7 Months Of Warrantless 'Just Metadata' Paints A Clear Picture Of Your Personal Life

from the anyone-still-believe-this-info-shouldn't-be-protected? dept

The ACLU (along with the EFF and many others) has filed an amicus brief in a case of warrantless cell location tracking currently being considered by the Fourth Circuit Court of Appeals. It cites the obvious similarity between this and the U.S. vs. Jones decision, in which the justices concluded that a person's privacy is violated by long-term tracking of their movements.

In that case, a GPS device was attached to a vehicle. In this one, the privacy implications run much deeper.
People carry their cell phones with them all the time. Each time a cell phone makes or receives a call or text message, the wireless provider logs the cell towers the phone connected to during that communication. Cell phone tracking therefore allows the government to reach back into the past and pull up a record of where we have been on any given day.
Lest we forget, this is the same sort of supposedly harmless, non-identifying "metadata" the NSA and FBI are collecting on millions of cell phone users every day, thanks to a very obliging FISA court. In the Jones case, the justices concurring opinion agreed with the appeals court in finding that the long-term tracking (in this case, 28 days) violated the Fourth Amendment. One wonders what this court will make of this warrantless tracking, which ran for nearly ten times as long.
In the case, United States v. Graham, the government obtained a staggering 221 days of historical cell site location information for two suspects. For one suspect, Aaron Graham, this timespan allowed the government to sweep up his location at 29,659 specific points.
The amount of information that can be culled from these data points easily exceeds anything law enforcement should reasonably expect to obtain without a warrant. Aaron Graham worked with his provider and the ACLU in order to provide it with the same tracking information law enforcement had acquired. Here's what the ACLU found.
Mr. Graham's wife was pregnant during the records period. 29 calls during business hours began or ended in the sector where Mr. Graham's wife's OB/GYN's office is located, allowing the inference that they were at the doctor's office at these times.

The most frequently occurring cell site and sector in Mr. Graham's records is the closest sector and tower to his home – nearly a third of all of his calls were placed or received in this sector. Of those 4,917 calls, 77 started in his home sector and ended elsewhere and 226 started elsewhere and ended when he was at home, providing information about his patterns of movements to and from home.

From July 10 to July 15, 2010, Mr. Graham's last call of the night and first call of the morning were either or both placed from his home sector, allowing the inference that he slept at home those evenings. However, on July 9, Mr. Graham's last call of the night and first call of the next morning were placed from a cell sector 30 minutes from his house. Although we have no reason to believe it to be the case here, this information could reveal private information about the status of a person's relationships and any infidelities.
The ACLU points out that technological advancements have made it easier for law enforcement and others to easily collect large amounts of data on any person, making the protections of the Fourth Amendment more important than ever. Just because millions voluntarily use products and services utilizing invasive technology doesn't mean they're implicitly waiving their right to privacy. Nor should it be assumed the use of a cell phone means the "expectation of privacy" is no longer valid.

Once again, it appears law enforcement's m.o. is "do it until someone makes you stop." One wonders what sort of information can be both so vital as to be obtained without the hassle of a warrant, yet still so elusive it could only be ascertained by gathering two-thirds of year's worth of location info. Hopefully, the court will find along the lines of the Jones decision, and continue rebuilding the protections the Fourth Amendment was written to provide.


Reader Comments (rss)

(Flattened / Threaded)

  1.  
    icon
    Ninja (profile), Jul 16th, 2013 @ 11:37am

    I wonder, is there anyway of erasing information on towers, wireless networks and gps data on a phone? I know you can trick your apps into thinking you are elsewhere using developer tools but I don't think it would work with local data such as towers and wireless networks I guess.

    Anybody with good knowledge on that to give us a brief explanation on that? Along with that Heml.is encrypted messaging app maybe we will see something in the lines of erasing or hiding that kind of info?

     

    reply to this | link to this | view in thread ]

  2.  
    icon
    silverscarcat (profile), Jul 16th, 2013 @ 11:43am

    You hope too much...

    You really think that even if the courts DO find the stuff the NSA has been doing illegal that the government won't continue to do it anyway?

    They'll just "interpret the law" secretly again and continue to do it.

    The United States should just change the name of the country to the Police States of America where you have no freedoms or liberties at all already.

     

    reply to this | link to this | view in thread ]

  3.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 12:23pm

    In the Jones case, the justices found that tracking a person for 28 days violated his the Fourth Amendment.

    Wow. That's incredibly misleading. The Court found it to be a search because of the trespass. The majority opinion DID NOT consider the duration of the tracking to be relevant. Nice try, Techdirt.

     

    reply to this | link to this | view in thread ]

  4. This comment has been flagged by the community. Click here to show it
     
    identicon
    out_of_the_blue, Jul 16th, 2013 @ 12:41pm

    As does 7 months of site visited, as Google collects.

    You always leave out that Google is even more intrusive.

    So your point is what? Protest when gov't gets info directly but cheer when it first goes to a for-profit corporation, entirely around the 4th Amendment?

     

    reply to this | link to this | view in thread ]

  5.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 1:17pm

    Re: As does 7 months of site visited, as Google collects.

    What drugs are you on to make you think Google is the United States government?

     

    reply to this | link to this | view in thread ]

  6.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 1:21pm

    Re: Re: As does 7 months of site visited, as Google collects.

    Google shares with the NSA...

     

    reply to this | link to this | view in thread ]

  7.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 1:21pm

    Re: As does 7 months of site visited, as Google collects.

    Yes, exactly.
    No matter how bad corporate behavior is, they can not arrest and/or imprison and/or torture and/or kill you with law on their side.
    Government can and will. I guess they pay you really well for bullshit you post here.

     

    reply to this | link to this | view in thread ]

  8.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 1:38pm

    Replying to post 1:

    The cellphone towers keep their own server logs, recording which devices connect to it. Every device that connects has a Unique Subscriber ID number.

    The cellular tower can also tell how far away from the tower you are physically located, because cellular signals are created using radio waves (microwaves actually), and radio waves travel at a finite speed. The speed of light.

    So the tower can send your cell phone a radio signal and measure how long it takes to get a reply back. This is known as latency or ping time. If you know how fast light travels (radio waves) you can calculate the distance a person is from a cellphone tower using their signals latency/ping_time measurements. It's probably not possible to tell if that person is North, South, East, or West of the tower, but how far away they are from the tower none the less.

    If you cell phone connects to three or more towers in the same area, it's now possible for technicians to take 3 separate latency/ping_time readings and triangulate your position to within less than a mile of your current location.

    GPS isn't even required.

     

    reply to this | link to this | view in thread ]

  9.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 1:57pm

    Re: You hope too much...

    "The United States should just change the name of the country to the Police States of America where you have no freedoms or liberties at all already."

    Are you looking for 'The Policed States of America Inc. (TM) (c) (R)'?

    Don't forget, we stand "for the children" and against "porn" and "terrorists" with "no rights reserved".

     

    reply to this | link to this | view in thread ]

  10.  
    icon
    Capitalist Lion Tamer (profile), Jul 16th, 2013 @ 3:58pm

    Re:

    Well, I'll be damned. Sometimes you're right.

    That was the concurring opinion which followed the lead of the appeals court, which found that long-term surveillance was a problem. Of course, the definition of "long-term" is still undecided, and that opinion pretty much concluded there's no way to set a time limit that would be reasonable across the board.

     

    reply to this | link to this | view in thread ]

  11.  
    identicon
    Anonymous, Jul 16th, 2013 @ 4:35pm

    Re: As does 7 months of site visited, as Google collects.

    Okay, I see why you get flagged all the time.

     

    reply to this | link to this | view in thread ]

  12.  
    icon
    AC Unknown (profile), Jul 16th, 2013 @ 8:16pm

    Re: Re: Re: As does 7 months of site visited, as Google collects.

    But you can also opt out of Google's data collection by NOT USING THEIR SERVICES.

     

    reply to this | link to this | view in thread ]

  13.  
    identicon
    Anonymous Coward, Jul 16th, 2013 @ 8:30pm

    Re: As does 7 months of site visited, as Google collects.

    You always leave out which unknown or imaginary forces are compelling you to use Google against your will.

     

    reply to this | link to this | view in thread ]

  14.  
    icon
    Ninja (profile), Jul 17th, 2013 @ 3:14am

    Re: As does 7 months of site visited, as Google collects.

    So ootb do you masterbate using a dildo with Google's logo inscribed in it?

     

    reply to this | link to this | view in thread ]

  15.  
    icon
    Ninja (profile), Jul 17th, 2013 @ 3:21am

    Re:

    Thanks for the tips. Think about the absurd phone warrantless seizing and search in the UK for instance. They probably can't go for the telcos to get the tower info but the phone itself will have info stored on antennas. I was thinking about how to avoid such scrutiny. Any leads?

    and radio waves travel at a finite speed. The speed of light.

    I thought that was valid in a vacuum only? But you can do that alright much like that tech guy defaced the North Korea prank that TPB crew played a while back using the latency between the hops. Granted there were a few tricks in that since the light doesn't flow in a single direction in the fibers.

     

    reply to this | link to this | view in thread ]

  16.  
    icon
    Hephaestus (profile), Jul 17th, 2013 @ 10:05am

    Re: Re:

    the definition of "long-term" is still undecided

    It should be determined by what crime they looking at and what time frame.

    ie
    Prosecutor "The assault happened between 10:00 PM and 10:30 PM on this date xx/yy/zzzz"
    Judge "you can review the retrieve the cell phone records for that time period"

     

    reply to this | link to this | view in thread ]

  17.  
    icon
    Hephaestus (profile), Jul 17th, 2013 @ 10:06am

    Re: Re: Re:

    Judge "you can review *and* retrieve the cell phone records for that time period"

     

    reply to this | link to this | view in thread ]

  18.  
    identicon
    Anonymous Coward, Jul 17th, 2013 @ 10:54am

    Zimmerman case > NSA spying on everyone

    /sarcasm

     

    reply to this | link to this | view in thread ]

  19.  
    icon
    btrussell (profile), Jul 17th, 2013 @ 5:21pm

    Re: Re: Re:

    "Limited" time, for now, seems to be life +70 years. I expect long-term is longer than a limited time.

     

    reply to this | link to this | view in thread ]

  20.  
    icon
    Grae (profile), Jul 18th, 2013 @ 11:22am

    Re: Re:

    The "in a vaccuum" statement is essentially another way of saying "in perfect conditions with no other interfering materials, radio waves (which include the microwave spectrum) will travel at the speed of light."

    This is why the statement above yours says the triangulation accuracy using this method is "within less than a mile of your current location." Because if there are conductive materials in the path of the radio signal, they'll slow the radio signal based on the Permeability and Permittivity of the material. And "within less than a mile" probably assumes a certain number of things in the environment slowing the radio signal; e.g.: the steel frames of buildings. If this was performed in a vacuum with no objects in the path between the phone and towers, the accuracy would probably be closer to within 10 meters if not 1 meter.

     

    reply to this | link to this | view in thread ]

  21.  
    identicon
    Anonymous Coward, Jul 19th, 2013 @ 6:21am

    Re: You hope too much...

    It'll be "the people's democratic republic of freedom" in keeping with the fine tradition of oppersive regiems

     

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories
A word from our sponsors...

Close

Email This