Slashdot Mirror


RFID Leaders Talk Privacy

An anonymous reader writes "RFID News has released a set of interviews with EPIC, VeriSign, CASPIAN, HP and EPCGlobal on RFID and privacy. From CASPIAN founder Katherine Albrecht: 'In most cases, asking how a company exploring item-level RFID tagging can protect their customers' privacy is like asking a fox how he can best ensure the safety of your chickens.'"

24 of 118 comments (clear)

  1. It's great, but... by abscondment · · Score: 5, Insightful

    RFID is great and all, but until there is legislation preventing law enforcment from using/viewing the data collected by these companies, I wouldn't go for it.

    Buying products with these tags seems like asking to be tracked. I know there are benefits to using them, but I'd rather not volunteer a public record of everything I do while carrying these products. It contradicts the spirit of the privacy rights granted in the constitution.

    1. Re:It's great, but... by Anonymous Coward · · Score: 1, Insightful

      What part of the constitution grants you any privacy rights?

    2. Re:It's great, but... by cdrguru · · Score: 4, Insightful
      Understand that the range of an RFID is perhaps at best a few feet. Many applications are limited to 12-18 inches. This isn't something that can be tracked from a satellite.

      Also, you miss the major point of anything like this. Forget law enforcement getting their hands on it - they have much better techniques. Look at the tollway automatic payment boxes (which aren't anything like RFID but do identify a car by radio) - at first they said they did not save the data. Then some enterprising lawyer got the idea of subpoenaing the data and it turns out they do keep it. This is now something every divorce attorney looks for. What you need to look at with dangerous applications of this is not law enforcement but the ability of the information to be subpoenaed.

    3. Re:It's great, but... by abscondment · · Score: 2, Insightful

      OK,OK.
      Clarification:

      I'm referring to privacy rights guaranteed in constitutional amendments (4th, particularly). Most of these refer to search and seizure within the home. If devices (say, a gun for example) have RFID tags that can be read from outside your home, should law enforcment be allowed to do this? etc.

    4. Re:It's great, but... by Anonymous Coward · · Score: 1, Insightful

      privacy was the reason SCOTUS cited when they overturned that Texas "gay men cannot have sex" law. The majority in their ruling stated simply that the men had an expectation of privacy when they were doing their thing, and the government (texas police in this case) had no right to intervene in the way they did.

    5. Re:It's great, but... by Elwood+P+Dowd · · Score: 2, Insightful
      You're right, privacy isn't in the constitution, but
      The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
      that sounds a lot like privacy to me. In particular that it says we have a right to be secure in our papers against unreasonable searches and seizures.

      I'm not sure if that's where the SCOTUS got the idea of a right to a reasonable expectation of privacy, but it's plenty for me. Certainly less of a stretch than interpreting
      A well regulated militia, being necessary to the security of a free state, the right of the people to keep and bear arms, shall not be infringed.
      to mean that you can take handguns away from people... or even impose a waiting period. Or licensing. (Don't get me wrong. I'm in favor of firearm regulation, but it's pretty clear that the founders weren't.)
      --

      There are no trails. There are no trees out here.
    6. Re:It's great, but... by red+floyd · · Score: 2, Insightful
      You're right, and add to that the Ninth Amendment:
      The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people.
      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
  2. Aside from using blocker tags by Marxist+Hacker+42 · · Score: 2, Insightful

    And other tech that disables the RFID tag at Point of Sale, how the heck is an organization using RFID supposed to prevent other organizations from reading the same tag into a database?

    --
    SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
  3. How to avoid intrusion ... by Anonymous Coward · · Score: 4, Insightful

    OK, so you don't want to get fucked over by the 'evil' (I don't believe a technology can be evil btw, only its uses) that is RFID in the hands of corporates. Simple solution; don't steal stuff from Walmart. If you don't steal items with rfid on them, you won't get hassled. It's an anti-theft device, it's not like they're implanting them in your foreheads.

    1. Re:How to avoid intrusion ... by jafac · · Score: 2, Insightful

      There are many more uses Wal-Mart (and others) are touting for RFID, such as improving returns, inventory control etc. I still hate it, but anti-theft is just the tip of the iceberg.

      How about firing all the checkout personnel?
      That's the ultimate goal, of course.
      You walk in the door, pick up stuff off the shelf, carry it to the door and swipe your card on the way out.

      Minimum wage isn't low enough for these people.

      --

      These are my friends, See how they glisten. See this one shine, how he smiles in the light.
  4. setup one... by kabocox · · Score: 3, Insightful

    like asking a fox how he can best ensure the safety of your chickens.

    Well, they are your chickens. You must insure that other predators don't eat them. You must keep them penned up and guarded so only you can eat them. You don't want to share those chickens do you? I didn't think so. You kill everything else that might eat them.

    Let's see, RFID wise. My business owns that data on Job Blow. Other businesses should be able to use my data to their advantage that would be wrong. I need to have laws implemented so only my business can track my consumers. I need to buy or destory in the stock exchange other businesses that may compete with me.

  5. Re:Beat the system by Anonymous Coward · · Score: 4, Insightful

    From the linked article:
    The blocker technology works by "spamming" any RFID reader that, without the proper authorization, tries to scan the tags

    The only proper authorization is the authorization provided by *me*

  6. I'm confused why more people don't see ... by burgburgburg · · Score: 5, Insightful
    the positive side to widespread RFID chip placements.

    Once firmly implanted beneath the scalp, behind the nape of the neck and/or in the palm of the hand, the RFID chip(s) will enable law enforcement agencies to instantly know your location without the need to task satellites or get involved in wasteful car surveillance. They'll no longer need to burst in to make sure you're in the hotel room with your mistress. They'll know you're in there with her. And since they'll instantly know your exact location, they can be much more respectful of your belongings when they break in (with a court order, of course) and rummage through your stuff. They'll know exactly how long they have so they'll be careful.

    Now if they just legally abolish these cumbersome doors (that terrorists so often hide behind while plotting their evil deeds), why I'll be glad to have traded any semblance of liberty for perfect security.

    Thank you, Big Brother.

  7. While RFID tags have anti-theft applications, ... by burgburgburg · · Score: 4, Insightful

    their primary purpose is not anti-theft, but is inventory tracking and statistical analysis. The RFID tags are there when you BUY the stuff, and can (and will) be used to track you and the items you've purchased after you consider your interaction with the store to be done.

  8. Just like the supermarkets by HockeyPuck · · Score: 4, Insightful

    Its just like the supermarkets with their "discount cards". Which to get one you must give your ph#/name/address etc... (of course you can give bogus information). But now the supermarkets start tracking exactly what you buy and when you buy it....

    If I buy a 5lb bag of bran.. should I get a call from the exlax salesman?

  9. Re:While RFID tags have anti-theft applications, . by aardvarkjoe · · Score: 1, Insightful
    track you and the items you've purchased after you consider your interaction with the store to be done.

    Do we have any evidence of that besides the raving of tinfoil-hat loonies? I haven't even heard a convincing argument why companies might want to track items after they leave the store.
    --

    How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
  10. RFID wardriving as a competitive tool by Animats · · Score: 3, Insightful
    How would retailers feel if a competitor, say Wal-Mart, parked a van just outside the mall entrance and tracked what their customers were buying?

    Present examples like that when talking to retailers. They value their own "privacy". Mall operators hate it when you take pictures of store displays.

  11. They can, they plan to and they will by burgburgburg · · Score: 3, Insightful
    The ability to track you if the RFID tag is still in the item is intrinsic to the technology.

    If you look at the examples that Albrecht from CASPIAN notes, you'll see from internal discussions by the industry that they already plan on this sort of tracking. They're just looking for ways to counter public pressure and present a positive spin on it.

    They will as long as it isn't explicitly illegal because they believe that it will provide them with an enormous amount of information that they can mine to eventual increase sales and sales margins. That's their job. The fact that they are attempting to do this on the backs of our privacy doesn't enter into their conversations.

  12. Re:There has been a lot of speculation on /. by plover · · Score: 2, Insightful
    The range of the tags varies, but is typically between a few inches to six feet or so. Notice the "Checkpoint" gates you walk through when you enter or leave a store? Those are the transmitting and receiving antennas that "talk" to the RFID tags, and the distances you see in the stores pretty well defines the range of the tags they're sensing.

    The tags work by retransmitting energy that they receive. In simpler terms, I'm saying "the tags don't have batteries." They have an antenna that is energized by the transmitters at the gates. They modulate the signal with the data contents of the chip, and rebroadcast it (typically at double the frequency of the received signal.) Since the strength of the signal fades with the cube of the distance, in order to read from a greater distance you have to transmit exponentially more power to read it from further and further away. Don't forget to double the distance measurement, because your transmitter has to send enough RF energy to power the chip circuit, which has to turn that into enough power to make it all the way back to your reciever. And no matter how much power you pump into these little chips, they're not capable of retransmitting more than a few milliwatts, which means that as the distance increases your receiver needs a bigger and bigger antenna.

    The concern for privacy isn't that the guys with satellites are watching your every move from 90 miles up. They don't need to. They simply need to subpoena the store's RFID log to see who's been coming and going, and when. It's much cheaper.

    --
    John
  13. Your bet is wrong by burgburgburg · · Score: 2, Insightful
    Actually, the whole point of this is the the manufacturers, not the stores, are the ones placing the RFID tags. That's one of the issues right now: WalMart and the Armed Forces are requiring items delivered to them to have RFID tags in them by a certain point so that they can instantly know that all contracted items are present. The manufacturers are balking because the cost of the tags is still relatively high. But you can't say no to either WalMart of the US Armed Forces, just "not right now, please".

    And the inclusion in the soles/linings is from RFID industry sources. If the item is easy to remove/displace like the security patch, then it has little value for the sort of tracking planned.

    1. Re:Your bet is wrong by puppet10 · · Score: 2, Insightful

      Bzzt -- "All that says is that if someone were tracking the RFID built into my clothes it would currently tell them that somebody just passed by with Doc Marten's, Old Navy jeans, and a button up shirt from who knows where."

      No actually since each tag is unique (unlike a UPC which all are the same on identical items) it would tell somebody that somebody with your particular Doc Martins (DOCMARTINS-Unit#937298437291), Old Navy jeans (OLDNAVY-Unit#182374892ZAS), and a shirt with a tag returning unique ID#RT2928344KA13 has just walked through the scanner.

      Probability indicates this profile is John Anderton to a 99.99% threshold - its been over 3 months since Mr. Anderton has purchased toothpase from the store - Play toothpaste ad on wall for Mr. Anderton.

      --
      -------- This space intentionally left blank --------
  14. You're not grasping how RFID tracking works by burgburgburg · · Score: 2, Insightful
    Each RFID has an individual code. Unique. So they will know where and when each of those items was purchased.

    If you bought any of the items on you with a credit card, or a membership card, or a "discount friendly" card, then the merchant can tie all of those items to you directly (even if you paid for the rest with cash). And they can use that information to create a profile of your purchasing habits.

  15. Won't someone think of the children? by harlows_monkeys · · Score: 2, Insightful
    CASPIAN seems a bit loony to me. Here's a quote from their spychips.com website:

    Unlike the bar code, RFID could be bad for your health. RFID supporters envision a world where RFID reader devices are everywhere - in stores, in floors, in doorways, on airplanes -- even in the refrigerators and medicine cabinets of our own homes. In such a world, we and our children would be continually bombarded with electromagnetic energy. Researchers do not know the long-term health effects of chronic exposure to the energy emitted by these reader devices

    (Emphasis theirs). Unless they give some numbers on how the reader emissions compare to the thousands of other sources we are being subjected to, that's just baseless speculation, with the old "think of the children" cliche thrown in to tug at our heartstrings. That's usually a good sign that someone doesn't have a real argument to offer.

  16. Re:So what about ther good uses? by cft_128 · · Score: 2, Insightful
    What color shirt you have on as you walk down the street is public (obviously) but what books or medications you have in you backpack is not currently but would be unless we have some regulations (again, IANAL but it would appear that unless otherwise regulated RFID tag info does appear public but I very well could be mistaken).
    So they link all the data together and they figure out that you like red shirts since you wear them 3/4 of the time. Then they see what kind of magazins are you subscribed to and change the adds so that people in them are wearing clothes in your favourite colour. Since you like that you will be more tempted to buy their designer shirt. So.. everyone is happy: you get targeted advertising to your tastes and companys sell more since..
    And they all know you have crabs, are balding, have a AIDS test and need viagra because of the RFID tagged medications and products in your bag. Would you trust everyone that could have an RFID scanner with that information?
    --

    Underloved Movies and Pub Quiz: donotquestionme.org