TIA Preview: Here's Lookin' At You

cosmosis points to this interesting glimpse presented on Cryptome at ways in which the proposed "Total Information Awareness" system currently being touted as a way to fight terrorism could be abused. It's also a reminder that there's plenty of possibly sensitive information on you and your neighbors that's floating out there already.

Comments

Re:Its a Tradeoff

[IshanCaspian]

Here's an example:
1. track all purchases by everyone made in the US
2. put it in one big database
3. Compare each person's purchases against certain profiles...sleeper cell terrorist, arsonist, political dissident
3. Generate a report for each law enforcement division across the country which lists the license plates, names, and descriptions of the twenty most suspect people.
4. Start reading their email and monitoring their library activity
5. Find out the word jihad appears in one of their emails, or they make soem joke about shooting someone, and notice they've checked out a copy of "civil disobedience". Check their web browsing activity, notice they've read the anarchist's cookbook.
6. Conduct a raid, which is legal without a search warrant if terrorist activity is suspected.

Mostly computerized. Efficient enough to implement nationwide. Total invasion of privacy. Guilty until proven inneocent. All legal.

i've talked about this

[vsync64]

I've written about this in varying detail on my Web site. Here's an excerpt from one of the more pertinent entries:

I'm hoping to tie this rambling into a coherent conclusion. I've had people tell me that it doesn't matter what data collection is being undertaken by the government; if you have nothing to hide you have nothing to fear. If my slowing down for a stopped vehicle is suspicious enough to warrant following, what happens when they have a list of the books I read, the sites I visit on the Internet, and the people I send mail to (even if I use PGP, you think there aren't honeypot remailers out there?)?

Howard Rheingold pointed out on the radio the other night that once all this data is collected (note that They doesn't have to gather the information, just collect it from private companies), the potential for data mining is enormous. What happens when whatever AI and heuristics they have scanning our lives flags a particular coincidence, and the person writing the report is lazy or is ideologically prejudiced? Remember, once it's typed up in a report with a nice abstract by someone told by the computer that you're "suspicious", things look a lot more airtight than they are.

Do you want the police crashing your door, cursing and beating you, and kicking in your teeth, because of a red-flagged coincidence? Do you want to die in a shootout defending your family based on a misunderstanding, bad spin, or a lie? And don't forget, Bush's Justice Department now wants to be able to force you to incriminate yourself.

Re:Its a Tradeoff

[rgmoore]

I know that its disconcerting to know that you may experience an invasion of privacy but most of us are too inconsequential for the government to bother with.

It may be true that you're too inconsequential for the government as a whole to care about, but that doesn't mean that there's no problem with that information being out there. The government for better or worse is made up of individuals, and some of those individuals will have access to that information; in fact it will be more useful to the government if lots of people within the government have access to it. Most of those people may be fine, but there are still people who are going to abuse any power they get.

Take the more limited example of existing police databases. There are plenty of examples of police officers who have abused those systems to harras ex-girlfriends, get even with people who have pissed them off, etc. Extending those databases to include even more kinds of data that could be abused will only make things worse. For one thing, it will make abusing the database more tempting, by making more kinds of mischief possible. For another thing it will make the potential abuses more damaging.

The key thing to me is that such abuse is all but inevitable, while the supposed benefits are largely hypothetical. Every time people have created databases of this general type, that data has been used abusively at least occasionally. There's every reason to think that the TIA database will be abused, too. At the same time, there's no certainty that it will be possible to use that same data to track down potential terrorists. I know for sure that given such a database I would find it much easier to write a script that took somebody's license plate number, dug up their credit card purchases, and emailed ones that were potentially embarrasing to all of their known email contacts that to track down possible terrorist activity.

Re:mismanaged? by the government?!!

[rgmoore]

If you don't think the govermenet is trust worthy, then move.

I have a far more radical idea. If the government is untrustworthy, badly managed, taking the wrong approach, or whatever, how about trying to improve it? The United States is still at least nominally a representative democracy, and one of the underlying principles is that the government is subject to change if the people don't like it. Identifying problems, like TIA being a really bad idea, is the first step in fixing them.