Posted by duxup 4 hours ago
https://kstp.com/kstp-news/top-news/nyt-6-federal-prosecutor...
We are through the looking glass, folks. This will be dropped and ignored like so many other outrages unless we demand answers from Congress, and hold SCOTUS responsible for partisan abdication of their constitutional duties.
Two things can be true: the "resistance" rings in MN are behaving like the insurgents the US has fought for decades in the Middle East, and ICE agents wrongfully killed a man.
This is just an intimidation tactic to stop people talking (chatting)
To your point, but on a larger scale, over hyping Palantir has the added benefit of providing a chilling effect on public resistance.
As a former government employee I had the same reaction to the Snowden leaks: sure the government might be collecting all of this (which I don't support), but I've never seen the government efficiently action on any data they have collected.
Incompetence might be the greatest safety we have against a true dystopia.
https://www.thenation.com/article/world/nsa-palantir-israel-...
It isn't usually a question of efficiency, it is a question of damage. Technically there is an argument that something like the holocaust was inefficiently executed, but still a good reason to actively prevent governments having ready-to-use data on hand about people's ethnic origin.
A lot of the same observations probably apply to the ICE situation too. One of the big problems with the mass-migration programs has always been that there is no reasonable way to undo that sort of thing because it is far too risky for the government to be primed to identify and deport large groups of people. For all the fire and thunder the Trump administration probably isn't going to accomplish very much, but at great cost.
3...2...1... years left until IBM ports their algorithm used to identify and kill Jews, Roma and gay people in 1930ies Germany from punchcards to Rust.
We can only hope that the surveillance state is still working with the same algorithm…
Maybe now is exactly the right time to publicly call out the apparent uselessness of Palantir before they fully deploy their high altitude loitering blimps and drones for pervasive surveillance and tracking protestors to their homes.
(My greater theory is that the slide into authoritarianism is not linear, but rather has a hump in the middle where government speech and actions are necessarily opposite, and that they expect the contradiction to slide. Calling out the contradiction is one of the most important things to do for people to see what is going on.)
The question is whether the government will respect and protect those rights or not.
That's not what is happening here.
What a phrase
https://en.wikipedia.org/wiki/Second_Amendment_to_the_United...
> In Federalist No. 46, Madison wrote how a federal army could be kept in check by the militia, "a standing army ... would be opposed [by] militia." He argued that State governments "would be able to repel the danger" of a federal army, "It may well be doubted, whether a militia thus circumstanced could ever be conquered by such a proportion of regular troops." He contrasted the federal government of the United States to the European kingdoms, which he described as "afraid to trust the people with arms"...
We rather quickly saw the federal government rolling over the people even with weapons in the Whiskey Rebellion.
But it's still very funny seeing the Right wrestle with "wait, the other team has guns?!" and "wait, Trump sounds like he wants gun control?!" right now when this claim has been the basis of their argument for decades.
This seems like a good example of that being enough metadata to be a big problem.
Turns out they were right.
https://signal.org/blog/phone-number-privacy-usernames/
https://signal.org/blog/sealed-sender/
https://signal.org/blog/private-contact-discovery/
There isn't really anything you can do with that information. The first value is already accessible via other methods (since the phone companies carry those records and will comply with warrants). And for pretty much anyone with signal installed that second value is going to essentially always be the day the search occurred.
And like another user mentioned, the most recent of those warrants is from the day before they moved to username based identification so it is unclear whether the same amount of data is still extractable.
I don't really think Signal tech has anything to do with this.
As a reminder... if you don't know all the people in your encrypted group chat, you could be talking to the man.
I assume because of the baseband stuff to be FCC compliant? Last I checked that meant DMA channels, etc. to access the real phone processor. All easily activated over the air.
Indeed. The only reason this is not used by customer support for more casual access, firmware upgrades and debugging is a matter of policy and the risk of mass bricking phones and as such this is not exposed to them. There are other access avenues as well including JTAG debugging over USB and Bluetooth.
The question here is NOT "if Signal didn't leak your phone number could you still get screwed?" Of course you could, no one is disputing that.
The question is "if you did everything else perfect, but use Signal could the phone number be used to screw you?" The answer is ALSO of course, but the reason why we're talking about it is that this point was made to the creator of Signal many many times over the years, and he dismissed it and his fanboys ridiculed it.
And even then, a trusted participant could not understand they're not supposed to give their private keys out or could be rubber-hosed into revealing their key pin. All sorts of ways to subvert "secure" messaging besides breaking the crypto.
I guess what I'm saying is "Strong cryptography is required, but not sufficient to ensure secure messaging."
- identify who owns the number
- compel that person to give unlocked phone
- government can read messages of _all_ people in group chat not just that person
Corollary:
Disappearing messages severely limits what can be read
It's much more likely that the government convinces one member of the group chat to turn on the other members and give up their phone numbers.
Genuinely, from outside, it seems like your government doesn't give a damn on what they are and aren't allowed to do.
etc, etc. So it goes
I just pray they run Newsom this time. Despite his "being from California" handicap, I think he should be able to easily beat Vance by simply being a handsome white man with a white family. Vance is critically flawed and will demoralize much of the far right IFF his opponent doesn't share those same weaknesses.
Eventually we got used to letting the feds slide on all the good things to the point everything was just operating on slick ice, and people like Trump just pushed it to the next logical step which is to also use the post-constitutional world to his own personal advantage and for gross tyranny against the populace.
I'm sure the Israeli spyware companies can help with that.
Although then they'd have to start burning their zero days to just go after protestors, which I doubt they're willing to do. I imagine they like to save those for bigger targets.
Signal doesn't share numbers by default and hasn't for a few years now. And you can toggle a setting to remove your number from contact discovery/lookup entirely if you are so inclined.
I’m also curious what they could get off of cloud backups. Thinking in terms of auth, keys, etc. For SMS it’s almost as good as phone access, but I am not sure for apps.
The problem with mass surveillance is the “mass” part: warrantless fishing expeditions.
But yes... it does limit what can be read. My point is it's not perfect.
Celebrite or just JTAG over bluetooth or USB. It's always been a thing but legally they are not supposed to use it. Of course laws after the NSA debacle are always followed. Pinky promise.
They technically have logs from when verification happens (as that goes through an SMS verification service) but that just documents that you have an account/when you registered. And it's unclear whether those records are available anymore since no warrants have been issued since they moved to the new username system.
And the actual profile and contact discovery infra is all designed to be actively hostile to snooping on identifiable information even with hardware access (requiring compromise of secure enclaves + multiple levels of obfuscation and cryptographic anti-extraction techniques on top).
That is to say: it allows a determined party to largely remain anonymous even in the face of upstream provider's compromise.
https://www.phoenixnewtimes.com/news/arizona-supreme-court-s...
"Any man who breaks a law that conscience tells him is unjust and willingly accepts the penalty by staying in jail to arouse the conscience of the community on the injustice of the law is at that moment expressing the very highest respect for the law."
-- Letter from the Birmingham Jail, MLK Jr: https://people.uncw.edu/schmidt/201Stuff/F14/B%20SophistSocr...
That's life, if you can't take that heat stay out of the kitchen. It's also why elections are a much safer and more reliable way to enact change in your country than "direct action" is except under the most dire of circumstances.
No one is arguing that people who practice civil disobedience can expect to be immune from government response.
Accepting jail over 1A protected protests only proves you're weak (not in the morally deficient way, just from a physical possibilities way) enough to be taken. No one thinks more highly of you or your 'respect for the law' for being caught and imprisoned in such case, though we might not think lesser of you, since we all understand it is often a suicide mission to resist it.
My point is about civil disobedience, not disobedience generally. The point of civil disobedience is to bring attention to unjust laws by forcing people to deal with the fact they they are imprisoning people for doing something that doesn't actually deserve prison.
Expecting to not end up in prison for engaging in civil disobedience misses the point. It's like when people go on a "hunger strike" by not eating solid foods. The point is self-sacrifice to build something better for others.
https://www.kqed.org/arts/11557246/san-francisco-hunger-stri...
If that's not what you're into -- and it's not something I'm into -- then I would suggest other forms of disobedience. Freedoms are rarely granted by asking for them.
It isn’t just people walking around holding signs or filming ICE. Can we please distinguish these cases?
> If two or more persons in any State or Territory, or in any place subject to the jurisdiction of the United States, conspire to overthrow, put down, or to destroy by force the Government of the United States, or to levy war against them, or to oppose by force the authority thereof, or by force to prevent, hinder, or delay the execution of any law of the United States, or by force to seize, take, or possess any property of the United States contrary to the authority thereof, they shall each be fined under this title or imprisoned not more than twenty years, or both.
A group chat coordinating use of force may be tough.
They surely can. But the point was more than the people in power don't really need Signal metadata to do that. On the lists of security concerns modern protestors need to be worrying about, Signal really just isn't very high.
The whole reason cops love ALPR data is anyone's allowed to collect it, so they don't need a warrant.
it will be quite easy for a prosecutor to charge lots of these people.
it's been done for less, and even if the case is thrown out it can drag on for years and involve jail time before any conviction.
The FBI is weak now compared to what it was even two years ago.
The real protection for the legal protesters and observers in MN is numbers. They can't arrest and control and entire populace.
prosecutors may take their time and file charges at their leisure.
However, neither Border patrol nor ICE have been exhibiting thoughtfulness or patience, so I doubt they're playing any such long game.
> This seems like a good example of that being enough metadata to be a big problem
I was not saying it's not a problem that the feds are doing this, because that's not what I was replying to.
much more closer to the $5 wrench attack
They've been just gradually banning everything not made in Russia.
https://www.cisa.gov/sites/default/files/2024-12/guidance-mo...
The only problem is that Telemessage was wildly insecure and was transmitting/storing message archives without any encryption.
Assuming they dont have disappearing messages activated, and assuming any protestors willingly unlock their phones.
Or they are running any mainstream iPhone or Android phone, they've unlocked the phone at least once since their last reboot, and the police have access to graykey. Not sure what the current state of things is, since we rely on leaked documents, but my take-away from the 2024 leaks was GrapheneOS Before First Unlock (BFU) is the only defense.
Or you know, the 2nd amendment.
Id be willing to bet that ICE would have a much smaller impact if they would be met with bullets instead of cameras. In the end, what ICE is doing doesn't really matter to Trump, as long as MAGA believes that things are being done, even if nothing is being done, he doesn't care.
https://www.pbs.org/newshour/politics/watch-you-cant-have-gu...
and apparently it now a perfectly valid reason for the state to execute someone without being charged or a trial.
This has always been the absurdity of the moronic claims of the 2nd amendment being to overthrow government tyranny: You may own the gun legally, but at no point will your actions be legal. If you've decided the government needs to be overthrown, you are already throwing "law" out the window, even if you have a valid argument that the government you are overthrowing has abandoned the constitution.
Why the fuck do you need legal guns to commit treason? Last I checked, most government overthrows don't even involve people armed with private rifles!
If you are overthrowing the government, you will need to take over local police stations. At the moment, you no longer need private arms, and what you are doing isn't legal anyway.
Meanwhile, every single fucking time it has come up, the gun nuts go radio silent when the government kills the right person who happens to own a gun. Every. Single. Time.
It took minutes for the "SHALL NOT BE INFRINGED" people who raised a million dollars for Kyle Rittenhouse to defend himself for driving to a protest in a different state while armed to the teeth to of course get to shoot someone to turn around and say "Actually bringing a gun to a protest makes you a terrorist and you need to be shot". Minutes. They have also put up GoFundMes for the guy who executed that man.
If you are too scared to stand up to your government without a fucking rifle, you have never been an actual threat to your government, and they know that.
https://www.businessinsider.com/apple-complies-percent-us-go...
It wasn’t paywalled for me, BTW.
But any judge that doesn't immediately reject such cases on a first-amendment basis is doing the business of an authoritarian dictator. This is fully protected speech and assembly.
If you say something illegal in a chat with a cop in it, or say it in public, I don’t think there are Constitutional issues with the police using that as evidence. (If you didn’t say anything illegal, you have a valid defence.)
I don’t know if anyone IS using such a database unlawfully - they might be checking the plate number against an Excel sheet they created based on other reports from people opposed to ICE - but if its a databse they shouldn’t be using in this way, if might be against the law.
But that's not an example of something that would be illegal to say in a chat. It would be an example of something that's illegal to do regardless of the chat.
Actual examples? No. I don’t believe it happened.
Hypothetical examples? Co-ordinating gunning down ICE agents. If the chat stays on topic to “coordinat[ing] legal observers,” there shouldn’t be liability. The risk with open chats is they can go off topic if unmoderated.
Curious how many group chats have unknowingly allowed a well known journalist into their groups.
Here’s the facts:
- Protesters have been coordinating using Signal
- Breaches of private Signal groups by journalists and counter protesters were due to poor opsec and vetting
- If the feds have an eye into those groups, it’s likely that they gained access in the same way as well as through informants (which are common)
- Signal is still known to be secure
- In terms of potential compromise, it’s much more likely for feds to use spyware like Pegasus to compromise the endpoint than for them to be able to break Signal. If NSA has a Signal vulnerability they will probably use it very sparingly and on high profile foreign targets.
- The fact that even casual third parties can break into these groups because of opsec issues shows that encryption is not a panacea. People will always make mistakes, so the fact that secure platforms exist is not a threat in itself, and legal backdoors are not needed.
https://freedom.press/digisec/blog/new-leaks-on-police-phone...
1. Some rando on X saying "OMG! I infiltrated a lefty signal group" doesn't mean said rando actually did infiltrate a signal group.
2. Signal was not the app Hegseth, et al. used. They used TM SGNL, which is a fork of Signal. But that's a minor nit.
3. Encryption is not the same thing as authentication. And authentication is somewhat meaningless if you let everyone into your encrypted group chat.