Monday, April 13, 2009

The Future of Surveillance
At a gas station in Coquitlam, British Columbia, two employees installed a camera in the ceiling in front of an ATM machine. They recorded thousands of people as they typed in their PIN numbers. Combined with a false front on the ATM that recorded account numbers from the cards, the pair was able to steal millions before they were caught.
In at least 14 Kinko's copy shops in New York City, Juju Jiang installed keystroke loggers on the rentable computers. For over a year he eavesdropped on people, capturing more than 450 user names and passwords, and using them to access and open bank accounts online.
A lot has been written about the dangers of increased government surveillance, but we also need to be aware of the potential for more pedestrian forms of surveillance. A combination of forces -- the miniaturization of surveillance technologies, the falling price of digital storage, the increased power of computer programs to sort through all of this data -- means that surveillance abilities that used to be limited to governments are now, or soon will be, in the hands of everyone.
Some uses of surveillance are benign. Fine restaurants sometimes have cameras in their dining rooms so the chef can watch diners as they eat their creations. Telephone help desks sometimes record customer conversations in order to help train their employees.
Other uses are less benign. Some employers monitor the computer use of their employees, including use of company machines on personal time. A company is selling an e-mail greeting card that surreptiously installs spyware on the recipient's computer. Some libraries keep records of what books people check out, and Amazon keeps records of what books people browse on their website.
And, as we've seen, some uses are criminal.
This trend will continue in the years ahead, because technology will continue to improve. Cameras will become even smaller and more inconspicuous. Imaging technology will be able to pick up even smaller details, and will be increasingly able to "see" through walls and other barriers. And computers will be able to process this information better. Today, cameras are just mindlessly watching and recording, but eventually sensors will be able to identify people. Photo IDs are just temporary; eventually no one will have to ask you for an ID because they'll already know who you are. Walk into a store, and you'll be identified. Sit down at a computer, and you'll be identified. I don't know if the technology will be face recognition, DNA sniffing, or something else entirely. I don't know if this future is ten or twenty years out -- but eventually it will work often enough and be cheap enough for mass-market use. (Remember, in marketing, even a technology with a high error rate can be good enough.)
The upshot of this is that you should consider the possibility, albeit remote, that you are being observed whenever you're out in public. Assume that all public Internet terminals are being eavesdropped on; either don't use them or don't care. Assume that cameras are watching and recording you as you walk down the street. (In some cities, they probably are.) Assume that surveillance technologies that were science fiction ten years ago are now mass-market.
This loss of privacy is an important change to society. It means that we will leave an even wider audit trail through our lives than we do now. And it's not only a matter of making sure this audit trail is accessed only by "legitimate" parties: an employer, the government, etc. Once data is collected, it can be compiled, cross-indexed, and sold; it can be used for all sorts of purposes. (In the U.S., data about you is not owned by you. It is owned by the person or company that collected it.) It can be accessed both legitimately and illegitimately. And it can persist for your entire life. David Brin got a lot of things wrong in his book The Transparent Society. But this part he got right.

14 comments:

  1. This was a great article. I knew quite a bit of this information, but not all of it. You just don't think about employees installing cameras in the ceiling to steal your pin number. You try to hide your pin number from the people standing around you, I never thought to cover it because of things like this.

    I did not know that they record you in restaurants. This practice I do not like. Companies who record your conversation when you call, is common. There is usually a recording stating that this call may be recorded. You should be told if you are being recorded.

    ReplyDelete
  2. Surveillance has been around for quite some time; however, the technology to record the information has greatly evolved. We must be vigilant in protecting our personal information, even though there are many people that devise new ways to steal the identities of hard working people. However, with all of the equipment that is available to businesses as well as the “average Joe”, it seems like we are creating a paranoid society. In reference to photo ids as being temporary, I disagree, unless computer chips are implanted or barcodes tattooed on a human being, one will need some form of photo id. because not all of the world will have the same technology

    ReplyDelete
  3. This is scary. It makes me never want to use my debit card again. Its crazy that you always have to think about someone stealing your identity or using your credit card..

    ReplyDelete
  4. This was interesting, it makes you think twice about things you do with your credit card and debit card. This really needs to stop because many people dont carry cash on them in fear of being robbed. Now what?

    ReplyDelete
  5. This is the reason I always used my debit card as a credit card when I can! Some automatically pick it up as being debt, but when I get the choice, I always choose credit! I even earn reward points with my bank when I use it as a credit card!

    The only thing I would have to disagree on is the restaurant part. They can not record your pin because you do not enter a pin number! On the little shops you prbably do, but big restaurants do not do that.

    ReplyDelete
  6. Good article and all i can say is capital one! I never use a debit card, there is no point. When using a credit card you earn cash back or some other sort of reward for using it. It does get you thinking about how easy it is to get all of your information, but we can't live our lives like that.

    ReplyDelete
  7. i believe that pedestrian survalliance is wrose than government. the government usually won't step in unless your doing something bad. pedestrians just want to rob you.

    ReplyDelete
  8. Scary true. Just shows that you can never let your guard down.

    ReplyDelete
  9. I hate you companies say my call is being recorded for training purposes. What if I want to want to participate in being a free example to train their employees? People talk about the right to privacy. Maybe it isn’t a right at all.

    ReplyDelete
  10. I wish I remembered the article but someone recently found an even more discreet and dangerous device for ATMs.
    Basically it's hardwired through an ATM's interface through a USB port that's standard, but hidden underneath the outershell on each unit.

    It looks like the regular slot you'd slide your card through but it's really a "dummy" that your card must pass through before getting to the genuine slot.

    Your card information is read and stored on a flash drive which then is pulled out of hte fake reader.

    ReplyDelete
  11. big brother your neighbor when you think no one is looking ...don't be so sure

    ReplyDelete
  12. I see this all the time at the bank and it scares me!! It's like you can't carry cash because you may be robbed or lose it. Now you cant carry your debit card for fear that not only your checking account will be cleaned up but in some cases your savings account as well. This happened to a friend of mine and within 2 hours, they stole over $3000!

    ReplyDelete
  13. Wow that is pretty crazy karen. To lose 3000 dollars is horrific, I really hope your friend got her money back! its pretty scary indeed.

    ReplyDelete
  14. I work in computer tech support, so i know all about identity theft using keyloggers and other similar issues. I have personally had information stolen from me unknowingly, which I lost something that was very valuable to me (a world of warcraft account). While it did not have monitary value in itself, someone had stolen the account and gotten rid of all of the in-game items I had acquired over years of play. Being a game, it was quite easy to shrug it off in the long term, I cant imagine if my financial portfolio was compromised or my life savings, all of which I have heard stories about. This is a very serious security issue moving forward and one that has to be treated as such. Jobs in the internet security field are growing directly propotionately to the expansion of technology controlling our lives.

    ReplyDelete