- cross-posted to:
- technology@lemmy.world
- cross-posted to:
- technology@lemmy.world
Privacy advocates got access to Locate X, a phone tracking tool which multiple U.S. agencies have bought access to, and showed me and other journalists exactly what it was capable of. Tracking a phone from one state to another to an abortion clinic. Multiple places of worship. A school. Following a likely juror to a residence. And all of this tracking is possible without a warrant, and instead just a few clicks of a mouse.
You must log in or register to comment.
How is this not a warrantless search?
It is, but the USA hasn’t cared since Snowden.
UNDERTALE???!?!?!??11
That’s the issue with the patriot act, they’ve been allowed to do warrantless searches for a long time now.
FISA court if they run into any friction
Because a carrier’s data on you is not your person or belongings. The companies holding this data are selling access to it, so it’s not being searched, it’s being offered.
In other words, the same reason as why they don’t need a search warrant if there’s a breaking and the business across the street volunteers their security camera footage, even if you’re on that footage.
Courts have actually said that looking back at someone’s location data counts as a search and requires a warrant. There’s currently a lawsuit recently filed by the institute for justice aledging that the use of flock safety license plate readers is unconstitutional because it’s a warrantless search.
Your survival kit:
Empty GrapheneOS Pixel 6a bought with cash that isn’t your daily driver (last Pixel with snapdragon chip that allows IMEI changes)
JMP.chat
Silent.link
Sensors off (developer options)
Bluetooth/WiFi/NFC off
Disable 2G/enable LTE only mode
Offline maps/airplane mode when navigating/at destination/anywhere near your residence or other frequently visited places that could be associated with you. When changing the IMEI/IMSI combo make sure you go to another location first so that you break the link
Infrared AND polarized license plate covers. Remove any and all bumper stickers and other accessories that can be fingerprinted
IR blocking lens sunglasses for facial recognition
And of course, it wouldn’t be complete without the tor browser over a trustworthy VPN
So yeah fuck the police
Edit: I forgot to mention that if you drive a car that is mid-2010s or newer you may have to do some digging to disable telemetry, satellite, cellular and any other dystoptian fuckery they install these days.
…Or just not taking a phone and taking public transport instead of a car.
But that’s so boringgg. And in the U.S public transport is pretty limited.
how does one change your imei number using a pixel 6a, with a rooted phone with magisk.
I may be wrong, but I don’t think root is required. Most of the methods in this article use the AT command.
Still can’t escape cell tower triangulation
They can triangulate the signal, but in this case it has absolutely no connection to you or your identity, so you don’t need to. Regularly changing esims (IMSI) and IMEI will effectively neuter triangulation. You’re just a random red dot with no name.
The IMEI can’t be changed. That’s the serial number of the cellular modem
Edit: reviewing the link you shared in another comment that looks plausible. Just be warned good luck on any kind of warranty or insurance claims if you change IMEIs. I used to work for a cell phone manufacturer and we used the IMEI to both identify roughly when the device was purchased to make determining warranty status dead simple, and to identify devices as they went through the repair process.
Additionally carriers will often blacklist IMEIs for activation (usually on devices which were financed but never paid off) so that’s another potential opportunity for trouble
Meh, the pixel 6a is pretty cheap. Warranty and creature comforts are for the daily driver.
Edit: I should add, there are a few mobile hotspots that officially support changing the IMEI
Time for an alternative means of communication
Article link not requiring you to sign up: https://archive.ph/Th1Sq
ty 🙏🙏🙏
This is not new and it has previously been used against anti-abortion activists, tracking locations and even being used to record religious confessions. People on both sides of the abortion issue can oppose this type of monitoring.
Holy shit.
privacy is important, kids
Who else are they selling this too?
Whoever has money I suppose. Makes me wonder if there are laws regulating this sort or tech.
This should be illegal. There is absolutely no good reason this should be available to anybody. It should also be considered unconstitutional; if one of those dots is a person, whether you directly know who the person is or not, it should violate the right to privacy and the right of illegal search and seizure — no questions asked.
Get this in front of the Supreme Court ASAP!
…oh…
You are right. And you’re fighting against the credit reporting agencies and google, facebook, apple, and all car manufacturers for privacy rights.
This is the result of jurists and legislators who don’t understand a single goddamned thing about computers in 2024. For fuck’s sake it’s been thirty goddamned years since this was obviously going to happen. Take a class, you bastards! Those of you who aren’t Heritage Foundation fascists.
It’s not getting better either: https://futurism.com/the-byte/gen-z-kids-file-systems
There seems to have been a short window of maybe two decades in the 80s and 90s when computers and the Internet were becoming household staples where almost everyone who grew up in that time period knows what’s up, while everyone who didn’t is way more ignorant. The older folks are lost because they didn’t grow up with computers. The younger kids are lost because they were born into a world of advanced UIs, “plug and play”, and software that heavily obfuscates the nitty gritty details of how it works.
Being forced to run command line installers, edit config.sys files, set DIP switches correctly for your front side bus speed and messing with IRQ settings for your sound card and such just to play a computer game will definitely teach you a thing or two. My family’s PC came with not only an instruction manual, but an entire language reference for the built in GW-Basic interpreter. Nowadays, you get a laptop with a small pamphlet showing you how to plug it in and turn it on.
That explains why cars got so much worse once Boomers were no longer their primary market.
This is correct. But if you don’t work in the field, it’s fine.
You don’t have to know how to bottle wine if you’re not a wine maker. You don’t need to know how to build a dam if you’re not an engineer. You don’t have to learn everything about the architecture of an OS if you’re a user and not a programmer. Let the kids use their devices without knowing obscure shit, just like people let us wear clothes without knowing how to sew. There are things we should all know how to do - changing a light bulb is cheaper if you don’t call an electrician every time it needs to be done. But there are things that are so opaque at first sight that they need to be performed by people with specialized knowledge. And it’s okay to not have that knowledge if you’re not in that field.
Yes, there are 1-2 generations where everyone was learning how computers work. But there were also quite a few generations where everyone was learning how agriculture and farming works - you know, to survive. And I’ll be damned if I wanna have my kids birth a cow or install Linux on their PC. Unless for some godforsaken reason they decide that’s their job.
You’re ignoring the point of why it’s useful and at this point, necessary, to have an above average understanding of technology to maintain any semblance of privacy in your life…you can do so much harm to yourself without ever knowing it just by having an Alexa or by having a Tesla.
At certain point it’s like what the fuck can we even do with things specifically like the tool this article is talking about but tech illiteracy isn’t excusable if this day and age anymore. The world demands a certain level of knowledge or you can and will be exploited.
I know this is the case today, but we are still in the early days of massive surveillance and everyone being globally interconnected. I have to trust legislation will follow to regulate this, just like any potentially dangerous invention is now regulated in most countries, from pharmaceuticals to firearms, to lead based paints, to news outlets.
The fact of the matter is, regular people cannot keep up with all inventions ever. It’s up to governments to protect their citizens from threats, and a failure to do so should be punished. If instead the government chooses to be that threat, the solution isn’t easy, but it is simple.
Mm idk, I think knowing how to use folders is pretty important. It helps people stay organized.
The article wasn’t talking about file systems like FAT32 or NTFS. It was talking about using directories, instead of “pulling files from a laundry basket” by using a search bar.
Ehhhh I’m not convinced that the method of dumping everything in a pile and using search is such a bad thing for average users. For admins on servers it’s absolutely critical to know what is in what directory, but for average users does it actually matter at all?
Honestly I’m bad enough about being consistent with my data organization I genuinely wonder if I should join them in just searching through the pile of documents rather than organizing in neat folders…
I’m convinced that a good number of legislators understand the implications of this stuff on a cursory level, but are convinced (read: bribed) to not care on the “condition” that it doesn’t apply to them or their families. They are beholden to their constituents, and their constituents aren’t you and me, as we can’t afford them.
deleted by creator
Search and seizure, the Fourth Amendment, only applies to State actors. The only exception is when a private entity is acting as an agent of the government, such as in the case of private prisons.
Congress needs to pass consumer protection laws aimed at privacy in the digital age. They haven’t updated this sort of thing I believe since 1996. It used to be legal for adult video stores to disclose the tapes people rented, but Congress passed a privacy law forbidding it when some journalists disclosed some of their rentals. The scandal had some cool name. I forgot what.
The government cannot access the information without a warrant. It does not matter if SPYco lays it all out on a public website. If they needed a warrant to track you before, they need a warrant to check for you on the public website.
Saying the government is allowed to obliterate the 4th amendment because a private company did the hard part is just asking for government aligned corporations to gather it all up and hand it over whenever the government gives them a dollar.
Edit to add- This is the way it should work. Instead the government really is just buying data they’d need a warrant for previously.
This is not an area of law I stay up to date on, but that did not used to be the case. Is that a rather new development?
Last I knew most courts were holding that since customers are sharing this information with third parties (sharing with their phone companies, Apple and Google, Facebook, etc.), giving everything away anyway, most individuals have waived any claim to an expectation of privacy. The right to privacy is founded upon reasonable expectations. I did hear about some pushback on that, more recently, but not from the Court of Appeals from DC, which has jurisdiction over appeals taken from federal agencies, prior to the Supreme Court. I’d be grateful to be shown otherwise. About time, if true.
Yeah I should have been more clear. That’s the way it should work. Instead the courts interpret the 4th amendment as narrowly as possible. Making it effectively non-existent in many cases.
The solution is to subscribe to these services. Then create a website that offers real-time tracking information, freely to the public, of the most wealthy and powerful people in the country. Every Congressperson should have their location shown freely available to all in real time. You could call it “wheresmyrep.org” or similar. Literally all of them tracked like animals in real time, freely shown for any and all to see. Let them live in the fish bowl they’ve created for us all.
When supreme court justice kavanaugh was followed by protesters he had a hissy fit and said they couldnt do that. But it’s totally fine to spy on everyone with a phone and expose their medical data.
These hypocritical fuckheads deserve exactly what you are proposing and I’d fucking love to see it happen.
We could even say it’s to protect the children… make sure certain politicians who have expressed interest in legalizing child marriage aren’t left alone with any.
We’re kind of seeing that with those private jet trackers. But that’s not changing anything except getting those accounts banned from social media.
I think those just need to move to have their own independent sites instead of basing their operations on social media. Ultimately what they’re doing is entirely legal, but it’s way too easy for some asshat billionaire to pull some strings to get them pulled from a platform.
Yep. Spin up your own website and throw a couple YouTube ads out into the world. We’ll have legislation drafted making this illegal before your first server bill comes due.
Although we already know what would likely happen if someone did that. It would just be made illegal to track the locations of congresspeople (and only congresspeople), like it was made illegal to do so during the BLM protests.
Just like how the moment their videotape rental history was exposed, that was when privacy became an absolute must in the case of video rental services.
Time for faraday cage phone covers/bags to become popular in these states.
It drives me nuts how our economic system is making not having a cell phone increasingly difficult. Many necessary things won’t even work on a tablet. The smartphone is the most amazing futuristic device I dreamed about that has evolved into a distopian nightmare.
The smartphone has effectively turned into a leash.
It drives me nuts how our economic system is making not having a cell phone increasingly difficult.
that’s by design. why you do you think the US government allows corporate interests to take such a high position above American citizens? it’s not just only because of corruption, it’s because one hand washes the other.
The smartphone is the most amazing futuristic device I dreamed about that has evolved into a distopian nightmare.
like all technology, it can be used in ways that you cannot even imagine.
instead of blocking advertising data, we should embrace it IMO.
imagine a world where users shove so much information at these tools that they can’t even tell what’s real or not. camouflage works better when everyone participates.
that’s by design.
See also: automobiles. Automobiles and smartphones certainly have strong cases for how utilitarian they are. They are both genuinely very useful.
But the expectation that everyone has one, along with them becoming practically a requirement for most people, has turned them into a dependency and a means of control. Some people can manage to forgo them, but you almost have to build your life around doing so.
instead of blocking advertising data, we should embrace it IMO.
imagine a world where users shove so much information at these tools that they can’t even tell what’s real or not. camouflage works better when everyone participates.
There’s an ad blocker that does exactly this. Called Ad Nauseam. Chrome blocked it from their store super fast, then blocked it from being installed in Chrome from 3rd party sites, then blocked known versions of it from being manually installed in developer mode. I used to run it set to a low percentage - if I “clicked” every ad they’d know to throw my data out, but if I click say 3% of them…
Run a headless browser that does random searches at random times across different social media and search engines and have it click random ads.
you can essentially already do this with TrackMeNot and AdNauseam
This was part of the fictional operating system in the book Little Brother. I think it inspired similar features in a particular real life Linux build too
ML breaks this defense
does it though? if everyone is sharing their advertising data under the covers no amount of ML could correct it.
think of it like a tor network for advertisement tracking.
you’re going to Walmart, I’m going to Target. but according to our phones, I’m at Walmart and you’re at Target. now scale it up to thousands or even millions of users sharing their advertising trackers.
It is only dystopian because we have not taken back the power to control our devices. We of course need some serious privacy laws to allow this to happen. Right now is the defining moment for the 21st century. Will we take control of our technology or be enslaved by it?
I don’t see smartphones being better unless they are completely different. Since its basically iphone and an iphone mimic and its just the way the whole ecosystems are built. Like you can install a free smartphone os but you will not be able to do things with it at the same level as someone without one as far as corps and stuff.
Most of the population is choosing be enslaved by it. Buckle up.
Time to start casually walking by clinics en masse.
That does not sound like a viable long term solution to me.
It is something we can do right now though. Even the youth who can’t vote yet can participate.
I’d be surprised if it lasted longer than any other socially progressive trend. A few weeks, tops, with largest proportions falling off in the first week.
This is the reality of social momentum these days. Resistance is no threat because it has extremely brief lifespan before moving onto the next thing to be a part of.
I agree but not because it’s “trends” but because this system forces us to have short attention spans by presenting us with a massive deluge of information about horrible things happening everywhere (many of which are caused either directly or indirectly by that very system) so we have basically no choice but to keep shifting our focus and updating our threat assessments or risk becoming totally overwhelmed and falling behind or burning out.
I instinctively closed your comment after reading “short attention span” because I knew what you were going to say. Had to go back to comment because I realise the irony.
What about an app that spoofs location?
It also won’t work since the service has enough precision to know whether you go in, and for how long. The real issue is that mobile phones are continuously broadcasting their location to any device that wants to listen, even if you turn wifi and bluetooth off.
deleted by creator
Or - OR, right, everyone can turn off location and WiFi on their phones.
It’s true the cell ping is always going, but that’s a different thing and definitely not what this tool is using to track people. Odds are good it’s using facebook or some other cancer to perform this evil.
I don’t think cellular location would be excluded from such tracking tbh. I would rather not take my phone with me at all when visiting such a potentially sensitive place, or at the very least use a Faraday cage.
That would be a better approach, of course.
while the best approach would be to remove conservatism from society by any means necessary. it’s honestly self defense now.
Odds are good it’s using facebook or some other cancer to perform this evil.
You really need to read the entire article. Turning off your WiFi and deleting Facebook isn’t going to fix this.
It’s a good start tho
This sort of surveillance is only possible because of the mobile advertising ecosystem. Location data is sometimes used to build profiles on device users and better target advertisements to them. Much of that advertising relies on a MAID, the unique advertising ID, on a phone. The MAID acts as the digital glue between a device and its associated data.
But that same underlying system, of Google and Apple linking a unique identifier on the phone to a user’s activity, allows Babel Street and others to build their mass monitoring products. In many cases, a device’s MAID is also displayed inside Babel Street.
So periodically refresh / replace your ad id as well.
The problem is turning off wifi doesn’t actually turn off the wifi, it just stops a subset of packets being broadcast and won’t trasmit any data you want it to send. Among other things this is how ‘find my device’ works with the wifi and bluetooth “off”. They’re actually on.
You can turn this wifi and bt scanning/‘location accuracy improvements’ off though, at least on android. It’s tucked away in the settings but once it’s done, it’s done.
Or - OR, right, everyone can turn off location and WiFi on their phones.
Right now. But maybe not forever and so regulation to make sure that we canor even better, regs against this tracking. Because it shouldn’t be necessary.
That won’t work. But if you install the ROM without gapps or closed source software, you don’t have to worry about these issues.
Having just done that for the first time I feel confident in saying anyone who’s still using facebook or Xitter or tiktok or whatever - is not going to do that. I wish they would but that’s an order of magnitude more technical than where they are.
Counterpoint - the only reason I didn’t degoogle earlier was because my phone simply didn’t support Lineage or Divest. Chances are that whatever budget Chinaphone you have would be in the same situation. Now I bought a Pixel specifically with the intent of installing a privacy-preserving OS, but for a while most I could do was ADB-disabling Google services.
Unlike installing Linux, chances are high that a degoogled OS wouldn’t work on the hardware you already have.
Oh it took me a solid month of trial and error, scrolling through xda and other forums reading every how-to and watching plenty of vids and I finally got it to work. But it was not even fun. Yes starting with a Pixel is better, but f* teh googlez.
Start tracking politician phones. Oh look who paid a visit to the lobbyist house this week! That shit will get shut down real quick.
I sure wouldn’t vote for someone who met with lobbyists.
Do you?
All politicians meet with lobbyists. It’s hard to get a handle on the needs of the nation (or state, or so on), and lobbying is how people inform their representatives of that need. Now whether those lobbyists are scumbags or saints, that’s a different question.
Lol next story over is this https://infosec.pub/post/19174603
If you don’t want to be tracked illegally, don’t bring your phone.
If you don’t want any to be tracked legally, write/call/tweet/visit your representatives.
edit: responded to the wrong comment
Ah yes, democracy is a healthy and fully functioning institution.
You just got confused who’s sponsoring it, that’s understandable.
I see your point. I have no illusions that democracy is healthy in modern times. Perhaps not ever? We don’t even live in a democracy any more, we live in a corporatocracy.
But doing nothing will solve nothing.
edited to add: In fact, it’s our complacency that our corporate masters depend on. Corporate news is designed to overwhelm you. Advertising is designed to lull you to sleep. Together, they make it seem like there’s nothing you can do. But that’s not true. You can do something. Maybe not the things I suggested, but something. It will make a difference, even if it only makes a small difference for a few people. Isn’t that better than nothing?
What else would you suggest to do about it?
Throw it down and bring real democracy like in Switzerland
Or throw it down and bring anarchism
None of these are realistic, so…
If you don’t want any to be tracked legally, write/call/tweet/visit your representatives.
And donate to the EFF if you have the means because they can and have and will likely continue to lobby on average internet users behalf!
“I got nothing to hide. I’m a boring person” dumbass mfers
I got nothing to hide.
I’m willing to bet that they have curtains on their bedroom window…
I’m willing to bet they lock their doors
all because they’re afraid someone will laugh at their micro dick.
they not wrong tho, I be laughin at them regardless.
“Got nothing to hide” - Man wearing pants
“why don’t you take your clothes off, then? You said you ‘have nothing to hide’, didn’t you?”
I’ve heard this exact same thing from a former colleague that left my company to go work at a place selling “smart” security systems 🤦🏻♂️
This is nothing new. Did we already forget about the Snowden leaks?
The leaks that 2% of the population got very excited about for a while, but try not to think much about? The leaks judged by many on the reputation of an obscure man living in Russia? Those leaks?
I trust my government and not things only nerds understand. Also they sound weird and made up and very scary ( said most of the people)
Maybe, I think people still “know” its going on, but they forget by the allure of our smart phones, so this is a good reminder.
Why stop at phones? Practically every car made today has a 4g modem and gps module onboard.
Average people were only “thinking” about it for as long as it remained in the news cycle. Once the new cycle moved on, so did they.
The EFF have a bit more general information about location data brokers. Well worth a read.
God I hate data brokers. Rats! All of them, vermin contributing nothing of value to society.
