Wuhan Virus Tracking

Many nations are using cell phone data and/or apps installed on cell phones to track folks known to be infected in order to identify those persons’ contacts and to build up anticipatory data of pending and developing hotspots. This is intended to facilitate more efficient targeting of medical resources, to more efficiently target more limited populations, and so to more quickly free up economic resources and activity.

The US Federal government, working with the Centers for Disease Control and Prevention, is creating a portal that will compile phone geolocation data to help authorities predict where outbreaks could next occur and determine where resources are needed, though the effort faces privacy concerns.
… Alphabet Inc’s Google said Thursday it would share a portion of its huge trove of data on people’s movements.
Massachusetts Institute of Technology researchers have developed an app to track Covid-19 patients and the people they interact with, and are in talks with the federal government about its use, The Wall Street Journal has reported.

The EU is going even further, developing and propagating apps that track individuals, ostensibly with their permission.

These moves are being sold as necessary for the present situation, even though they badly risk individual privacy—cue Ben Franklin.

Such sales pitches would be believable—and stipulate arguendo that the tradeoff might be minimally acceptable—if these surveillance moves had sunset clauses in them. Such surveillances need to be automatically terminated after some specified period of time or at some easily measurable milestone—Wuhan Virus infection rate drops below a particular threshold, for instance. Sunset clauses also must include destruction of the surveillance databases, with that being verifiable by anyone who asks—the present FOIA procedures would provide an example of how that would work.

Unfortunately, sunset clauses are notably absent from these moves toward government surveillance of us citizens—the danger of which is emphasized by the example of the People’s Republic of China and by our own FBI’s abuse of its surveillance authorities, along with our own FISA Court judges’ cynical acceptance of those abuses.

Privacy

Here is why more needs to be done to protect our privacy—primarily by us, but with Government’s assistance. Below is an example, quoted from a bulletin board I follow. The author is talking about an investment during a time of coronavirus disruption of supply chains, but the subtext should be obvious.

re: GOOG
They don’t build physical widgets in Wuhan that might get hard to obtain…the ad biz will probably keep on rolling.
We just bought 2 new Android smartphones and 1 new Android tablet. Coming from a dumb-phone flip phone and a Kindle.
Google [Alphabet, which owns Google] OWNS that market. You cannot even download/install an app without having a google account. And every time you do something, Google prompts you to set up a payment method. No way to say “Hell no, never.” The choices are: google play card, credit card, debit card, and “skip for now, maybe later”.
So, clever me, I created a dummy google/gmail account. And logged in so I could install some free apps from Google Play. Fine.
But within 2 days it somehow associated my wife’s gmail account with the Android tablet. And she has NEVER touched that tablet. Now every time I go to use it, it asks me which account I want to log into—the dummy account or her account.
Google OWNS that market.
—————
Near as I can figure out, her name is on our Amazon Prime account. And our Sony Bluray player and our Roku smart TV are both registered to Amazon Prime Video—so obviously in her name.
Now, we do not get cell phone coverage at our house, so all our external internet network access goes through our internet ISP. And the way that works is that, to the internet, every device in our house has the same IP address.
So something managed to figure out that her gmail account was associated with our external IP address, and also that same IP address was associated with the Amazon Prime Video account, and that her gmail account is accociated with that Amazon account. Therefore every device in our house that contacts the external internet has some sort of connection to her gmail address.
At home, the Android smartphones and the tablet can only access the internet via our internal network, on WIFI, since we get no cell coverage. So if somebody puts all these pieces together it is easy to figure out the connections.
Google managed to figure it all out. Took them 2 days.

Heads up.

“Should Government Halt the Use of Facial-Recognition Technology?”

The Wall Street Journal ran one of its point-counterpoint debates over the weekend; this one treating the topic in this post’s title.

The debaters focused on the error rate of the technology and whether that was a big deal or a little one; although there was passing mention of civil liberty problems.

I say the question is over-broad.

Government should not only halt its own use of facial recognition software; it should be statutorily barred from it. We haven’t, yet, been overrun by the People’s Republic of China. The civil liberty—the individual liberty—matter is much too serious to be glossed over, and this is one venue where the line is better drawn at zero rather than trusting Government (which is to say, the men of Government) to go this far but no farther.

The question of its commercial use is a separate one from Government’s use or not use. This question should have a market answer, arrived at by customers and the businesses with which we interact.

In Which Illinois Got It Right

Back in 2008, Illinois passed a law barring companies from collecting customers’ personal biometric information without their prior permission. Companies in Illinois also were required to develop a policy, and make it readily available, that laid out how those biometric data would be stored and when they would be destroyed.

Facebook was accused of violating that law when it decided to use its facial recognition technology to analyze users’ photos in order to create and store “face templates.” Users’ faces are plainly biometric data in this context, the data were taken by Facebook without the owners’/users’ permission, and in 2015, folks sued Facebook over its misbehavior.

Now comes a reckoning of sorts.

Facebook has agreed to settle a $550 million lawsuit brought on behalf of millions of Illinois users who claim the social network’s automated tagging feature powered by facial recognition technology violates their biometric privacy rights.

Good law, and mostly good outcome.

But maybe the class action group shouldn’t have settled. Settlements only bind the parties to the suit and are only as good as the promises of those parties. Facebook has a long history of finding ways to weasel-word around the terms of its settlements, violating their spirit if not their letter.  Court judgments, though, are permanent, binding on all parties to the suit, and binding also on everyone else within the court’s jurisdiction.

We’ll see on this one, but Illinois got this one right with its law.

Harms in Public Spaces

The Brits are working out a new way to intervene in private lives and in private businesses, this time in an attempt to control “harms” done via (not by, mind you) “online platforms”—social media.

Under the [British] government’s proposal, a new regulator would have the power to require companies to protect users from a number of identified online harms—such as pornography, extremist content, and cyber bullying.

And

[T]he pair talked through the different terms that had been used to describe social media in a legal context, looking for the right analogy. They tried “platform,” “pipe” and “intermediary.” Nothing seemed to fit. Then “we thought of a ‘public space,'” says Ms Woods. “People do different things online. It was just like ‘how do we regulate spaces?'”

“Identified” online harms? We can’t even define the harms—such as pornography, extremist content, and cyber bullying.  Even Supreme Court Justice Potter Stewart ultimately walked back his foolish I know it when I see it nonsense, recognizing that such a nebulous “definition” had no place in law.

We have not—we cannot—define any of these harms, much less what constitutes a “public space;” there is no basis for Government regulating these things.

Nor have we succeeded in recognizing who actually is responsible for these harms, whether public or private.  See the disconnect, at a high level, between the Left’s Big Government is responsible on the one hand and the Right’s focus on individual responsibility on the other.

The British government may want to create a whole new, intrusive bureaucratic agency for controlling one more aspect of British citizens’ lives. When we wrote our Constitution and ratified it those two and a quarter centuries ago, we explicitly walked away from the British system of governance for a number of reasons; central among them being the illegitimacy of Government intrusions into private lives.

This is one more example.