Sprint Revealed GPS Data To Authorities 8 Million Times In The Last Year [Updated]
from the yowzers dept
This seems too insane to be true, but the EFF points us to a report, based on a Freedom of Information Act request, that claims Sprint provided law enforcement with GPS location data a staggering 8 million times in the last year. Sprint apparently set up some sort of portal that made such requests easier, and it sounds like law enforcement took advantage of that in a major way. The report also notes that this information should have been disclosed to Congress, under a 1999 law, but the Justice Department has ignored the law for the past five years. The rest of the report also looks at some other concerning factors, such as the fact that the government seems to regularly get all sorts of info from service providers, with little oversight. On top of that, it explains why so many service providers agree to it: they charge the government for such info, and it's quite lucrative. As such, they actually have the incentive to encourage the government to ask for more information and to deliver it to them as quickly and efficiently as possible. However, you have to wonder how so many requests are being made with such little oversight -- and how often this means the process is abused to spy on individuals with no legal basis. Update: Sprint is now trying to explain this by saying that the numbers represent number of "pings" and that can include thousands of pings per a single investigation. In a single investigation, once law enforcement has a court order, it can check someone's location every 3 minutes for up to 60 days -- and that's what made the number so inflated.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: accountability, gps data, oversight, wiretaps
Companies: sprint
Reader Comments
Subscribe: RSS
View by: Time | Thread
t-o insane?
[ link to this | view in chronology ]
Wow
It's a good read, and if nothing else, plenty of links to damning documents and audio.
[ link to this | view in chronology ]
outdated privacy laws
You can read more about the issue at our Location Information page here: http://tr.im/GkQT.
ACLU of Northern California – dotRights Campaign
[ link to this | view in chronology ]
I agree with Derek...
[ link to this | view in chronology ]
So let me get this right: The Federal Government mandates, and subsidizes wireless company e911 systems (with taxpayer money) so the Government can spend taxpayer money which allows some overbearing guy keep tabs on his ex and send an alert when she leaves the movie theater?
Please, sign me up for that plan!
And in unrelated news, it was finally discovered why Jerry Springer was suddenly can canceled. Apparently all the regular guests went to work for the Government.
I wonder if Dark Helmet going to create that character I mentioned last week. It would be super awesome.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
GPS data is often provided directly as part of a 911 call. It would be VERY interesting to see an actual breakdown of the numbers - out of those 8 million times, how many were part of a criminal investigation, and how many were normal 911 style calls?
I can't help but thinking this is a case of numbers being used to create a scare without actually explaining what those numbers are.
[ link to this | view in chronology ]
Re:
First, Verizon revealed in its letter that it "receives tens of thousands of requests for customer records, or other customer information from law enforcement."
Assuming a conservative estimate of 20,000 requests per year, Verizon alone receives more requests from law enforcement per year than can be explained by any published surveillance statistics.
[ link to this | view in chronology ]
Re: Re:
Requesting customer records isn't always part of "surveillance". It could be part of a criminal investigation (such as to find out the name / address of a dead person), or to track back a phone number used in a Craigslist pimping ad. Because there is no indication, no breakdown, no way to tell if we are talking apples to apples comparisions, it's just a golly gee shit number that means little.
It's intended to scare, and Mike linking and talking about it is just helping to share the scare, without actually looking at what the numbers really are.
[ link to this | view in chronology ]
Re: Re: Re:
Apparently you didn't read the article.
This is broken down in the article and accompanying audio. The point is that these days, it don't even need it to be a part of a criminal investigation, as evidenced by completely automating GPS tracking causing 8M "hits within a few months" according to SprintNextel Reps.
When you go from zero to 8M in a few months, how can you believe there isn't potential for abuse?
Plus, what you see is that telecoms are in bed with the government, a complete 180 from the 1970s where Personal Information was well protected from prying through subpoenas, and due process. Partially because of Watergate.
[ link to this | view in chronology ]
Re: Re: Re:
A valid point, and one not raised in Mike's opinion nor the original article as you've correctly pointed out, but if you're implying there's nothing to be concerned about here I think you also making a lapse in judgement that could cause more harm than good.
One of the other main points brought up by Soghoian is the downward trend in reported electronic surveillance requests. It's highly suspect that that is the case, or if it is, it's hiding what's really going on. Even if electronic surveillance hasn't skyrocketed, we just don't know because the true picture isn't shown by the reported numbers.
[ link to this | view in chronology ]
Re: Re: Re: Re:
Example, a person is missing. Check the GPS database to see if their phone is on somewhere. That might be a place to start. A guy claims he "didn't do it" (whatever it was) and says he was in Jersey at the time. A quick check of the database shows his phone was in fact in jersey at the time. Hmm! In those cases, example, I wouldn't expect to see an electronic surveillance notice issued, would you?
I looked at the original article, but I didn't lose my life listening to an audio for a story that reads more like guys with defective tinfoil hats more than anything else.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re:
We don't know, you may be right, but there are things to be concerned about here.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re:
It isn't clear that the GPS data is being used for surveillance, but possibly for many other uses not related to specifically watching a suspect or the equivalent of a wiretap or similar. perhaps that goes in the "Z" pile that isn't being reported or included here.
Stories like this always seem to end up wrapped in tin foil. To me it reads like scare mongering.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re: Re: Re:
And the fact that only Sprint and the Justice Department know what is actually going on doesn't concern you at all?
[ link to this | view in chronology ]
Re: Re: Re: Re: Re:
Mainly, it's a bunch of Telecom Execs trying to substantiate their jobs, and continue to live within the bounds of the "Massive and illegal program" to wiretap and data-mine Americans' communications, in a post 9-11 era, including potential monetization of customer data and customer information.
Just like you are doing. It's fine that you're willing to give up your liberty. If you think it's worth coupons, have at it.
[ link to this | view in chronology ]
Re: Re: Re: Re: Re:
Yes, I would, actually.
Law enforcement powers to directly access our records is such a strong, blunt instrument that I would expect that a notice is issued each and every time they are used, whether part of a criminal investigation or not.
It isn't tin-foil-hat stuff to point out that law enforcement has a long and rich history of abusing the powers granted to it, and thus it's wise to continually scrutinize every application of those powers to prevent further abuse. Given that the trend over the past few decades has been to expand their powers significantly, I expect that oversight would expand in proportion.
[ link to this | view in chronology ]
Re:
e911 is a different system.
[ link to this | view in chronology ]
[ link to this | view in chronology ]
Very promising indeed. Now I'm waiting for "Congress ignore the Constitution" quoted somewhere. That will make my day.
[ link to this | view in chronology ]
Per subscriber...
[ link to this | view in chronology ]
Re: Per subscriber...
/s
Idiot
[ link to this | view in chronology ]
The Update
Update: Sprint is now trying to explain this by saying that the numbers represent number of "pings" and that can include thousands of pings per a single investigation. In a single investigation, once law enforcement has a court order, it can check someone's location every 3 minutes for up to 60 days -- and that's what made the number so inflated.
A few words different and there would have been no attitude. Even if you really feel the need to make it clear that you doubt Sprint's response, there's no need to put it in those exact words. "Sprint is now trying to explain this" could be easily written as "Sprint has responded". Things like this only serve as fodder for your critics. I'm by no means saying I'm above this, but I hold your writing to a higher standard because of your greater visibility and the editing resources you (should) have. A few choice wording differences could really raise the level of professionalism without detracting from the voice of your opinions.
[ link to this | view in chronology ]
Re: The Update
No attitude intended. I believe you're reading *way* too much into the update.
[ link to this | view in chronology ]
Re: Re: The Update
The guys with the tin foil hats that wrote the original story now look like fools, because they failed to get all of the information before going off on a rant. You look like a fool because you took their word for it.
[ link to this | view in chronology ]
Re: Re: The Update
I do spend too much time reading (into) this. Perhaps others (such as AC above me here) made the better point.
[ link to this | view in chronology ]
Re: There's a word for people like you..
You are not an American. You are a traitor.
I cant believe I breathe the same air as something like you.
[ link to this | view in chronology ]
I'll bet that the current ratio is probably under 1%.
[ link to this | view in chronology ]
Ok, so how many is it? Sprint is only saying that it *could* be less that the 8 million, not that it *is* by any specific amount. If they're hiding the numbers, who's to say it isn't nearly 8 million customers?
[ link to this | view in chronology ]
Anonymous Coward
[ link to this | view in chronology ]
Re: Anonymous Coward
Heh, that's funny come from some posting with a fake made up name. Maybe you should post as "Mr. Hypocrite".
[ link to this | view in chronology ]
Anonymous Coward
[ link to this | view in chronology ]
hacked phone
I may have a whole new business!
[ link to this | view in chronology ]
numbers
8,000,000 pings / 28,8000 = 277.77 people (best case)
Worst case they used it to find people on the intermittently and the number goes way up.
[ link to this | view in chronology ]
Re: numbers
Essentially, guys in tin foil hats creating "news" where no news exists.
[ link to this | view in chronology ]
Re: Re: numbers
Thanks, I feel so much better now that you have made stuff up about the situation.
[ link to this | view in chronology ]
Sensationalist Reporting - Not News
There are four circumstances under which law enforcement agents can use the Sprint website and obtain GPS data: 1) under the authority of a court order; 2) to track the location of a customer who has made a 911 call; 3) in an emergency situation, such as tracking someone lost in the wilderness or trying to locate an abducted child or hostage; 4) with a customer’s consent.
Who doesn't want their missing child tracked by GPS?
[ link to this | view in chronology ]
Re: Sensationalist Reporting - Not News
There, fixed that for you. Personally, I am not at all convinced those are the only situations in which they're actually using the data, especially since they are apparently ignoring the requirement to report to Congress. Executive power with no oversight? What could go wrong??
Who doesn't want their missing child tracked by GPS?
Those straw men sure fall down easy, huh?
[ link to this | view in chronology ]
Re: Re: Sensationalist Reporting - Not News
[ link to this | view in chronology ]
Re: Re: Sensationalist Reporting - Not News
Unproven by the story presented. Since we don't know how many of those 8 million requests were on the same number / phone, we don't know how many INDIVIDUAL numbers were checked. Therefore, there is no way to match up the requests to any reporting that needs to be done.
You are drawing a conclusion where there is not conclusive evidence, just the tin foil hat dudes ranting, and they have already been shown to be wrong on at least part of the story.
[ link to this | view in chronology ]
Re: Re: Re: Sensationalist Reporting - Not News
(1) Nothing reported in the article was shown to be wrong, but we did get slightly more details on ONE of the numbers mentioned, which if nothing else, is a net positive from bringing all this up. Sprint responding and giving information is a good thing, and helps support the merits and intent of the article.
(2) There were several other gaps aside from the "8 million" pointed out in the article itself. Such as:
First, Verizon revealed in its letter that it "receives tens of thousands of requests for customer records, or other customer information from law enforcement."
Assuming a conservative estimate of 20,000 requests per year, Verizon alone receives more requests from law enforcement per year than can be explained by any published surveillance statistics.
[ link to this | view in chronology ]