Comment by gebeeson

8 years ago

Even simpler: don't want to be tracked? Don't have a mobile phone.

It doesn't help.

Your next car will support telemetrics. Your insurer will know how fast and how often you drive. Your wife will know where you've been going after work. The cloud will gather and retain everything else of non-obvious value, up to the point where it all magically disappears when your self-piloting car drives itself through a schoolyard at recess and the company claims they don't have enough data to determine their responsibility, and insinuates that perhaps it was your fault.

All your future appliances will be factory-bugged so Amazon can listen to you arguing with your wife and sell you marital counseling books. Or they sell you imported counterfeit electronic shit, leaving bored interns with unchecked privilege (or strangers poking around on SHODAN) to activate those products' extraneous cameras to spy on your daughter undressing.

The ubiquity of cellphones in the hands of the masses mindlessly recording every droll moment of their lives in public for a chance at YouTube fame, combined with better and better facial|licenseplate|whatever-recognition algorithms means you're always on a camera somewhere, your movements being tracked and your identity easily annotated. Your wife's divorce lawyer will have a field day with this.

Don't want to be tracked? Hoard cash and modify the serial numbers. Throw away everything with a network interface or bidirectional antennas of any kind. Don't leave the house. Slap tinfoil on your windows. Make yourself a nifty pirate hat with the remainder. Your friends and neighbors will think it's endearing for a while, then they'll stop coming around for some reason.

Just don't take a selfie of yourself in your fortress of solitude without scrubbing the geolocation data from the EXIF tags!

  • Parts of your analysis are hyperbole, clearly, and I think that undercuts what are several very important points.

    There are still areas in which you can make choices. You can still buy appliances with no internet connections at all, or buy open hardware and run open source software. This is what I currently do.

    Surely inexpensive and/or used cars will dispense with GPS and other high tech features; in addition, I wouldn't be surprised if (should this become a regular problem) a modding community develops around car ownership (ownership in the sense of right-to-modify).

    This doesn't change the fact that it is incredibly concerning that always on tracking run for-profit is becoming the default, but I think it's too early to say we can't opt out. That's why I think cell phones are qualitatively more worrying. They're quickly becoming necessary devices for anyone in a salaried job, and they represent an always-on tracking device that's effectively glued to my hip. It is absolutely crucial that something be done abut these privacy violations, if not through legal means, then through hacking. If that turns out to be impossible I'm going to have to find a way to stop carrying a phone.

    It would be nice to see Purism respond to this report given their work on the librem 5.

    • >You can still buy appliances with no internet connections at all, or buy open hardware and run open source software

      For a little bit. As you say, bad money pushes out good money. Most people will buy devices with tracking. Since more of them will be made, their prices will be lower than devices without tracking. Especially since the tracking will be profitable for the companies making the devices. Eventually you'll find all devices have tracking hardware and on some it will just be disabled. Either unplugged physically, or turned off via software.

    • What's hyperbole? I heard all this predicted when smart phones came out, and people said it was paranoid hyperbole then. It wasn't.

      If anything the parent's predictions are probably conservative.

    • The thing is, we've already been there and done that. You think you have choices, but you won't for long. We're all boiling one degree at a time.

      > You can still buy appliances with no internet connections at all, or buy open hardware and run open source software.

      Maybe, if you know what to look for. Most consumers don't. They'll buy a Dell and not realize Computrace exists. I work in the field and I don't even know a fraction of what I don't know. I'm just one asshole defending against legions of better-paid actors with an infinite capacity for insidiousness.

      Just wait until some well-meaning, progressive state like California decides to legislate that all houses must be smart-conforming. All aspects of your house will have a network interface whether you like it or not. How many homeowners are capable of setting up VLANs for their lightbulbs? How many homeowners are going to deconstruct every (networked by default!) smart-item they purchase and check for motion sensors, cameras and microphones? The NSA backdoored smart TVs already. Huawei backdoored routers, and Blu sends god-knows-what to China in the background. It's happening.

      In this day and age, you may as well assume every product that comes out of Silicon Valley is a glorified exfiltration agent. If you give anything a network interface, by god it's going to use it to report something, and you don't know that it's happening or what's being communicated. You-have-no-control.

      Given the recent interest in mesh networking I expect that to become a new vector-- install enough Huawei appliances in an area (give them away for free, or undercut competing vendors), each serving as a wireless mesh node, and you only need one internet-facing node (like a Huawei cellphone or router) in that mesh to be able to command and control any of the devices or peripherals around it. If anybody questions why a digital pictureframe is emitting wireless signals, it's for the discovery service, of course. It has to get updated weather information from somewhere, right? Consumers will accept that. And thus you invite a decentralized botnet into your home.

      > Surely inexpensive and/or used cars will dispense with GPS and other high tech features; in addition, I wouldn't be surprised if (should this become a regular problem) a modding community develops around car ownership (ownership in the sense of right-to-modify).

      Used cars will, until that pool dries up, yes. How many cars can you find that still use carburetors in favor of ECU-controlled fuel injectors?

      We lost the right-to-modify battle the day ECUs became standard in all cars, inexpensive or not. Without proprietary knowledge, you can dink around with the oil and tires, but you can't fundamentally change how the car works. You can't even change the brake fluid on some cars without a proprietary command telling the pump to expel it. The war for right-to-modify will be lost when we're all driving Teslas (or John Deeres).

      You can hack it, sure, about as competently as you can hack a PS4 or iPhone. The day will inevitably come where you want to use a particular app or service you paid a premium for (like warranty repairs, autopilot, PS Online or iTunes) and they'll tell you to pound sand unless you install their factory-certified firmware that opts-in to tracking. Or new games/features will simply refuse to work on your hacked firmware. You will be left in the dust.

      That also assumes your insurer doesn't find out you tampered with an otherwise autonomous car, potentially impacting its safety features by refusing OTA updates and putting you in a higher risk pool. They may decline to insure you altogether.

      There are consequences for not complying with progress; you yourself mention one of them. I'm disappointed you think it's hyperbole-- this attitude is why things have degraded to the current state of affairs.

      1 reply →