Hacker News new | ask | show | jobs
by kcimc 1805 days ago
OP here. Thanks for taking the time to share the (scary) connection you made while reading. While this story has been picked up by security folks, I am definitely not a security researcher :) This project did help me to think more explicitly about security, founding a NYC-based group called "artsec" where security researchers and media artists worked together. One of the members was Samy Kamkar, who you may know for the infamous "Samy is my hero" MySpace worm. His case, also investigated by the USSS, actually went to court and ended with a 3-year ban from touching a computer. This is just to say that the relationship between "art" and "research" (and even "pranks") is not always clear. I understood (and still believe) what I did was legal. It is also undeniably art. I set out to make it as art, and it has been exhibited and written about as art. You can call it bad art, you can say it's similar to a prank, but unfortunately it's still art. Whether it was ethical or not is a much more complicated question, and something that we each have to decide for ourselves. I appreciate hearing your side. Thanks.
2 comments

As a privacy enthusiast, I am very mildly (because I was not directly affected) annoyed that you undertook this project. I see your post discussing it as tacitly attempting to move the overton window in a direction you want it to go.

> Whether it was ethical or not is a much more complicated question, and something that we each have to decide for ourselves.

(from the article:)

> What was probably 10 minutes felt like 30.

I don't know if it "felt like 30" because the task felt boring or because you were concerned about being caught, but if it's the latter then I think you know that it was at _least_ on the far side of "ethical".

> I understood (and still believe) what I did was legal.

(from the article:)

> After the one-minute-exhibition ended, we made a staggered exit from the store

Also doesn't seem like you really thought it was totally legal if you left the store that way.

Most people in this thread are addressing the legality/morality of installing an app on all those computers in the Apple Stores, but what about the unauthorized use of all those people's likenesses? I'm not familiar with New York state law, but in a lot of states, you can't use photos of people commercially without their consent.

You make a living from art projects. Maybe you didn't make any money from this art project, so you didn't directly profit from the use of these photos, but I would think a reasonable person would see your online portfolio as an advertisement or promotion of your services.

In the original article you talk about how it should have been alright to take the photos:

> I tried to think of a busy public space full of computers, and the Apple Store seemed so obvious.

Apple Stores are quite clearly not "public space", they are private spaces that they allow most members of the public access to. If the photos were taken with a telephoto lens through the glass walls, they'd be totally in the clear (though IANAL). Still creepy, but legally in the clear.

> Apple Stores are quite clearly not "public space", they are private spaces that they allow most members of the public access to.

The definition of "public" vs "private" in the context of property is fairly distinct from the one used in the context of privacy law. Obviously an Apple store is a privately-owned property, but in terms of privacy law it's very overtly public - you are allowed to take photos there, and people inside an Apple store would not (or at least, should not) believe that they are "in private".

In short, private property (like retail stores) "generally open to the public" allows photography by default, and you're good to go unless there's a "No photos" sign put up by the proprieter.

> If the photos were taken with a telephoto lens through the glass walls, they'd be totally in the clear (though IANAL).

For the sake of discussion on this point, let's pretend that the Apple store is unambiguously private in all senses, like your residence would be.

I believe that in the relevant jurisdiction taking photos of it would be legal under the conditions that:

(a) the photo was taken from somewhere public

(b) the owners/occupants of the building made no attempt to prevent it

(c) the photo is not of a "sensitive" location (bedroom, bathroom, changing room, etcetera)

(d) the photo does not contain genitalia (this is illegal to do without consent, even in completely public scenarios)

(e) the photo was taken with ordinary photographic equipment (so no zooming in from 10km away)

So obviously the first four are no problem at all, but a telephoto lens specifically might get you in trouble on point (e). Not too relevant to the Apple store, but it's an interesting point of discussion.

Thanks for spending time thinking through some of this :)

I think it "felt like 30" because I was nervous. Not because I thought it was illegal or unethical, but because I was breaking social norms. I see this as different from acting "unethically", and closer to what Erving Goffman would call a "breaching experiment".

I definitely did not want to raise any flags in the store itself, hence the staggered exit and furtive behavior. Again, not because I thought it was illegal or unethical, but because there was a certain way I wanted to see everything play out. If I got kicked out before I had a chance to exhibit the work, it would have made for a distractingly complicated story. I think this point is difficult for some folks who can only see this as a prank or security research, and don't understand how artists think and work and craft stories.

Regarding the question of what constitutes "public space" and legality of of using peoples likenesses for profit, there are some other great responses in this thread which explain the details (like the one here by sellyme). It's interesting for me to hear how most folks on HN assume that photography in the US operates more like the EU.

I want to respond to you here because I think you've captured my point quite well in two ways, though maybe unintentionally. I really hope this gives you some personal insight somehow.

(Part I)

> I understood (and still believe) what I did was legal.

As you mentioned before, this work produced anger and fear, but you believe it was legal. I take that to mean that people in general understand what you did was wrong (morally) but the snapshot of the legal code at the time hadn't caught up with this intuition yet (as far as you know).

From a practical standpoint, I get why this is important to you. I don't have much to add on the legal side because I'm not a lawyer and I think it's focusing on a detail that glosses over the big picture of your actions. I feel like you're fixating on it for that exact purpose, though.

"I thought of violating rights in a way legislators hadn't even dreamed up yet! Violated tons of people's rights along the way, but the important thing is that I found a spot where those legislators forgot to dot the i's and cross the t's. That's what we should focus on". I wholeheartedly disagree. I think the focus is, and should remain, the people involved.

Whether you found a loophole or not is, in my mind, such a distant inconsequential second to the primary focus of your actions and their effects. You doing them in a possibly legally creative way is focusing on the wrong thing.

(Part II) > It is also undeniably art.

I assume this is based on me using "art" in quotes in another response, and you misunderstanding why I used the quotes.

So, imagine someone was punching people and the reason they gave was "boredom". I would use quotes there too, not because I doubt whether or not they were experiencing boredom, but because the word is being used as though it were a sufficient explanation of their actions. While it might be part of the explanation, it glosses over the most salient part of their action: the punching people bit. They also had a desire to punch people, and that desire is not encapsulated in the standard definition of "boredom", but they're using it as though it were in a way to gloss over it, even though it's the most important part of the whole thing. I think it's a sneaky trick to deny personal culpability so I'm putting the word in quotes.

Similarly, your use of "art" feels the same. Whether the end result had any artistic merit is beyond the scope of my comments. I'm saying that "art" as a motivation glosses over the most salient part of your actions: your desire to take something private irrespective of others desires to give that. The standard definition of 'art' doesn't adequately encapsulate that desire: I wouldn't say the most salient aspect of artists is that they behave in this manner. I think it's similarly a sneaky way to try and deny personal culpability by masking the most salient feature behind a more accepted term. But, to be crystal clear, what you did was take moments of people's lives they might not have wanted you to have and turned it into a spectacle for yourself... whether this resulted in art or salad is such a wildly distant second consideration it's practically immaterial (as far as me and others with similar reactions are concerned), let alone whether or not the resulting art or salad is legitimate... it's why your words echo the character in the movie saying "I was gentle".

For what it's worth though, I think it's nice to see you do sort of care on some level how your actions impact others, gives me a little bit of hope.