany.com
Potentially useful information, if there's mobsters after you.
The RFID tags in tires is a perfect illustration of why it's going to be practically impossible to live in the modern world and cover all your tracks. I certainly didn't know there are tags in tires (which, BTW, is a nifty idea), and there are doubtless hundreds of other tracks I leave. Who could possibly cover them all? It would be like trying to make a sieve water-tight, except you don't even know where half the holes are!
Now, if we're talking about the NSA and not mobsters, and you are less concerned with being un-findable than you are with hiding your activities- there are different games you can play, and I'd bet you could be more successful. Behave in an ordinary fashion 99.9% of the time. Just look at the intelligence operations sixty years ago. Spies didn't hide in holes so no-one could find them, they blended in.
That's the first I've heard of it myself, although it seems inevitable since one of the biggest selling points of RFID tags is for inventory management. We are likely to see RFID tags everywhere we currently see barcodes.
http://www.securityinfowatch.com/press_release/10492011/why-...
But... to get back to the RFID in tires thing there is more to it than just that. Current vehicle safety codes require in-cabin monitoring of tire pressure. One way to do it is for the car to pay attention to changes in wheel rotation speeds (lower pressure means smaller effective radius). Another is to put a pressure guage in each wheel that talks to the car's computer wirelessly and gives more exact numbers so is more common. So even without RFID in the tires, most cars still transmit a unique ID number everywhere they go.
http://news.rutgers.edu/news-releases/2010/08/wireless-tire-...
/pedant
However, I once had an ugly run in with another employee I did not know while in the parking lot. I went to security to look at film and try to ID them. We were not able to ID the employee. We checked film from the stairwell I exited through and caught a glimpse of the person, but you only had to swipe your ID to get in, not to leave. So, no, there was no timed ID badge record to match the picture against.
I was surprised by the outcome. Given the ID badges and security cameras, etc, I had expected a Star Trek style set up. No, not remotely.
I am well aware info can be used against people. That mostly scares me in cases of hostile intent. And where you have hostile intent, it almost does not matter what info they have. They can spin it as something bad anyway.
At this point, I think being innocent is mostly not a defense either. I hope things change. Currently, there is a lot of assumption of guilt and, to me, that is the real problem.
You could make a lot of money in security if you were able to come up with a reliable way of tracking people via surveillance cameras, particularly in mapping persons movements and identifying when they aren't behaving as expected. Unfortunately this is exactly where it gets too easy to invade people's privacy. It is just a matter of time before we are able to do this, and we really need to have some way of limiting the invasion of privacy while still allowing for these systems to be used in positive ways.
As far as privacy in the future, I think one thing that will happen will be cultural adaptation. I think that is already occurring. I often discuss "personal" things online with acquaintances and strangers that I rarely discuss in person with acquaintances or strangers. This has nothing to do with being shy and everything to do with opportunity to have a meatier discussion online. If I need to give a lot of background info, I can do that online in ways I cannot do in person. For example, I can give links that give additional info for those that need it.
So I think new technology is already redefining what kinds of info are socially acceptable to divulge and changing how people react to knowledge about things that were previously much more deeply secret. As technology continues to evolve, we will face new questions about situations that never existed before. These days, people routinely wrestle with questions about handling social media, online privacy, etc. Those were questions that did not exist when I was growing up. No one has outlawed FaceBook even though, for example, people have been fired for things they said there.
Don't let it stop there. Buying a six pack for the weekend? Watch your healthcare premium go up by like 0.001% or something like that because insurance companies have calculated precisely how likely one alcoholic drink will cause them problems down the road in terms of them administering costs related to alcoholism or something. Very scary stuff.
I guess I'm still having a hard time squaring personal responsibility with this idea of complete anonymity. It's not that we shouldn't be able to hide anything, but like the article said, it's just not possible (or even reasonable to expect) to hide everything. Existing in society leaves a footprint, especially in cases like license plates - they're designed to aid in tracking, what's the surprise that they're being used to do exactly that?
And why shouldn't they? It's the same concept as you indicating whether or not you smoke, how much you drive to/from work daily, how many driving tickets you have, etc. Questions you willfully answer today. We are already accepting of their interest.
The only significant difference here is you wouldn't as easily be able to lie, and people who do lead more conservative lives pay less, again a tried and true concept in the car insurance industry.
Maybe soon we'll see health insurance companies offering individual breaks to people who grant the company access to their purchase history.
The big concrete example of how a national health insurance system operates differently from a "free market" in insurance is that pre-existing conditions are covered. That's a pretty big step away from restrictive conditions. How do you make the argument that a single payer would reverse that?
And the same cycle will push insurance companies further and further into your personal life. Oh, you play video games a couple hours a week? That's $15 extra/month. Oh, you prefer watching football to watching the Wire? We'll ring you up for $5 extra/month. You're gay, that's $10/month. You married a person with an above average BMI? Well, that puts you into a higher risk profile, you'll see the charge on your next bill. Look, Aetna's new monthly offer: a purely voluntary opportunity for you to lower your insurance bill by up to 30%, just by installing a chip into the base of your skull and video cameras throughout your home, all paid for by the Company!
And the insurance companies that don't do this will face higher costs and lower profitability, eventually pushing them out of the market.
Technology changes things, though. A bullet might be considered just a better arrow, and a car a more efficient horse. But that doesn't mean they didn't radically uproot tradition and shared moral convention.
So why not use examples like these? "Oh, you bike to work? Great--your bill is going down! Oh, you have a good credit score? Okay, your premiums just went down again. Oh, you eat salad once in a while? Great, it doesn't take much to eat more healthily than the average American, so--you guessed it--your bill just went down again!"
Less information asymmetry between customers and insurance companies would lead to better prices for safer people, and fairer prices for riskier people (by "fairer" I mean "closer to their average lifetime insurance payout).
Whether it's worth it in terms of the loss of privacy is another question, but we shouldn't stack the deck by pretending everyone's premiums will go up unfairly.
These kinds of things are traditionally called insurance fraud, and even if it's not illegal (buying food with cash won't ever be illegal, let's be honest with ourselves), it'll be accounted for by the insurance companies.
And if your technique for "sticking it to the man" is to eat yourself into unhealthiness, then... I guess you win. Congratulations.
Not if you bought the 6 pack for the contractors working on your fitness room.
But if you really must play this game, then perhaps the fact that you believe a 6 pack to even be a worthy gift is telling of your lifestyle enough to determine risk. Maybe it doesn't matter if you give it to someone else or not, just the fact that you purchase beer a certain amount of times in a given time interval has shown to increase your likelihood of injury.
Or not, I don't know. The point is, they would figure that out. We don't need to hash out a full implementation of this technology to understand it'd be possible.
Plus, with government-run healthcare, the definitions of healthy will be subject to lobbying. Look at the arguments now about what is healthy food... are carbs bad? is fat? what about organic? GMO? Meat? Grains? Eggs are healthy again after being bad for you after being good for you. I have coworkers who swear by paleo diets and somehow everyone doing crossfit is convinced they're in the 2% of humans with a gluten sensitivity.
Now imagine that confusion with lobbyists from every direction trying to prevent their products from being put on the 'bad foods' list.
There is no assertion of moral position here.
If people with lower risks didn't pay for people with higher risks, there'd be no insurance market.
If you can perfectly predict what's going to happen to someone - and you charge them all exactly what it's going to cost, + your overheads, then there's no reason they should buy insurance rather than putting the money into an investment plan. Actually they'd probably be better off with the investment plan.
Insurance is like gambling, what does the insurance company know that you don't? What do you know that they don't? If they get really good at predicting your health, then being accepted for an insurance scheme would be a really strong argument to do something else with your money.
Today the concept I'm talking about already exists in the form of good driver incentives, so the outcome you're predicting is already not how this plays out.
Even today, some people are to all intents and purposes uninsurable. Perfection isn't required. Just knowledge of a significant disparity.
I can invest $200 a month for the next 10 years, or I can buy health insurance. On average, I will have more money after 10 years of investing. But the additional $24,000 of savings will increase my happiness very little relative to getting the healthcare I need in the case of a catastrophic injury or illness. So I'll gladly lose a little bit of money every month (statistically) to avoid the possibility of that outcome.
Edited to add: one way to think of this is to pose the following thought experiment. Imagine that tomorrow you have a 50% chance of doubling your wealth and income, and a 50% chance of losing everything. What would you be willing to pay to guarantee that you keep your current wealth and income? If you're like most people, the answer is nonzero and positive. That's how insurance companies make money.
If I set up a company that just took enough from you to cover your predicted risk - and the risks of people like you - plus some small charge for me, I could charge you less for it than a company that tried to cover everyone.
Risk of injury is similar. I would expect the understanding necessary to accurately predict cancer to be very useful in treating it (it should also have much potential to reduce costs...).
I just made that up, but I wouldn't be surprised to see that in an interview 10 years hence.
Personally I find the idea disgusting.
One issue I can see is that the service would likely provide tell-tale signs of it being used, either because of implementation flaws or just having a totally fuzzy purchasing pattern is itself a very distinct indicator. Insurance companies could then run risk profiles on people who use that kind of service, and it's possible/likely that users of that service would be unhealthier than average, resulting in higher premiums. Then the most healthy users of the service would face strong incentives to not use it, which further drives up its associated risk.
I'm concerned about what happens when it's legislated, normalized, and accepted.
Offline? The lady has a tech-startup in SanFrancisco.
Untracked? Still possible to track her. There is nothing you can do to prevent it. If you want to buy a house, you're going to need credit, if you want credit then you're going to be tracked. That's just the way it works in developed nations.
It is one thing to be mindful of security. Protecting your data, understanding the limits of cryptography, not giving away important information via social media or to people who don't need it, is all important things to know.
In a digital world you leave behind a digital footprint. Having one isn't the problem. Controlling it is.
edit: Being untraceable is impossible and a thing of the movies. The moment you are born and issued a birth certificate, your digital footprint has started.
The thing to remember is that isn't a bad thing...
These are people who are minimizing their profiles, not magical fairy creatures. Of course if you buy a house under your own name, you will be easy to find - but with a little creativity, you may be able to get around that.
Just because these people are guarded about their activities and their images does not mean that they are handing out tips about how to run for Congress anonymously, so there's really no need to argue against that straw man.
>The moment you are born and issued a birth certificate, your digital footprint has started.
Not everywhere, and not until very recently.
The article says they are living off the map, which they certainly aren't.
Like I said, minimizing your footprint is one thing, and that is good, but saying these people are "Offline" is absurd.
No, it doesn't.
'“It’s basically impossible for you and I to decide, as of tomorrow, I’m going to remain off the radar and to survive for a month or 12 months,” says Gunter Ollmann, the CTO of security firm IOActive'
The short version:
(1) Hire someone to create a New Mexico LLC, there are lots of companies out there that will do this for you.
(2) Transfer ownership of the NM LLC to you - there are no requirements for filing transfer of ownership with any public entity. Just make sure you don't lose the paperwork. If there is no taxable income to the LLC there are no filing requirements beyond paying the yearly registration fee.
(3) Purchase house with cash in the name of the NM LLC. Hire a nominee to sign the paperwork, fire the nominee afterwards.
You now own a house with no public records of your ownership. If you need to sell you can sell the NM LLC instead of the house and there won't even be a public record of the sale, the deed will still show the NM LLC as the owner. There may be tax implications for such a sale depending on the local state's laws (california for one).
That is, it's about avoiding a situation where a yelp review can be trivially linked to your identity from which your home address, work address, children's school, and probably a bunch of purchases or service activity from some website that got (or gets) hacked.
EDIT: And it's the future-tense "gets hacked" that ought to be particularly concerning. Considering government contractors and online services leak user data left and right, anything they know will eventually become tantamount to publicly accessible. Managing ones footprint (e.g. putting their toll device in a cage) is a mitigation against not only what is currently happening to that data, but what may happen and what it can be cross-referenced.
The thing is, I've never been that upset about this. Technology has only made something that was possible into something that's now feasible, namely observing the public actions of many people to determine what they're doing.
I've always known, even as a kid, that if we scattered many small detecting devices (cameras, microphones, RFID tags) throughout the world, something that is not illegal or bad in and of itself, that we'd pretty much all be track-able.
Did no one think that putting RFID chips all over the place might make a rough point cloud out of nearly everything in the world? Or that simply by interacting with any computerized system it's possible it can be tracking literally ever bit of your interaction with it? Or that it's possible to make cameras so ubiquitous as to make most of the world monitor-able?
Seriously, did the world not see this coming? I know one of the first things I thought of when I saw lots of security cameras somewhere like the airport as a kid was "I bet you could design something to track all the people in this airport using those cameras. That would be sooo cool."
The point is that everyone is a target. For a mugger, an ex lover, a political opponent, a boss, an employee... everyone is a target. That should (IMO) make everyone at least a little wary.
This was news to me. Jezus, everyone on every photo?
Even a sniff of a notion that you did that to avoid any kind of tax[2] categorizes it as a "structuring" which "may be punished by a fine or up to five years in prison, or both."
[1] http://en.wikipedia.org/wiki/Structuring
[2] Regardless of whether that's true or not ...
On financial accounts where you have assets, I wouldn't want to use an unofficial name. If there's a dispute they could claim that you're not the owner, and you risk losing the assets.
I'm 99% sure it is illegal to get a credit card by supplying false information.
You have to actively turn the reporting on, it is not the default. It isn't a hidden option either, it is the very first one on the configuration page.
And they downplay the sales angle [1] and fail to mention that they sent every url you visit back to their servers in the clear [2]. That's fine if it doesn't bother you but it strikes me as shady and disingenuous on Ghostery's part. Anyone who feels likewise should check out Disconnect [3] which is open source and breaks fewer sites.
[1] Although not as egregiously as in the past. Here is how they originally pitched GhostRank: Ghostery provides reports to Evidon about advertisers and data collectors, which Evidon then provides to regulatory agencies like the Better Business Bureau (BBB) and the Direct Marketing Association, parts of the Digital Advertising Alliance (DAA)[2]. These agencies then use those reports to monitor how Online Behavioral Advertisers operate and, when needed, refer them to the Federal Trade Commission.
[2] http://wtf.cyprio.net/ghostrank-logs-every-visited-url-in-cl...
Is the opt-in feature noted here [1] what you're referring to?
https://www.ghostery.com/faq#q16
"GhostRank data helps them market to consumers more transparently, better manage their web properties, and comply with privacy standards. "
And when GhostRank is enabled it isn't perceived as being a bad thing by the advertising industry:
“When a new web tracker comes on the scene, they often want to be listed in Ghostery. It’s proof that they’ve arrived and have influence"
says the CEO, at
http://venturebeat.com/2012/07/31/ghostery-a-web-tracking-bl...
Top 1% of the super paranoid indeed. While I understand the reach of the government and the lengths they'll go to gain information - this article is absolutely ridiculous to me.
I like my friends, I like to travel, I like to do things. Effectively letting the government control your life because you are afraid of what they MIGHT do? Give me a fucking break.
The fact is beyond dispute that the social services in widest use actively turn your friends into informants on you. If that doesn't bother you, fine--but don't mock the people for whom that is an uncomfortable reality.
I feel free.
For the first time I took a walk in the park yesterday, rolled a joint, went for a nice breakfast and coffee at a local diner, read the newspaper, and just sat in the park. It was amazing not feeling pressure to make everyone immediately aware of how fucking awesome of a morning I've had. It was actually unreal. I just sat there looking at a bird and I almost just broke down and cried of happiness.
I felt zero pressure doing anything.
It felt as though I was obligated to post everything cool I did, so when doing those things, I'd do them differently just to fit the specific paradigm that I post in just to one up others.
A feeling has left me that I hadn't identified before that I mistook as depression. I was growing more apathetic, sad, and cynical due to social media because it felt like every little thing I did was in competition in some form or another to others online, and when I failed, I just felt more isolated and lonely.
I'm able to do things consistently without the need to constantly check my phone and compare that specific frame of my life against others. Facebook on the toilet, while cleaning, running, on the bus, at work, on the commute home, too much.
The weeks following deleting my social media I got so much shit done so fast with no distractions. Absolutely amazing. I think I'll write a blog post about this. I bought a tablet, loaded my favourite books on it, and have filled in all my pointless social media time with reading.
I'm actually discovering the city alone for the first time ever and it's wonderful because I don't care what anyone else thinks of what I'm doing, I'm doing it for me.
I'm going to grow my beard, cut my hair, buying some jeans, buying some chucks, and then I'm going to relax in a field somewhere and just spend time not caring.
You're just realizing again that you don't really give a shit what your mom had for breakfast, unless you're talking about it with her to pass the time over dinner:)
There's absolutely nothing that anybody has to say to me that can't wait a day (except "the site's down!")
I understand what is going on out there. I'm just not going to be a martyr.
Advertisers, go ahead and try to sell me something based on what you think I like.
It won't work on me. It's a hail mary play.
I guess what I'm really trying to say is I'm not in position to change anything so I suppose I can be thankful for the likes of Edward Snowden and companies that fight back far reaching government requests (Like AirBnb did recently) but I'm going to live my life and live it fully, challenging authority every step of the way hinging on the fact that I believe in the Bill of Rights.
The problem is the reverse here. The "system" (i.e. our society in general) has been co-opted. It is profoundly wrong that a normal life in the modern world requires so much disclosure to unrelated 3rd parties.
It's like the argument - if you don't want to be recorded, cataloged and tracked by innumerable license plate scanners on the road by the police, DEA, etc and private data-brokers like TLO [1] then you shouldn't drive. It's completely ass-backwards, the price of driving shouldn't be a permanent record of all your movements in innumerable databases that are anonymous to you.
[1] http://www.forbes.com/sites/adamtanner/2013/07/10/data-broke...
Things should not have been allowed to get here.
Is it a time line of spatial locations?
Or just what I bought for lunch today (therefore one coordinate at a specific time)?
Or a super set of entries in multiple databases?