News for hackers. Stuff that matters.
Re:Terrorist watchlist exposed via misconfigured Elasticsear... by pessimizer on Wednesday August 18, 2021 @02:37PM (#28225376)
If I, as a police department, put you on a secret list of possible pedophiles based on the fact that we saw you speaking to another person on that list, noticed you in a board game store patronized by many local young Magic: The Gathering fans, you were single with no children, and you were the brother of someone who once dated the sister of the cop who put you on the list, would you have a problem with that?

What if we weren't allowed to confirm or deny you were on the list, except to a prospective landlord or employer who filled out a form?

What if there were no way to find out those were the reasons I put you on the list, and no appeals process to be removed from the list?

What if you couldn't prove standing in court because there was no legal way to prove you were on the list at all without a friendly judge?

> You're inventing novel legal practices without precedent

Which is why people are forced to rely on the racial makeup of these horrifying lists in order to challenge them. The problem becomes a lot clearer if your local police force makes up a list of all Jews in the neighborhood (whatever criteria they decide to use, i.e. "valid reason") for special treatment.

edit: and, of course, what if the list leaks, and is used as an automated first step for disqualification by employers and landlords for the rest of your life?

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by vkou on Wednesday August 18, 2021 @02:53PM (#28225597)
Would I have a problem with being on a list that, from my perspective, I can't tell the difference between being on it, and not on it?

I don't know, I wouldn't be able to tell. If a tree falls in the forest, and nobody's there to hear it, does it matter to anyone whether it makes a sound?

> What if we weren't allowed to confirm or deny you were on the list, except to a prospective landlord or employer who filled out a form?

You're swinging at strawmen. Nobody in this thread is defending intrusive lists.

For some reason, though, you are conflating unintrusive lists (Which don't require oversight anywhere in the world) with intrusive lists (Which do require oversight in... well-governed parts of the world).

Do you have arguments against the former? I'm not interested in being convinced that the latter are bad, I'm already convinced that they are bad.

> edit: and, of course, what if the list leaks, and is used as an automated first step for disqualification by employers and landlords for the rest of your life?

If there's an unholy decades-long alliance between the FBI, the background check bureaus, and millions of employers and landlords, that neither my federal, state, or municipal government is interested in doing anything about, I think my main problem is not 'the FBI has a list'. I think my main problem is 'My society, on every imaginable level, is broken.'

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by salawat on Wednesday August 18, 2021 @03:41PM (#28226140)
>Would I have a problem with being on a list that, from my perspective, I can't tell the difference between being on it, and not on it?

>I don't know, I wouldn't be able to tell. If a tree falls in the forest, and nobody's there to hear it, does it matter to anyone whether it makes a sound?

Spoken like someone who hasn't had the long arm of the law drop in on them before, or a person who "doesn't care about that liberty anyway, so why not vote it away?"

Just because you don't see the problem doesn't mean it isn't there. Just because you didn't see the tree fall, doesn't mean the world is uneffected. These are concepts 3-4 year olds manage to divest themselves of once they grap the permanence of objects. Just because you don't get much out of a liberty doesn't mean that it's cool to force the loss of it on somebody else. Liberty is to be treasured and protected. The selective relinquishment, revocation, or limiting of one for anyone should be a Big. Frigging. Deal.

The fact people are so cavalier with wisking away the freedoms that underpin American Civil Life on mere suspicion of something that the State is not even required to be transparent about should disturb everybody.

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by isoskeles on Wednesday August 18, 2021 @05:41PM (#28227552)
I don't understand this response. He was told it was a "secret list." Why would you take such a tone in response to him saying he might not have a problem since he doesn't know about the list? It's a hypothetical about a secret list, and since he doesn't immediately agree with the conclusion, you browbeat him about not having the long arm of the law drop down on him, etc.

More importantly, this:

> Spoken like someone who hasn't had the long arm of the law drop in on them before, or a person who "doesn't care about that liberty anyway, so why not vote it away?"

Who are you quoting here? No one said this at all.

I'm actually disgusted by your comment and the logic you present in it.

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by octaonalocto on Wednesday August 18, 2021 @04:31PM (#28226692)
Your tone is inappropriate, please try to make your point without implying GP is dumber than a third grader. It implies malicious intent and is bad for discussion.