Main

May 17, 2007

Remembrance II

Many signs point to a growing consciousness among the American people. I trust that this is so. It is useful to remember that history is to the nation as memory is to the individual. As persons deprived of memory become disoriented and lost, not knowing where they have been and where they are going, so a nation denied a conception of the past will be disabled in dealing with its present and its future.

Arthur M. Schlesinger Jr., quoted in this month's Harper's Magazine.

The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

The Fourth Amendment to the US Constitution. 

The privacy of ordinary Americans is fiercely protected in all our activities. We're not mining or trolling through the personal lives of millions of innocent Americans. Our efforts are focused on links to Al Qaeda and their known affiliates.

President George W. Bush, May 11, 2006, quoted by PBS' Frontline.

General warrants was part of the reason for the American Revolution. It was that the king's agent could go in and search a house everywhere, search a whole neighborhood with one warrant. And the Boston people said: "We don't like that. We'll have a tea party. We'll fight you." We said no.

Peter Swire, former White House Chief Counsel for Privacy, quoted by PBS' Frontline.

The [PBS] documentary is a straightforward indictment of the Bush administration's decision to sacrifice individual liberties for collective defense ... Big Brother is not, as once feared, a giant centralized supercomputer with a massive amount of information about every American; rather, it is a cherry-picking operation in which the government goes looking for what it wants among gargantuan corporate databanks.

Washington Post, May 15.

August 25, 2006

The watchers

And in news related to my prior post, Homeland Security's Chertoff defends the government's plans to snoop ever more closely on the personal communications of its citizens. He says that increased intelligence gathering and sharing doesn't equal less privacy.

As we have broadened information sharing, we have made sure that there are strict rules in effect...that prevent people from misusing that information or putting it out improperly [...] That's built into the DNA of this and all of our intelligence-sharing capabilities.

That's right... unrestrained and highly secret intelligence gathering programs by their very nature are respectful of citizen privacy. The same government that has accidental data breaches every other day is totally capable of respecting sensitive personal information.

And while we're at it let's throw in a few other nuggets from the Ministry of Truth: War is peace. Freedom is slavery, and ignorance is strength.

Being watched

A few weeks ago an AOL researcher mistakenly posted three months of search results for 658,000 users to the internet. While the data was not linked directly to user account, the 36 million search records contained very revealing details about AOL members' search habits and private obsessions.

The search queries themselves did, however, contain personally identifying information such as names and addresses and even, in some cases, social security and credit card numbers. Copies of that data are all over the internet and there is even a searchable database.

The Washington Post reports that the researcher, his supervisor and a higher ranking executive have now been terminated over the affair. The whole issue highlights just how much information is being accumulated about us without our realizing it, and how increasingly transparent our lives have become. What a brave new world we live in. Somewhere in cyberspace is a record not only of who we are, what we earn, our credit history and purchasing habits, but also now our innermost private thoughts, fears and desires.

Consider, for instance, the life of a couple in Baytown, Texas as intimately revealed in their AOL search history for March through May:

She has missed her period and realizes she is pregnant. She is 37 and concerned about the risk of multiple births.

He apparently is diabetic and has bipolar disorder. He likes to keep violent dogs in the house. He is cruel to her and the dogs, probably because of alcohol, methamphetamine and cocaine abuse.

As a born-again Christian she believes fasting and intercessory prayer may help her to obtain healing for her spouse. But is fasting safe with an unborn child? She already worries that her partner's history of drug abuse has harmed the fetus.

She has ideas about becoming an actress. She is looking into opening her own business, perhaps a grocery store and gas station franchise. They are planning to buy a new set of living room furniture, preferably beige.

She needs to start thinking about maternity clothing. He's more interested in finding naked pictures of Beyonce and other 'fine black girls'...

This is somebody's life laid bare... Does she know he searches the internet for girls while she's praying for his healing? Will she get an abortion? Will she leave him or stay? Does she know her life is exposed, even if anonymously, for all to read on the internet?

The data leakage by AOL is not really the problem, only a symptom of a far more complex issue. It's hard to comprehend where this connected world of information is taking us. According to Technology Evangelist,

The privacy violation was extraordinary, but I think the leak may have a positive side effect by helping web searchers understand just how much information search engines know about them. This may also help people understand why it's a big deal when the government asks search engines to hand over search records.

As a security professional I'm aware of the increasing value of 'open source' intelligence gathering. I'm also aware of the incredible potential today's data universe provides for creating a totalitarian society where 'total information awareness' is not just a bureacratic buzzword, but a reality. Whether we care or not, we are being watched.