Most people don't care because they're not culpable enough to feel paranoid. Some percentage of people will be unjustly exploited, but probably not enough to offset the economic benefits that technology like this brings to its users.
I think your focus on 'the people vs the government' is misplaced, because government is just a sort of social technology which can be used and abused like any other technology depending on who controls it at the time. What about Barack Obama, for example? Do you seriously think he will refuse to relinquish power in 2 years? You probably don't, just' just expressing your cynical (and entirely justifiable) opinion about the political class. But that's not much different from a Marxist asserting that business is fundamentally antagonistic towards workers or similar monolithic abstractions. When you make arguments like this you've opted for ideology over empiricism.
Bringing it back to technology, certainly the ubiquity of digital technology makes it easier to establish mass surveillance of a kind that would have seemed nightmarish a few generations ago. But the same technology has also facilitated a significant number of populist uprisings in recent years, and made it far easier for marginalized communities to get their message out in relatively short order, as well as facilitating organizations with both benign and malicious intentions (eg MSF and ISIS, who both leverage social media but for wildly divergent ends).
The internet of things isn't 'coinciding with the dragnet surveillance trend'; the latter is an emerging property of our increasingly networked society. When we use metaphors like a 'world wide web' traversed by 'spiders' and so on, we should not be surprised that such technologies are going to amplify the capabilities of institutional actors in at least the same proportion that they amplify the capabilities of individuals.
> Most people don't care because they're not culpable enough to feel paranoid.
Maybe you didn't mean it literally but it's a popular expression in this context. I don't think a desire for privacy is paranoid; it is normal, healthy behavior.
But to address the gist of what you say, I think you assume an understanding of data security that is far beyond most end users. How many even know what "metadata" means, or how 'cloud' computing actually works? Go down to the mall (assuming you are not in a tech hub) and ask. On top of that, they would need to understand the confidentiality implications of the system, and then the political, social and other implications of confidentiality.
The public is not able to make an informed decision, and government and industry are taking advantage of that:
If people don't mind, why are so many of these practices kept secret or obscure?
I'm not saying a desire for privacy is paranoid, but the assumption that the government will engage in passive monitoring and archival of everything that can be captured through the microphone and use it as leverage later, even if it doesn't involve criminal liability, eg 'assist us without nefarious purpose or we will use something we recorded to cause you acute embarrassment with devastating social consequences.' I'm not saying this won't happen, but that it won't happen enough for most people to care.
But to address the gist of what you say, I think you assume an understanding of data security that is far beyond most end users.
I don't think I do. I've met plenty of non-technical people who worry about the possibility that their phone could record them when its swtiched off or suchlike - you don't need to understand how something functions in order to understand its potential as an instrumentality. But unless you have a fundamentally antagonist view of government (which most people in the US don't) then there's little overlap between the set of 'stuff the government could do me' and that of 'stuff that would advance the government's purpose' for the average person. This is what I mean when I say most people don't feel culpable enough; there isn't anything sufficiently illegal going on in their lives that they perceive a significant government interest in intruding upon them in the first place.
When I talk about paranoia I mean the idea that government is going to fuck with you no matter how blameless of a life you lead, and that the more blameless you are the less leverage you will have to push back against the inevitable intrusion. In other words, they overestimate the probability of oppression just as optimistic or authoritarian people may underestimate it, depending on context. While that possibility certainly exists, I think something like this Amazon product only marginally increases it because anyone who buys this probably already has a smartphone and keeps it close by at all times already.
> This is what I mean when I say most people don't feel culpable enough; there isn't anything sufficiently illegal going on in their lives that they perceive a significant government interest in intruding upon them in the first place.
I hear this refutation quite often. I find it typically comes from people in a place of privilege that the system largely ignores. I've read far too many accounts from people who are not Caucasian or are Muslim to believe that innocent people are not the targets of mass surveillance and do not notice its effects.
You're making my point for me. The system largely ignores a large majority of the people, who therefore don't care much about this issue to feel deterred from buying the relevant technology. Hence the enormous popularity of smartphones with GPS functionality and so forth: never getting lost >> government tracking everywhere you go, for most people.
"the more blameless you are the less leverage you will have to push back against the inevitable intrusion"
That's really well put. People seem to miss the fact that in a surveillance society it's not necessarily your privacy that you will most regret losing, it's the privacy of those groups you agree with who are opposed to some powerful faction.
>I don't think a desire for privacy is paranoid; it is normal, healthy behavior.
We on Hacker News spend our free time criticizing anyone we perceive as complicit in surveillance, bemoaning centralization, and championing Bitcoin and Uber for disrupting authority. To HN, a desire for privacy is literally normal: it is a social norm of this community.
That doesn't mean that people outside this community do (or should) care nearly as much as we do.
Keep in mind, within this community, there is a large portion of developers, and thus, more likely than the average person to be able to affect positive change through their work / side-projects. As such, it's a critical issue that I think HN is smart to not shy away from. The same systems that can gamify an action can be used oppressively. Thus, one has a varying degree of personal responsibility to what one builds or contributes to.
>That doesn't mean that people outside this community do (or should) care nearly as much as we do.
Part of the reason we care more is because we understand more.
But, in general, I think there is not nearly enough emphasis put on what's right vs. what people care about. That is, the former doesn't dictate the latter.
> I don't think a desire for privacy is paranoid; it is normal, healthy behavior.
I think it's healthy to choose how private you keep each aspect of your personal life. I make tradeoffs all the time. When I think that sharing some aspect of my personal life (whether with an individual or an organization) will give me more benefit than the cost of losing that privacy, I'll do it.
A normal, healthy behavior is to be aware of what the devices you own are capable of.
Insane paranoia is hearing "cloud-based audio processing device and service" and instantly jumping to "the NSA" absent a single damned fact to support that conclusion.
Insane paranoia is hearing "cloud-based audio processing device and service" and instantly jumping to "the NSA" absent a single damned fact to support that conclusion.
Cell phones are routinely used as listening devices, what makes you think this device would not be? If I were a government agency intent on omniscience (i.e. the NSA), this device, along with televisions and computers with always-on microphones controlled remotely, would be a very welcome development - all it takes is one secret order to the company concerned, with a warrant covering the entire country, and their entire product line is useful for surveillance on demand.
Given the world we live in, where GCHQ for example claims the right to capture all information, including privileged communications between lawyer and client, wondering about how our devices protect against government intrusion is not insane paranoia at all.
Yeah, but if anyone caught wind of it there would be hell to pay wouldn't there? You'd need some sort of secret court so that you could control exactly who has knowledge of what's going on and effectively subvert democracy. Good luck with that. You'd have to be pretty paranoid to believe the US would allow that kind of back room governing to go on.
>Cell phones are routinely used as listening devices //
Citation? I'm really interested, presumably there's a hacker convention talk or somesuch where they install a hidden service on a standard phone and upload all voice input even when the phone is off?
Clearly I use burner non-smart phones for my criminal activities (that's a joke!) so they're going to have to use other means. Obviously they can still sniff the data at the operator for phone calls.
Daniel Ellsberg [Pentagon Papers whistle-blower]: "Somebody told me that they can listen to what we're saying by my having this cellphone {waves what looks like iPhone} even though it's turned off."
William Binney [ex-NSA]: "Yes. [... goes off on a tangent about data analysis]
He doesn't really mention it. Indeed the vid is considering electronic communications and information which is put in to the public sphere. Other than that one question which Binney responds to only with "Yes" there's no other mention of private audio being covertly sniffed.
The BBC article is very sparse and jumps from being able to eavesdrop mobile->basestation and decrypt that to being able to listen in on all conversations within range of a phone. Clearly ludicrous.
I don't at all doubt that phones can be modified remotely to covertly listen and that some phones could enable this when switched off (though that seems unlikely to meet with normal design requirements, it seems that this covert listening would need to be designed in). I guess maybe you could make "off" only appear to be off whilst listening - my phone gets hot when doing anything extended like recording a talk or something and drains the battery quite a lot - even with the screen off. Seems that using this sort of surveillance on a widescale is highly unlikely.
>"all it takes is one secret order to the company concerned, with a warrant covering the entire country, and their entire product line is useful for surveillance on demand" [grey-area, https://news.ycombinator.com/item?id=8569217]
Only, IMO, if it's already been designed in and you can hide the power usage (and data-store usage).
Only, IMO, if it's already been designed in and you can hide the power usage (and data-store usage).
That quote was about this Amazon device anyway, which doesn't have power usage or data usage requirements that would be noticed by the average user if recording was only for significant audio. You've jumped from there to cell phones.
The access is blanket given warrants like the FISA verizon one, and there's nothing to stop targeted surveillance like that which we know goes on on gmail/skype/etc accounts when requested. To be clear, I'm not suggesting that cell phones or this device are all constantly recording what we do and transmitting direct to the NSA right now, but that they could in a targeted manner be used to do so if someone became of interest, and that this Amazon device would be a particularly powerful bug given the great microphones, constant power and fixed location in a home.
Re cell phones, I don't think it would be very hard to present a blank screen and wake up only on significant audio to record/broadcast on a hacked phone. I'm sure a paranoid user would eventually notice, but the capability is certainly there - probably that sort of thing is very rare and sophisticated, it's not something I worry about personally, but I do think it is quite possible. If you control the software on the device, I don't see why it seems impossible to you that you'd be able to control the phone completely and use it as an audio bug (except when battery removed etc). You wouldn't even have to rely on faking switch-off - the majority of people leave their phone on and carry it around.
Anything better?
Well, I'm inclined to believe Binney (and others) when they explicitly say cellphones are used as bugs, but here's another example for you of actual use, they are not hard to find:
I'm not suggesting that cell phones or this device are all constantly recording what we do and transmitting direct to the NSA right now
Thank you for the clarification, and I apologize if my tone earlier was excessively acerbic - the angle you just mentioned appears to be an undertone surrounding this discussion.
but that they could in a targeted manner be used to do so if someone became of interest
Here's where we diverge: This is an argument that can be applied to any internet-connected device, anywhere, anytime. We're dealing with a group of people that have proven themselves adept at twisting a device's programming to their own ends.
So: Why is this so special? Why are so many people sitting here in this thread slagging on this particular internet-connected mic when most of us carry one with us and work in front of one every single day?
I'm sure I'm not alone in growing weary of hearing the constant "NSA!!" bogeyman brought up anytime a new device featuring a microphone comes out. There's no new information here, no interesting discussion, just the same usual "X might do Y" scaremongering. With the previous paragraph in mind, these concerns ring hypocritical in addition to just hollow.
> Most people don't care because they're not culpable enough to feel paranoid.
It's going to take a high-profile case to show people how wrong this is. Wait for it.
Here's some potential scenarios:
* An author who is researching dangerous-sounding stuff and discussing it with his friends for a book is SWAT teamed and shot dead. Later investigation reveals overzealous "parallel construction."
* Someone at one of these companies is busted insider trading on information from these sources. Surveillance targets include lawyers, CXO-level personnel, etc.
* Creepy misogynistic black-hat hackers break into the network behind one of these devices and start using it to engage in cyber-stalking against women and record their sexual encounters, posting the results to 4chan and Reddit.
* HIPAA or other similar regulations are spectacularly violated, resulting in large cash damages.
* Someone is busted pwning the "cloud-enhanced Internet of things" (surveillance) devices of police officers and selling feeds to drug traffickers and the mob.
Shit like this happens already and slightly less probable stuff is regularly dramatized on TV in mystery/suspense shows. Not only do many people not care as long as it happens to someone else, a sizable percentage of them derive entertainment from it (eg see news stories on people who commit suicide in response to internet bullying or similar).
It's very unlikely that there would be a single turning point case a la Pearl Harbor or 9-11. More likely it's an aggregation of small cases followed by slow adjustments in a different direction. As an example of the latter, consider how incarceration seems to have peaked in the US and we're seeing the beginnings of a fall as well as a shift away from incarceration as the default response. I would predict the fraction of the population that is incarcerated to fall by 10% in 10 years and by 50% in 25 years. Likewise we're seeing pushback against the militarization of police, but how that particular pendulum swings is going to be measured out over budgetary cycles rather than in real time. I think that if you were to plot utility vs security on a graph you'd see a random walk of incremental fluctuating changes rather than massive discontinuities.
Why can't privacy be enough reason by itself? There are plenty of legal things I want to keep private. The government does not need to have record of every little thing about me. Some things are personal.
I disagree; I think most people desire privacy. It's just that the speed of technology change has been faster than social awareness.
For instance, most people understand cameras - they've been around since birth. And, most would be uncomfortable if there was a visible camera on every surface, pointed at them. There's an understanding that there's a 'watcher' at the other end of that picture or video. In fact, as cameras emerged, some cultures rejected them as a technology that could 'steal the soul'.
But, today, most people don't understand the 'sensors' that are everywhere, tracking their behavior. Not only are the sensors invisible, they're not something that most people are even aware of or understand. Many of us are in this business, and I'd suggest that most of us aren't even aware of all of them.
These sensors are similarly 'stealing our souls', but we don't even know that it's happening.
Whatever utility they find in it. Economic benefit doesn't necessarily mean you find cash in your mailbox, it could be something that saves you a few minutes every day or improves your productivity by simply making you feel good.
Then you shouldn't buy this thing, or if you do be very careful about how you use it - including distinguishing between what the government has a recording of and what Amazon has a recording of (I rather doubt you are cool with your sex life providing entertainment for Amazon employees either, right)?
The point I'm making, though, is not what level of privacy you should be happy with (a decision only you can make), but how people in the aggregate make decisions about using technology that could have privacy implications - and my theory is that most people don't care.
I think your focus on 'the people vs the government' is misplaced, because government is just a sort of social technology which can be used and abused like any other technology depending on who controls it at the time. What about Barack Obama, for example? Do you seriously think he will refuse to relinquish power in 2 years? You probably don't, just' just expressing your cynical (and entirely justifiable) opinion about the political class. But that's not much different from a Marxist asserting that business is fundamentally antagonistic towards workers or similar monolithic abstractions. When you make arguments like this you've opted for ideology over empiricism.
Bringing it back to technology, certainly the ubiquity of digital technology makes it easier to establish mass surveillance of a kind that would have seemed nightmarish a few generations ago. But the same technology has also facilitated a significant number of populist uprisings in recent years, and made it far easier for marginalized communities to get their message out in relatively short order, as well as facilitating organizations with both benign and malicious intentions (eg MSF and ISIS, who both leverage social media but for wildly divergent ends).
The internet of things isn't 'coinciding with the dragnet surveillance trend'; the latter is an emerging property of our increasingly networked society. When we use metaphors like a 'world wide web' traversed by 'spiders' and so on, we should not be surprised that such technologies are going to amplify the capabilities of institutional actors in at least the same proportion that they amplify the capabilities of individuals.