I don’t know if this is a good idea

There’ve been a lot of articles recently, about Google and Apple collaborating on a Coronavirus tracking application

At first glance, you think, “good,” that will make it easier for health officials to figure out how to stay ahead of outbreaks.

It would, but at a price to your privacy.

We have only Apple and Google’s assurances that the information won’t be misused. Implicit in this software solution is the belief that when the Coronavirus emergency is over that the tracking information, indeed the application itself will be of no further use. The assumption is that the application can be deleted and tracking will by default, be turned off. How do we know that & how can we verify that this is true?

I could see an application such as Google and Apple are working on, morphing into a general “Health” application wherein a wide variety of diseases are tracked. As I understand the Coronavirus aspect if you test positive for Coronavirus and enter your diagnosis into the application, then your movements are plotted. Local health officials can then watch the spread of Coronavirus throughout a community presumably because other people will also be entering their diagnosis too.

This raises some questions for me. If one person whose positive, visits an area and other people get sick is that person liable? Could they be prosecuted or sued? Should they be? I’m sure that due to the fear promulgated by media, politicians, and rumor. The initial response would be YES!!!

But let’s step back a bit. Would the answer be the same if the application was tracking hepatitis, syphilis, gonorrhea, Influenza, herpes, HIV, measles, or chicken-pox? These diseases present health departments with challenges to tracking and treatment. In fact these diseases are more of a health hazard than Coronavirus may prove to be.

Even if you think this is a good idea, what happens as the application evolves? Do you really want your phone telling the health department or law enforcement that you not only have the clap, but that you visited a particular massage parlor? How about your phone automatically warning others around you that you’re a pariah, because you’ve got the flu or that one of your kids has chicken-pox?

In an extreme scenario; do you want to have to verify and report to authorities that you’re going to have sex with an individual?

The application could in fact give that kind of power to an authoritarian regime. Phone A was in close proximity to Phone B for 43 minutes in a hotel that rents by the hour on this date. This was an unauthorized sexual event, warrants have been issued for the participants arrest.

Oh we say that could never happen. Yet, we have evidence of widespread surveillance by departments within our own government, of average people.

We’ve seen maps of cell phone data showing that people en-mass can be tracked going about their daily business. There is evidence to suggest that specific individuals can be isolated from the mass of data without too much effort or specialized tools.

During this pandemic, we’ve seen cell phone maps used by the New York Times to paint some areas of the country as “Non compliant in the lockdown” because the cell phones were traveling more than X miles from their point of origin.

The fact that the area of the country the New York Times called out, was a rural area and the nearest grocery stores were 15 to 20 miles away was conveniently omitted from that article when it first appeared. The Times, isn’t a government entity, nor are they involved in public health, but it demonstrates just how easily data can be misused.

This got me wondering… Just how much information is my phone, my smart watch, my computer, my ipad, even my car sending and to whom? The next question is, “If I turn these systems off, how much do I degrade the operation of my devices?

I was shocked when I pulled up the privacy setting in my phone.

Privacy

Almost every application is requesting access to location data.

Some of these applications make sense, Maps, Workout, AAA, and Airline applications. 

Others, such as time tracking applications that will automatically start running when you get to work make sense. The apple wallet application asking for location data makes sense so that it can lookup and associate your charges.

Other Applications don’t make as much sense. Why does my bluetooth enabled thermometer application need to know where I was when I took my temperature? Why does an insurance application want to know where I am when I’m accessing it? Who cares where I was when I made a voice memo? Why does Wallgreens want to know where I am?  These applications I can deny access on. But am I really prohibiting them from getting that information?.

There are dating applications that say they won’t operate at all unless they have access to location data. This is to narrow the search parameters to local parties. Okay, then why do I get hit on from people 6000 miles away? Suppose I don’t want to use the cruising part of the app? 

But it gets even more interesting when you dig deeper into system services, and significant locations. Yeah, I hadn’t told the system not to track my location. On the one hand the benefit is that your phone will keep track of where you parked your car. But does that data go anywhere? Or is that data simply used locally on the phone? 

Answers to these questions are ambiguous. Obviously the phone itself is transmitting it’s unique ID to the cellular provider. But what of the other data? 

I can tell the applications that they are denied cellular data services but does that mean that when the phone re-connects to the internet via WiFi at my home these application will send what they’ve recorded as a long data burst? Does denying cellular data access actually protect me from being tracked?

I’m suspicious of any government agency having easy access to my location. At the same time I recognize that the convenience afforded me by my cell phone is very cloying and that there’s a trade-off for convenience versus privacy.

There’s a cellular service called Patriotmobile.com part of their pitch is that they’ll help support Patriotic things and that they don’t sell your data. Okay fine, but if I have applications that are giving the data away, their service really doesn’t help.

That leaves using a VPN all the time. This solution is okay but I’ve had more than one situation where the VPN interfered with connectivity and created a less than convenient user experience. This is particularly true when the application updates.

I’ve got two VPN applications, One is part of my antivirus solution and the other is one that owns all their servers. I prefer the second one since the data isn’t just flowing through whatever server may be available.

After a while, I’d done all I could and opted to just turn off all the devices for a while. It’s clear that all of our technology has gotten away from us and significantly eroded our privacy. 

Unfortunately, I can’t come up with any solution about regaining my privacy short of a VPN solution all the time. But even then, while using a VPN you’re not actually in very much control of what Apps running on your phone may be doing. They could still send the actual location data via the VPN.  I’m going to have to think about this some more.

I can say I’m not going to opt in to the Apple/Google contact tracking application. The potential for abuse of that data is simply too big for my tastes.

No Technology Weekend

Yeah, Yeah

I’m using technology now. But I’ve been offline most of the weekend. It’s been nice and quiet.

This started accidentally but eventually because something that I preferred.

Here’s the story:

I was looking at and writing what should have been a short piece about the Google / Apple Coronavirus tracking application.

I have reservations about the app for privacy reasons. I get that the app is supposed to help health departments react quickly and efficiently to potential outbreaks. It also makes sense that an app, as an extension of our technology would be the first thing that anyone thought about. 

My concerns about the app go deeper. When does the app go away? Who sees this information? Who could see this information? With the inevitable feature creep that all applications undergo, how long would it be before the app would be tracking other public health concerns?

What might that look like? Would we suddenly be tracking Measles, Smallpox, hepatitis? Admittedly this on the surface would seem like a good idea. But what happens when other diseases or conditions are being tracked?

We’re seeing authoritarian behaviors “For the Public Good”. It’s reasonable to ask just how long it would be before the authoritarianism pervaded all aspects of everyday life. Imagine the possibilities.

Your phone could automatically warn you that you were entering a hotspot. (That might be good.) But what happens if your phone informs authorities that you were in a no-tell motel with someone who had VD? Does that mean that you could be met by police at your home?

See, abuse of information is a simple thing and it’s deceptively easy to move from “Good” to “Evil” in just a step or two. Look at Google. They used to be the “Don’t be evil” company and  now… Well it was a short road wasn’t it?

This led me to wonder what applications on my phone are currently requesting to transmit location data. 

What I found was amazing and disturbing. A ton of my application are asking for access to GPS data and often a lot of them are transferring that data as well.

So I started thinning out the applications by turning off their access. What this will do to the day to day operations of these applications I have no idea, time will tell.

Then I realized that these apps existed on all my devices. Phone, pad, watch, computer and  each device had to have each application’s access turned off.

Why for example, does a drugstore app need to know where I am?

Then I noticed that Siri was also asking for location data. Why? Siri shouldn’t need access to location. Then as I was looking at Siri’s settings I realized that Siri was listening on all my devices all the time. On the one hand Siri listening is convenient. On the other hand Siri is listening all the time. Is that something that I really want?

PrivacyAfter several hours and shocks, I came to the conclusion that the most expedient way to deal with what was becoming technological overload was to power the tech down.

That was when I made another interesting discovery. If I powered down the phone and watch, then applied power, these devices powered back up. My watch couldn’t be powered down at all while it was on its charger. Hmmm, interesting.

I grabbed my nice automatic winding watch and powered everything down.

This let me process on the rabbit-hole I’d been sucked down, without the distraction of the technology asking for my input or reminding me of stuff. It was nice to breathe.

Now that I’ve gotten past the tons of SPAM and the missed messages I’ll make choices about applications and move forward.

Abracadabra Alakazam Your online security is all a Big ‘Ol Sham

Just like the TSA waving their hands and muttering incantations when you try to board a plane.

10 years ago, I moved my checking and savings accounts away from Wells Fargo.

Recently I had need to speak with them and got the usual “you can get faster service by going to our web site”

During the course of the conversation, the representative, a lovely lady from Virginia told me that my records were very out of date. (I rarely have need to do business with them.) 

I told the lady that I knew that. And then told her that the reason for my call was that I couldn’t do what I needed to do online because the online system wouldn’t let me update the account profile.

The reason is this, I needed to change the phone number and the email address, but in order to do that I had to have access to one or both. Since I have access to neither, the system wouldn’t allow a change.

This was compounded by the fact that they didn’t have a cell phone number on file with which to send me a verification code.

Okay say I, “Since I’ve given you all the verification information and was able to tell you what the old number was, can you just make the changes? And can we proceed from there?”

Her answer is yes, “but we’ll have to add your cellphone number and then you’ll have to wait for us to send you an email telling you your number has been accepted, so that when you call us back to actually do what you needed to do, we can send you a verification text, so that we know it’s you…”

This somehow seemed totally logical to her.

She followed up by telling me it was for my security.

Sigh…

If I were a nefarious person, I could just as easily play along with this game, having changed the cellphone and email addresses, and I’d have access to do what I was trying to do in the first place, It would only take me keeping track of stuff for 24 hours and then calling back.

What exactly does the bank think is going on? Do they think that criminals have some kind of short attention span?  Are they thinking a criminal is going to forget about the score they were working on, over the course of 24 hours?

By the way this is the sort of thing that has turned me off traditional banks. Credit Unions seem to be a little more direct about getting the job done. 

The banking and insurance systems seem intent on making things so secure… That ONLY criminals will be able to access our data, because they have the time to commit to accessing the accounts.

40 minutes on the phone, and I still have not accomplished what I set out to accomplish.

So now I’m waiting on an email… 

I’m thinking that it’s not worth it. A far more direct method would be to keep my money in my mattress and eschew traditional banking institutions altogether. The problem is that  gold is heavy, and hard to store or move. Diamonds on the other hand are small, light, and easy.

Hummm I wonder…

Perhaps it’s time to close this last bit of business with Wells Fargo. To do that I’ll have to be in a bank branch sooo that’s on my TODO list.