Showing posts with label hiding. Show all posts
Showing posts with label hiding. Show all posts

Tuesday, May 31, 2016

The Futility of Hiding

“In the struggle for freedom of information, technology, not politics, will be the ultimate decider.”  -- Arthur C. Clarke

We’ll start with one more news item showing the futility of “hiding from elites”: The U.S. high court approves a rule change to expand FBI hacking power by interpreting search warrants broadly. 

It happens almost weekly - expansions in elite powers to see. And these are "normal" times! Imagine what new powers of vision will be granted, the next time the public is scared? Hiding is no solution.

Nor is it just government. “The Google-owned artificial intelligence company, DeepMind, is in deep water after it gained access to the confidential health data of more than 1.6 million National Healthcare Services patients in London,” reports Futurism.com. The data feeds an app called Streams, which would help hospital staff monitor kidney disease patients, markedly improving patient care. But also sent were non-kidney-related data including HIV test results, details about abortions, and drug overdoses.  

One of you wrote in asking whether this is sousveillantly good or bad? 

My response. And you are surprised? If you yowl and make them back off today, it won’t work next year, or the next. The stunning myopia of imagining top-down vision can be stopped is simply amazing. 

But there is good news! The fact that we do now know about this and can discuss it is an example of something called sousveillance. Of course we need more, much more.

 == Identified, wherever you go ==

In The Transparent Society I begin with a tale of two city-states. In both of them, eyes are everywhere: cameras that proliferate across the landscape, from towers to streets to parks to the electronic realm. Oh, but the two cities are different where it matters most. And we are seeing both kinds emerge now, in the real world.

Singapore Is Taking the ‘Smart City’ to a Whole New Level. The Wall Street Journal reports on how government-deployed sensors will collect and coordinate an unprecedented amount of data on daily life in the city. 

“As part of its Smart Nation program, launched by Prime Minister Lee Hsien Loong in late 2014, Singapore is deploying an undetermined number of sensors and cameras across the island city-state that will allow the government to monitor everything from the cleanliness of public spaces to the density of crowds and the precise movement of every locally registered vehicle.”

“Officials say the program is designed to improve government services through technology, better connect its citizens, and encourage private-sector innovations. For instance, sensors deployed by private companies in some elderly people’s publicly managed homes will alert family if they stop moving, and even record when they use the toilet in an attempt to monitor general health.” Any decision to use data collected by Smart Nation sensors for law enforcement or surveillance would not, under Singapore law, need court approval or citizen consultation.

There's your City Number One. Oh, citizens are assured that the top-down surveillance is beneficent and paternally protective. But citizens have no way to verify this, or to enforce that promise.  


So let's look at City Number Two from The Transparent Society, coming alive as we speak.

I’ve met the President of Estonia, Toomas Hendrik Ilves, who has overseen the country’s transformation into “e-Estonia,” where every citizen participates in a single, modern database that handles all health, income, insurance and government benefits records, relating them seamlessly so that paying your taxes “takes 90 seconds.” 

No one denies that Estonian citizens have garnered many benefits in time saved, efficiency and eliminating the shadows wherein corruption thrives. Estonia has the highest web involvement and business startup rate on the planet. Moreover, the information is two way. Except for the most sensitive things like defense matters and imminent (time limited) police investigations, citizens have unprecedented real-time ability to supervise and comment on public officials, including those managing the computer-data systems. 

And that is the difference. Not whether technology will shine light into every dark corner; there is no "whether." Rather, our choice will be either to trust the assurances of paternalistic authorities... or demand the power to enforce their good behavior, by relentlessly looking back at power. 

== Can E-Stonia lessons be applied elsewhere? == 


The article is interesting. Though it leaves many quandaries unanswered.

These include scalability… is this approach best suited to a small and highly educated nation? Or might the benefits be transferred – ‘turn-key’ – to some poor country like Botswana? Then, of course, there’s the worry that almost certainly vexes you – might Estonia’s universal database approach, for all of its clean efficiency, turn into a tool for permanent oppression by governmental Big Brothers?

To these fretters, I have one question; do you honestly believe big nation elites won’t have all these tools anyway, in the next decade or so, no matter how many times you invoke Orwell? Indeed, would you bet your life they don’t, already?  Estonia’s innovation is to make the database transparently accountable.  Any time a citizen’s records are accessed, he or she is told who did it, and officials are required to answer questions about why. 

That, alone, does not guarantee safety, privacy and freedom, of course; it will be a never-ending struggle.  But that arrangement makes plausible further activist efforts to keep big brothers under reins.

Moreover, it ingrains in citizens an expectation and a habit of supervision. And a willingness to get angry when that expectation gets thwarted. And a willingness to reward whistle-blowers, in that event. Not only is this a (somewhat) plausible way to protect liberty, it is how our ancestors (with cruder methods) got theirs. And it is the only way - even theoretically - that freedom can be preserved in the future.


Seriously.  Name another approach that's even remotely plausible. I have been demanding this for three decades.

In contrast, what is the pragmatic recommendation of the West’s most stalwart paladins of info liberty? Almost always they propose the normal-reflex “solution,” to scream at elites: “don’t look at us!”

...without ever getting specific about how the demand might even be enacted, let alone enforced.
Take the problem of identification.

== You exude and ooze ID ==


New biometrics abound and they get ever-creepier! Skull echoes could become passwords: SkullConduct uses the microphone already built into augmented-reality glasses, such as Google Glass, Meta 2, and HoloLens, and adds electronics to analyze the frequency response of sound after it travels through the user’s skull. Individual differences in skull anatomy result in highly person-specific frequency responses that can be used as a biometric system. It’s not as accurate as the CEREBRE biometric system (you can now be identified by your ‘brainprint’ with 100% accuracy), but it’s low-cost, portable. 

Binghamton University scientist Sarah Laszlo talks in this interview about an experiment which suggests that biometric "brainprints" could replace fingerprints in the future.  “Brainprints may carry some potential advantages over fingerprints in identifying people. For instance, if a person’s fingerprint is stolen, there’s virtually nothing that can be done because fingerprints are “non-cancellable,” Laszlo said.   “Brainprints, on the other hand, are potentially cancellable,” she said. (Many different styles of brainprint can be recorded and the old, compromised ones publicly canceled as ID.) “So, in the unlikely event that attackers were actually able to steal a brainprint from an authorized user, the authorized user could then ‘reset’ their brainprint.””  

 Dreamy “cypherpunks” talk of shrouding their online activities with encryption and wearing dazzle masks on the street, to stymie all the cameras. But to what end, when each of us fizzes with biometric identifiers? Your unique walking gait might be altered (for a short time) by a pebble in your shoe. But can you change the specific ratio of lengths of bones in your hand? Or the speckles on your iris, or the pattern of blood vessels in your retina?  

How about the oto-acoustic tones that many humans emit from their own eardrums, and that can be uniquely identified by sensors?  Some time ago I mentioned how your farts will betray you, revealing a very specific spectrum of micro-biota from your gut.

Our civil liberties defenders at the EFF and ACLU etc have the right instinct to fret about Big Brothers and asymmetric surveillance. But they always draw the wrong conclusion -- to resist the Orwellian nightmare by crying out "don't look at us!"

Over any extended time, you will not preserve safety or freedom by hiding. You’ll not. Dare I repeat? You... will... not... prevent elites from knowing you and knowing where you are and what you do. 

And besides, hiding from them is a cowardly, self-centered approach.  

What you can do… perhaps… is unite with a couple of billion other world citizens and demand that big folk behave themselves. That they not use the info to harm or oppress us.  Because billions of us are watching them. 

Unafraid of what elites can see, we will curb what they can do.

== What about encryption? ==

Yes, yes. The grand, always-invoked magic word. I shared a stage with a (skyped-in) fellow named Edward Snowden who - while impressive in some other ways - offered up this tiresome cliche, despite the fact that much-touted crypto-methods topple each and every year. And that any year’s cipher-breakers can, at minimum, dissolve the protective coats of encrypted material from ten years ago… always have and always (likely) will. 

The glaring fact is that even if such methods worked permanently and perfectly – (and I use some myself, for pragmatic reasons) – cypherstuff will only stymie elites (governmental, commercial, oligarchic, criminal and so on…) regarding three or four of the dozens of methods used by oppressors across the last several thousand years, since Hamurabi’s time.  As well-expressed in a famous XKCD cartoon, why spend millions cracking a suspect’s secret cache if a two-dollar wrench can wrest the password, when you bring him in?

I have yet to meet a cypherpunk activist who has read up on millennia of spycraft, before proclaiming “crypto is the solution!” Point out the other secret police methods that encryption does not touch? Or the sheer number of biometrics that spew from them, whenever they walk down the street? All you get is angry glowers. 

And they call me ‘naïve’ for recommending that, instead of trying to shroud ourselves in e-burkhas, cowering from Big Brother’s minions, we instead act vigorously, while we are still somewhat free, to strip all elites naked!  That is militance.  It is how we got what freedom we do have – hundreds of times more than any of our ancestors.

Moreover, in the most important civil liberties advance in a generation, our right to aim cameras at the police is now established and making a bigger difference than all the raving jeremiads of both left and right.

And sure, we can negotiate with our officials and the Protector Caste how to supervise in ways that still let them do their jobs.

The choice is inevitable, between City Number One, whose best and most benign-confucian example is Singapore but more likely Oceania... 

...or else the e-Estonian solution of utterly empowered citizenship, in which the skull-echo and fart-tracking and lie-detection and personality profiling methods help us to reduce the power of psychopaths and keep civil servants accountable.

The transparent city is coming, so let’s take a hand in its design, so that it reveals more about the mighty than about us. 


If so, then instead of Big Brother forever, we might have Big Brother never.

== Addendum ==


Envision contact lenses that are also tiny cameras, recording and storing whatever you see, and even playing it back before your very eyes.  Sony has patented such a system – though we’ve portrayed this in science fiction, for ages – using blinks to command the unit (again, as I depicted in Existence.) Oh, but what if it is hacked?  We can and will adapt, provided every advance is competitively and vigorously criticized and open-tested. 

Tuesday, November 24, 2015

Obfuscation: protect privacy by destroying the Web!

Time for a return to the core issue of our time: how shall we best preserve and extend freedom?  Along with freedom's contingent benefits, like privacy?

In the LA Review of Books, Internet Privacy: Stepping Up Our Self-Defense Game, Evan Selinger reviews a slim book -- Obfuscation: A User's Guide for Privacy and Protest, by Finn Brunton and Helen Nissenbaum.  


Distilled, the core argument is that defenders of freedom and privacy should poison the Web and Net that we now know, by flooding it with disinformation and false data, so that no one -- including powerful elites -- will be able to tell what's real. In other words -- burn the commons to the ground, so smoke gets in their eyes. That'll show 'em.

Let me avow that I actually quite respect Brunton and Nissenbaum and other members of this weird cult, for one reason.  At least in Obfuscation they are recommending a different solution from the standard offerings, which are “encrypt everything!” and “surrender to despair.”  True, the obfuscation approach was first offered in sci fi thought experiments, like Vernor Vinge’s Rainbows End and Vernor saw the logical reasons why it cannot possibly work.  Still, at least they are trying to envision something assertive.

To be clear, most of us share the same fear – of a return to the obligate pyramids of privilege and power that dominated 99% of human societies for at least the last 6000 years.  George Orwell terrified us by portraying Big Brother’s tyranny becoming far worse even than feudalism, enhanced and locked-in with technological powers that make resistance futile, forever.  I am often accused of shugging off that threat when, in fact, I am as much (or more) motivated to fight it than anyone else alive.  Motivated enough to ask that rarest of questions: 

“How did we get the narrow window of freedom (and some privacy) that we currently enjoy?”

Oh, there is no end to Cassandras issuing jeremiads and hand-wringing denunciations that the window is closing! Declaring that various elites – government agencies, corporations, oligarchs, criminal gangs – are forging Big Brother’s tools and applying them, as we speak. And these complainers are right! As far as they go, that is. Yes, the revolution and renaissance is in danger! It always has been, with odds stacked high in favor of feudalism’s horrible return.  And yet…

…and yet dire warnings are best when accompanied by perspective. But not one of the modern doomcasters – from Snowden and Assange to Fukayama and Schneier to Nissenbaum and Brunton – not one of them ever casts an eye toward the question that I will now reiterate: “How did we get the admittedly imperfect window of freedom (and some privacy) that we currently enjoy?”

The answer is not “obfuscation.” Nor is it a more frequently prescribed version of the same notion – universal encryption of everything. Our ancestors who set the enlightenment revolution in motion held no truck with such cowardly approaches, that boil down to “If you are afraid of looming tyrants, then by all means hide!” (See my earlier critique: Everybody Hide!)

Across twenty years I have asked fans of cowering in shadows to name one time when that approach truly stymied would-be lords, or helped to maintain a free and open and accountable society. The answer I get is always… always… puzzled, blinking stares, as if the question had never once occurred to them. But in fact, if you examine sixty centuries of tyranny – and the methods used by secret police and despots since Hammurabi – only a handful of their tactics would be even slightly inconvenienced by perfectly-encrypted messaging – or by setting the commons on fire. 

(Oh, and fans of encrypted cowering also ignore technological change.  The fact that agencies and corporations can trivially decipher encryption from ten years ago, so why won’t they be able to parse today’s best ciphers, ten years from now? Revelation delayed is still revelation. Oh, you respond that this time it'll work much better than it ever worked before? You’d really and truly entrust everything to such a slender reed?)

Ah, but solutions only have to sound plausible and logical. What? I’m asking for a history of their proposed approach ever, ever, ever having worked?  Call me a spoil-sport.

In fact, only one thing has ever actually worked, thwarting tyranny long enough to let us have this recent – albeit imperfect – stretch of relative freedom and privacy. The method is called reciprocal accountability.  Also Sousveillance (look it up.) A far more demanding, citizen-centered approach that happens to be the way our parents did it, and their parents, and the founders of our revolution.

It is the very same method that is currently being applied on our streets, as citizens -- empowered by new technologies of vision – assert themselves to hold police accountable.  Using new technologies like cell phone cameras to empower citizenship, instead of oppressing it, they are preserving and enhancing freedom as we speak, not by hiding from the Man, but by militantly and courageously aiming tools of light to hold authority accountable. 

And that is the difference between us, friends.  I share with Nissenbaum and Brunton and Selinger a fear and loathing of potential feudal lords and tyrants. Only I care enough to actually get past the indignant reflex and ask what has worked in the past – and what is working right now. 

Ponder this truth: what has worked is not - and never has been - hiding.

== Is hiding even remotely possible? ==

The new techno romantics all proclaim so, demanding the cowardly approach – hiding from the Man – and loudly proclaiming it to be brave.  But physically and pragmatically, can it actually be done?

In the future, elites will have all sorts of tools to defeat obfuscation.  Linguistic-semantic analysis will detect your statements and ID you, even hidden by a pseudonym. Comparison of multi-path inputs will parse truth from fabulation. Governments and criminals and aristocrats will have means to bypass the bits, eavesdropping on the sonic data as your voice vibrates your window, or they’ll tap and log the strokes you type on your keyboard, from the different sounds each letter emits.

Technologies like facial coding, biofeedback and brain imaging have long been used by companies in the hope of pushing the boundaries of marketing and product development. But their use by political parties and governments is a growing phenomenon, evoking futuristic scenes from the movie “Minority Report,” in which eerily well-informed billboards scan commuters’ eyes and call out to them by name.

I have compiled a long list of biometric traits that are useful or effective at distinguishing one human being from another.  These range from fingerprints and retinal or iris scans to face recognition, hand-bone ratios, voiceprints, walking-gait... all the way to the otto-acoustic sound emissions that many of us radiate involuntarily from our eardrums!  We positively fizz with identifiers. And the romantics who think they will ever be able to conceal their movements in such a future are uber-fools.

Now comes news that just sitting in a room you'll leave a unique panoply of bacteria that can be attributed to you. Everywhere you go... you emit your own unique microbial cloud -- a personalized signature of your own micro biome.

"We all continually emit our own microbial cloud into the air and onto nearby—and not so nearby—surfaces. Now, according to a new study in the open-access journal Peerj, scientists can distinguish the make-up of the cloud is uniquely yours—a personal marker that is as particular to you as your fingerprints or your genome. That’s a biological calling card that could have implications for epidemiology, environmental engineering or even, intriguingly, criminal forensics."

Elsewhere, I talk about a posh gym in New York where a $26,000 membership and a retinal scan lets you into a facility where they measure everything about you… in order to guide your workout. Um okay.  So rich people are paying high rates in order to offer up their bodies to be measured in every conceivable way, so that unvetted parties will have every single biometric ... ah, I see you are getting it.  But do they?

Safety-through-concealment is a fool's fantasy -- even for elites.

I do not say this out of despair!  Rather, in order to rouse you to fight for freedom the only way that has ever worked.  The only way that can possibly work.  And the way that the self-appointed mavens of privacy absolutely refuse to consider.  In their relentless preaching for cowardice… that we all should protect ourselves by hiding… they perform the worst possible betrayal of everything that they claim to stand for.

Pardon me for repeating. I'll stop doing it when I see signs that the point is getting through to anyone, anyone at all.  But hiding will not work over any long-run.  

Sure, protect your passwords as a short term, practical matter.  But over the long term only one thing will keep you free.  Aggressively, militantly empowering yourself and your neighbors to see!


== So what’s to be done? ==


This is why the banks will not go all electronic and abandon their branches.  Bank branches will in future do what they do now, verify your credentials and help you do transactions.  Only in 2050 you will walk in... in-person... and be verified via all of your biometrics, including biomeNtrics (I just coined that!) via cranial sensors.

With that verification, you can then, in-person, clean up the last month's messes and prepare the next month's passwords.

== Someone being useful, at least ==

Much more cogent and well-supported – and hence scarier – is: "6 Spooky Ways Local Law Enforcement Is Watching You: A day in the life of the surveillance state," by Elliot Harmon and Nadia Kayyali, posted on the site of the worthy Electronic Frontier Foundation (EFF) which I urge all of you to make one of your two dozen “proxy activism” NGOs.

Just because I disagree with EFF's set of prescriptive solutions, that doesn't mean they aren't completely right to be shouting and hollering and rousing public awareness of the overall dangers!  I send them money.  You should, too.


Harmon and Kayyali summarize, with useful links, half a dozen ways you are being watched, from social media monitoring and automated license plate readers to surveillance cameras, biometrics and imsi catchers.  Alas though, in the end the problem and drawback is the same.

== And finally… Yelp for People? ==

Of course this had to come. Yelp for people: You will soon be able to rate anyone you have interacted with on this new app: with reviews and 1 to 5 star ratings assigned to "your exes, your co-workers, the old guy who lives next door. You can’t opt out — once someone puts your name in the Peeple system, it’s there unless you violate the site’s terms of service. And you can’t delete bad or biased reviews — that would defeat the whole purpose."

The good news?  This will light a fire under creating real reputation mediation services, a potential billion dollar business (and I know the secret sauce) – and don’t let anyone tell you that reputation companies already exist.  They are jokes.

Saturday, September 19, 2015

Can We Save Freedom by Hiding?

== False Trails are… a false trail ==

Across all my years as an impudent dissenter from mob-think regarding freedom and privacy, one fact has left me boggled, time and again. The way activists and academics and pundits – many of them clearly intelligent and sincere thinkers – leap to make the same mistake, over and over again.  The error of technological myopia.

Take this example: “…New York University professors Helen Nissenbaum and Finn Brunton have a proposal. In their new book, Obfuscation: A User’s Guide for Privacy and Protest, they advocate taking evasive action, or what they call obfuscation. They define obfuscation as “the deliberate addition of ambiguous, confusing, or misleading information to interfere with surveillance and data collection,” and they see its potential as a means of redress. For example, they discuss software that generates misleading Google queries (so the tech giant can’t get a read on you) to Tor relays, which hide IP addresses. 

Think of it as creating a diversion, or planting false footprints. Security expert Bruce Schneier has made similar suggestions—like searching for random people on Facebook, or using a friend’s frequent-shopper card at the grocery store. If you can distort the government’s or companies’ profiles of you, you’ve scored a small victory.”

Hmm… a very, very small and utterly meaningless victory.  Science Fiction author Vernor Vinge referred to this approach in a novel, portraying a group that filled the Internet with machine-generated garbage information in order to mask personal information beneath a deluge of misleading fabrications.  The “Friends of Privacy” thus enabled their own members to conceal their online activities – or so they thought – while making the Net and Web effectively useless at providing reliable information to anyone, anywhere. A classic case of spoiling the commons, in order to achieve a narrow, self-serving goal.  (I portray would-be terrorists doing the same thing, in Existence.)

 Over the long run, Vernor reveals the obvious – that the 'Friends of Privacy' are no more than a front for powerful interests, from oligarchs to criminal gangs, seeking to conceal their nefarious activities from any chance of discovery. Indeed, pick any method of concealment or obfuscation – won’t elites use it more effectively (by far) than commonfolk? In fact, won’t the very programs that you and I purchase, to muddy our footprints, actually report every datum to the original creators of the software?  And if you doubt that, oh, have I a bridge to sell you.

Technological myopia comes in where we see privacy mavens like Nissenbaum and Brunton and especially Security expert Bruce Schneier always talking as if this year’s technology is the ne plus ultra, the final act, the static object on the table for discussion.  Moore’s Law brought us here, but has no further relevance. Of course, this is plain lunacy!  Take the example of cameras.

Cameras are getting smaller, faster, better, cheaper and more mobile at a rate far faster than Moore's Law.  (Some call this "Brin's Corollary.")  And yet, nearly every discussion of surveillance assumes that they will remain great big, visible boxes on lamp posts. They won’t. They will shrink and move and zoom and become more numerous than blades of grass. Shall we banish them? How, when they become smaller than mosquitos and more numerous?

(For a glimpse of what that near future may be like, hear me read Chapter 3 of Existence.  And lower down, see "The Smartest Mob" and "Shelter of Tradition."  All three sections show how inevitably the tsunami of cameras will change everything.)

Perhaps common citizens will obey such a ban, but elites?  Name for me one time in all of the history of our species, when top elites have allowed themselves to be blinded.

In fact, there is every sign that a proliferation of cameras may be exactly what’s needed, in order to preserve freedom.  For example, take events in just the last year. For the first time, in the U.S., all police forces, even corrupt ones, must be careful in the way they treat minority groups. Why?  Because of the very same technologies that hand-wringers loathe. Elitist snobs in academia may ignore the effects that cell-cams are having on the street-level.  But real-life minorities and poor folks cannot afford to ignore good news.

Instead of tools for Orwellian oppression, cameras seem to increasingly be the new Great Equalizers. Would the privacy mavens backtrack this trend?  Confiscate and eliminate the cell phone cameras that are finally giving minorities and the poor a real chance at street justice?  I can just hear their reaction. "Oh, in THAT case, sure, I'll allow that.  But nothing more!"

Except that in a couple of years, the cell phone cam will be a jewel on your lapel.  Shall we ban that?  Then a tiny dot on the corner of your glasses, or a drone the size of a bug that follows you everywhere, telling you what lies around the next street corner, ensuring that no one can harm you unrecorded and telling you if you are being followed.  

Shall we ban that? Okay. Then exactly how will you accomplish it?

== The online world ==

Oh but the next response is “I wasn’t talking about cameras but information! On my purchases and so on. Surely I can obfuscate all that!”

Um, wrong in a dozen ways.  First, if we enter an age of unreliable information online, that will extend to falsified images and cameras, too, will become useless.

Furthermore, elites will have all sorts of tools to defeat obfuscation.  Linguistic-semantic analysis will detect your statements and ID you, even hidden by a pseudonym. Comparison of multi-path inputs will parse truth from fabulation. Governments and criminals and aristocrats will have means to bypass the bits, eavesdropping on the sonic data as your voice vibrates your window, or they’ll tap and log the strokes you type on your keyboard, from the different sounds each letter emits. On the street, the very vibrations of your eardrum will denote you distinctly from the crowd surrounding you.

I do not say this out of despair!  Rather, in order to rouse you to fight for freedom the only way that has ever worked.  The only way that can possibly work.  And the way that the mavens absolutely refuse to consider.  In their relentless preaching for cowardice… that we all should protect ourselves by hiding… they perform the worst possible betrayal of everything that they claim to stand for.

Hiding will not work.  Sure, protect your passwords as a short term, practical matter.  But over the long term only one thing will keep you free.  Aggressively, militantly empowering yourself and your neighbors to see!

I tire of seemingly intelligent people who cannot lift their gaze to even notice what is happening right now, let alone look 5 years down the road.  We live in a narrow era of relative freedom and - yes - some desirable privacy.  We need to do what already works in order to maintain them.  

That means knowing that freedom comes first.  A free people can then demand some privacy, from elites and from each other.  

But freedom comes first.  And freedom can only be effective when most of the people know most of what's going on, most of the time.