Cambridge Spies On CPS Students

Illustration by Annie Zhao for VICE magazine

Many kids in the Cambridge Public Schools (and elsewhere in the Commonwealth) still don’t know that if you’re using a school-issued Chromebook, the school is monitoring whatever you browse, down to deleted draft emails, whether you’re at school or not.

This is through a browser add-on called “Securly.” CPS has an agreement with Securly that all school-issued Chromebooks will have this add-on.

What’s more, wittingly or not, CPS is lying to the City Council about whether student data gets shared. Let’s show you how.

In the Annual Surveillance Report submitted to the City, Cambridge Public Schools cites to the language of its Data Privacy Agreement with Securly, insisting, “This data is not shared with third parties” (Annual Surveillance Report, p.67). However, the DPA actually allows the sharing of data with third parties – specifically, but not limited to, the cops. Law enforcement is allowed to contact Securly to get data on students, and Securly is allowed to disclose that information without waiting for a warrant or evidence of involvement in illegal activities, and without telling either CPS or the student:

II. 4. Law Enforcement Requests. Should law enforcement or other government entities (“Requesting Party(ies)”) contact Provider with a request for Student Data held by the Provider pursuant to the Services, the Provider shall notify the LEA in advance of a compelled disclosure to the Requesting Party, unless lawfully directed by the Requesting Party not to inform the LEA of the request.

Since Securly can tell the cops without telling CPS, there’s no way CPS can truthfully guarantee to the City Council that your “data is not shared with third parties.” It might not be. But they can’t know for sure.

Beyond that, Article IV of the DPA goes into great detail about the circumstances under which Securly may share both personally identifiable student information and de-identified student information, for a variety of purposes. Again, it might be that, despite the DPA allowing them to, Securly is not in fact sharing CPS student information onwards; but we suspect that they are doing whatever the DPA currently allows them to do.

CPS also insists that Securly is being used only as a “Web Filter”, to block various kinds of disagreeable content. The material they have provided to the City Council focuses on students accessing gun-related content and suicide-related content.

But Securly’s Web Filter product not only blocks; it also shows to teachers and to admins what URLs are being blocked, offering what Securly describes as “Complete online visibility … monitor[ing] for signs of bullying, self-harm, gun terms, and violence”, with “AI-based context analysis … for signs of bullying, self-harm, gun terms, and violence across social networking and web searches. If a student is suffering or looking at concerning content, you’ll know.”

It is legal for students to search for content that includes violence, graphic imagery, and guns, and it’s hard to envision how they could research, say, Russia’s invasion of Ukraine without encountering such content.

It’s not clear that school monitoring software in general works. VICE reports, “The few published studies looking into the impacts of these tools indicate that they may have the opposite effect, breaking down trust relationships within schools and discouraging adolescents from reaching out for help—particularly those in minority and LGBTQ communities, who are far more likely to seek help online.” It is evident in places where school monitoring software is in use that students and parents are often contacted, inflicting harm, without administrators or teachers first examining the context of the flagged material. At a minimum, the City Council should find out what terms and sites are being flagged in Securly’s system, in order to evaluated whether there is manifest prejudice going into the selection of those terms and sites and whether each instance is being reviewed by the student’s teacher.

What Securly’s system appears to do is to monitor everything, and then rely on school officials’ discretion to determine whether what gets flagged is really cause for worry. Monitoring and disciplining students for accessing such content places the school district on dangerous legal ground. In last September’s ruling in Mahanoy School District v. B. L., the Supreme Court explained that students’ off-campus speech may be regulated only in cases of  “[1] serious or severe bullying or harassment targeting particular individuals; [2] threats aimed at teachers or other students; [3] the failure to follow rules concerning lessons, the writing of papers, the use of computers, or participation in other online school activities; and [4] breaches of school security devices, including material maintained within school computers.” Securly’s systems envision monitoring students’ off-campus speech in a far larger set of circumstances than provided for in Mahanoy.

My master’s thesis was on blocking and filtering technologies, and their potential for discriminating against the provision of LGBT-oriented information. I was also bullied in school, for years. I understand why schools want to track students’ access to gun- and suicide-related imagery. But public schools have to adhere to the Constitution in the surveillance they conduct of students. At most, considering the rights protected by the Fourth and First Amendments, schools are only be justified in starting to track out-of-school browsing behavior of a particular student on a school-issued device if they have probable cause to believe that the student was engaged in or is the target of one of the four kinds of conduct envisioned under Mahanoy. This technology goes far beyond what the law and the Constitution permits. We believe that the City Council should not approve the use of this technology.

This is part of a series on the surveillance technologies the City of Cambridge is reviewing. The City Council has referred consideration of these technologies through to the Public Safety Committee, which will hold a hearing and then report back to the City Council with recommendations. Email us if you’d like to testify at the Public Safety Committee. Now is the time to weigh in on whether you want to see this technology deployed in your community!

MA House Applies Crusher To Senate’s Police Reforms

Yesterday, the Massachusetts House launched their own version of a police “reform” bill (https://malegislature.gov/Bills/191/H4860).

TL;DR:
The House bill is, overall, far weaker than the Senate bill. We have till 1pm tomorrow to persuade House members to submit amendments. We want to see the Senate language on qualified immunityschool resource officerspolice stops, and military equipment approvals, in the House bill. We like the House’s face surveillance language better than the Senate’s. We don’t want, or need, yet more blue-ribbon commissions to consider at length What, If Anything, To Do. It’s quite clear what the problem is:

The police spy on, shoot and hurt people without probable cause, often for racist reasons. People who do that shouldn’t be police, and people it gets done to, should get to sue the people who did it to them.

There’s not much time. You can find your House Rep’s phone number at https://malegislature.gov/Search/FindMyLegislator. Please call this morning!

Here’s a quick summary of the key differences:

COMPARISON OF REFORM BILLSS2800H4860
Police rape of residents outlawed?YesYes
Qualified immunity limited?YesNo
School info sharing with “gang” database limited?YesYes
Government use of face surveillance banned?Temporary, plus RMVPermanent, minus RMV
Local discretion on whether to have police in schools?YesNo
Local elected official approval process for military equipment acquisition by police?YesNo
Chokeholds outlawed if intent or result of unconsciousness or death?YesYes
No-knock warrants limited?YesYes
Data collection on police traffic and pedestrian stops to prevent profiling?YesNo

In other words, the House bill has stronger provisions on face surveillance, but strips key language from the Senate version on qualified immunity, school resource officers, military equipment for police, and data collection on traffic stops. And as a last slap in the face to the Black community in Massachusetts, the House bill takes funds designated for securing racial equity in cannabis dispensary licenses, and redirected them to yet more police training.

At Digital Fourth, we would support a bill stronger than the Senate bill. Our optimal bill here would outlaw chokeholds, tear gas, other chemical irritants, the use of dogs at protests, and police rape; end qualified immunity, end information sharing of schools with the police and ICE, ban school resource officers, end the 1033 military equipment acquisition program, end no-knock warrants, end civil asset forfeitures, reverse the delays introduced by amendment in the Senate to the decertification process, and still collect data on all police stops.

The Senate bill at least represented progress, especially with the House provisions on face surveillance added. Therefore, we support all amendments adding the Senate language back in, excepting those relating to face surveillance. But the House bill – again, excepting the face surveillance provisions – is a betrayal of everyone genuinely concerned for equal justice, and deserves to wither in the fire.This is what happens now. 

You have till 1pm tomorrow to persuade your House member to submit or endorse amendments to the House bill. Then, House leadership will allow debate, likely on Tuesday or Wednesday, and vote on them and the bill. Then, the House and Senate will create a conference committee to try to agree common language. As you can see above, there are a lot of key differences. If the conference agrees on language, the bill goes back to both bodies for a vote, and then, if passed, it goes to the Governor’s desk. If the bill is not signed by the end of the session, which is currently scheduled for July 31, then the bill dies for this session, and would be reintroduced when the new session begins in January.

Good luck, and may the Fourth be with you!

Police Flooding Phone Lines To Block Basic Police Reforms: Call Now!

On Bastille Day, at 4:20am, the Massachusetts Senate passed a 70-page police reform bill. Two weeks remain for the House to consider it, and for the governor to sign it, in the midst of an acute public health and economic crisis. Police organizations are burning up the phone lines to prevent the House from acting on it. Please call your House Rep today, to prevent the House from mincing its key provisions into oblivion.

In our view, the key provisions are:

  • Police rape of people in their custody will be outlawed.
  • Police will no longer be able to use qualified immunity as a defense in civil lawsuits, unless “no reasonable person” could have considered the behavior at issue to be unlawful. This will sharply increase the chance that a resident whose rights the police violate, can obtain damages.*
  • Police will no longer be able to use face surveillance. This moratorium extends through December 31, 2021.
  • Police will no longer be legally obliged to provide school resource officers. It will be up to the school superintendent whether they want to ask for an officer.
  • School information sharing with police “gang” units not connected to an immediate threat to life, will be barred.
  • Chokeholds that have the “intent or result” of causing “unconsciousness or death” are banned.
  • No-knock warrants will now only be issued if a judge attests that there is probable cause of an imminent danger to life.
  • Elected officials will be able to review and approve or disapprove of police military equipment acquisitions, after public hearings.

S2800 also has some important flaws and limitations:

  • It does nothing to reform the fusion centers, which spy on Massachusetts residents uninvolved in actual crimes.
  • It does nothing directly to assist people and communities wrecked by the banal daily evils of the carceral state, and was not constructed on the basis of deep, lengthy or substantive conversations with them.
  • It leaves in place our unjust civil asset forfeitures system, which steals millions annually in cash, cars and other property.
  • It’s weighed down with an array of futile language appointing commissions and funding retraining of police.
  • The language relating to face surveillance, tear gas, chokeholds and police decertification processes is weaker than we would like. We’re advocating separately relating to the face surveillance provisions.

However, based on long experience, we also believe that if any of the bill’s good provisions had come up before the Public Safety Committee during the regular committee process, they would have failed; and that there’s simply not enough time left in the two-year legislative session, which ends July 31, to start over with a broader and more consultative process.

We’re not waiting another two years. Taken together, this bill represents substantial progress towards our goal of restoring the Fourth Amendment in Massachusetts. Please call today!

*If found liable, the individual officer would still be indemnified against personal loss, except for portions of a judgment exceeding $1 million, for actions committed outside the scope of their official duties, and for actions that are “wilful, wanton or malicious” (MGL ch. 258 s. 9A). In practice, this means that public budgets will still bear 99.98% of the cost burden for police misconduct.

State Surveillance Cannot Save Us From Mass Violence

160614001532-07-orlando-attack-vigil-0613-exlarge-169 (1)

After the appalling deaths of 49 people, and injuries to another 53, at a gay nightclub in Orlando this week, the presidential candidates leapt to push their own agendas. For Trump, it was about immigration; he magically transformed the US-born shooter into an Afghan, in order to emphasize that he was right about banning Muslim immigration. For Clinton, it was about gun control; she called for better background checks and limits on obtaining assault weapons. But when it came to surveillance, they might as well have been singing from the same hymn-sheet.

Clinton called for an “intelligence surge,” for increased internet surveillance and suppression of First Amendment-protected speech, to prevent “radicalization”; for propaganda promoting a US-government-seal-of-approval version of Islam; praised a “Countering Violent Extremism” (CVE) program that marks for intervention Muslims whose politics deviate from what the FBI thinks acceptable; and suggested that people on due-process-free terrorism watchlists should not be allowed to buy guns. Then, she wrapped her actual policy proposals in a cotton-wool language of diversity and inclusion, and claimed that this is not “special surveillance on our fellow Americans because of their religion.” She talked about “Islamism” rather than “Islam”, in order to claim to not be against Islam in itself—but in her world, the government gets to define who is a good and who is a bad Muslim. Perhaps the “bad Muslims” in her mind include citizens like Ayyub Abdul-Alim, imprisoned for refusing to inform on other Muslims for the FBI, who seems only have wanted to help strengthen his community; or Tarek Mehanna, imprisoned for translating al-Qaeda documents and posting them online, who held atrocious opinions but never planned or participated in a violent attack.

Trump, with a little less cotton-wool, actually says much the same about surveillance. Domestically, the “Muslim community” will “have to cooperate with law enforcement and turn in the people who they know are bad”, which is what CVE is intended to achieve, and what Mr. Abdul-Alim is in prison for resisting. Trump proposes an “intelligence gathering system second to none” that “includes better cooperation between state, local and federal officials,” and says that intelligence and law enforcement are “not being allowed to do their job.” And he wraps this up with vehement expressions of solidarity with the LGBT community.

There’s no evidence that mass surveillance, conducted and promoted by the government, works. In every country that is hit with any attack, large or small, there are calls for more surveillance, then more attacks, then more surveillance, then more attacks. It’s a vicious ratchet that we can only step off by becoming aware of it. France implemented its mass surveillance law before the Paris attacks: The law didn’t prevent them. France now lives under a state of near-martial law, where what we would call ordinary First and Fourth Amendment rights have been suspended. Britain is in the process of passing a new surveillance law that will enable the government to view your browsing history without a warrant, and already outlawed “glorifying terrorism.” They have gone farther along this ratchet than we have, but they are not reducing their chance of being attacked; instead, the purpose is to reduce the chance that a given politician will be blamed for “not doing enough” against terrorism. In truth, there is no perfect safety, and there is a small proportion of violent criminals in every country that the State is ultimately powerless to eliminate.

Our own mass surveillance systems led this “lone wolf” to be found and interviewed by the FBI, twice. But neither Clinton nor Trump articulate clearly what they thought the FBI should have done next, perhaps because there’s nothing more the FBI could lawfully have done regarding allegations of terrorist affiliation. If the aim of surveillance is for the FBI to interview suspected “radicals,” what should they do then to prevent an entirely hypothetical attack? Preventively detain them, without charge or trial, as happened to Jose Padilla? Preventively shoot them before they kill anyone else, as happened with Usaama Rahim? Do we want a State that, claiming to keep us safe, claims the right to do that to any of us? We are already part-way down that road; has it helped us so far?

State surveillance cannot save us from mass violence. It’s a poor guarantor of LGBT people’s safety. The sad truth is that there is a tendency to violence in every human being’s heart, irrespective of religion. Guns help violent people carry out their violent fantasies on a larger scale, and while comprehensive background checks wouldn’t have helped with this attack, the evidence suggests that they would probably help to prevent others. Mass surveillance doesn’t even enjoy that evidentiary advantage; last time the surveillance agencies were actually confronted on their assertion that mass surveillance had helped to prevent terrorist attacks, during the debate over the renewal of Section 215 of the PATRIOT Act, the agencies’ claims shriveled under scrutiny like an ice-cream in the sun.

More than that, the State perpetrates mass violence on a scale much vaster than a single violent, conflicted misogynist. On a daily basis, the lives the State takes in the name of the War on Terror far exceed the number of lives taken by terrorists. We’re busy implementing a cure that causes more pain than the disease, because the State does not value enough or see enough glory in a more peaceful path. Why, then, should we trust the State with more power over the lives of Muslims and other “extremists,” here or abroad?

Instead of the State, we should look to each other. We should consider how we can build bonds of friendship and support that will encourage kindness, courtesy, and an appreciation of our mutual humanity. As we volunteer together, worship together, take care of loved ones together, work on good causes and reach out across lines of race and religion to those in distress, we step by step build the thriving “beloved community” of which Martin Luther King spoke long ago, so that even when attacks happen, they cannot break our bonds to one another. And so long as we work to trust one another, we can guard safely our thoughts, our opinions, and our liberties, even against a State that urges us constantly, for the sake of “safety,” to abandon them.

Belgian Police Overwhelmed By…Mass Surveillance?

Lest_darkness_fall_holt

Buzzfeed’s Mitch Prothero reported on the day of the Brussels attacks that “Belgian Authorities [Are] Overwhelmed By Terror Investigations“. He quotes a “Belgian counterterrorism official”, talking prior to the attacks, as having told him that:

[D]ue to the small size of the Belgian government and the huge numbers of open investigations — into Belgian citizens suspected of either joining ISIS, being part of radical groups in Belgium, and the ongoing investigations into last November’s attacks in Paris, which appeared to be at least partially planned in Brussels and saw the participation of several Belgian citizens and residents — virtually every police detective and military intelligence officer in the country was focused on international jihadi investigations. “We just don’t have the people to watch anything else and, frankly, we don’t have the infrastructure to properly investigate or monitor hundreds of individuals suspected of terror links, as well as pursue the hundreds of open files and investigations we have,” the official, who spoke on condition of anonymity because he was not authorized to speak to the media, said. “It’s literally an impossible situation and, honestly, it’s very grave.”

This icorroborates a major part of this blog – and our group’s – analysis of the surveillance state: That it generates so many false leads that it drowns law enforcement in data they can’t reasonably analyze or follow up on.

As a comparison, consider this comment from Michael Downing, deputy LAPD police chief and head of their counterterrorism unit, in 2012:


“[suspicious activity reporting has] flooded fusion centers, law enforcement, and other security entities with white noise; [the profusion of SAR reports] complicates the intelligence process and distorts resource allocation and deployment decisions.”

Continue reading Belgian Police Overwhelmed By…Mass Surveillance?

Rein In The Warrior Cops: State House, Tuesday March 8, 10:30am

theyhateusforourfreedom

Last year, across the country, over 1,100 people were shot by police.

In Massachusetts, we pride ourselves as being somehow different and more sophisticated than the rest of the country, but our police still shoot people at sixteen times the rate of people in Germany.

We have a situation so absurd that the police chief of the tiny town of Rehoboth can apply for, and receive, a $700,000 mine-resistant military assault vehicle, and the town doesn’t even bat an eye. They didn’t hold hearings, they didn’t take a vote, they just left it up to the police to decide how much to turn themselves into a military occupying force in that town.

Our police are trained, through initiatives like Urban Shield, to think of themselves as quasi-military, and the people as their enemies.

None of this is good enough.

This morning, Tuesday March 8, there will be a hearing at the State House on our bill to help deal with this, H. 2169. Come make your voice heard; head below the fold for the background.

H. 2169, “An Act assuring municipal control of military equipment procurement by local law enforcement”, sponsored by Rep. Denise Provost
Press Release
Digital Fourth’s Testimony to the Committee

Continue reading Rein In The Warrior Cops: State House, Tuesday March 8, 10:30am

The Deep State Is Spying On Congress? You Don’t Say

shocked-goldfish

The Wall Street Journal, not having the benefit of a near-pathological obsession with all things surveillance-related, has done some goldfish reporting on how shocked, shocked they are that the NSA may have “inadvertently” and “incidentally” gathered up some communications of US elected representatives, during the course of closely scrutinizing the communications of Binyamin Netanyahu.

It’s goldfish reporting because it exhibits no long-term memory of the history of political surveillance; and more particularly, of recent domestic political surveillance stories.

In 2009, liberal Congresswoman Jane Harman was caught in an almost identical scandal, having likewise been a vehement defender of the NSA, and reacted in the same way, denouncing mass surveillance only when it was turned her way.

From 2009 to 2012, the CIA spied on staffers for Senator Dianne Feinstein and other Democratic Intelligence Committee senators, in order to monitor, and to attempt to discredit, their efforts to hold the CIA accountable for horrific and repeated acts of torture; leading Senator Rand Paul to describe the CIA as “drunk with power” and to talk about the “real fear in Senators’ eyes”.

After the Snowden revelations, speculation ran rampant that Supreme Court Justice John Roberts’s last-minute and unexpected change of his key vote on the constitutionality of Obamacare, had been influenced by the NSA’s possession of information on him derived from its mass surveillance systems.

In April 2015, Congressman Jason Chaffetz had personal information from his past leaked by the Secret Service in order to discredit his efforts to investigate the Secret Service for a series of scandals involving drunk driving, hiring sex workers, and failing to protect the White House from trespassers.

The testimony of NSA whistleblower Russell Tice suggests that these are not just isolated cases that happen to have come to light. Instead, they are likely to be the visible portions of an active practice of surveillance of elected officials and jurists with decision-making authority over the budgets and activities of the surveillance state. It’s not an accident that Congress keeps voting in favor of substantive NSA reforms in public, that then mysteriously get stripped in committee. Surveillance power is blackmail power; it’s been used before in the US, is being used now, and will be used in the future, until we stop it.

Saying this is not paranoia; it’s only to be expected. Set up a mass surveillance system, and it will inevitably be turned against its own overseers. That’s a major reason to adhere to the Fourth Amendment and refuse to set one up.

Of course the NSA will spy on their alleged political overseers. Who the hell would stop them? The FISC? Congress itself, which just gleefully expanded surveillance because somebody said “ISIS, ISIS, ISIS, Boo!”? The President?

I think not.

Continue reading The Deep State Is Spying On Congress? You Don’t Say

Zen and the Art of Cybersecurity

data-retention-zen

In the hothouse of Congress, members have been sweating over the need to do something – anything – about “cybersecurity.” They were under pressure from the administration, the intelligence services, and the tech industry. But the latest news is that the Republican majority will be turning, in the few days left before the recess, from the contentious highways bill to a bill to defund Planned Parenthood, likely shifting the previously-catastrophically-urgent cybersecurity crisis through to the fall. So Congress, like my seven-year-olds in school assembly, can take a few deep breaths and imagine that they can smell a flower.

The truth is, there never was a “cybersecurity crisis.” Companies are already legally allowed to share information on hacking attempts with the government, and they usually do. This debate is not really about making US companies or the US government more secure; it’s about putting more of your information, that you have voluntarily shared with US companies, into the government’s hands, without companies being liable for violating their privacy policies for sharing personally identifiable information. All proposals on the table in Congress would immunize companies from suit in this way. In this sense, it would be perfectly all right for Congress to do nothing.

Nevertheless, there is a cybersecurity problem that is worth trying to solve. The government is not a good custodian of our data. Its networks are often poorly secured and vulnerable to outside intrusion. In the surveillance arena, there are now over five million people with security clearances, who are in a position to leak sensitive information. Cultivating a more disciplined approach to network protection and data retention would seem to be a good idea. That’s where the principle above comes in.

In this spirit, let’s calmly reflect on what a bill dealing with this real problem would look like.

Continue reading Zen and the Art of Cybersecurity

Sharing Is Not Caring: Amtrak, DHS and Travelers’ Rights

Sample form for internal passport for prisoners of war, Geneva Conventions, 1956
Sample form for internal passport for prisoners of war, Geneva Conventions, 1956

Traveling in today’s America is becoming more and more constrained. Every year, there are more checks, more searches, and more guards. If you go by car, ALPR systems will track you. If you go by plane, you and your belongings can be legally searched, groped, mocked, impounded or vandalized. If you stay in a motel, your information may be shared up front with law enforcement. And now, even the trains are getting on the act.

The aptly-named PapersPlease.org filed a Freedom of Information Act request last October asking how Amtrak handled sharing of information with the Department of Homeland Security. While Amtrak is regularly subsidized, it is legally a private company, and as such should not share information on passengers unless the police provide them with a valid, individualized probable-cause warrant. You know, that old Fourth Amendment thing?

Ahem.

Continue reading Sharing Is Not Caring: Amtrak, DHS and Travelers’ Rights