chaps

4,935 karmajoined hace 7 años

Submissions

Linux in Postgres in Linux in Postgres in Linux in Postgres

1 pointsby chapshace 3 meses0 comments

Flock Exposed Its AI-Powered Cameras to the Internet. We Tracked Ourselves

827 pointsby chapshace 7 meses471 comments

ICE, Secret Service, Navy All Had Access to Flock's Nationwide Camera Network

34 pointsby chapshace 9 meses4 comments

SFPD let Georgia, Texas cops illegally search surveillance data on behalf of ICE

13 pointsby chapshace 10 meses1 comments

comments

hace 14 horasdiscuss

You'd think so. Legacy servers that've been running for ten years really puts a hitch in that.

hace 15 horasdiscuss

Systems definitely care, especially in finance and trading systems.

Was involved in rolling out a large NTP annealing patch about ten years ago. We missed a couple and the effect was largely overall muted, but we did have one server with an old JVM hard crashing the server right at the second shift.

That specific server was already hobbling along so it wasn't a surprise. But it required a bit of firefighting.

hace 12 díasdiscuss

Please actually just look at any audit log and just search yourself. If you think there's no signal, then you clearly haven't looked. If you're going to continue to be lazy in your analysis, then ask a damn LLM. There are 528 agencies who used "suspicious". This is not a bloomingdale problem; it's much larger. Just fucking look, man.

  select count(*),org_name from flock_bloomingdale where reason = 'suspicious' group by org_name order by count desc;


   count |                     org_name
  -------+--------------------------------------------------
  2678 | Skokie IL PD
   828 | Joliet IL PD
   678 | Houston TX PD
   391 | Fayette County IL SO
   309 | Chicago IL PD
   256 | Katy TX PD
   245 | Itasca IL PD
   244 | Steger IL PD
   229 | Athens-Clarke County GA PD
   215 | Lucas County OH SO
   209 | Oak Lawn IL PD
   208 | Westmont IL PD
   199 | La Salle County IL PD - OLD
   194 | Zion IL PD
   191 | La Grange Park IL PD
   174 | Kenosha County WI SO
   173 | Champaign County IL SO
   170 | Roselle IL PD
   160 | Lake Villa IL PD
   152 | Bradley IL PD
   152 | Madison County IN SO
   143 | LaSalle Co. IL SO - New
   135 | Flossmoor IL PD
   132 | Sauk Village IL PD
   116 | Oak Brook IL PD
   106 | Crete IL PD
   104 | Villa Park IL PD
   101 | Darien IL PD
    97 | Cicero IL PD
    94 | Wilmington IL PD
    89 | Rockford IL PD
    80 | Lake County IL SO
    80 | Dolton IL PD
    79 | Texas Department of Public Safety
    76 | Will County IL SO
    75 | Naperville IL PD
    72 | Minooka IL PD
    68 | Hillside IL PD
    63 | Carpentersville IL PD
    55 | Kent County MI SO
    55 | Zanesville OH PD
    54 | Winnebago County IL SO
    51 | Logan County NE SO
    46 | Romeoville IL PD
    46 | Menomonee Falls WI PD
    46 | Homewood IL PD
    44 | Burnham IL PD
    44 | Baldwin County GA SO
    43 | Venice FL PD
    39 | Elmwood Park IL PD
    37 | DuPage County IL SO
    36 | Greensboro NC PD
    34 | Lowndes County GA SO
    34 | Henry County GA PD
    34 | Tinley Park IL PD

hace 13 díasdiscuss

  They're matching specific descriptions of cars to incidents, like, "this vehicle has been present at the site of 5 previous package thefts".

You're hand-waving a hell of a lot of things away and you expect that everyone knows what you're talking about. Please stop doing that.

- Who is "They"?

- Why do you say "nobody has time for that"? What is "that"?

- Why are you dismissing genuine concerns through unhelpful language like, "coming to it with movie plot concerns".

- Why wouldn't "that" be a big deal? What is "that"?!

- What are the deeply problematic things?

- "They're matching specific descriptions of cars to incidents" -- no they're not. Just looking at Bloomingdale's audit logs, there are 13k examples of searches done for the simple reason, "suspicious".

- Why does municipalities being the primary operators matter?

Asking from a place of genuine confusion by how you think about these things.

hace 18 díasdiscuss

With a search warrant, I can submit FOIA requests or go to the courthouse.

With flock searches, I (usually) can't because Illinois law exempts ALPR records. Here's the most egregious example I've seen: https://www.muckrock.com/foi/waukegan-11153/flock-safety-alp...

hace 25 díasdiscuss

Eh, looking around, I think you're thinking of Debian. They re-enabled it by-default back in 2009. So, sure, I guess. But if you're dealing with an OS that's from 2009 these days, whether /dev/tcp is enabled in bash or not isn't exactly relevant anymore. And I've seen enough broken python installs (even with stdlib) to put my faith in /dev/tcp working in bash :)

hace 25 díasdiscuss

Once had a coworker tell me to never to use this because "you never know when the customer doesn't have bash installed; use python instead" even though our contract required that the customer had bash. I'm still laughing at that.

hace 27 díasdiscuss

An important thing you should recognize: the judicial system is painfully nontransparent in such a way that even figuring this sort of thing takes an extensive amount of time and is often even impossible. I've personally gone down a similar route (did some journalism for a bit) by trying to understand how shotspotter is used in prosecution, many of which resulted in false arrests and many, many years of life lost across all the people arrested falsely from it.

If you would like to begin trying to answer these, I recommend starting with submitting some FOIAs. Considering your stance seems to be that you won't believe what others are telling you -- I promise you that you'll be surprised.

el mes pasadodiscuss

Throwing yourself at something that's never been done is fun.

But know what's really fun? Taking something that's been done before, has been forgotten about, and can be iterated on with your own spirit. There's so much exploration to be done.

el mes pasadodiscuss

Are you asking for articles that show how connected car data is being sold left and right?

el mes pasadodiscuss

Never let your memes be dreams nor your dreams be memes.

el mes pasadodiscuss

The moment my JSON has any sort of depth and I need to write a parser for it and potentially account for unspecified behavior. JSON's nice when it's nice, but it's terrible when it's terrible. It's 100x easier to write SQL than writing jq and... dear god if I have to use grep -A or -B, I'm doing something wrong. Constraints are actually a good thing!

The underlying database isn't the most important thing. Just use SQL. Its namespacing (eg, through CTEs) is good and you're more likely to have colleagues who know SQL compared to jq.

el mes pasadodiscuss

For folks wanting to answer this question, please ask yourself:

Which laws?

Where were the cameras installed?

Are the fines disproportionate?

Are subpoenas necessary to access footage/data? If so/not, who's accessed it?

Are there ways to FOIA the data to answer these questions?

hace 2 mesesdiscuss

Sure, but there are some jobs that are so bad that this advice readily applies to. The sort of job that takes you away from your life, family and friends in a way not entirely unlike poverty does. It's good to recognize whether working somewhere will turn into this because it's... hell... working at those places.

hace 2 mesesdiscuss

Bows and arrows are still widely used for hunting all over the world. I was able do freelance work on a relatively low income because of access to ~150lbs of deer meat that came from multiple bow-hunted deer.

hace 2 mesesdiscuss

Presumably it's a system that can be viewed from a phone or from dispatch remotely right? All they'd have to do is share the credentials and that's that.

hace 3 mesesdiscuss

A weird tradeoff but an increasingly important tradeoff to keep in mind nonetheless. Like I said, updating immediately isn't a perfect answer. But neither is waiting. I hope you're having this discussion, at least.

hace 3 mesesdiscuss

Worked at an exchange in 2007/2008 and... we had systems still running from the 80s. Mostly tape audit stuff.

hace 3 mesesdiscuss

That honestly sounds amazing. Imagine booting into something like a grub menu that's just a list of classic games.

hace 3 mesesdiscuss

No, this is not always the case. Regulated industries pin their package versions and store those versions for pulling.