petcat
12 hours ago
Flock and ALPR usage is solved in USA if every state adopts New Hampshire's law:
* Illegal to collect every plate for later analysis
* Must delete "non hit" plate images within 3 minutes
* Strict forbidden to upload "non hit" camera imagery off the device
I would add that it should also require a warrant to access the ALPR data, but it's a great start.
https://gc.nh.gov/rsa/html/XXI/261/261-75-b.htm?utm_source=c...
BatchJob
8 hours ago
Unfortunately, this involves a massive degree of trust to believe. And I simply dont believe that there's regulation and enforcement of any of this.
Why would anyone believe that these "forbidden things" are actually prevented? There is no evidence besides occasional anecdotal outings of police doing searches that the only get caught doing after way long after.
So they can use words like "strict" all they want. The system doesnt work that way and neither do the people operating it. Just lipservice.
ksymph
6 hours ago
This argument consistently comes up in techie circles when it comes to regulating or outlawing, well, just about anything, and it really gets my goat.
Making something illegal is the prerequisite to enforcement. These are separate parts of the government. You can't build enforcement infrastructure around something that isn't yet illegal! You don't even know what that would look like until you know what the laws you're enforcing are. Enforcement is the goal of these processes, the laws are the foundation from which enforcement stems.
It is true that simply putting a law down doesn't mean the problem is solved. But solving these problems doesn't happen all at once, so there's no reason to criticize the first step for not being a leap to the finish line.
abustamam
5 hours ago
Well sure, making things illegal is better than letting things be illegal, but the current government gets away with a lot of illegal shit so the skepticism is warranted.
I think what people want is just tearing all of the cameras down. Law enforcement had their chance to prove flock cameras were good. They proved to be poor stewards for the technology. Now get them the fuck off our streets.
okasaki
4 hours ago
Even if it's enforced, you're one terrorist attack or child kidnapping case + PR campaign away from it being changed.
fc417fc802
3 hours ago
So in the second push add a periodic audit requirement. In the third push mandate unmodifiable firmware and certain physical anti-tamper features. At some point circumventing the law using the existing infrastructure becomes similarly difficult to installing all new infrastructure.
mschuster91
3 hours ago
The problem is, these "consecutive pushes" for reform rarely happen in practice and get silently shelved. That's how it went in Germany with a lot of things, anywhere from the Hartz IV reforms two decades ago all the way through the half-finished cannabis legalisation - and we have four years of legislative periods, while the US House is reelected every two years which leaves just one year (if not less) of productive work time.
soco
an hour ago
Or it's just a flood of comments trying to take the moral high ground without actually helping in any way the cause. I'll call it pure aura farming or something, because I totally fail to see how constant bickering about any fixes is actually doing any fixing. Yes, I'm irritated.
pstuart
5 hours ago
Third party audits should be part of the enforcement. And even then, those third parties should be vetted and have full daylight as to ownership, conflicts of interest, etc.
nashashmi
an hour ago
The precursor to a service being taken offline is that it is made illegal. This law would prevent someone from selling the service as a tracker for everyone. When a warrant comes in, it will start tracking the plate. Right now, it is possible to track all plates for all time. That kind of service should not be allowed.
jameson
7 hours ago
Right. Also once it's installed , rules might change unnoticed. It's difficult to enforce long term and requires very high degree of trust.
throwawayk7h
7 hours ago
we could require remote attestation so that the cameras can be independently verified by anyone to be doing only whst they claim to be.
teaearlgraycold
8 hours ago
Well for one thing it's presumably illegal to use illegally retained data in court.
StanislavPetrov
7 hours ago
Unfortunately that's up to a judge to decide and they don't need to introduce illegally retained data in court for parallel construction. Nor are courts an issue when they decide to share/sell this data to everyone under the sun, because it will be nearly impossible to figure out who they gave/shared it with, and the damage is already done regardless.
verisimi
4 hours ago
Isn't stalking already illegal? Isn't this stalking? Or facilitating it, at least.
gspr
5 hours ago
I think if your threat model is "the government is constantly lying and deceiving you", you've already lost. I'm not saying you're wrong – it seems a correct observation about the US – but you have bigger problems then.
That being said: how about the New Hampshire law plus a provision for independent audits?
tvbusy
18 minutes ago
If privacy is a concern:
1. Every hit is hashed and sent to every camera.
2. Whenever a camera detects a license plate, it hashes the license plate and only reports if the hash matches. Nothing leaves or even stored on the device if the hash does not match.
3. There's no "search for hits", you tell cameras which plates to record and every plate registration is associated with person who registered it and reason.
jaen
9 minutes ago
No point in hashing, it's trivial to infer the license plate from the hash since the space of license plate numbers is finitely small - one can just brute-force calculate a hash -> license plate table (also called a rainbow table).
MarkMarine
9 hours ago
This assumes flock is just doing ALPR and it’s obvious from police statements and stolen flock camera data dumps they are well beyond that now, onto facial recognition.
The govt has been steadily eroding privacy and our rights (carnivore reading email, bulk collection of phone metadata, all internet traffic with x-keyscore, stingrays, etc etc etc) and using terrorism as the boogeyman when often it’s just wrong think that will put you in the sights. None of this needed warrants, all of it illegal by a plain reading of the 4th amendment. If a constitutional amendment won’t protect you, a state law is basically toilet paper.
redwall_hp
10 hours ago
That mitigates one specific problem with Flock, and not entirely. Firstly, as long as any jackass can fill out a form and set a "hit," they can still target and stalk people.
And ALPR is only one method that Flock uses. Their pan-tilt-zoom offerings are specifically meant to target pedestrians. They have facial recognition (and I've heard gait as well) and sniff for Bluetooth and other things to try to fingerprint devices.
It needs to be illegal to collect video for later facial recognition analysis as well.
nofunsir
10 hours ago
Should be:
* Illegal to collect every plate for later analysis
* Must delete "non hit" plate images within 3 MILLISECONDS
* Strict forbidden to upload "non hit" camera imagery to NON-VOLATILE STORAGE.
* "HIT" LIST MUST BE CRYPTOGRAPHICALLY SIGNED & ENCRYPTED BY WARRANT KEY ONLY JUDGE HAS ACCESS TO.
HWR_14
5 hours ago
If it's not removed from the device, why does it matter if it's three minutes or three milliseconds. With something longer (3 days) people could drive up and pull the records?
monksy
10 hours ago
In before a founder/business/conservative/libertrian complains that regulation "kills innovation".
sojournerc
9 hours ago
Please keep this community away from reddit style comments.
Spooky23
8 hours ago
That’s a factual perspective.
Listen to Marc Andreessen, he’s a funder of Flock and a passionate advocate of that position.
fc417fc802
3 hours ago
It's a low effort politically charged reddit style drive by remark that adds nothing to the discussion. Whether or not it's factually accurate or on topic is irrelevant.
mschuster91
3 hours ago
> politically charged
Well... Flock only has themselves to blame for it getting politically charged.
asveikau
10 hours ago
I don't understand why people are only talking about the ALPR aspect of Flock and similar devices. When the company does it it feels like they're trying to minimize the collection.
I believe I've seen claims the are recording Bluetooth MACs of passing devices, and I've definitely seen that they're also detecting people on the camera feed.
bigiain
6 hours ago
I have a Watchy, a kit "smartwatch" built around an ESP32, that now runs firmware that listens for Axon/Taser and Flock bluetooth and wifi prefixes, and vibrates on my wrist when it detects them.
Also, 10 or 15 years back, I wrote an Android app to do ALPR on the live camera view with the phone in a holder that let it see out he windscreen. I collected licence plates by spending an hour or so every few days over a few weeks sitting at cafes that had a good view of the marked and unmarked cars arriving and leaving the three major police stations nearby. It did work, but the camera in the Galaxy S3 and S4s I had to try it on couldn't get images good enough for OCR until the cop car was so close it wasn't useful... I contemplated experimenting with a drone camera gimbal when I was building and flying camera drones around 2014/2015, possibly using one of those clip on telephoto lens's that were common back then - but by then I'd ditched the car and I didn't figure I;d be able to build that to work on any of my motorcycles.
dylan604
9 hours ago
Didn't theGoogs set precedence that recording location of MACs and SSID type information long ago?
lstodd
17 minutes ago
The only way to prevent leaks and abuse is to not collect the data.
Since there can not be any trust in the supply chain and operations, the only way is to ban ALPR outright.
kevin_thibedeau
10 hours ago
Mr. Cat, You ran a stop sign ten years ago so now you're on our watchlist for suspicious persons.
Gustomaximus
8 hours ago
I'm in the middle, cameras can be useful in a crowded society as we see with body cams on cops. The can show truth really well, helping innocent people also, but there needs to be serious guard rails and criminal ramifications for misuse by users and companies itself so this is treated very seriously.
I am different in that I would be fine with these BUT only if there is super strict guardrails with real consequences for misuse:
- Super strict rules around information storage and access. - Ensuring access can only be for an active investigation where there is direct reason to look for a name, face, number plate etc.
- Ensure there is reasonable crime threshold for use so cops don't have the right to track someone because they jay walked or something frivolous to justify use.
- Add a requirement any person looked up then they must be informed within ~6 months with reasons why (or a judge warranted delay every 6 months).
- Legal use only and the data can never be sold for general commercialisation.
- Require human verification of hit if police are going to take action on data so there is clear ownership of incorrect actions.
- Some level of data deletion, after a year type thing.
With something down that route, and naturally more than my quick comment, I feel it could balance benefit vs cost. Without real guardrails and consequences it's openeing a risky path for totalitarianism misuse.
anon84873628
9 hours ago
How does it determine a "hit"? By making a query to a database? Then there is a log of the request anyway. Even if the database is on a local laptop there are application logs.
It's not the imagery that's really important, it's tracking the who+when+where.
horsawlarway
9 hours ago
If we're talking about license plate numbers, it seems fairly reasonable to just have the device download the entire target list.
Longest plates are 8 chars. It seems exceedingly unlikely that the target list is longer than 1,000,000 plates. They all use characters that fit in a single UTF-8 code point. So 8mb initial download, and very small incremental updates.
Likely much more power efficient than sending every plate over the network, and would use considerably less bandwidth over a couple months.
---
Is that how they do it? No freaking clue.
But it seems like a very solvable problem, with correctly aligned incentives (ex - it's both cheaper and more private to NOT send the plate over the net, vs sending the list to the device).
lelanthran
7 hours ago
Not even 8MB, can use a hash so it's only 1MB. Collisions aren't a problem because some human still has to check the image against the hit.
Spooky23
8 hours ago
In a past life, I worked with LPRs operate this way in police cars. That was over a decade ago, the devices were pretty powerful even then.
firesteelrain
8 hours ago
OpenCV made it easy
dylan604
9 hours ago
Why are they so concerned about an image and not the obtained data in any format like OCR generated text?
flamedoge
7 hours ago
i dont understand why this is now an issue and any public facing camera that does OCR isn't
PowerElectronix
2 hours ago
The scale is the issue, for me. Having several small-time, disjointed ooerations doing ocr doesn't threaten the general population as much as having eyes everywhere taking notes of who is where at any given time.
The power the flock infrastructure has to target people is unprecedented in the US. And the kind of power I would never want anyone to wield.
dylan604
6 hours ago
Why do you think it is now an issue? Flock is a private company where other traffic cameras I'm familiar with were not. Those were problematic and in my state they were deemed not legal and removed. The other type of cameras I'm not a fan of are the ones for the toll roads. They take shots of license plates even if you have a tag. I don't know if they are searchable by law enforcement, but I have no reason to think they are not.
Any camera system that can be used to track people even if that's not the sole purpose is problematic, but when the entire purpose of the camera is tracking people then it is especially egregious. It's not a problem now, but they've turned the knob to an 11.
beambot
10 hours ago
Seems to be a huge loop-hole: It doesn't seem to prohibit a private company from operating a ALPR system...?
dghlsakjg
10 hours ago
The first sentence of the law addresses your concern. Even as a non lawyer I can see that your “loophole” does not exist unless I have seriously misunderstood that sentence. There is a link to the law’s text in the post you are commenting on if you care to read it.
deaux
7 hours ago
This is such a classic software developer's fallacy. Law is not code that is executed by society. The program called society is also orders of magnitude more complicated than the most complicated program you've ever worked with.
soulofmischief
8 hours ago
If you accept the consequences in American politics of the slippery slope, the chilling effect, and inalienable rights, then you cannot condone any limited version of a technology which still serves the same perverse underlying purpose of subjugation and control.
dfxm12
11 hours ago
Many laws constricting police activity and related to data collected by police go ignored.
gentooflux
11 hours ago
Many laws are ignored. The solution is not no laws.
queenkjuul
9 hours ago
The point is that we should just prohibit the cameras entirely, not play this game where we make rules about their use which will be ignored
what
8 hours ago
Rules about their use will be ignored but rules about installing them won’t. Makes sense.
Retric
10 hours ago
Less so when it costs prosecutions. Cops collectively spend quite a long while reading people their Maranda warning for example.
LorenPechtel
10 hours ago
Exactly. Laws get followed when there are likely adverse consequences from not following them. We don't need huge punishments, we need likely punishments.
bluegatty
9 hours ago
illegally collected evidence is usually grounds for inadmission
VWWHFSfQ
11 hours ago
New Hampshire is a staunchly Libertarian state, but man it has some good ideas
spacephysics
11 hours ago
Live free or die
lisp2240
6 hours ago
The problems come from right libertarians. Left libertarians are great.
avadodin
4 hours ago
The difference between a left libertarian and a right libertarian is the first day at work
happyopossum
11 hours ago
New Hampshire is a staunchly Libertarian state, so it has some good ideas
FIFY
doublepg23
11 hours ago
A co-worker of mine lives nearby and he finds it ironic they do not have recreational cannabis.
Spooky23
8 hours ago
You can live free, but the state needs that booze revenue.