Google's Nest Will Provide Data to Police Without a Warrant - Slashdot

2022-07-30 22:43:13 By : Mr. Shaohui Zheng

Please create an account to participate in the Slashdot moderation system

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

Yeah, your data is safe with Amazon [slashdot.org]...

Those represent a lot of things to get broken into if not immediately patched. I just don't use IoT things in the first place, minimizing my footprint. I've never needed to see what's in my refrigerator remotely. I don't need a thermostat that figures out my usage; a "dumb" programmable one works just fine. I refused the app/network connectivity which lets you set when things turn on during solar usage as I don't need it and a timer would work just as well.

Those represent a lot of things to get broken into if not immediately patched. I just don't use IoT things in the first place, minimizing my footprint. I've never needed to see what's in my refrigerator remotely. I don't need a thermostat that figures out my usage; a "dumb" programmable one works just fine. I refused the app/network connectivity which lets you set when things turn on during solar usage as I don't need it and a timer would work just as well.

It is nice being able to access some smart appliances while not home. I can view through my camera and remote unlock my front door. Likewise, I can verify that I locked the door while away. I don't think interior lights need internet access. I would like my fridge or freezer notify me if the door's been open for too long or its temperature goes outside a safe range.

You missed the part where I said encrypted.

You missed the part where I said encrypted.

I didn't. When the warrants start to fly you'll still be f**ked.

While they mention all the right reasons for doing this, I can't say I have much trust that it won't be used against you in evil ways as well. Personally, I store my video on a local NAS, with some encrypted backup to an AWS instance.

While they mention all the right reasons for doing this, I can't say I have much trust that it won't be used against you in evil ways as well. Personally, I store my video on a local NAS, with some encrypted backup to an AWS instance.

So does this apply to all Google products?

Gmail? Photos? Google Drive? Google Voice? Google Meet? Google Duo? Google ???? ....

If it does, then it is PAST time to be reflashing phones and building your own IoT devices that only talk to your own data storage.

Then you can copy stored data to encrypted files in any of the cloud services or those 6 drives that you bury in the backyard with every week and rotate out LIFO style.

Most people read that article and thought "so they can see my doorbell video" but Nest has other items in its lineup including indoor cameras, thermostats, and door locks.

Does this mean Google will also unlock your front door for the police if they determine it is helpful for their investigation?

Police: "We didn't need a warrant to enter because the front door was unlocked when we got there."

Don't forget all the parallel construction that can be done with the indoor cameras and such. "The door was open, stuff was in plain view, so a warrant wasn't needed."

Police: "We didn't need a warrant to enter because the front door was unlocked when we got there."

Police: "We didn't need a warrant to enter because the front door was unlocked when we got there."

That's not how that works.

Google's customer likely gives Google permission to do this when they agree to their terms of service

Google's customer likely gives Google permission to do this when they agree to their terms of service

Yeah, that's also not how that works.

Better solution: don't introduce a problem in the first place. Don't use IoT.

Better solution: don't introduce a problem in the first place. Don't use IoT.

This is akin to saying because of the risk of ransomware, don't use computers. Because paper records never got burned, flooded, lost, or stolen.

Other example: I store my handguns in a safe with WiFi (IoT). If someone tries to pull an "evil maid" attack and steal my guns or guess

While they mention all the right reasons for doing this, I can't say I have much trust that it won't be used against you in evil ways as well.

While they mention all the right reasons for doing this, I can't say I have much trust that it won't be used against you in evil ways as well.

Especially since law enforcement officials are allowed to lie during the course of their investigation. Now, there is nothing preventing them from manufacturing a lie. At least before, a warrant needed a judge to sign off on it.

I know you seem to look for the political angle in everything, but in this case you can simply vote with your wallet. Don't buy Google's smart home shit. Problem solved.

The point of a law would be to prevent everyone's camera, regardless of manufacturer, from allowing law enforcement access without a warrant for people who buy such cameras either ignorant of or indifferent to privacy abuses.

That's all well and good for you, but that doesn't stop your neighbor across the street from installing such a camera and having it pointed right at you all day every day recording everything possibly to be used against you.

That's all well and good for you, but that doesn't stop your neighbor across the street from installing such a camera and having it pointed right at you all day every day recording everything possibly to be used against you.

Move to the EU, where doing the above is very, very illegal.

Or start fixing the broken legislation of the US, so that it becomes illegal.

Neither of which will happen anytime soon. So deal with it, I guess...

no whatever username you are using this time, you need to quit signing your rights away with every shiny new bullshit gadget. You seriously think your vote matters at the federal level? Guess what fuckwit, IT DOESNT, and nothing will change, nor will it ever, want proof, look at every body of congress dating back to the industrial revolution.

Grow up little slave, its time to be an adult and take personal responsibility and not hope one day that silver tongued used car salesman sociopath gives a single passi

Dull is fine. Hell, dull is good. I never realized how much I liked dull when it came to politics until these last six years or so. Biden is dull... probably the dullest, most milquetoast and unremarkable centrist in all of politics. He could very well have made his campaign slogan âoeMPBAâ for Make Politics Boring Again. And yeah, itâ(TM)s very nice to wake up in the morning and be able to turn on the TV without getting that daily dose of existential horror.

But Dull isn't good enough.

TL:DR: They don't care who you vote for.

That's nice an fine for a country where such candidates exist, but what can a US citizen do?

I certainly won't disagree with your main advice (vote against authoritarians, and also candidates who think corporations should have more rights and fewer responsibility than real people) but I don't see how it's relevant here.

Imagine it's 1795. You were around when those fucking redcoated limeys committed their atrocities against men who wanted to be free and without government oppression. You helped write the Bill of Rights, and when it was time to ratify, you proudly voted with a grin, knowing what was

Detectives are often too swamped to deal with rank and file burglaries. Whether it "should" be that way or not, I can't say, but that's the way it usually ends up in most precincts. But they should at least file away such evidence in case they need it later.

Google here is effectively placing itself in the role of a judge to grant warrants for whatever information it holds, based on their own determinations about the "good faith" representations about someone contacting them and their own verification process as to whether or not they are even legitimately law enforcement.

Google here is effectively placing itself in the role of a judge to grant warrants for whatever information it holds, based on their own determinations about the "good faith" representations about someone contacting them and their own verification process as to whether or not they are even legitimately law enforcement.

If you have time to call up Google and go through whatever process they have for at least having you explain yourself to someone and gain access to the necessary information, you've got a tough row to hoe claiming that whatever is going on constit

the very, very big problem here is that Google here is effectively placing itself in the role of a judge to grant warrants for whatever information it holds, based on their own determinations about the "good faith" representations

How did Google get into that position? My take is that Google asked the user if they would like this situation, and the user said yes.

The real problem is that Google thinks they have the right to make this decision, and courts have mostly agreed. Their position is that it's their data, not yours. The moment the data leaves your house and enters their servers, they can do whatever they want with it. Use it for their own benefit. Sell it. Give it to the government. No warrant needed.

Since almost all data passes through a company's computers at some point, constitutional protections have become meaningless. Anyone can grab anything th

People forget that if your data is not on your premises, Law enforcement can force providers to hand over data w/o a warrant via a security letter that prohibits the cloud provider from telling the customer about it.

Been ruled to be totally legal: Cloud != user premises. As soon as you use an offsite, 3rd party provider, it is considered "not private" and not covered by constitutional protections because of cloud employees seeing it as well as ease of data-breaches.

Seriously -- look it up. You lose your n

Presumably because it isn't connected to the internet.

Locked deposit boxes aren't already accessible to bank employees. E-mail boxes are completely accessible to hosting companies. You should have no expectation of privacy in that situation.

Or maybe it's because the laws around bank deposit boxes were written when American lawmakers weren't in hock to various corporate/media lobbyists to the same degree.

Law enforcement can force providers to hand over data w/o a warrant via a security letter that prohibits the cloud provider from telling the customer about it.

Law enforcement can force providers to hand over data w/o a warrant via a security letter that prohibits the cloud provider from telling the customer about it.

You lose your normal constitutional protections as soon as you store your stuff off-of your own premises.

You lose your normal constitutional protections as soon as you store your stuff off-of your own premises.

No. Certain Federal law enforcement agencies can issue national security letters that act in this way, and are theoretically limited to investigations touching on terrorism or intelligence operation. They can be challenged in court, and have been done so successfully on at least one very notable occasion. [zdnet.com] The rest of the law enforcement world needs a warrant for this just like everything else. National Security Letters have been upheld based on the (highly questionable) justification of national secu

The case you cited didn't go to court. The FBI withdrew the request for information when it was challenged by MS. If you think that is representative of all cases, Feel free to beleive that. If you believe your Cloud-defense is as secure as Microsoft's, feel free to believe that. Considering you are prohibited from even informing an attorney, how could you "shop" for an attorney? Unless you already have an attorney on staff, how would you have a chance? Any Cloud provider smaller than MS or Google w

The case you cited didn't go to court. The FBI withdrew the request for information when it was challenged by MS.

The case you cited didn't go to court. The FBI withdrew the request for information when it was challenged by MS.

Yes, that's what happens when one side realizes it's going to lose. They didn't withdraw it for shits and giggles. The government doesn't settle when it knows it's going to win.

If you believe your Cloud-defense is as secure as Microsoft's, feel free to believe that.

If you believe your Cloud-defense is as secure as Microsoft's, feel free to believe that.

It's not "my defense", it's the definition of the thing you are talking about. Absent catching the attention of the FBI in some national security investigation, I don't really have to concern myself with it one way or the other. It wasn't really the thrust of the post.

Considering you are prohibited from even informing an attorney, how could you "shop" for an attorney? Unless you already have an attorney on staff, how would you have a chance? Any Cloud provider smaller than MS or Google would have little chance of prevailing in your defense -- presuming they were so inclined.

Considering you are prohibited from even informing an attorney, how could you "shop" for an attorney? Unless you already have an attorney on staff, how would you have a chance? Any Cloud provider smaller than MS or Google would have little chance of prevailing in your defense -- presuming they were so inclined.

You are not prohibited from consulting an attorney, but I'm

This kind of thing made no sense to non-Americans. The US Constitution limits what the govt can do, so the US govt goes around it by outsourcing to private companies, which then proceed to do what was forbidden for the govt, and the American public accepted it?!?! Giving state power to private companies that is beholden to no one, only to money, is absurd beyond imagination.

When a private company act on the behalf of the govt, or provide a service to the govt, that company should be subjected to the same restrictions as the govt. It is just common sense. Unfortunately, America is ruled by lawyers, for lawyers, and hence common sense no longer apply.

If Google did this in Europe, this would be another astronomical fine time.

If Google did this in Europe, this would be another astronomical fine time.

If Google did this in Europe, this would be another astronomical fine time.

I sure wish I knew why you guys think your countries don't have the equivalent of national security letters. Especially in countries which have recently had or still have a high level of acceptance for fascism, which is at least a handful of 'em.

Nope, if an European security organisation wanted to look at their citizens data they would just outsource it to another country.

If a European security organisation wanted to look at one of their citizen's Google mailboxes they would just ask the Americans to do it. Foreign citizens have pretty much zero protection under the American bill of rights. So the CIA can pass data to their European counterparts without breaking any American laws, and the Europeans don't have to worry about breaking their own priva

When a private company act on the behalf of the govt, or provide a service to the govt, that company should be subjected to the same restrictions as the govt.

When a private company act on the behalf of the govt, or provide a service to the govt, that company should be subjected to the same restrictions as the govt.

They are. Evidence acquired this way gets thrown out for this reason all the time. Google is almost certainly going to put this in their ToS now, however, which means you will be agreeing to it in advance.

The US Constitution limits what the govt can do, so the US govt goes around it by outsourcing to private companies, which then proceed to do what was forbidden for the govt, and the American public accepted it?!?!

No need to ask the public, because the person who decided to upload the data accepted it. They consented for the data to not be treated securely. And if the user had chosen to upload their data directly to law enforcement's computers, the government would also be able to use the data without violat

If you don't want your cloud data shared, then don't create cloud data. I'm not saying what they're doing is right, but people are making it POSSIBLE for them to do it.

There are plenty of non-cloud devices that can achieve the same functions as the Amazon/Google crapware. Sure, it might be a little more cumbersome in some cases, but I have my network locked down as well as I can. I keep my untrusted devices (e.g. IP cameras) on a segregated network that has no access to the outside world. I then pull th

" by extremist political views that were overheard. We're here due to public safety concerns..."

Is why people should never buy this kind of spyware.

There are entirely too many reports of police stalking women they wanna meet or opposing suitors. At least with the warrant requirement please actually had to make an effort to get information now they can make up any reason to get information on anybody without a warrant. Itâ(TM)s not like Googleâ(TM)s going to track The information is used properly services include email and everything else sounds like a lot of parallel reconstruction is going to be going on after digging through somebodyâ(

Well, that's not very specific. My birth certificate is a legal document, as is the title to my car. Can I compel Google to hand over footage if I wave my passport at them? That is literally what that sentence means.

Maybe it should have been phrased, " the appropriate legal document(s)"

What could that possibly be other than a warrant?

People shouldn't be...ahh forget it. Continue putting those telescreens in your homes and hope the MIB go after someone else and not you.

There may be more comments in this discussion. Without JavaScript enabled, you might want to turn on Classic Discussion System in your preferences instead.

Meta's Revenue Shrank For the First Time In Its History

Protestware On the Rise: Why Developers Are Sabotaging Their Own Code

Scientists are people who build the Brooklyn Bridge and then buy it. -- William Buckley