Hmm. I wonder how the protesters know who to trust in their Telegram groups and on LIHKG. There has to be a core of organizers, however anonymous they may appear to be.
Is there a way to track metadata exhaust from telegram for building a social graph or xss lihkg? Could be a way to ID them.
This is some serious “too interested in seeing if you could, and not stopping to wonder if you should” content. What possible positives are there in exploring how to de-anonymize people whose life and freedom requires anonymity, and who are fighting the good fight?
Slightly tangential since you're specifically discussing communication but I've noticed that the term "privacy" is often getting incorrectly used when discussing surveillance tech (e.g. face recognition).
There is no expectation of privacy in a public place.
But an important right in a free society is the right to anonymity.
A street is not a private place and, as said, there is no expectation of privacy there: Anyone and everyone can see you and what you are doing.
But you should have the right to remain anonymous as long as you do not breach the law. That's what called into question these days with e.g. automatic facial recognition.
> A street is not a private place and, as said, there is no expectation of privacy there: Anyone and everyone can see you and what you are doing.
Only people physically there can see me and what I am doing. Modern technology enables them to record that and share it globally and across time. It's important to recognize that this ability is not inherent in it being a public place.
"Expectation of privacy" and that you can't have it in a public street is a US-centric concept. Other societies draw the line differently.
Your link does not mention anything about her being in a public space, and it's difficult to comment on a specific case without knowing all the details.
In the UK there is no expectation of privacy in public places and anyone can film or take pictures in public. Case in point: the flourishing tabloid industry of celebrity pictures.
The ICO is about data protection. Even websites processing personal data must register with the ICO.
She was on the street. MGM tried to say, as you are here, that because she was on the street she had no expectation of privacy. English courts disagreed.
> In the UK there is no expectation of privacy in public places and anyone can film or take pictures in public.
I've just linked you to a case where that was shown to be untrue.
> The ICO is about data protection.
Data protection is one of the laws that prevents people just setting up a CCTV camera to record public spaces. If you set up a CCTV camera in England that records the street you need to register it with ICO. What you can do with the images is limited because data protection law. You're claiming that because there's no expectation of privacy on the street someone can just run CCTV and do what they like with those images. They can't in England.
You said
> never been a concept anywhere
This is nonsense. See eg German or French law.
> In some jurisdictions it is an actionable wrong to publish a photograph of a person taken without consent – see Markesinis and Unberath – the German Law of Torts 4th Ed. at pp.75 and 445 and Dalloz 101 Ed. of the French Code Civil, notes at paragraph 15 on Article 9 of the Code
I'm giving you at least one clear example where someone in public had an expectation of privacy and that was upheld by English courts.
I've also showed that English data protection laws provide an expectation of privacy and restrict what type of filming and photography people do in public places.
> But I will say that there is no legal restriction on filming a public space in England.
For fuck's sake, there are at least 3 and probably more.
1) Naomi Campbell case above
2) Data protection forbids certain kinds of filming in public
3) "This is a prohibited place within the meaning of the Official Secrets Act" -- try standing on a public street filming a location that has these signs up and see how far you get.
> Expectation of privacy in public places has never been a concept anywhere
It's certainly a concept in Europe, see the famous Caroline cases. Quoting for example from the European Court of Human Rights case von Hannover v. Germany
> The Court notes at the outset that in the present case the photos of the applicant in the various German magazines show her in scenes from her daily life, thus involving activities of a purely private nature such as engaging in sport, out walking, leaving a restaurant or on holiday. The photos, in which the applicant appears sometimes alone and sometimes in company, illustrate a series of articles with such innocuous titles as “Pure happiness”, “Caroline... a woman returning to life”, “Out and about with Princess Caroline in Paris” and “The kiss. Or: they are not hiding anymore” [...] The Court reiterates the fundamental importance of protecting private life from the point of view of the development of every human being’s personality. That protection – as stated above – extends beyond the private family circle and also includes a social dimension. The Court considers that anyone, even if they are known to the general public, must be able to enjoy a “legitimate expectation” of protection of and respect for their private life [...] Furthermore, the Court considers that the public does not have a legitimate interest in knowing where the applicant is and how she behaves generally in her private life even if she appears in places that cannot always be described as secluded and despite the fact that she is well known to the public.
The court's argument does not hinge on the "widely publicized" nature but on her "legitimate expectation of protection of and respect for their private life". If you still want to argue semantics, I would like to quote the ECHR again (P.G. and J.H. v. The United Kingdom)
> There are a number of elements relevant to a consideration of whether a person’s private life is concerned by measures effected outside a person’s home or private premises. Since there are occasions when people knowingly or intentionally involve themselves in activities which are or may be recorded or reported in a public manner, a person’s reasonable expectations as to privacy may be a significant, although not necessarily conclusive, factor.
Here you have it on the record: Someone arguing that you can have a reasonable expectation of privacy in a public place. In conclusion, there are places in this world where this is a legally protected concept. Case closed.
Just because a case involves publication it does not mean that legal concepts developed therein only apply to that. Anyhow, the quoted P.G. and J.H. vs The United Kingdom in my last reply specifically deals with surveillance. You may find the court's arguments nonsensical but you can't stand by the fact that this has never been a concept anywhere. It certainly is a concept there. I even quoted you the court's assessment that when talking about public places you have to consider their "reasonable expectations as to privacy".
Right, I've had a look at the case you mentioned and it so happens that it has nothing to do with expectation of privacy in public places, but is about covert police wiretapping of phone lines and of private premises, and acceptability of evidence in court.
In fact, the paragraph you quoted previously is immediately followed by the following (which you left out by mistake, I'm sure):
> A person who walks down the street will, inevitably, be visible to any member of the public who is also present. Monitoring by technological means of the same public scene (for example, a security guard viewing through closed-circuit television) is of a similar character.
I.e. video surveillance of public space is fair game. The issue is with permanent record and automated processing (as per the case right after the excerpt above), which is not too different from what I have been saying.
The paragraph I left out is exactly the argument in my very first reply.
You can't expect the whole world to share your definition of the word "privacy". If they did, my last quote would have been utter nonsense. This is all what I have been saying. When people talk about privacy in this context, they mean something different than what comes to your mind. This does not make them wrong in using that word.
It's not my definition of the word. It is the definition.
People who complain about being filmed when in public because that would breach their privacy do not understand what a public place is, or do not understand what privacy means. This is clear from all this discussion.
As those "people" include basically any European legal practitioner I'm not sure you are in a position to tell all of them that they made such a basic fundamental mistake.
You're referencing old ideas of public and private life that made sense at a time. Those ideas did not form in a time with ubiquitous surveillance. The ideas may have made sense before in their historical context, but that doesn't mean they make sense today.
How about instead you ask yourself why those ideas grew out of that older historical context and whether the same reasoning would apply today? Why not re-read this and think about what germanier means:
> Only people physically there can see me and what I am doing. Modern technology enables them to record that and share it globally and across time. It's important to recognize that this ability is not inherent in it being a public place.
Imagine you are taking a walk in the forest. The forest is a public place (where I live anyway!) – anyone can walk anywhere they want. Eventually, later in the day, you might need to take a leak, so you do what everyone normally does – go behind a tree.
Do you in this situation expect to be photographed and have high-resolution pictures of your genitals posted to Instagram? Don't you think this, if it were a regular occurrence, would interfere with people's age-old custom of enjoying a quiet walk in the public forest?
There are still degrees of this across the world. In certain places, wearing face covering is banned. In others its literally forced on 50% of the population to obscure their head and/or face. Some places don't care at all.
Same goes for tinted glass on vehicles.
Not saying any of these position is ethical or not.
That's a boneheaded excuse: if the comment was about improving privacy it would be highlighting mitigation strategies, not focussing on exploiting potential vulnerabilities.
The Chinese bureaucracy has millennia of experience controlling large groups of people in the same way that the Chatholic Church has millennia of experience preaching. They've already thought of it, never you worry.
The really interesting question for me is, when they inevitably succeed, how much damage they will do to themselves. Reform for the better is basically indistinguishable from chaos and collapse to the regime in power.
> The Chinese bureaucracy has millennia of experience controlling large groups of people in the same way that the Chatholic Church has millennia of experience preaching.
This at least a complete misunderstanding of the history of the Catholic church, which is both terrible at "preaching" and has never given it prime importance either theologically or practically, but also of Chinese civilizational history. Confucianism, the dominant philosophical and religious theory behind the organization of a huge period of the ancient Chinese state, recognized the right to revolution!
It also seems irrelevant to the discussion about why it's wrong to leap straight into iterating potential ways to deanonymize protesters instead of suggesting mitigation strategies.
> The Chinese bureaucracy has millennia of experience controlling large groups of people in the same way that the Chatholic Church has millennia of experience preaching.
Yet they couldn’t control a band of wandering, illiterate horsemen. The human spirit can never be controlled.
In practice the point of most security research is: get the paper published and give the talk, or sell the zero-days, or use them yourself, and then move on to the next thing.
The actual non-sexy defensive work of cleaning up bugs and implementing countermeasures, i.e. the real work on improving security instead of making it worse, is mostly done by rank-and-file software and hardware developers whose names are never known.
I can't find the proper link right now but there was a case of a "journalist" with no press pass going around the HK airport when it was occupied by the protesters. He took people's photos without permission, tried to quickly get info out of others, etc. It's referenced in passing here, it seems: https://www.theguardian.com/world/2019/aug/14/hong-kong-flig...
I'd wager it's the same in their group chats. Someone's talking too much and seems too eager to find out details or incite violence? That's very suspicious. I don't think the mainland forces are trained for infiltration of this kind so they're messing up a fair bit.
There's over 7 million people in HK, at the largest protest, they estimated around 2 million took part, so not even half. During most protests, that number is significantly lower.
Two million out of seven is nearly half. You have to account for the kids, sick, infirm, etc. It's a mind-boggling proportion of the population to have in a single march.
Don't get me wrong, it was absolutely massive. But 28% isn't half, or even nearly half the population. of course a lot of people didn't go out, but still supported the protestors.
2 million turned up. Now how many support the protests and were unable to/didn't want to turn up to protests? Many people are very old, work on Sundays, wouldn't be allowed by their parents (people typically live with their parents into their thirties here). You can probably double that figure.
LIHKG's resilience in the current crisis is truly remarkable.
That being said, it's not politically-oriented at all beforehand... it's something like the Reddit or 4chan of HK whereas most people just "shit-post" most of the time.
Is there a way to track metadata exhaust from telegram for building a social graph or xss lihkg? Could be a way to ID them.