Categories
News

DHS Orders Harvard To Hand Over Surveillance Footage Of All Protests “Involving A Nonimmigrant Student”

We regularly tell elected officials that the best way to protect people’s privacy is to not adopt surveillance technologies in the first place. For example, right now, Cambridge City Council is considering whether to allow Cambridge PD to operate drones over protests. We have highlighted to them that no matter what they say about Cambridge values, once they give that permission, they won’t really be able to control what data gets collected, or where that data goes.

Now, that has been vividly brought home by an extraordinary data request to Harvard from the Department of Homeland Security. DHS has suspended Harvard’s ability to admit or to continue teaching already-admitted international students, and is giving Harvard 72 hours to undo that suspension by supplying:

1. Any and all records, whether official or informal, in the possession of Harvard University, including electronic records and audio or video footage, regarding illegal activity whether on or off campus, by a nonimmigrant student enrolled in Harvard University in the last five years. 2. Any and all records, whether official or informal, in the possession of Harvard University, including electronic records and audio or video footage, regarding dangerous or violent activity whether on or off campus, by a nonimmigrant student enrolled in Harvard University in the last five years. 3. Any and all records, whether official or informal, in the possession of Harvard University, including electronic records and audio or video footage, regarding threats to other students or university personnel whether on or off campus, by a nonimmigrant student enrolled in Harvard University in the last five years. 4. Any and all records, whether official or informal, in the possession of Harvard University, including electronic records and audio or video footage, regarding deprivation of rights of other classmates or university personnel whether on or off campus, by a nonimmigrant student enrolled in Harvard University in the last five years. 5. Any and all disciplinary records of all nonimmigrant students enrolled in Harvard University in the last five years. 6. Any and all audio or video footage, in the possession of Harvard University, of any protest activity involving a nonimmigrant student on a Harvard University campus in the last five years.

Harvard is suing, and we hope they win.

But this is also a red alert to colleges and to municipal governments alike, that they can’t assume that any data they collect and retain, will be safe from a government intent on obtaining it. If Harvard or Harvard PD has retained “audio or video footage” of protests going back “five years”, they shouldn’t have done so, except for specific excerpts that are being retained in relation to still-ongoing disciplinary proceedings. College police departments should in general not conduct surveillance of on-campus protests, because this is exactly where it leads.

As a group, we don’t have expertise in how to solve conflicting land claims in the Middle East. But we do know surveillance and privacy, and we have been meeting and working on that issue in Cambridge since 2012. Everybody, including foreign students at U. S. colleges, has the right to peacefully petition for a redress of grievance. That’s a vital part of the First Amendment. As a consequence of the fact that peaceful protest is Constitutionally protected, the Fourth Amendment protects them from the government unreasonably seizing their person for protesting, or from seizing their location data showing they were at a protest, or seizing an image of them being at a protest and using it to sure they lose their place at a college, or their job at a college, as a result of being at a protest. Harvard also has its own rights, to keep its own records private, provided it is complying with the laws and regulations that govern its operation as a university. The government has not alleged that Harvard has violated any regulation or law relating to the operation of the student visa program, and even if they were to allege or even prove that Harvard did, the government should not have the power to obtain footage of this kind.

We claim proudly to be free. But freedom isn’t a theory. It’s a practice, made up of whether we choose day by day to prioritize freedom over other things. Colleges and municipal governments should review what they choose to collect with this principle in mind.

UPDATE 05/23/25, 12:30pm: Temporary restraining order granted, https://www.bloomberg.com/news/articles/2025-05-23/harvard-gets-temporary-block-of-trump-s-foreign-student-ban

Categories
News

Privacy Advances in Massachusetts Senate

We have been working hard with partners like EPIC and Consumer Reports to advance a strong, broad commercial privacy bill in the Massachusetts legislature.

This is part of a national effort to counter industry pressure to pass weak state privacy laws (the “Connecticut model“) that put the profits of large data brokers and social media companies over the privacy of ordinary Americans.

The bill that has come out of committee, S.2516, is a redrafted version of the Massachusetts Data Privacy Act (“MDPA”). If enacted, MDPA would be the strongest state privacy law in the nation. It would be most similar to a bill passed in Maryland in 2024.

MDPA is especially strong on data minimization. It bans the sale of precise geolocation data, data about minors, and health data, incorporating the provisions of the narrower Location Shield Act (which we also support). Crucially, it includes a private right of action, meaning that enforcement isn’t reserved for the overburdened Massachusetts Attorney-General’s office, but can be undertaken by the people themselves whose privacy has been harmed. It includes a data broker registry, and a one-stop mechanism for Massachusetts residents to delete their data held by data brokers.

We commend Democratic Senators Moore, Creem, Stone, Driscoll, Comerford, Rausch, Eldridge, Cyr and Jehlen, and Republican Rep. Bradley Jones, for cosponsoring this bill and for their help in moving it to this point. Particular praise is also due to Digital Fourth Co-Chair Julie B., for tirelessly helping legislators with comparisons of bill texts, and for mobilizing calls to legislators from Digital Fourth members, from teachers, and from American Legion members concerned about the privacy of servicemembers, veterans and their families.

However, the bill still has a long way to go before becoming law. The House High-Technology Committee will likely pass its own version, which may be weaker than the Senate’s. Meanwhile, the Senate Ways and Means Committee will consider whether to report the bill out to the floor, and good bills often die in Ways and Means. So, we ask readers and members to call 617-722-1481 today, to let the Senate Ways and Means to let them know you support this bill, and that passing it should be a priority.

Categories
Mission News

Cambridge Spies On CPS Students

Illustration by Annie Zhao for VICE magazine

Many kids in the Cambridge Public Schools (and elsewhere in the Commonwealth) still don’t know that if you’re using a school-issued Chromebook, the school is monitoring whatever you browse, down to deleted draft emails, whether you’re at school or not.

This is through a browser add-on called “Securly.” CPS has an agreement with Securly that all school-issued Chromebooks will have this add-on.

What’s more, wittingly or not, CPS is lying to the City Council about whether student data gets shared. Let’s show you how.

In the Annual Surveillance Report submitted to the City, Cambridge Public Schools cites to the language of its Data Privacy Agreement with Securly, insisting, “This data is not shared with third parties” (Annual Surveillance Report, p.67). However, the DPA actually allows the sharing of data with third parties – specifically, but not limited to, the cops. Law enforcement is allowed to contact Securly to get data on students, and Securly is allowed to disclose that information without waiting for a warrant or evidence of involvement in illegal activities, and without telling either CPS or the student:

II. 4. Law Enforcement Requests. Should law enforcement or other government entities (“Requesting Party(ies)”) contact Provider with a request for Student Data held by the Provider pursuant to the Services, the Provider shall notify the LEA in advance of a compelled disclosure to the Requesting Party, unless lawfully directed by the Requesting Party not to inform the LEA of the request.

Since Securly can tell the cops without telling CPS, there’s no way CPS can truthfully guarantee to the City Council that your “data is not shared with third parties.” It might not be. But they can’t know for sure.

Beyond that, Article IV of the DPA goes into great detail about the circumstances under which Securly may share both personally identifiable student information and de-identified student information, for a variety of purposes. Again, it might be that, despite the DPA allowing them to, Securly is not in fact sharing CPS student information onwards; but we suspect that they are doing whatever the DPA currently allows them to do.

CPS also insists that Securly is being used only as a “Web Filter”, to block various kinds of disagreeable content. The material they have provided to the City Council focuses on students accessing gun-related content and suicide-related content.

But Securly’s Web Filter product not only blocks; it also shows to teachers and to admins what URLs are being blocked, offering what Securly describes as “Complete online visibility … monitor[ing] for signs of bullying, self-harm, gun terms, and violence”, with “AI-based context analysis … for signs of bullying, self-harm, gun terms, and violence across social networking and web searches. If a student is suffering or looking at concerning content, you’ll know.”

It is legal for students to search for content that includes violence, graphic imagery, and guns, and it’s hard to envision how they could research, say, Russia’s invasion of Ukraine without encountering such content.

It’s not clear that school monitoring software in general works. VICE reports, “The few published studies looking into the impacts of these tools indicate that they may have the opposite effect, breaking down trust relationships within schools and discouraging adolescents from reaching out for help—particularly those in minority and LGBTQ communities, who are far more likely to seek help online.” It is evident in places where school monitoring software is in use that students and parents are often contacted, inflicting harm, without administrators or teachers first examining the context of the flagged material. At a minimum, the City Council should find out what terms and sites are being flagged in Securly’s system, in order to evaluated whether there is manifest prejudice going into the selection of those terms and sites and whether each instance is being reviewed by the student’s teacher.

What Securly’s system appears to do is to monitor everything, and then rely on school officials’ discretion to determine whether what gets flagged is really cause for worry. Monitoring and disciplining students for accessing such content places the school district on dangerous legal ground. In last September’s ruling in Mahanoy School District v. B. L., the Supreme Court explained that students’ off-campus speech may be regulated only in cases of  “[1] serious or severe bullying or harassment targeting particular individuals; [2] threats aimed at teachers or other students; [3] the failure to follow rules concerning lessons, the writing of papers, the use of computers, or participation in other online school activities; and [4] breaches of school security devices, including material maintained within school computers.” Securly’s systems envision monitoring students’ off-campus speech in a far larger set of circumstances than provided for in Mahanoy.

My master’s thesis was on blocking and filtering technologies, and their potential for discriminating against the provision of LGBT-oriented information. I was also bullied in school, for years. I understand why schools want to track students’ access to gun- and suicide-related imagery. But public schools have to adhere to the Constitution in the surveillance they conduct of students. At most, considering the rights protected by the Fourth and First Amendments, schools are only be justified in starting to track out-of-school browsing behavior of a particular student on a school-issued device if they have probable cause to believe that the student was engaged in or is the target of one of the four kinds of conduct envisioned under Mahanoy. This technology goes far beyond what the law and the Constitution permits. We believe that the City Council should not approve the use of this technology.

This is part of a series on the surveillance technologies the City of Cambridge is reviewing. The City Council has referred consideration of these technologies through to the Public Safety Committee, which will hold a hearing and then report back to the City Council with recommendations. Email us if you’d like to testify at the Public Safety Committee. Now is the time to weigh in on whether you want to see this technology deployed in your community!

Categories
Asset forfeitures Mission News Police body-worn cameras Qualified immunity

MA House Applies Crusher To Senate’s Police Reforms

Yesterday, the Massachusetts House launched their own version of a police “reform” bill (https://malegislature.gov/Bills/191/H4860).

TL;DR:
The House bill is, overall, far weaker than the Senate bill. We have till 1pm tomorrow to persuade House members to submit amendments. We want to see the Senate language on qualified immunityschool resource officerspolice stops, and military equipment approvals, in the House bill. We like the House’s face surveillance language better than the Senate’s. We don’t want, or need, yet more blue-ribbon commissions to consider at length What, If Anything, To Do. It’s quite clear what the problem is:

The police spy on, shoot and hurt people without probable cause, often for racist reasons. People who do that shouldn’t be police, and people it gets done to, should get to sue the people who did it to them.

There’s not much time. You can find your House Rep’s phone number at https://malegislature.gov/Search/FindMyLegislator. Please call this morning!

Here’s a quick summary of the key differences:

COMPARISON OF REFORM BILLSS2800H4860
Police rape of residents outlawed?YesYes
Qualified immunity limited?YesNo
School info sharing with “gang” database limited?YesYes
Government use of face surveillance banned?Temporary, plus RMVPermanent, minus RMV
Local discretion on whether to have police in schools?YesNo
Local elected official approval process for military equipment acquisition by police?YesNo
Chokeholds outlawed if intent or result of unconsciousness or death?YesYes
No-knock warrants limited?YesYes
Data collection on police traffic and pedestrian stops to prevent profiling?YesNo

In other words, the House bill has stronger provisions on face surveillance, but strips key language from the Senate version on qualified immunity, school resource officers, military equipment for police, and data collection on traffic stops. And as a last slap in the face to the Black community in Massachusetts, the House bill takes funds designated for securing racial equity in cannabis dispensary licenses, and redirected them to yet more police training.

At Digital Fourth, we would support a bill stronger than the Senate bill. Our optimal bill here would outlaw chokeholds, tear gas, other chemical irritants, the use of dogs at protests, and police rape; end qualified immunity, end information sharing of schools with the police and ICE, ban school resource officers, end the 1033 military equipment acquisition program, end no-knock warrants, end civil asset forfeitures, reverse the delays introduced by amendment in the Senate to the decertification process, and still collect data on all police stops.

The Senate bill at least represented progress, especially with the House provisions on face surveillance added. Therefore, we support all amendments adding the Senate language back in, excepting those relating to face surveillance. But the House bill – again, excepting the face surveillance provisions – is a betrayal of everyone genuinely concerned for equal justice, and deserves to wither in the fire.This is what happens now. 

You have till 1pm tomorrow to persuade your House member to submit or endorse amendments to the House bill. Then, House leadership will allow debate, likely on Tuesday or Wednesday, and vote on them and the bill. Then, the House and Senate will create a conference committee to try to agree common language. As you can see above, there are a lot of key differences. If the conference agrees on language, the bill goes back to both bodies for a vote, and then, if passed, it goes to the Governor’s desk. If the bill is not signed by the end of the session, which is currently scheduled for July 31, then the bill dies for this session, and would be reintroduced when the new session begins in January.

Good luck, and may the Fourth be with you!

Categories
Mission News

State Surveillance Cannot Save Us From Mass Violence

160614001532-07-orlando-attack-vigil-0613-exlarge-169 (1)

After the appalling deaths of 49 people, and injuries to another 53, at a gay nightclub in Orlando this week, the presidential candidates leapt to push their own agendas. For Trump, it was about immigration; he magically transformed the US-born shooter into an Afghan, in order to emphasize that he was right about banning Muslim immigration. For Clinton, it was about gun control; she called for better background checks and limits on obtaining assault weapons. But when it came to surveillance, they might as well have been singing from the same hymn-sheet.

Clinton called for an “intelligence surge,” for increased internet surveillance and suppression of First Amendment-protected speech, to prevent “radicalization”; for propaganda promoting a US-government-seal-of-approval version of Islam; praised a “Countering Violent Extremism” (CVE) program that marks for intervention Muslims whose politics deviate from what the FBI thinks acceptable; and suggested that people on due-process-free terrorism watchlists should not be allowed to buy guns. Then, she wrapped her actual policy proposals in a cotton-wool language of diversity and inclusion, and claimed that this is not “special surveillance on our fellow Americans because of their religion.” She talked about “Islamism” rather than “Islam”, in order to claim to not be against Islam in itself—but in her world, the government gets to define who is a good and who is a bad Muslim. Perhaps the “bad Muslims” in her mind include citizens like Ayyub Abdul-Alim, imprisoned for refusing to inform on other Muslims for the FBI, who seems only have wanted to help strengthen his community; or Tarek Mehanna, imprisoned for translating al-Qaeda documents and posting them online, who held atrocious opinions but never planned or participated in a violent attack.

Trump, with a little less cotton-wool, actually says much the same about surveillance. Domestically, the “Muslim community” will “have to cooperate with law enforcement and turn in the people who they know are bad”, which is what CVE is intended to achieve, and what Mr. Abdul-Alim is in prison for resisting. Trump proposes an “intelligence gathering system second to none” that “includes better cooperation between state, local and federal officials,” and says that intelligence and law enforcement are “not being allowed to do their job.” And he wraps this up with vehement expressions of solidarity with the LGBT community.

There’s no evidence that mass surveillance, conducted and promoted by the government, works. In every country that is hit with any attack, large or small, there are calls for more surveillance, then more attacks, then more surveillance, then more attacks. It’s a vicious ratchet that we can only step off by becoming aware of it. France implemented its mass surveillance law before the Paris attacks: The law didn’t prevent them. France now lives under a state of near-martial law, where what we would call ordinary First and Fourth Amendment rights have been suspended. Britain is in the process of passing a new surveillance law that will enable the government to view your browsing history without a warrant, and already outlawed “glorifying terrorism.” They have gone farther along this ratchet than we have, but they are not reducing their chance of being attacked; instead, the purpose is to reduce the chance that a given politician will be blamed for “not doing enough” against terrorism. In truth, there is no perfect safety, and there is a small proportion of violent criminals in every country that the State is ultimately powerless to eliminate.

Our own mass surveillance systems led this “lone wolf” to be found and interviewed by the FBI, twice. But neither Clinton nor Trump articulate clearly what they thought the FBI should have done next, perhaps because there’s nothing more the FBI could lawfully have done regarding allegations of terrorist affiliation. If the aim of surveillance is for the FBI to interview suspected “radicals,” what should they do then to prevent an entirely hypothetical attack? Preventively detain them, without charge or trial, as happened to Jose Padilla? Preventively shoot them before they kill anyone else, as happened with Usaama Rahim? Do we want a State that, claiming to keep us safe, claims the right to do that to any of us? We are already part-way down that road; has it helped us so far?

State surveillance cannot save us from mass violence. It’s a poor guarantor of LGBT people’s safety. The sad truth is that there is a tendency to violence in every human being’s heart, irrespective of religion. Guns help violent people carry out their violent fantasies on a larger scale, and while comprehensive background checks wouldn’t have helped with this attack, the evidence suggests that they would probably help to prevent others. Mass surveillance doesn’t even enjoy that evidentiary advantage; last time the surveillance agencies were actually confronted on their assertion that mass surveillance had helped to prevent terrorist attacks, during the debate over the renewal of Section 215 of the PATRIOT Act, the agencies’ claims shriveled under scrutiny like an ice-cream in the sun.

More than that, the State perpetrates mass violence on a scale much vaster than a single violent, conflicted misogynist. On a daily basis, the lives the State takes in the name of the War on Terror far exceed the number of lives taken by terrorists. We’re busy implementing a cure that causes more pain than the disease, because the State does not value enough or see enough glory in a more peaceful path. Why, then, should we trust the State with more power over the lives of Muslims and other “extremists,” here or abroad?

Instead of the State, we should look to each other. We should consider how we can build bonds of friendship and support that will encourage kindness, courtesy, and an appreciation of our mutual humanity. As we volunteer together, worship together, take care of loved ones together, work on good causes and reach out across lines of race and religion to those in distress, we step by step build the thriving “beloved community” of which Martin Luther King spoke long ago, so that even when attacks happen, they cannot break our bonds to one another. And so long as we work to trust one another, we can guard safely our thoughts, our opinions, and our liberties, even against a State that urges us constantly, for the sake of “safety,” to abandon them.

Categories
Mission News

Belgian Police Overwhelmed By…Mass Surveillance?

Lest_darkness_fall_holt

Buzzfeed’s Mitch Prothero reported on the day of the Brussels attacks that “Belgian Authorities [Are] Overwhelmed By Terror Investigations“. He quotes a “Belgian counterterrorism official”, talking prior to the attacks, as having told him that:

[D]ue to the small size of the Belgian government and the huge numbers of open investigations — into Belgian citizens suspected of either joining ISIS, being part of radical groups in Belgium, and the ongoing investigations into last November’s attacks in Paris, which appeared to be at least partially planned in Brussels and saw the participation of several Belgian citizens and residents — virtually every police detective and military intelligence officer in the country was focused on international jihadi investigations. “We just don’t have the people to watch anything else and, frankly, we don’t have the infrastructure to properly investigate or monitor hundreds of individuals suspected of terror links, as well as pursue the hundreds of open files and investigations we have,” the official, who spoke on condition of anonymity because he was not authorized to speak to the media, said. “It’s literally an impossible situation and, honestly, it’s very grave.”

This icorroborates a major part of this blog – and our group’s – analysis of the surveillance state: That it generates so many false leads that it drowns law enforcement in data they can’t reasonably analyze or follow up on.

As a comparison, consider this comment from Michael Downing, deputy LAPD police chief and head of their counterterrorism unit, in 2012:


“[suspicious activity reporting has] flooded fusion centers, law enforcement, and other security entities with white noise; [the profusion of SAR reports] complicates the intelligence process and distorts resource allocation and deployment decisions.”

Categories
Mission News

Rein In The Warrior Cops: State House, Tuesday March 8, 10:30am

theyhateusforourfreedom

Last year, across the country, over 1,100 people were shot by police.

In Massachusetts, we pride ourselves as being somehow different and more sophisticated than the rest of the country, but our police still shoot people at sixteen times the rate of people in Germany.

We have a situation so absurd that the police chief of the tiny town of Rehoboth can apply for, and receive, a $700,000 mine-resistant military assault vehicle, and the town doesn’t even bat an eye. They didn’t hold hearings, they didn’t take a vote, they just left it up to the police to decide how much to turn themselves into a military occupying force in that town.

Our police are trained, through initiatives like Urban Shield, to think of themselves as quasi-military, and the people as their enemies.

None of this is good enough.

This morning, Tuesday March 8, there will be a hearing at the State House on our bill to help deal with this, H. 2169. Come make your voice heard; head below the fold for the background.

H. 2169, “An Act assuring municipal control of military equipment procurement by local law enforcement”, sponsored by Rep. Denise Provost
Press Release
Digital Fourth’s Testimony to the Committee

Categories
News

State House Police Reform Showdown 10am 2/4: Be There!

rialto-stat

Tomorrow (Thursday, February 4), at 10am, the Massachusetts legislature’s Joint Committee on Public Safety will be holding a public hearing on all of the bills for the 2015-16 session that deal with police accountability, including Digital Fourth’s bill mandating bodycams and data collection on police stops. Join our gallant volunteers Sam T., Shekia S., Chris L., Jason L. and Robert C., in trying to make a difference; if you can make it, let us know and we can help you with your testimony!

The bills under consideration mostly propose improved training for police officers in de-escalation techniques, “emotional CPR”, and dealing with people with autism and mental illness. These are good things, but police training in departmental procedure alone can’t be the answer. Most police stops and shootings occur with police officers acting within the guidelines set by their departments; the problem is that those guidelines themselves can be very broad, and there’s essentially no accountability even if those guidelines are violated. If we’re going to get to a point where police officers routinely respect the constitutional rights of the people they stop on the street, there’s going to have to be meaningful accountability. Some officers should be deprived of their badges; some should be deprived of their liberty; and until that happens much more than it does now, we’ll keep seeing the parade of horrifying police shootings that cost over 1,100 members of the public their lives last year in the US.

Sign up at the Facebook event page
Read our Press Release
See all of the bills up for consideration

UPDATE: Here’s our testimony for the hearing.

Categories
Mission News

The Deep State Is Spying On Congress? You Don’t Say

shocked-goldfish

The Wall Street Journal, not having the benefit of a near-pathological obsession with all things surveillance-related, has done some goldfish reporting on how shocked, shocked they are that the NSA may have “inadvertently” and “incidentally” gathered up some communications of US elected representatives, during the course of closely scrutinizing the communications of Binyamin Netanyahu.

It’s goldfish reporting because it exhibits no long-term memory of the history of political surveillance; and more particularly, of recent domestic political surveillance stories.

In 2009, liberal Congresswoman Jane Harman was caught in an almost identical scandal, having likewise been a vehement defender of the NSA, and reacted in the same way, denouncing mass surveillance only when it was turned her way.

From 2009 to 2012, the CIA spied on staffers for Senator Dianne Feinstein and other Democratic Intelligence Committee senators, in order to monitor, and to attempt to discredit, their efforts to hold the CIA accountable for horrific and repeated acts of torture; leading Senator Rand Paul to describe the CIA as “drunk with power” and to talk about the “real fear in Senators’ eyes”.

After the Snowden revelations, speculation ran rampant that Supreme Court Justice John Roberts’s last-minute and unexpected change of his key vote on the constitutionality of Obamacare, had been influenced by the NSA’s possession of information on him derived from its mass surveillance systems.

In April 2015, Congressman Jason Chaffetz had personal information from his past leaked by the Secret Service in order to discredit his efforts to investigate the Secret Service for a series of scandals involving drunk driving, hiring sex workers, and failing to protect the White House from trespassers.

The testimony of NSA whistleblower Russell Tice suggests that these are not just isolated cases that happen to have come to light. Instead, they are likely to be the visible portions of an active practice of surveillance of elected officials and jurists with decision-making authority over the budgets and activities of the surveillance state. It’s not an accident that Congress keeps voting in favor of substantive NSA reforms in public, that then mysteriously get stripped in committee. Surveillance power is blackmail power; it’s been used before in the US, is being used now, and will be used in the future, until we stop it.

Saying this is not paranoia; it’s only to be expected. Set up a mass surveillance system, and it will inevitably be turned against its own overseers. That’s a major reason to adhere to the Fourth Amendment and refuse to set one up.

Of course the NSA will spy on their alleged political overseers. Who the hell would stop them? The FISC? Congress itself, which just gleefully expanded surveillance because somebody said “ISIS, ISIS, ISIS, Boo!”? The President?

I think not.

Categories
News Uncategorized

Big Brother Is Not Fit To Hold My Data

wonka
[By Tamarleigh Grenfell]

Let’s say my brother and I are out on the town. He insists on holding my purse for me while I use the restroom, but then leaves my purse sitting in plain sight right on the bar, and some creep steals it. Should I trust my brother with my purse, ever again?

The U.S. Office of Personnel Management (OPM) sent me a letter this month informing me that my personal information was stolen in a “malicious cyber intrusion” earlier this year. My personal data (such as my SSN, name, address, date of birth, place of birth, residency history, employment history, educational history, personal foreign travel history, immediate family members, business acquaintances, personal acquaintances, medical history, criminal history, financial history, and more!) is all now somewhere out there in cyberspace, and like extinction and herpes, the Internet is forever.

This leak alone affected 21.5 million people, including 5.6 million people’s fingerprints,including mine. I provided that information, and my fingerprints, to the federal government long ago when I applied for a job as a research assistant at the Smithsonian Astrophysical Observatory. What started as an actual folder, somewhere along the line, got connected to Skynet – sorry, the Internet, and my fingerprints, which I can never change, were digitized and uploaded along with everything else.

What if I had found my brother two years ago photocopying my diary and circulating it to his friends for laughs, and that when confronted he just muttered something about it being to “keep me safe” because “there are dangerous people out there”? What if he then went out on the street with a bullhorn, telling everyone who will listen that we need to give him special keys to unlock all their stuff, because if we don’t, the Terrorists Will Win? What if he decided all on his own to break every lock in town, so he could access any document at any time? How much should I trust him then?