4 ms·

The idea that they will use such data responsibly seems like handing a bag of candy to a 6 year-old and saying "Make sure to only eat one!" Perhaps I'm wrong,

The idea that they will use such data responsibly seems like handing a bag of candy to a 6 year-old and saying "Make sure to only eat one!" Perhaps I'm wrong, but I can't imagine them managing the overwhelming temptations to quietly abuse the data, especially as time goes on. Edit: I realize this is a crude analogy that glosses over a lot of important details, but it gets at the heart of my intuition on the matter. The lack of restraints found in the child-candy system seems to mirror very well the weakness of restraints found in the dynamics between government apparatuses and fancy tools. For many tools, this is fine. But I'm worried about the long tail risks and externalities of large-scale privacy destroying tools. I don't think this is exclusively an issue with government organizations. However, in America they are the only organization with the ability to forcefully restrict the actions of individuals and groups. So extreme vigilance is required to balance out this immense power. If a random company overuses a fancy tool, the potential damages are more limited.

Digit-Al 9y ago
I can see both sides on this. I do think that such data when used responsibly can really help in solving serious crimes. But, as you say, there is a serious danger of law enforcement abusing the system and gathering far more data than they need. It's not like they haven't been guilty of such abuses in the past. Look at the situation with gathering fingerprints or DNA and then not scrubbing the data of innocents once an investigation has finished. I am wondering if the solution is to have an independent service. One that would sit as a middleman between police and technology companies such as Google. Their mandate would be to provide the minimum amount of data required for an investigation (the example used in the article is a good one, where anonymous data for a particular location at a particular time-frame is requested and used to narrow down the search and then get more information on a subset of that data). They could be required to keep logs of what is being requested and what is being provided and could be audited at intervals by, say, the EFF. Obviously this is only a rough sketch of the idea, it would need fleshing out more completely.
bertil 9y ago
It is not Google’s role to restrict the use of judge-mandated information share. If we suspect that law-enforcement agencies abuse their request, then their oversight committees need the ability to check this is not happening; whistle-blower within the agency should be protected.

Digit-Al 9y ago

I can see both sides on this. I do think that such data when used responsibly can really help in solving serious crimes. But, as you say, there is a serious danger of law enforcement abusing the system and gathering far more data than they need. It's not like they haven't been guilty of such abuses in the past. Look at the situation with gathering fingerprints or DNA and then not scrubbing the data of innocents once an investigation has finished. I am wondering if the solution is to have an independent service. One that would sit as a middleman between police and technology companies such as Google. Their mandate would be to provide the minimum amount of data required for an investigation (the example used in the article is a good one, where anonymous data for a particular location at a particular time-frame is requested and used to narrow down the search and then get more information on a subset of that data). They could be required to keep logs of what is being requested and what is being provided and could be audited at intervals by, say, the EFF. Obviously this is only a rough sketch of the idea, it would need fleshing out more completely.

bertil 9y ago

It is not Google’s role to restrict the use of judge-mandated information share. If we suspect that law-enforcement agencies abuse their request, then their oversight committees need the ability to check this is not happening; whistle-blower within the agency should be protected.