News for hackers. Stuff that matters.
Re:Privacy vs. “I have nothing to hide” (2019) by koheripbal on Wednesday September 14, 2022 @09:08AM (#32836625)
I work with prosecutors, and some of them will straight up misrepresent innocent facts to paint them as evidence of malicious intent and pressure parties to plead guilty.

I have seen stuff like "defendant had TOR installed - a popular program for criminals" in court filings. ...and judges and juries accept that as fact because they just don't understand the technology. For example, having a bookmark for "Hacker News" would absolutely show up in court. Crazy stuff meant to bias judges and juries that don't know tech.

The point is that the situation is 100x worse in tech where prosecutors, judges, and juries simply do not understand the evidence. ANYTHING can be painted as incriminating evidence.

I have seen saved credentials on automation jobs being used to incorrectly establish people's network activity. I have seen routine maintenance being used to establish obstruction charges just to intimidate possible witnesses... Like stuff you would not believe happens, happens.

It's even worse in civil suits, where opposing counsel will subpoena as much as possible (mountains of data) just to give you more work and fish for trade secrets or anything they can twist in court.

When I was junior, I proudly told my legal team "good news, I added space to keep our transaction records for 20 years!" and was aghast when they said they wanted files deleted THE DAY the legal requirement to hold it expired because it increased legal liability.

Now I totally get it. Today we only store the bare minimum - everything else is deleted immediately. ... and I have to re-explain this to junior employees each year to their disgust.

Re:Privacy vs. “I have nothing to hide” (2019) by bdw5204 on Wednesday September 14, 2022 @03:39PM (#32842272)
> I have seen stuff like "defendant had TOR installed - a popular program for criminals" in court filings. ...and judges and juries accept that as fact because they just don't understand the technology. For example, having a bookmark for "Hacker News" would absolutely show up in court.

Both of those are really good examples of how a statement of fact that is literally true can still be a lie. Politicians do this kind of stuff all the time especially in their attack ads that make TV unwatchable around this time of year in every even numbered year. Amazingly what gets a politician called out by the other party's press as a "liar" is the opposite of this kind of statement: something that is fundamentally true but where the politician got one minor irrelevant detail wrong. That's also a major reason why it isn't a good idea to represent yourself in court or to explain yourself to the police when you get arrested because people are prone to accidentally getting minor details wrong or misspeaking even when they're telling the truth to the best of their ability.

Re:Privacy vs. “I have nothing to hide” (2019) by Jalad on Wednesday September 14, 2022 @05:07PM (#32843362)
For anyone that isn't convinced, here is a talk by a lawyer and a police officer discussing the idea of never talking to the police [0]. It's interesting that they largely agree that talking to the police is not a good idea.

[0] https://www.youtube.com/watch?v=d-7o9xYp7eE

Re:Privacy vs. “I have nothing to hide” (2019) by belter on Friday September 16, 2022 @10:47AM (#32866754)
Don't forget the followup...

"Don't Talk to the Police Part 2" - https://youtu.be/tIt-l2YmH8M

Re:Privacy vs. “I have nothing to hide” (2019) by kQq9oHeAz6wLLS on Wednesday September 14, 2022 @06:51PM (#32844545)
I was just about to post this. It's long, but so good.
Re:Privacy vs. “I have nothing to hide” (2019) by worik on Wednesday September 14, 2022 @04:24PM (#32842862)
> explain yourself to the police when you get arrested

Cannot emphasise this enough.

Unless you live a criminal lifestyle (if so, you can learn nothing from me) you may encounter cops once. They do it every day.

Often police job advancement is helped by making your life hell. Say nothing you are not legally obliged to.

Re:Privacy vs. “I have nothing to hide” (2019) by lcnPylGDnU4H9OF on Wednesday September 14, 2022 @04:22PM (#32842827)
> ... prone to accidentally getting minor details wrong

I know a prosecutor who had to investigate the statements made by the husband of a person who (presumably) had drowned themself in their pool (she used workout weights to keep herself at the bottom). The statement to be investigated: "Those were her weights. I never touched those weights!"

Now all of a sudden maybe his fingerprints are on the weights and that statement is untrue...

I also got to learn that they scoop the weights into a bucket because I guess they need to keep them submerged in water, otherwise the prints will wash off.

Re:Privacy vs. “I have nothing to hide” (2019) by mc32 on Thursday September 15, 2022 @09:21AM (#32851513)
Ah, too bad he could not use the Slick Willie defense and make the claim that it depends on what the definition of "touch" is.
Re:Privacy vs. “I have nothing to hide” (2019) by titzer on Wednesday September 14, 2022 @02:28PM (#32841241)
Bigtech will happily store data on their users indefinitely so they can mine it in the future, should they think of new profit-generating ideas. But they will absolutely delete their employee's emails after N months unless they are on litigation hold (i.e. legally required not to do so). Complete double standard.
Re:Privacy vs. “I have nothing to hide” (2019) by edgyquant on Wednesday September 14, 2022 @09:56PM (#32846081)
The data is their business model so I don’t see how it’s a double standard
Re:Privacy vs. “I have nothing to hide” (2019) by nephrite on Wednesday September 14, 2022 @09:37AM (#32837000)
> having a bookmark for "Hacker News"

I was punished in school for having NetHack source code in my home dir. And it was not because it was a game but because it allegedly was a hacking tool.

Re:Privacy vs. “I have nothing to hide” (2019) by MichaelCollins on Wednesday September 14, 2022 @04:26PM (#32842889)
In highschool I was sent to detention and almost suspended because a study hall teacher overheard me talking about the "black market" feature of an roleplaying game I was writing on my graphing calculator. It took an hour of trying to explain TI-BASIC to my principle (and I think some angry phonecalls from my mother, a teacher in that district) before they relented with the insane mafioso accusations.
Re:Privacy vs. “I have nothing to hide” (2019) by codethief on Thursday September 15, 2022 @04:06AM (#32848733)
This reminds me of an article (re-)posted recently here on HN:

https://web.archive.org/web/20031114161830/http://www.adequa...

Re:Privacy vs. “I have nothing to hide” (2019) by wen_1k_btc on Wednesday September 14, 2022 @07:04PM (#32844660)
the principal's your pal
Re:Privacy vs. “I have nothing to hide” (2019) by mc32 on Thursday September 15, 2022 @09:23AM (#32851545)
I'd like to request a change to that mnemonic: your principal is not your pal!
Re:Privacy vs. “I have nothing to hide” (2019) by andrepd on Wednesday September 14, 2022 @07:31PM (#32844918)
At least you didn't have Dopewars installed!
Re:Privacy vs. “I have nothing to hide” (2019) by Bakary on Wednesday September 14, 2022 @09:48AM (#32837144)
"No, wait, I can explain! You see, I'm just a tourist in search of an amulet..."
Re:Privacy vs. “I have nothing to hide” (2019) by westmeal on Wednesday September 14, 2022 @02:31PM (#32841271)
At least they didn't sanction you for eating corpses...
Re:Privacy vs. “I have nothing to hide” (2019) by Zuider on Wednesday September 14, 2022 @11:47AM (#32838830)
Your Honor, we were horrified to discover the largest collection of "PDF files" we have ever seen on the defendant's hard drive!
Re:Privacy vs. “I have nothing to hide” (2019) by knodi123 on Wednesday September 14, 2022 @02:49PM (#32841538)
> I have seen routine maintenance being used to establish obstruction charges just to intimidate possible witnesses

You're talking about Hillary Clinton, right? That's literally one of the arguments they used against her.

Re:Privacy vs. “I have nothing to hide” (2019) by phpthrowaway99 on Wednesday September 14, 2022 @04:27PM (#32842903)
Was it really routine maintenance to BleachBit an entire server after you receive a subpoena from the FBI?
Re:Privacy vs. “I have nothing to hide” (2019) by nobody9999 on Wednesday September 14, 2022 @05:59PM (#32844011)
>Was it really routine maintenance to BleachBit an entire server after you receive a subpoena from the FBI?

I would hope so, since presumably the storage devices on that server would either be resold or sent to a dump.

The info on those storage devices (assuming backups/existence of that data elsewhere for government data retention purposes) should not be let out into the wild.

In fact, I (and I don't work/exist in areas with confidential data) have a dozen or so hard drives that sit in a closet as I don't have the interface cards (any more) to hook them up and securely delete the data.

Eventually I'll probably purchase a bulk eraser[0], but until then, those disks will sit in my closet as my business is my business and no one else's.

[0] https://www.amazon.com/Degausser-Electricity-Required-Mainte...

Re:Privacy vs. “I have nothing to hide” (2019) by phpthrowaway99 on Wednesday September 14, 2022 @08:39PM (#32845502)
I understand why people want to erase hard drives permanently and totally. My point was more about, isn't it a little weird to do so after the FBI says they want to look into the status of said devices.
Re:Privacy vs. “I have nothing to hide” (2019) by bdowling on Wednesday September 14, 2022 @10:57PM (#32846434)
More info on that degausser. https://www.mediaduplicationsystems.com/sd-1-hard-drive-tape...

On sale, now only $3,990.00 (previously $6,999.99).

Re:Privacy vs. “I have nothing to hide” (2019) by piaste on Thursday September 15, 2022 @06:08PM (#32859076)
If the OP only has a dozen drives to wipe, I think a drill and some liquid to pour over the platters would be a sufficient alternative.
Re:Privacy vs. “I have nothing to hide” (2019) by nobody9999 on Friday September 16, 2022 @04:52PM (#32871876)
>If the OP only has a dozen drives to wipe, I think a drill and some liquid to pour over the platters would be a sufficient alternative.

An interesting idea and one I hadn't considered. Thanks!

Re:Privacy vs. “I have nothing to hide” (2019) by knodi123 on Sunday September 18, 2022 @01:14PM (#32889334)
lol, dude, just take out the screws and toss the platters in the oven. you need software to retrieve data, but not necessarily to destroy it.

I made a cool spiral chandelier out of fishing wire and hard drive parts. The platters don't chime as harmoniously as I had hoped, but it still worked out great - and I have enough super fridge magnets to last the rest of my life.

Re:Privacy vs. “I have nothing to hide” (2019) by knodi123 on Wednesday September 14, 2022 @05:20PM (#32843500)
Yes, it really was. The FBI investigated and found as much.

https://www.denverpost.com/2016/09/03/fbi-report-platte-rive...

Re:Privacy vs. “I have nothing to hide” (2019) by bdowling on Wednesday September 14, 2022 @11:08PM (#32846505)
> In July, FBI Director James B. Comey said while the investigation revealed potential violations, “our judgement is that no reasonable prosecutor would bring such a case.”

In other words, crimes were probably committed but the FBI dropped the investigation because they figured that no prosecutor would file charges in the case.

Re:Privacy vs. “I have nothing to hide” (2019) by phpthrowaway99 on Wednesday September 14, 2022 @08:41PM (#32845514)
I don't see this really addressing the fact that deleting data permanently after you find out the FBI wants to look at those devices is a bit weird.
Re:Privacy vs. “I have nothing to hide” (2019) by knodi123 on Sunday September 18, 2022 @01:16PM (#32889355)
A plausible justification was given. It makes sense. It also has nothing to do with Hillary's decision-making. You can call all the people involved liars, or just deny the facts that have been presented to you - but the facts, as presented, do portray innocent behavior.
Re:Privacy vs. “I have nothing to hide” (2019) by Wistar on Wednesday September 14, 2022 @03:16PM (#32841927)
Same thing occurred to me. The Bleach Bit BS.
Re:Privacy vs. “I have nothing to hide” (2019) by koheripbal on Saturday September 17, 2022 @10:28AM (#32877788)
No, I was not talking about any politically driven case at all.
Re:Privacy vs. “I have nothing to hide” (2019) by Buttons840 on Wednesday September 14, 2022 @05:00PM (#32843277)
> having a bookmark for "Hacker News" would absolutely show up in court

And would the defense be allowed to show the legal and harmless conversations we have here? Or ask the prosecutors which HN posts they believe influenced the accused to commit a crime?

Re:Privacy vs. “I have nothing to hide” (2019) by drewcoo on Wednesday September 14, 2022 @01:05PM (#32840057)
> Today we only store the bare minimum - everything else is deleted immediately. ... and I have to re-explain this to junior employees each year to their disgust.

Same in software-land. Nobody wants to have years of who-knows-what subpoenaed.

Re:Privacy vs. “I have nothing to hide” (2019) by hipjiveguy on Thursday September 15, 2022 @08:02PM (#32860169)
wisdom and experience. TIL