tracking – ubisurv

Drones Over America

EPIC has obtained evidence under the Freedom of Information Act from the US Department of Homeland Security that is has fitted Predator drones with domestic espionage capabilities. The document, Performance Specification for the US Customs and Border Protection Unmanned Aerial System (UAS) Version 2.4, dated March 10 2010, includes the following technical requirements: infra-red sensors and communications, plus either synthetic aperture radar (SAR), Ground Moving Target Indicator mode (GMTI – tracking) or signals interception receivers (page 7). The UAV should:

be “capable of tracking an adult human-sized, single moving object” with sufficient accuracy “to allow target designation at the specific ranges.”(page 28)

“be able to maintain constant surveillance and track on a designation geographic point.” (page 28)

The section ‘target marking’ is redacted in EPIC’s version however the CNET website managed to get hold of a non-redacted version, which say that the system “shall be capable of identifying a standing human being at night as likely armed or not,” and specify “signals interception” technology for mobile phone frequencies as well as “direction finding” which will enable the UAS locate them.

And in case people are wondering whether this is just for border patrol, the documents specifically states that it is for collection of ‘Intelligence Surveillance and Reconnaissance (ISR) data in support of Department of Homeland Security (DHS) and CBP missions” (page 1). I hope all you US people know exactly how you can challenge drones flying at 20,000 feet up that might be breaching your 4th Amendment Rights…

Implants vs. Wearable devices

I’ve been thinking a lot recently about why it is that implanted tracking devices have never really taken off in humans. Just a few years ago, there were all kinds of people laying out rather teleological versions of technological trajectories that led inevitably to mass human implanantation – and not just the US Christian right, who saw RFID as the fulfilment of biblical prophecy.

I think there are many reasons, including negative public reaction (implants really are a step too far, even for the ‘nothing to hide, nothing to fear’ crowd) and the fact that a lot of the promotion of human RFID implants was actually the PR work of one very loud company (Verichip) and did not actually have a lot of basis in either social reality or market research. But the other major reason is to do with other technological developments, particularly in wearable computing and sensor networks. In most cases, implants solve a problem that doesn’t exist (the idea that people want to remove a tracking device that might be there for very good – although I am not saying, indisputably good – reasons, usually medical ones). And where there are no good reasons, there’s probably no case for tracking at all.

So devices like this – temporary, printed or stick-on and removable – are far more what is likely to become the solution to any actual problem of tracking or monitoring for medical reasons. And the relative ease with which it can be removed by the wearer does at least mean that there is some room for negotiation and consent at more than just one point in the process. Of course, such removable, wearable tracking are still not somehow free of ethical and political considerations – and some may argue that the very appearance of consent actually hints at the generation of a greater conformity and self-surveillance, but the issues are of a slightly different nature to those raised by implanted devices.

Mozilla stops ad-network cookies

Mozilla, the developer of the Firefox web-browser, has decided that voluntary compliance by advertisers with its ‘Do Not Track’ settings is not working. Advertisers have basically been ignoring what is essentially a request by users, so instead of giving up, Mozilla has taken the right step and will simply not allow ad networks to install cookies on user’s computers or phones. This will of course cut ad revenue to some sites that rely on it, but it will also be a major step to slowing the proliferation of online tracking.

Of course, it can also be seen as a new negotiating position in a long conflict, as the Centre for Democracy and Technology points out, it could be a negotiating position that is all about trying to force companies to implement Do Not Track requests as a compromise from wholesale cookie-blocking. But I’m fully on board with Mozilla here either way. I very much doubt that Microsoft will take a similarly ethical stance on user control – because that’s what this is really about, not privacy as such but who has the right to control information about themselves.

The Iconography of High Velocity DNA tagging

There’s been quite a lot of media coverage in the last few days about the ‘High Velocity DNA Tagging System‘, made by UK company Selectamark, and apparently in line to be purchased by several UK police forces. The system uses a kind of airgun that can fire “a uniquely-coded DNA pellet” for up to 30-40 metres, which “can be used to mark an individual so that they can be apprehended at a less confrontational time for officers.” Claims on the website include one that the microdots of artificial DNA can penetrate through clothing and mark the skin of individuals, and also that the artificial DNA used can result in ‘infinite number’ of unique numerical identifiers.

None of this is entirely new: Selectamark is a company who’s core business is anti-theft marking of equipment, and essentially what they have done is create a gun-based delivery system for an existing technology that was previously used to mark things, thus turning it into a system for identifying individual human beings, in much the same way as has been suggested would occur with RFID implants (but which has not yet really happened in any widespread fashion). Like RFID, the identification is not biometric, i.e. resulting from unique bodily characteristics, but what amounts to a high-tech form of instant temporary tattooing or paint-marking. The company is silent on how temporary this is – and whether the microdots – which are just visible, but show up better under UV light – can be easily removed or washed off by those tagged.

What’s also really interesting is the imagery deployed in the website. Of course there are the usual images of policemen with large guns (here complete with light source for night-time use). These guns, like tasers, have an interestingly toy-like quality to them with their bright orange plastic finish. Guns that aren’t really guns…

However what’s more interesting are the background images used on the site. The targets of the tagging system are clearly depicted in one background image and will be recognisable to all British readers – ‘hoodies’ – the marginalized urban youth who were implicated in the rioting in London in 2011 (although there is also an inevitable pop culture association, especially with all that light-saber-y UV around, with the evil Sith from the Star Wars franchise).

The youths are depicted encircled in lines of UV-like light whose coils also reflect the image of DNA, which is used here as another background image.

The late Dorothy Nelkin and M. Susan Lindee described DNA as a ‘cultural icon‘, and indeed, the never-really-explained ‘artificial DNA’ technology which underpins Selectamark’s product seems deliberate discursively confused with exisiting DNA identification technologies, or at least the association is clear: that DNA fingerprinting, which is already understood in media discouse as standing for absolute certainty as to identification, is ‘the same’ as this technology. And clearly this sounds better than associating it, as I did earlier, with tattooing – which has a much less wholesome image when it comes to the state’s usage (Nazi death camps etc.).

And then the lines of light that surround the youth also seem to beam out across and enclose the entire world, which is both a standard marketing trope (“we are a global company”) but also a shift in scale that reflects the way in which security and surveillance has moved, to encompass the globe. The world is also depicted as dark with the suggestion of a coming sunrise (fitting in with the overall ‘crime lurks in the darkness and Selectamark will shine a (UV) light in it” theme) and almost entirely urban:

But then what is the value in this global world, which Selectamark (and the police) are seeking to protect? What is the source of the light? Well, the answer, in the final background image, will surprise no-one. It isn’t those who need justice, the poor, the downtrodden, the huddled masses, it’s big companies:

The corporate sector is depicted as icons streaming information-superhighway style from the light along grid patterns: rational, clean and bright and filling, overcoming, the darkness beyond, in a corporate version of the creation story in the Book of Genesis. We are saved! Thank-you, Selectamark and your High Velocity DNA Tagging!

The Mark of the Beast?

I’ve been following a case in San Antonio, Texas, over the last few months in which a couple with literalist biblical Christian beliefs had challenged their daughter’s school over its introduction of RFID-enabled name tags and here are some random thoughts. The latest news is that the pupil, Andrea Hernandez, has lost in the US District Court – it could still be taken higher. The case has attracted plenty of coverage internationally, all largely emphasizing the fact that the student concerned had been threatened with expulsion for her (or her family’s) stance, and the ‘mark of the beast’ rhetoric deployed by the parents and the organisation that enabled them to bring the case, the evangelical Christian civil rights organisation, The Rutherford Institute.

A standard Surveillance Studies analysis might be that this was another case of security at all costs in a risk society, and surveillance as the silver bullet for a non-existant problem or a at least an actual problem that might have been solved by other methods. But actually things are rather more complicated and perhaps more mundane here, and the answers seem to lie, as Francesca Menichelli has suggested in her recent (and as yet unpublished) PhD on the installation of CCTV camera systems in small towns in Italy, in regional political economy and local government competition.

According to the local newspaper, the San Antonio Express-News, when the scheme was introduced, the plan by Northside Independepent School District was essentially not a security or an organisational issue but a matter of gaining access to extra finance. Although the scheme was estimated to cost $525,065 to implement and $136,005 per annum in administration and maintenance, the extra-detailed attendance information resulting from the chip cards could enable them district to access around $1.7 million in state grants.

Essentially, surveillance here is simply something that circulates in competition between entities -whether school districts or cities – for resources. Of course the scheme has not been studied in its actual practice yet so we don’t know what actual difference (or lack of difference) it would make to any pupil in the way that we do for Menichelli’s case-study cities, where CCTV is described as being almost entirely useless because it was never really intended to be used as anything other than a way of winning resources. However it would seem that the ‘surveillance’ is almost entirely secondary or perhaps even irrelevent. However I certainly do not dismiss the possibility that nefarious or even unintentionally damaging things could be done with the location data gathered from the chip cards.

It is also the case that the school district attempted to compromise with the pupil by offering to remove the chip from her ID card, essentially limiting the surveillance that could be conducted of her to conventional visual methods. The rejection of this compromise is the reason the District Court threw out Andrea Hernandez’s case. However if the School District is accepting that there is an opt-out possible on grounds of belief then they are potentially undermining the whole scheme – which relies on the generation of accurate attendance and circulation data. Again, one interpretation could be that they aren’t really interested in the data for itself, which reinforces the argument about the instrumental nature of the surveillance scheme in the state funding context, but the other interpretation could be that the school was banking on her exception being the only one, or one of a tiny number, that would not significantly undermine it. The other question here is: is it really the RFID chip that’s the problem, or the surveillant assemblage of which it is but one tiny part? In rejecting the compromise, Hernandez and the Rutherford Institute seem to be suggesting the latter, and here we are a long way from Christian eschatalogy and the ‘mark of the beast’.

(Thanks to Heather Morgan for initially pointing out to me that it was all about the money!)

GPS tracking goes mainstream

There is increasing evidence that US police forces are now using GPS tracking devices regularly and with impunity. Following court rulings at different levels which have left the legal situation unclear with only the Supreme Court left (this coming week), police forces across the country have been slapping GPS trackers on thousands of private vehicles, without warrants, and until recently, without the knowledge of those being tracked.

However, Wired‘s Threat Level blog has been reporting on the growing numbers of cases of Americans who have discovered GPS trackers on their cars, and in one particularly bizarre case, a device that was replaced by undercover officers while the Wired reporters were in the vicinity, having just removed and photographed the original device!

There are many pictures and manufacturers’ detail on Threat Level. Here are a couple…

GPS tracker in place:

GPS tracker disassembled showing souped-up longlife battery, including manufacturer’s details:

One of the more perplexing things about the use of these devices is what recourse the US citizen has when they discover them. If they are placed ‘legally’, do you have the right to remove or indeed to disassemble them? What would be done if they are removed? The experience of Wired would suggest that the device would be replaced, but how many times could this go on? At what point would the state take some kind of legal action to attempt to prevent the removal of a device? In the case of location tracking devices that are known about but unable to be legally removed, surely you have a situation that becomes equivalent not to simple (if it is even simple) unwarranted surveillance, but to electronic tagging.

Facebook owns patent on location-based social networking

Via Boingboing: Facebook has been awarded a ‘broad’ US patent on location-based social networking services. This seems curious when Foursquare, Gowalla, Google Latitude and many others were doing this long before Facebook, but it seems that Facebook applied for this patent back in 2007, so even though they weren’t doing it before others, in the way the patent system works, they can claim they were thinking about doing it before others.

Facebook seems to be moving strongly to consolidate its hold on social networking and it clearly sees its location-based service, Places, and such like as being the guarantee of its future success. In short, it seems intent on creating a ‘brandscape’ which recombines the virtual and the material producing a seamless data-stream on the lives of its users for it to exploit.

Drone Britain

Despite the supposed anti-surveillance tendencies of the new coalition government in Britain, one kind of surveillance would seem to be expanding, as it is almost everywhere in the world: that of surveillance Unmanned Aerial Vehicles (UAVs), Micro-unmanned Aerial Vehicles (MAVs) or flying drone cameras. There are so many previous stories on this blog about drones you’d be better off searching than me providing links here!

The Guardian reported on Friday that a growing number of different agencies are either ordering drones or have plans to do so, including he Serious Organised Crime Agency (SOCA), four police forces (Merseyside, Essex, Staffordshire and the British Transport Police), the Environment Agency, and even some Fire Services (West Midlands and South Wales). This follows the story in January that there was what seemed to be an evolving secret national strategy for drones.

So far, their use has been limited not by ethical concerns but by the requirements of the Civil Aviation Authority (CAA) which insists that they must be “licensed when flown within 50 metres of a person, property or structure.” This remains its position, but it will be interesting to see how stringent are the licensing requirements as drones increase in number and whether the expansion in UAV use is in any way affected by the government’s stated policy aim to bring CCTV under stricter regulation.

(thanks to Charles Raab for this)

Night of the Surveillance Dead

In one of those curious synchronicities that occasionally emerge out of the chaotic foam of the internet, I came across two stories (of an entirely different nature) featuring surveillance and ‘zombies’ this week.

The first is one that Ars Technica first publicized recently – the creation of new undeletable cookies. Cookies, for the still unaware, are little bits of code that sit on your computer and store information, usually relating to websites you have visited – so, passwords and the like. Originally they were simply a tool to make it easier to handle the proliferation of sites that needed login details from users. And in most cases, they used to be both moderately consensual (i.e. you would be, or could be, asked if you wanted to have you computer download one) and relatively easy to remove. However, in recent years, this has changed. For a start there are so many sites and applications using cookies that it has become inconvenient to ‘consent’ to them or to manage them in any unautomated way. The new development however is a system that uses the database capabilities in HTML5 rather than being a traditional cookie. The major problem with this, and you can read more about the technical details in the story, is that these cannot ever be deleted by the user, as when they are deleted, they respawn themselves, and recreate the data profile of the user by reaching into other areas of your computer (and even stuff you thought was also deleted). The company concerned, Ringleader Digital, which specializes in ‘targeted, trackable advertising’ for ‘real-time visibility’, says users can ‘opt-out’ by using a form on their website, but this so-called ‘opt-out’ is hedged about with terms and conditions.

Now, Ars Technica reports that an open-source developer, Samy Kamkar, has created ‘evercookie‘, a virtually indestructible cookie designed as an educational tool to make users aware of the presence of these new internet zombies that do their master’s bidding. It’s a neat idea but I wonder – and I hope you will excuse my taking the zombie metaphor just a little further here – whether in raising the dead to show that necromancy is bad, good wizards like Samy Kamkar might in the end just be contributing to the problem. It isn’t as if most ordinary users understand these strange powers. Perhaps the people who need to witness the power of these occult rites are the regulators. It’s not clear to me whether these kinds of programs would be considered in any way legal in most places with strong data-protection and privacy laws, like Canada and the EU – as the controversy over the similar British Telecom system, Phorm, showed. So I would be very interested in what the Canadian Privacy Commissioner has to say about it, for example. I will be asking them.

(The second zombie story I will add later…)

The city where the cameras never sleep… New York, New York

The Gothamist blog has a brief report on the massive upgrading and expansion of the video surveillance system in the New York public transit system. Like Chicago, which I’ve mentioned several times here, the cameras in New York are really just collection devices to feed an evolving suite of video analytic software, that can track suspects or vehicles in real-time or search through old footage to find multiple occurences of particular distinctive objects or people.

The other notable thing is that the new camera system is just completely overlaying the old – in other words there is no attempt to connect the older cameras which are not compatible and have far poorer image quality. As cameras and software gets cheaper, this option looks like being the one many urban authorities will pursue, so cities like London, which pioneered widespread video surveillance, but which, with their disconnected mosaic of incompatible systems, have started to look increasingly ineffective and out-of-date, could deal with this not by expensive and unreliable fixes but simply by sticking in an entirely new integrated algorithmic system on top of or alongside the old ones. Technological fallibility and incompatibility can no longer be relied on as protections for the privacy rights of citizens in public spaces.