Slashdot Mirror


EFF and MuckRock Need Your Help Tracking Biometric Surveillance

v3rgEz writes: Police departments are increasingly tracking your face, your fingerprints, your tattoos — and even your DNA. The Electronic Frontier Foundation and MuckRock are working to uncover how local agencies are tracking you and bring some much-needed transparency to the murky world of biometric surveillance through a free public records audit: Just put in some basic information about an agency near you, and they'll publicly file a request to see what vendors your city is using, how they protect your privacy, and more.

19 comments

  1. A very good story here by fustakrakich · · Score: 1

    But everyone prefers to talk about politics in the above thread.

    So many cameras everywhere. Where do I begin? Hmm, guess I'll start with the house.

    --
    “He’s not deformed, he’s just drunk!”
    1. Re:A very good story here by fustakrakich · · Score: 1

      Damn! I swear this story was before the other one! And when I refreshed the page, they swapped places! whoa! Cool!

      --
      “He’s not deformed, he’s just drunk!”
  2. At least on one area.. by Virtucon · · Score: 4, Informative

    Fingerprints and other biometric data go always to the FBI's IAFIS and are kept for god only knows how long.

    What is included in IAFIS: Not only fingerprints, but corresponding criminal histories; mug shots; scars and tattoo photos; physical characteristics like height, weight, and hair and eye color; and aliases. The system also includes civil fingerprints, mostly of individuals who have served or are serving in the U.S. military or have been or are employed by the federal government. The fingerprints and criminal history information are submitted voluntarily by state, local, and federal law enforcement agencies.

    In the age of the Patriot act, it all goes into IAFIS. Oh and sign up for the TSA Pre-Check program and guess what, you're fingerprints go there too, for at least 75 years. Oh and recent supreme court rulings have allowed DNA evidence to be collected in connection with 'serious' crimes. The definition of serious is still nebulous but I know a guy who had to give a mouth swab for a public intoxication arrest.

    There's multiple reasons why I object to this kind of data being retained except for the purposes intended and it should have a lifespan suiting the needs, or it shouldn't be collected at all. Unfortunately for all of us in the US, everybody wants to collect data on us and our government is no different. If you're convicted of a felony, yes retain the data indefinitely but shit if you get a parking ticket or non-felony you shouldn't have this crap follow you around for the rest of your life.

    --
    Harrison's Postulate - "For every action there is an equal and opposite criticism"
    1. Re:At least on one area.. by Anonymous Coward · · Score: 0

      Storage is cheap and personal identification data is very small. I don't see why any agency wouldn't keep them for a hundred years after collection.

      Fingerprinting has been introduced decades ago, and the records were entirely digitized, have any of them been purged yet? I'd wager not.

    2. Re:At least on one area.. by fustakrakich · · Score: 2

      Do you use that fingerprint thingy in your laptop/iPad/iPhone? All roads lead to Rome...

      --
      “He’s not deformed, he’s just drunk!”
    3. Re:At least on one area.. by Virtucon · · Score: 3, Interesting

      last year a Virginia court ruled that if you use biometric locks you can be compelled to unlock the device. So no I don't use them.

      --
      Harrison's Postulate - "For every action there is an equal and opposite criticism"
    4. Re:At least on one area.. by fustakrakich · · Score: 2

      last year a Virginia court ruled that if you use biometric locks you can be compelled to unlock the device.

      To be compelled to assist your own prosecution... We still must drink our own hemlock when the state demands it.

      --
      “He’s not deformed, he’s just drunk!”
    5. Re:At least on one area.. by WillAffleckUW · · Score: 1

      Not true in Washington State. We have strong constitutional protections in our state constitution for privacy, and you need a specific and individual warrant for that.

      --
      -- Tigger warning: This post may contain tiggers! --
    6. Re:At least on one area.. by Anonymous Coward · · Score: 4, Interesting

      I wonder if any researchers have ever tried to turn the IAFIS fingerprint database on itself to see how many fingerprint "matches" they get on sets already in the database. I know a while back some researchers interested in the DNA side of things did something similar, taking several DNA profiles from the system and turning them around and throwing them back at the system to see if how many false positives they would get. Allowing for damaged evidence, lab mess ups and other possible sources of error they were getting several hits in a relatively small database, that is before the FBI shut them down, threatened them, and threatened anyone else against doing any such research. People seem to have an overly rosy view of how unique biometrics are, under perfect lab circumstances with limited sample sizes matches could very well have very high accuracy. In the real world with damaged evidence, poor lab procedures, forensic "scientists" less interested in science and more interested in getting the "bad guy", huge sample sizes and incorrectly collected specimens they are far less accurate.

      http://www.washingtonpost.com/local/crime/fbi-overstated-forensic-hair-matches-in-nearly-all-criminal-trials-for-decades/2015/04/18/39c8d8c6-e515-11e4-b510-962fcfabc310_story.html

    7. Re:At least on one area.. by Anonymous Coward · · Score: 0

      +1 insightful

      Considering that most fingerprint "matching" is done on just a handful (7 or so IIRC) of specific features of a print, false positives are very likely. (There was a case I read about a year or so back about a guy whose prints "matched" those of a known terrorist and ended up in all kinds of trouble until his lawyers forced a re-examination of the fingerprint ID based on more criteria. There's also this case (and see also the article linked therefrom).

      Even aside from the limited point matching, there are questions about fingerprint evidence in general.

      The FBI has no interest in finding problems with its investigative methods (look at all the hoopla around the "lie detector" pseudoscience for another example), just with finding more ways to indict someone they don't like. The Hoover legacy is still strong within the Bureau (as in other LE agencies).

    8. Re:At least on one area.. by fustakrakich · · Score: 1

      Nothing the old rubber stamp can't fix, and it certainly does not address the problem I posted above. A damn warrant makes no difference to me. To force me to aid and abet my own prosecution in any fashion at all is just so patently absurd.

      --
      “He’s not deformed, he’s just drunk!”
  3. Thank you EFF by buck-yar · · Score: 3, Interesting

    You guys do a lot of good work.

  4. Typo? by Anonymous Coward · · Score: 1

    how they protect your privacy

    Shouldn't that be, "how they don't protect your privacy"?

  5. Crowdsourcing Freedom and Privacy by WillAffleckUW · · Score: 1

    It's a good thing.

    --
    -- Tigger warning: This post may contain tiggers! --
  6. Biometrics are not security by ShaunC · · Score: 1

    This headline reminds me of the "enter your credit card number here to see if it's been stolen" type of things. I realize that's not what's going on here, but that form asks for a lot, and while much of it is optional, I'm hesitant to touch it.

    Biometric markers are not security and should never be used as more than one component of a multifactor approach. Any system created to read and authenticate a biometric identifier can already be tricked by today's technology into accepting either a reproduction of that identifier or a surreptitiously obtained sample of the true identifier. Fingerprints can be lifted and faked; blood or other molecular scans can be fooled by misappropriated material; even iris scans can be forged. It's really not hard to get someone's fingerprint, hair, blood, saliva, iris scan, or similar if you have more than a passing interest. Tomorrow's public technology will make it even simpler for small-time criminals, and heaven only knows what level of planting/forgery law enforcement and intelligence are already capable of.

    For many years, when I've objected to biometrics by saying things like "my fingerprint is irrevocable, it isn't like a password where I can just change it once it's compromised," the counter-argument has always been "oh don't worry, no one is actually keeping *scans* of your fingerprints, they're condensed into some mathematical hash." That might be accurate for the fingerprint scanner on your iPhone, but it's bullshit when it comes to the government. The recent OPM compromise has many outlets reporting that federal employees' fingerprints themselves were compromised. Not hashes, but fingerprints that can be reproduced, either ink on paper or the high-res digital version that I'm more familiar with. I'm ready and willing to listen to the government's opinion on how those will be replaced...

    Anyone relying on biometrics for security is in for a Bad Time.

    --
    Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
  7. Is It Private At All ? by JimSadler · · Score: 0

    That which was seen in a public place or seen from public space while occurring on private property or is a matter of public record may not actually have anything at all to do with privacy laws. A rental car company accidentally gave me my ex-wife's address a couple of years ago. I did not want or need her address. But being that it is part of the records of a private business I somehow find it hard to understand how privacy applies at all. I do understand that many people like being secretive but I'm not convinced that the law or the courts should help them live that way.

  8. Understand what your State can offer the press by AHuxley · · Score: 1

    A digital FOIA request can be very different at a city and state level. Some local officials might offer to do an exhaustive digital search and find nothing.
    The search term was not correct or the database was limited by design or the use of obscure line items, perfectly repeated spelling mistakes.
    A walk in request for a budget related 'look' or 'read' might show where new federal or state 'grants' went locally.
    A lot of private sector groups are now offering to provide services that track web 2.0 users with terms like reach, geo, severity, engagement, influencers, violation, notes per account per city, state.
    What was once reserved for national or federal efforts is priced at the local gov level ie State Commissions are back as fully funded intelligence organizations per state or city. The funding part is the only or last visible way for citizen journalists to understand what is been used for surveillance locally.
    Expect changes in how and who can access to public records in more states.
    eg Freedom of information legislation (Florida) is clear but it can vary from state to state.
    https://en.wikipedia.org/wiki/...

    --
    Domestic spying is now "Benign Information Gathering"
  9. Biometric surveillance iz bad peep this shit by Anonymous Coward · · Score: 0

    Yo Biometric surveillance iz dangerous ta uh free society. Passwords can be changed but not fingerprints sho 'nuff!