Hacker News new | ask | show | jobs
by zby 3864 days ago
I don't think this inefficiency will be permanent. This surveillance is a new thing, the tools are not yet used to their full potential. It will take time before many police officers understand all the possibilities and use the tools effectively. It is also possible that they are already used in their full potential against the adversaries that matter. Terrorist don't really matter in the power balance - they might be a nuisance - but only indirectly - via the public pressure. They don't pose any direct threat. They might be even useful.

Also if it was so ineffective than the lose of privacy would also be as ineffective. After all we fear the lose of privacy because we believe that the government, or the business could act upon the data they gather about us.

2 comments

No. It will never be effective. Here's why:

> Let's look at some numbers. We'll be optimistic -- we'll assume the system has a one in 100 false-positive rate (99 percent accurate), and a one in 1,000 false-negative rate (99.9 percent accurate). Assume 1 trillion possible indicators to sift through: that's about 10 events -- e-mails, phone calls, purchases, web destinations, whatever -- per person in the United States per day. Also assume that 10 of them are actually terrorists plotting.

This unrealistically accurate system will generate 1 billion false alarms for every real terrorist plot it uncovers. Every day of every year, the police will have to investigate 27 million potential plots in order to find the one real terrorist plot per month. Raise that false-positive accuracy to an absurd 99.9999 percent and you're still chasing 2,750 false alarms per day -- but that will inevitably raise your false negatives, and you're going to miss some of those 10 real plots.

This isn't anything new. In statistics, it's called the "base rate fallacy," and it applies in other domains as well. For example, even highly accurate medical tests are useless as diagnostic tools if the incidence of the disease is rare in the general population. Terrorist attacks are also rare, any "test" is going to result in an endless stream of false alarms.

This is exactly the sort of thing we saw with the NSA's eavesdropping program: the New York Times reported that the computers spat out thousands of tips per month. Every one of them turned out to be a false alarm.

And the cost was enormous -- not just for the FBI agents running around chasing dead-end leads instead of doing things that might actually make us safer, but also the cost in civil liberties. The fundamental freedoms that make our country the envy of the world are valuable, and not something that we should throw away lightly.

https://www.schneier.com/essays/archives/2005/03/why_data_mi...

This is a good argument - but I don't entirely buy it - because a system like that does not need to lead the investigations, but can also be an additional source of information. A very powerful one - if the police is already investigating someone than the possibility to browse all his history, his contacts etc. would be very useful.
That's even worse - "Give me six lines written by the most honest man in the world, and I will find enough in them to hang him" - if you're looking for guilty-seeming people, you'll find them.

And if you're trying to prevent atrocities, you'll convict them before they've done anything wrong.

Mass surveillance is effective for gathering data about the past of a certain target so you can blackmail them. It's obviously not effective in preventing anything. There's just too much data to analyze and keyword based searches are a weak tool.

You also need to realize that people that were doing unpleasant surveillance in parked cars, at night, trying to figure out what a known arms dealer was up to, are now enjoying the comfort of a desk, looking at a database of intercepted SMSes that don't make any sense, and waiting for the shift to end.

It is probably more useful for blackmail than in prevention - this is a good point. But it is far from obvious that it is ineffective in the letter case. If you believe that it is obvious - then please explain.

There is also another case which is finding out who did it - and in recent reports of police investigations there is always about use of surveillance cameras. The surety of being caught is also important in prevention. Maybe less in the case of suicide terrorists - but they are really a minority of all crime.

I have the feeling that people are so much against surveillance that they cannot stand any analysis of the arguments used. This is counterproductive.

> It is probably more useful for blackmail than in prevention - this is a good point. But it is far from obvious that it is ineffective in the letter case. If you believe that it is obvious - then please explain.

Have you watched the news these last few days? Known extremists managed to get AK-47s and explosives in the middle of Paris, at the highest alert level of a military-on-the-streets Vigipirate program, while the borders were closed and the city's security was further elevated for an upcoming international meeting about climate.

They were known to law enforcement, they communicated over cleartext intercepted channels, they lost themselves in the noise of tens of millions of people joyfully filling some Stasi's storage units with their private conversations.

And all this less than a year since a similar event lead to the incompetents asking for even more data that they can stash for after the fact investigations. So there's a valid use: finding out, in retrospect, exactly how they failed to do their jobs. And maybe ask for even more funding, even more privacy invasions, even more power.